Visitar URL original
chore(deps): bump @dagrejs/graphlib from 2.2.4 to 4.0.5 by dependabot[bot] · Pull Request #13842 · serverless/serverless · GitHub
Skip to content

chore(deps): bump @dagrejs/graphlib from 2.2.4 to 4.0.5 - #13842

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dagrejs/graphlib-4.0.5
Open

chore(deps): bump @dagrejs/graphlib from 2.2.4 to 4.0.5#13842
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dagrejs/graphlib-4.0.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps @dagrejs/graphlib from 2.2.4 to 4.0.5.

Changelog

Sourced from @​dagrejs/graphlib's changelog.

Changelog: @​dagrejs/graphlib (v3.0.0+)

v4.0.3

Fixes & Improvements

  • alg.findCycles: Fixed detection of self-loop cycles created with named edges in multigraphs (#111, #235).
  • Dependency Updates: Maintenance updates for dependencies (lodash, handlebars, flatted, minimatch, picomatch, esbuild, tsx).

Major Improvements & Modernization Organization Migration: Transitioned package ownership to the @​dagrejs scope for long-term community maintenance.

Toolchain Overhaul: * Replaced JSHint with ESLint for modern syntax support and stricter code quality.

Removed legacy build tools including Karma, Browserify, and Bower.

TypeScript Enhancements: * Significant updates to index.d.ts to improve IntelliSense and type safety.

Refined generic type definitions for Graph, Node, and Edge objects.

Fixes & Refactoring Formatting Standardization: Resolved the conflict between .eslintrc and .editorconfig to enforce a consistent 2-space indentation across the codebase.

Dependency Audit: Cleared high-severity security vulnerabilities by updating core devDependencies via Dependabot.

Project Structure: Cleaned up the root directory by removing deprecated configuration files (bower.json, karma.conf.js).

Breaking Changes Bower Support Dropped: Official support for Bower has been removed. Users are encouraged to migrate to npm or yarn.

Development Workflow: Developers contributing to the library must now use npm run lint (ESLint) instead of the previous JSHint commands.

Commits
  • d3a0cf3 Building and bumping version for release
  • 3ea78e0 Building and bumping version for release
  • 30d2a05 Merge pull request #237 from Roy-Gal-Git/fix/esm-package-type-233
  • 8626fa4 fix: add "type": "module" + rename CJS bundle to .cjs (fixes #233)
  • 20728ce Merge pull request #236 from dagrejs/types
  • 86fee22 Strengthening the types
  • d96fcd7 Bump version and set as pre-release
  • 70944ee Bumping version and building for release
  • a7ac9ea Changelog
  • 23feeb2 Bumping the version and building for release
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 4, 2026
@dependabot dependabot Bot mentioned this pull request Sep 4, 2026
Closed
@Mmarzex

Mmarzex commented Sep 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dagrejs/graphlib-4.0.5 branch 2 times, most recently from 027854e to 0e187e8 Compare September 9, 2026 15:07
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dagrejs/graphlib-4.0.5 branch from 0e187e8 to fd91187 Compare September 22, 2026 15:39
@coderabbitai

coderabbitai Bot commented Sep 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 8c977bfd-f9d4-4356-97e4-e1fb9c2aa149

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dagrejs/graphlib-4.0.5 branch 2 times, most recently from ac139e3 to d4fb4bf Compare September 28, 2026 15:08
@dependabot
chore(deps): bump @dagrejs/graphlib from 2.2.4 to 4.0.5
56452bf 
Bumps [@dagrejs/graphlib](https://github.com/dagrejs/graphlib) from 2.2.4 to 4.0.5.
- [Release notes](https://github.com/dagrejs/graphlib/releases)
- [Changelog](https://github.com/dagrejs/graphlib/blob/master/changelog.md)
- [Commits](dagrejs/graphlib@v2.2.4...v4.0.5)

---
updated-dependencies:
- dependency-name: "@dagrejs/graphlib"
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dagrejs/graphlib-4.0.5 branch from d4fb4bf to 56452bf Compare October 1, 2026 15:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Mmarzex