Skip to content

Comments

fix(deps): update npm minor and patch dependencies#207

Open
red-hat-konflux[bot] wants to merge 1 commit intomasterfrom
konflux/mintmaker/master/npm-minor-and-patch-dependencies
Open

fix(deps): update npm minor and patch dependencies#207
red-hat-konflux[bot] wants to merge 1 commit intomasterfrom
konflux/mintmaker/master/npm-minor-and-patch-dependencies

Conversation

@red-hat-konflux
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Dec 5, 2025

This PR contains the following updates:

Package Change Age Confidence
@data-driven-forms/pf4-component-mapper (source) ^4.1.4 -> ^4.1.14 age confidence
@data-driven-forms/react-form-renderer (source) ^4.1.4 -> ^4.1.13 age confidence
@patternfly/react-core ^6.4.0 -> ^6.4.1 age confidence
@patternfly/react-table (source) ^6.4.0 -> ^6.4.1 age confidence
@playwright/test (source) ^1.56.1 -> ^1.58.2 age confidence
@redhat-cloud-services/frontend-components-config (source) ^6.7.4 -> ^6.7.52 age confidence
@redhat-cloud-services/tsc-transform-imports (source) ^1.0.26 -> ^1.0.54 age confidence
@types/react (source) 18.3.27 -> 18.3.28 age confidence
axios (source) ^1.13.2 -> ^1.13.5 age confidence
react-intl (source) ^6.6.2 -> ^6.8.9 age confidence
react-router-dom (source) ^6.30.2 -> ^6.30.3 age confidence
ts-jest (source) ^29.4.5 -> ^29.4.6 age confidence
yaml (source) ^2.8.1 -> ^2.8.2 age confidence

Release Notes

data-driven-forms/react-forms (@​data-driven-forms/pf4-component-mapper)

v4.1.14

Compare Source

4.1.14 (2026-02-16)

🧱 Updated Dependencies

v4.1.13

Compare Source

4.1.13 (2026-02-11)

🚀 Features
🧱 Updated Dependencies
❤️ Thank You

v4.1.12

Compare Source

4.1.12 (2026-02-09)

🧱 Updated Dependencies

v4.1.11

Compare Source

4.1.11 (2026-02-05)

🚀 Features
  • pf: migrate PF mapper to TS (e22ef36b)
🧱 Updated Dependencies
❤️ Thank You

v4.1.10

Compare Source

4.1.10 (2026-02-04)

🧱 Updated Dependencies

v4.1.9

Compare Source

4.1.9 (2026-02-02)

🧱 Updated Dependencies

v4.1.8

Compare Source

4.1.8 (2026-02-02)

🧱 Updated Dependencies
microsoft/playwright (@​playwright/test)

v1.58.2

Compare Source

Highlights

#​39121 fix(trace viewer): make paths via stdin work
#​39129 fix: do not force swiftshader on chromium mac

Browser Versions

  • Chromium 145.0.7632.6
  • Mozilla Firefox 146.0.1
  • WebKit 26.0

v1.58.1

Compare Source

Highlights

#​39036 fix(msedge): fix local network permissions
#​39037 chore: update cft download location
#​38995 chore(webkit): disable frame sessions on fronzen builds

Browser Versions

  • Chromium 145.0.7632.6
  • Mozilla Firefox 146.0.1
  • WebKit 26.0
RedHatInsights/frontend-components (@​redhat-cloud-services/frontend-components-config)

v6.7.52

Compare Source

axios/axios (axios)

v1.13.5

Compare Source

Release 1.13.5

Highlights
  • Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #​7369)
  • Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #​7368)
Changes
Security
  • Fix Denial of Service via __proto__ key in mergeConfig. (PR #​7369)
Fixes
  • Fix/5657. (PR #​7313)
  • Ensure status is present in AxiosError on and after v1.13.3. (PR #​7368)
Features / Improvements
  • Add input validation to isAbsoluteURL. (PR #​7326)
  • Refactor: bump minor package versions. (PR #​7356)
Documentation
  • Clarify object-check comment. (PR #​7323)
  • Fix deprecated Buffer constructor usage and README formatting. (PR #​7371)
CI / Maintenance
  • Chore: fix issues with YAML. (PR #​7355)
  • CI: update workflow YAMLs. (PR #​7372)
  • CI: fix run condition. (PR #​7373)
  • Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #​7360)
  • Chore(release): prepare release 1.13.5. (PR #​7379)
New Contributors

Full Changelog: axios/axios@v1.13.4...v1.13.5


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch from 6560682 to 857113d Compare January 5, 2026 20:40
@coderabbitai
Copy link

coderabbitai bot commented Jan 5, 2026

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review

Walkthrough

Bumped multiple dependency and devDependency versions in package.json (data-driven-forms, PatternFly, axios, react-intl, react-router-dom, yaml, Playwright, Red Hat frontend packages, tsc-transform-imports, ts-jest, type defs). No packages added/removed, and no script or public API changes.

Changes

Cohort / File(s) Summary
Dependency Version Updates
package.json
Updated dependency/devDependency versions: @data-driven-forms/pf4-component-mapper ^4.1.4→^4.1.12, @data-driven-forms/react-form-renderer ^4.1.4→^4.1.11, @patternfly/react-core ^6.4.0→^6.4.1, @patternfly/react-table ^6.4.0→^6.4.1, axios ^1.13.2→^1.13.5, react-intl ^6.6.2→^6.8.9, react-router-dom ^6.30.2→^6.30.3, yaml ^2.8.1→^2.8.2, @playwright/test ^1.56.1→^1.58.2, @redhat-cloud-services/frontend-components-config ^6.7.4→^6.7.51, @redhat-cloud-services/tsc-transform-imports ^1.0.26→^1.0.53, ts-jest ^29.4.5→^29.4.6, @types/react 18.3.27→18.3.28. No script or public API changes.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The PR title accurately describes the primary change: updating npm dependencies to their minor and patch versions.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description check ✅ Passed The pull request description clearly documents dependency version updates with a detailed table and release notes for the affected packages.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
  • 📝 Generate docstrings
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch konflux/mintmaker/master/npm-minor-and-patch-dependencies

Comment @coderabbitai help to get the list of available commands and usage tips.

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 8 times, most recently from 35e9b7f to 3bcd890 Compare January 8, 2026 00:39
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 4 times, most recently from 551d65f to d39038a Compare January 20, 2026 20:37
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 5 times, most recently from 5fa536b to 88e8f23 Compare January 28, 2026 00:37
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 2 times, most recently from 9bd2036 to 340f242 Compare January 31, 2026 00:45
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Fix all issues with AI agents
In `@package.json`:
- Around line 24-42: The engines declaration in package.json is incompatible
with the PatternFly v6 dependencies; update the "engines" field's "node"
constraint to ">=18.0.0" to match PatternFly v6 requirements, or alternatively
downgrade the PatternFly packages (`@patternfly/react-core`,
`@patternfly/react-table`, `@patternfly/quickstarts` and related PatternFly v6
entries) to v5; locate the "engines" object in package.json and change the
"node" value to ">=18.0.0" (or pin the PatternFly package versions to v5) so the
declared Node version aligns with the installed PatternFly packages.

package.json Outdated
Comment on lines 24 to 42
"@data-driven-forms/pf4-component-mapper": "^4.1.7",
"@data-driven-forms/react-form-renderer": "^4.1.6",
"@monaco-editor/react": "^4.7.0",
"@patternfly/quickstarts": "^6.4.0",
"@patternfly/react-core": "^6.4.0",
"@patternfly/react-table": "^6.4.0",
"@patternfly/react-core": "^6.4.1",
"@patternfly/react-table": "^6.4.1",
"@redhat-cloud-services/frontend-components": "^6.1.1",
"@redhat-cloud-services/frontend-components-utilities": "^6.1.1",
"@redhat-cloud-services/types": "^2.0.3",
"@scalprum/react-core": "^0.11.1",
"@unleash/proxy-client-react": "^4.5.2",
"axios": "^1.13.2",
"axios": "^1.13.4",
"classnames": "^2.5.1",
"monaco-editor": "^0.55.1",
"react": "18.3.1",
"react-dom": "18.3.1",
"react-intl": "^6.6.2",
"react-router-dom": "^6.30.2",
"yaml": "^2.8.1"
"react-intl": "^6.8.9",
"react-router-dom": "^6.30.3",
"yaml": "^2.8.2"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

cat -n package.json

Repository: RedHatInsights/learning-resources

Length of output: 2836


🌐 Web query:

Node 16 EOL end of life support 2024 2025 2026

💡 Result:

Node.js 16 (Gallium) official End-of-Life (EOL): September 11, 2023. After this date, the Node.js project no longer provides security fixes or bug fixes for Node 16. [1]

What that means for 2024 / 2025 / 2026

  • 2024: Node 16 is already EOL the entire year (no upstream security/bug fixes). [1]
  • 2025: Still EOL; many ecosystems/tools continue dropping it (e.g., AWS CDK ended support for Node 16 on May 30, 2025). [2]
  • 2026: Still EOL; you should be on a supported LTS line (e.g., Node 20/22/24 depending on your constraints). [1]

Related security note (often relevant to Node 16)

  • Node 16 commonly ties to OpenSSL 1.1.1, which is also EOL as of September 11, 2023 (no public security fixes from OpenSSL after that date). [3]

Sources: Node.js Release Working Group schedule [1], AWS CDK support notice [2], OpenSSL EOL notice [3].

[1] (github.com)
[2] (aws.amazon.com)
[3] (openssl-corporation.org)

Citations:


🌐 Web query:

React 18.3.1 Node 16 compatibility requirements

💡 Result:

React 18.3.1 itself does not require Node 18+. The published react@18.3.1 package declares engines.node: ">=0.10.0", so Node 16 can install/use React 18.3.1 (from React’s own package constraints). [1]

What usually breaks on Node 16 is your tooling/dependencies around React, not React:

  • Many modern packages in the React ecosystem have moved to Node >= 18 (example: react-hook-form declaring engines.node: ">=18" and producing EBADENGINE on Node 16). [2]
  • Node 16 is end-of-life (no longer supported), so platforms/tools commonly drop it. [3]

Practical requirement: React 18.3.1 works with Node 16, but your app’s build stack (Next/Vite/TS/ESLint/etc.) may require Node 18+; upgrading to Node 18+ is the safe/default path. [2][3]

Sources: [1] UNPKG react@18.3.1 package.json, [2] react-hook-form issue showing Node>=18 engine enforcement, [3] Expo changelog noting Node 16 reached EOL and tooling moving to Node 18.


🌐 Web query:

PatternFly v6 Node 16 support requirements

💡 Result:

PatternFly v6 does not support Node.js 16 for development/building from the PatternFly repo.

  • PatternFly v6 development requirement: Node.js ≥ 18.0.0 (Node 16 is below the minimum). (npmjs.com)
  • If you must stay on Node 16, PatternFly’s npm docs show PatternFly 5 development required Node.js ≥ 16.0.0, so v5 is the compatible major line (not v6). (npmjs.com)

Citations:


Node 16 compatibility issue: PatternFly v6 requires Node >= 18, but engines field specifies >= 16.20.2.

Node 16 reached end-of-life on September 11, 2023 and no longer receives security updates. More critically, PatternFly v6.4.x (react-core, react-table, quickstarts) requires Node.js >= 18.0.0 for development and building, making it incompatible with the declared engine constraint of Node >= 16.20.2.

Update the engines field to "node": ">=18.0.0" or downgrade PatternFly packages to v5 if Node 16 support is required.

🤖 Prompt for AI Agents
In `@package.json` around lines 24 - 42, The engines declaration in package.json
is incompatible with the PatternFly v6 dependencies; update the "engines"
field's "node" constraint to ">=18.0.0" to match PatternFly v6 requirements, or
alternatively downgrade the PatternFly packages (`@patternfly/react-core`,
`@patternfly/react-table`, `@patternfly/quickstarts` and related PatternFly v6
entries) to v5; locate the "engines" object in package.json and change the
"node" value to ">=18.0.0" (or pin the PatternFly package versions to v5) so the
declared Node version aligns with the installed PatternFly packages.

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 7 times, most recently from e8385fe to afeec24 Compare February 8, 2026 16:45
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch from afeec24 to 58e2852 Compare February 9, 2026 20:40
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 2 times, most recently from a32b86a to 337f54e Compare February 11, 2026 09:10
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch from 337f54e to 89faa9d Compare February 16, 2026 16:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants