Skip to content

chore(deps): resolving package release issues#189

Merged
yeshamavani merged 1 commit intomasterfrom
GH-188
Apr 21, 2026
Merged

chore(deps): resolving package release issues#189
yeshamavani merged 1 commit intomasterfrom
GH-188

Conversation

@Sourav-kashyap
Copy link
Copy Markdown
Contributor

Description

This PR upgrades project dependencies to their latest versions and resolves issues caused by version mismatches and breaking changes.

Changes

Updated all dependencies and devDependencies to the latest versions
Resolved version conflicts and peer dependency issues

Checklist

  • Performed a self-review of my own code
  • npm test passes on your machine

resolving package release issues

GH-188
@sonarqubecloud
Copy link
Copy Markdown

SonarQube reviewer guide

Summary: Update dependencies to address compatibility and security issues, with significant version bumps for security middleware (helmet, express-rate-limit) and rate limiting packages.

Review Focus:

  • Helmet upgrade from 5.1.1 to 8.1.0 requires Node >=18 (breaking change); verify application compatibility
  • Express-rate-limit major version jump (6.11.2 to 8.3.2) introduces new dependency on ip-address; test rate limiting functionality thoroughly
  • Rate limiting ecosystem updates (rate-limit-memcached 0.6.0→1.0.1, rate-limit-redis 3.1.0→4.3.1) with minimum Node >=16 requirement
  • Husky downgrade from 9.1.7 to 7.0.4 is unusual; confirm this is intentional and not a regression

Start review at: package.json. This is the primary manifest file where the most significant version constraint changes occur, especially for security-critical packages (helmet) and the counterintuitive husky downgrade that needs justification.

💬 Please send your feedback

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@yeshamavani yeshamavani merged commit 37a66b7 into master Apr 21, 2026
7 checks passed
@yeshamavani yeshamavani deleted the GH-188 branch April 21, 2026 09:44
@yeshamavani
Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 8.1.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants