chore(deps): bump html-react-parser from 1.4.14 to 6.1.3#6038
chore(deps): bump html-react-parser from 1.4.14 to 6.1.3#6038dependabot[bot] wants to merge 1 commit into
Conversation
|
|
🛡️ Jit Security Scan Results✅ No security findings were detected in this PR
Security scan by Jit
|
Bumps [html-react-parser](https://github.com/remarkablemark/html-react-parser) from 1.4.14 to 6.1.3. - [Release notes](https://github.com/remarkablemark/html-react-parser/releases) - [Changelog](https://github.com/remarkablemark/html-react-parser/blob/master/CHANGELOG.md) - [Commits](remarkablemark/html-react-parser@v1.4.14...v6.1.3) --- updated-dependencies: - dependency-name: html-react-parser dependency-version: 6.1.3 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
010d41e to
d05d549
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: d05d549d5d
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "get-port": "^7.2.0", | ||
| "html-entities": "^2.3.2", | ||
| "html-react-parser": "^1.2.4", | ||
| "html-react-parser": "^6.1.3", |
There was a problem hiding this comment.
Use a Jest-compatible html-react-parser chain
When running yarn test, our Jest config (jest.config.cjs) replaces jsdom's browser export condition with customExportConditions: [''] and ignores most node_modules transforms, so imports of html-react-parser resolve through html-dom-parser's Node/CommonJS path. This bump pulls in html-dom-parser@8/htmlparser2@12, where htmlparser2 is ESM-only (type: module), and Jest 29's CommonJS runtime will fail loading it before any UI tests that import components using parse can run; either keep this dependency on a CJS-compatible version or update the Jest resolver/transform conditions with the bump.
Useful? React with 👍 / 👎.
Bumps html-react-parser from 1.4.14 to 6.1.3.
Release notes
Sourced from html-react-parser's releases.
... (truncated)
Changelog
Sourced from html-react-parser's changelog.
... (truncated)
Commits
c7df5c3Merge pull request #2267 from remarkablemark/release-please--branches--master...519e59achore(master): release 6.1.36cec8cabuild(deps): bump html-dom-parser from 7.1.0 to 8.0.0 (#2261)eae73e6build(deps-dev): bump eslint in the eslint group across 1 directory (#2264)0681c1ebuild(deps-dev): bump lint-staged from 17.0.5 to 17.0.7 (#2266)02bbd2dbuild(deps-dev): bump@arethetypeswrong/clifrom 0.18.2 to 0.18.3 (#2265)e650321build(deps-dev): bump the commitlint group with 2 updates (#2263)7309166build(deps-dev): bump eslint-plugin-prettier in the eslint group (#2262)668b359build(deps-dev): bump typescript-eslint in the eslint group (#2260)034837eMerge pull request #2259 from remarkablemark/dependabot/github_actions/github...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for html-react-parser since your current version.
Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Note
Medium Risk
Major-version upgrade of an HTML-to-React parser used in multiple UI surfaces; incorrect parsing or API breakage could affect rendered HTML/XSS-adjacent behavior even though the diff is lockfile-only.
Overview
Bumps
html-react-parserfrom ^1.2.4 / 1.4.14 to ^6.1.3 inpackage.json, with matchingyarn.lockupdates for its dependency tree (html-dom-parser8.x,htmlparser212.x,domhandler6.x,style-to-js2.x, and related DOM packages).There are no application source changes in this PR; existing call sites (e.g. consent copy, notifications, markdown blocks, RediSearch table cells, RDI dry-run) still import the default
parseAPI. Reviewers should treat this as a major-version dependency jump (upstream v6 includes breaking dependency and build-target changes) and confirm UI/tests still behave for HTML rendering and any customparseoptions.Reviewed by Cursor Bugbot for commit d05d549. Bugbot is set up for automated code reviews on this repo. Configure here.