Skip to content

Comments

Bump react-syntax-highlighter from 15.6.6 to 16.1.0#1183

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/react-syntax-highlighter-16.1.0
Open

Bump react-syntax-highlighter from 15.6.6 to 16.1.0#1183
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/react-syntax-highlighter-16.1.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 3, 2025 •
edited
Loading

Bumps react-syntax-highlighter from 15.6.6 to 16.1.0.

Release notes

Sourced from react-syntax-highlighter's releases.

v16.1.0

What's Changed

New Contributors

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v16.0.0...v16.1.0

v16.0.0

New major version!

16.0.0 brings a major version update to the refractor dependency, which remedies some security issues but could result in a breaking change to your app's dependencies. Please update with care.

What's Changed

New Contributors

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v15.6.6...v16.0.0

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot
Bump react-syntax-highlighter from 15.6.6 to 16.1.0
435b405 
Bumps [react-syntax-highlighter](https://github.com/react-syntax-highlighter/react-syntax-highlighter) from 15.6.6 to 16.1.0.
- [Release notes](https://github.com/react-syntax-highlighter/react-syntax-highlighter/releases)
- [Changelog](https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/CHANGELOG.MD)
- [Commits](react-syntax-highlighter/react-syntax-highlighter@v15.6.6...v16.1.0)

---
updated-dependencies:
- dependency-name: react-syntax-highlighter
  dependency-version: 16.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 3, 2025
@dependabot dependabot bot temporarily deployed to branch-preview November 3, 2025 06:39 Inactive
@dependabot dependabot bot mentioned this pull request Nov 3, 2025
Closed
@github-actions
Copy link
Contributor

github-actions bot commented Nov 3, 2025 •
edited
Loading

🚀 Deployment Status: Building 🔵

🔗 Quick Actions:

📝 Recent Change Summary

Latest commit: 435b405 - Bump react-syntax-highlighter from 15.6.6 to 16.1.0
Build started: 2025-11-03 06:39:52 UTC

📊 Overall Progress

Branch: dependabot/npm_and_yarn/react-syntax-highlighter-16.1.0
Status: 🔵 Building in progress
Preview URL (after completion): https://litlfred.github.io/sgex/dependabot-npm_and_yarn-react-syntax-highlighter-16.1.0/

💡 Build started for commit 435b405. Will update when complete.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 3, 2025 •
edited
Loading

🚀 Deployment Status: Successfully Deployed 🟢

📊 Deployment Information

Workflow: Deploy Feature Branch (🔀 Pull Request)
Action ID: 19026062160
Commit: 466aa72 (view changes)
Workflow Step: Successfully Deployed

🌐 Preview URLs

Open Branch Preview

🔗 Quick Actions

Build Logs

📦 Build Artifacts Status

Artifact Status Description Type
workflow-event-log 🟢 Available GitHub event metadata with links .log
build-logs 🟢 Available Complete timestamped build output .txt
webpack-stats 🟢 Available Webpack compilation statistics .json
bundle-report 🟢 Available Bundle size analysis and recommendations .txt
build-step-log 🟢 Available Build step console output .log
bundle-analysis-step-log 🟢 Available Bundle analysis console output .log

🟢 All artifacts available! Click artifact names above or visit workflow artifacts section.

How to download:

  1. Click any artifact name in the table above
  2. Or visit the workflow run page and scroll to "Artifacts"
  3. Each artifact contains a single log file (no zip extraction needed)

📊 Overall Progress

Branch: dependabot/npm_and_yarn/react-syntax-highlighter-16.1.0
Status: 🟢 Live and accessible
Status: Deployment complete - site is ready for testing

📋 Deployment Timeline

💡 This comment is automatically updated as the deployment progresses.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 3, 2025

🔍 Framework Compliance Report

Commit
Workflow
Compliance

Generated: 2025-11-03 06:39:50 UTC
Status: Action Required

📊 Summary

Status Count Percentage
🟢 Compliant 2/22 9%
🟠 Partial 20/22 91%
🔴 Non-compliant 0/22 0%

📦 Nested Layouts (4 components)

⚠️ Recommendations

Consider addressing partial compliance issues to improve code quality.

📚 Resources:

💡 This comment is automatically updated when compliance checks run.

@github-actions github-actions bot requested a deployment to branch-preview-dependabot-npm-and-yarn-react-syntax-highlighter-16-1-0 November 3, 2025 06:39 In progress
@github-actions
Copy link
Contributor

github-actions bot commented Nov 3, 2025 •
edited
Loading

🔒 Security Check Report

Security Status

🟢 4 passed • 🟡 2 warnings

Security Checks

CheckStatusDetails
NPM Audit🟡1 vulnerabilities found (Critical: 0, High: 0, Moderate: 1, Low: 0)
Outdated Dependencies🔵10 outdated packages (0 major versions behind)
ESLint Security🟢No security-related linting issues
Security Headers🟡Some security headers missing in source
License Compliance🟢No problematic licenses detected
Secret Scanning🟢No potential secrets detected in code
Framework Compliance🟢Framework compliance checks passed

🔍 Action Items

⚠️ NPM Audit - 1 vulnerabilities found (Critical: 0, High: 0, Moderate: 1, Low: 0)

Details:

  • Critical: 0
  • High: 0
  • Moderate: 1
  • Low: 0

Recommendation: Run npm audit fix to automatically fix vulnerabilities

⚠️ Security Headers - Some security headers missing in source

Details:

Recommendation: Ensure all security headers are properly defined

⚠️ Security Status: WARNINGS

Some security warnings were detected. Please review the action items above.

Last checked: Mon, 03 Nov 2025 06:40:07 GMT

This security check is automatically run on every PR build. Learn more about our security checks

@github-actions
Copy link
Contributor

github-actions bot commented Nov 3, 2025

❌ Dependency Security Check Failed

  **Installation Error:** Unable to install dependencies due to version conflicts.
  
  ```
  Security audit could not be completed due to dependency installation failure.
  ```
  
  ---
  
  ### ❌ Security Status: CHECK FAILED
  
  **Action Required:** Please resolve dependency conflicts before security audit can run.
  
  **How to fix:**
  1. The workflow will be updated to use `--legacy-peer-deps` flag
  2. If issues persist, check for TypeScript version conflicts in package.json
  3. Consider updating peer dependencies to compatible versions
  
  **Need help?** Check the [npm dependency resolution documentation](https://docs.npmjs.com/cli/v8/configuring-npm/package-json#peerdependencies) for more details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants