Skip to content

chore(deps): pin transitive deps and upgrade nodemailer to 9#4243

Merged
nicktrn merged 2 commits into
mainfrom
chore/dependabot-high-alerts
Jul 13, 2026
Merged

chore(deps): pin transitive deps and upgrade nodemailer to 9#4243
nicktrn merged 2 commits into
mainfrom
chore/dependabot-high-alerts

Conversation

@nicktrn

@nicktrn nicktrn commented Jul 13, 2026

Copy link
Copy Markdown
Collaborator

Routine dependency maintenance.

  • Pin a few high-fanout transitive deps to current patched versions via pnpm.overrides: form-data, ws, undici, hono. Lockfile-only (no published-package dependency changes); net shrinks via dedup.
  • Upgrade nodemailer 8 → 9 in internal-packages/emails (private package). The SES transport already uses SESv2 and the createTransport/sendMail API is unchanged, so no code changes were needed. @types/nodemailer stays at 8 (no 9.x published yet; types are compatible).

Verified locally: pnpm i clean; pnpm run typecheck --filter emails and --filter webapp both pass.

@nicktrn nicktrn self-assigned this Jul 13, 2026
@changeset-bot

changeset-bot Bot commented Jul 13, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 69283f3

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@coderabbitai

coderabbitai Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: dad3b32b-f771-4f2f-aab5-9dc95fc7f0b0

📥 Commits

Reviewing files that changed from the base of the PR and between 23d3af6 and 69283f3.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (1)
  • package.json
💤 Files with no reviewable changes (1)
  • package.json
📜 Recent review details
⏰ Context from checks skipped due to timeout. (41)
  • GitHub Check: internal / 🧪 Unit Tests: Internal (10, 12)
  • GitHub Check: internal / 🧪 Unit Tests: Internal (9, 12)
  • GitHub Check: internal / 🧪 Unit Tests: Internal (7, 12)
  • GitHub Check: internal / 🧪 Unit Tests: Internal (3, 12)
  • GitHub Check: internal / 🧪 Unit Tests: Internal (4, 12)
  • GitHub Check: internal / 🧪 Unit Tests: Internal (8, 12)
  • GitHub Check: internal / 🧪 Unit Tests: Internal (2, 12)
  • GitHub Check: internal / 🧪 Unit Tests: Internal (1, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (7, 10)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (10, 10)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (5, 10)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (9, 10)
  • GitHub Check: internal / 🧪 Unit Tests: Internal (12, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (8, 10)
  • GitHub Check: internal / 🧪 Unit Tests: Internal (5, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (6, 10)
  • GitHub Check: internal / 🧪 Unit Tests: Internal (11, 12)
  • GitHub Check: internal / 🧪 Unit Tests: Internal (6, 12)
  • GitHub Check: sdk-compat / Node.js 22.23 (warp-ubuntu-latest-x64-4x)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (4, 10)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (3, 10)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (2, 10)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (1, 10)
  • GitHub Check: sdk-compat / Node.js 24.18 (warp-ubuntu-latest-x64-4x)
  • GitHub Check: sdk-compat / Node.js 26.4 (warp-ubuntu-latest-x64-4x)
  • GitHub Check: e2e / 🧪 CLI v3 tests (warp-windows-latest-x64-4x - pnpm)
  • GitHub Check: e2e / 🧪 CLI v3 tests (warp-windows-latest-x64-4x - npm)
  • GitHub Check: packages / 🧪 Unit Tests: Packages (3, 3)
  • GitHub Check: e2e / 🧪 CLI v3 tests (warp-ubuntu-latest-x64-4x - npm)
  • GitHub Check: sdk-compat / Bun Runtime
  • GitHub Check: sdk-compat / Node.js 20.20 (warp-ubuntu-latest-x64-4x)
  • GitHub Check: e2e / 🧪 CLI v3 tests (warp-ubuntu-latest-x64-4x - pnpm)
  • GitHub Check: sdk-compat / Cloudflare Workers
  • GitHub Check: sdk-compat / Deno Runtime
  • GitHub Check: e2e-webapp / 🧪 E2E Tests: Webapp
  • GitHub Check: packages / 🧪 Unit Tests: Packages (2, 3)
  • GitHub Check: packages / 🧪 Unit Tests: Packages (1, 3)
  • GitHub Check: typecheck / typecheck
  • GitHub Check: code-quality / code-quality
  • GitHub Check: Analyze (javascript-typescript)
  • GitHub Check: Build and publish previews

Walkthrough

Updated the emails package dependency nodemailer from ^8.0.6 to ^9.0.1. Updated pnpm.overrides for form-data, and added constraints for ws, hono, and undici. Removed the explicit systeminformation override.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly matches the main change: dependency pinning plus the Nodemailer 9 upgrade.
Description check ✅ Passed It summarizes the dependency updates and includes testing results; only template extras like issue linkage and screenshots are omitted.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/dependabot-high-alerts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@nicktrn nicktrn marked this pull request as ready for review July 13, 2026 13:14

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 2 potential issues.

Open in Devin Review

Comment thread internal-packages/emails/package.json
Comment thread internal-packages/emails/package.json
@pkg-pr-new

pkg-pr-new Bot commented Jul 13, 2026

Copy link
Copy Markdown

Open in StackBlitz

@trigger.dev/build

npm i https://pkg.pr.new/@trigger.dev/build@69283f3

trigger.dev

npm i https://pkg.pr.new/trigger.dev@69283f3

@trigger.dev/core

npm i https://pkg.pr.new/@trigger.dev/core@69283f3

@trigger.dev/python

npm i https://pkg.pr.new/@trigger.dev/python@69283f3

@trigger.dev/react-hooks

npm i https://pkg.pr.new/@trigger.dev/react-hooks@69283f3

@trigger.dev/redis-worker

npm i https://pkg.pr.new/@trigger.dev/redis-worker@69283f3

@trigger.dev/rsc

npm i https://pkg.pr.new/@trigger.dev/rsc@69283f3

@trigger.dev/schema-to-json

npm i https://pkg.pr.new/@trigger.dev/schema-to-json@69283f3

@trigger.dev/sdk

npm i https://pkg.pr.new/@trigger.dev/sdk@69283f3

commit: 69283f3

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 new potential issue.

Open in Devin Review

Comment thread package.json
@nicktrn nicktrn enabled auto-merge (squash) July 13, 2026 14:27
@nicktrn nicktrn merged commit 022e5c1 into main Jul 13, 2026
63 checks passed
@nicktrn nicktrn deleted the chore/dependabot-high-alerts branch July 13, 2026 14:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants