Skip to content

build(deps): bump the prod-deps group across 1 directory with 3 updates #1493

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 24, 2025

Bumps the prod-deps group with 3 updates in the / directory: @reduxjs/toolkit, firebase and newrelic.

Updates @reduxjs/toolkit from 2.8.1 to 2.8.2

Release notes

Sourced from @​reduxjs/toolkit's releases.

v2.8.2

This bugfix release fixes a bundle size regression in RTK Query from the build and packaging changes in v2.8.0.

If you're using v2.8.0 or v2.8.1, please upgrade to v2.8.2 right away to resolve that bundle size issue!

Changelog

RTK Query Bundle Size

In v2.8.0, we reworked our packaging setup to better support React Native. While there weren't many meaningful code changes, we did alter our bundling build config file. In the process, we lost the config options to externalize the @reduxjs/toolkit core when building the RTK Query nested entry points. This resulted in a regression where the RTK core code also got bundled directly into the RTK Query artifacts, resulting in a significant size increase.

This release fixes the build config and restores the previous RTKQ build artifact sizes.

What's Changed

Full Changelog: reduxjs/redux-toolkit@v2.8.1...v2.8.2

Commits

Updates firebase from 11.7.1 to 11.8.1

Release notes

Sourced from firebase's releases.

firebase@11.8.1

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/auth@​1.10.6

Patch Changes

@​firebase/auth-compat@​0.5.26

Patch Changes

@​firebase/data-connect@​0.3.9

Patch Changes

  • b5df4ae #9055 - Updated to only show banner when calling connect*Emulator

@​firebase/database@​1.0.19

Patch Changes

@​firebase/database-compat@​2.0.10

Patch Changes

firebase@11.8.1

Patch Changes

... (truncated)

Commits

Updates newrelic from 12.18.2 to 12.19.0

Release notes

Sourced from newrelic's releases.

v12.19.0 (2025-05-20)

Features

  • Added Azure Function HTTP streaming support (#3070) (9865e1c)

Code refactoring

  • Added check to only set a FakeSpan if transaction.agent.otelSpanKey exists (#3071) (b0c1ac1)

Documentation

Miscellaneous chores

Tests

Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

Changelog

Sourced from newrelic's changelog.

{ "repository": "newrelic/node-newrelic", "entries": [ { "version": "12.19.0", "changes": { "security": [], "bugfixes": [], "features": [ "Added Azure Function HTTP streaming support" ] } }, { "version": "12.18.2", "changes": { "security": [], "bugfixes": [ "Updated createSegment to stop adding segments to trace when max_trace_segments is exceeded" ], "features": [] } }, { "version": "12.18.1", "changes": { "security": [], "bugfixes": [ "Only add newrelic header to outgoing headers if has a value" ], "features": [] } }, { "version": "12.18.0", "changes": { "security": [], "bugfixes": [ "Updated span streamer to properly retry failed batches and handle flushing batch queue every 5 seconds" ], "features": [ "Support Azure functions background trigger types", "Support Azure functions HTTP trigger type" ] } }, { "version": "12.17.0", "changes": { "security": [],

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot requested a review from kyleecodes May 24, 2025 21:31
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github May 24, 2025

The reviewers field in the dependabot.yml file will be removed soon. Please use the code owners file to specify reviewers for Dependabot PRs. For more information, see this blog post.

@dependabot dependabot bot added dependencies Updates a dependency file javascript Pull requests that update Javascript code labels May 24, 2025
Copy link

vercel bot commented May 24, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
bloom-frontend ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jun 1, 2025 4:41am

Bumps the prod-deps group with 3 updates in the / directory: [@reduxjs/toolkit](https://github.com/reduxjs/redux-toolkit), [firebase](https://github.com/firebase/firebase-js-sdk) and [newrelic](https://github.com/newrelic/node-newrelic).


Updates `@reduxjs/toolkit` from 2.8.1 to 2.8.2
- [Release notes](https://github.com/reduxjs/redux-toolkit/releases)
- [Commits](reduxjs/redux-toolkit@v2.8.1...v2.8.2)

Updates `firebase` from 11.7.1 to 11.8.1
- [Release notes](https://github.com/firebase/firebase-js-sdk/releases)
- [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/firebase/firebase-js-sdk/compare/firebase@11.7.1...firebase@11.8.1)

Updates `newrelic` from 12.18.2 to 12.19.0
- [Release notes](https://github.com/newrelic/node-newrelic/releases)
- [Changelog](https://github.com/newrelic/node-newrelic/blob/main/changelog.json)
- [Commits](newrelic/node-newrelic@v12.18.2...v12.19.0)

---
updated-dependencies:
- dependency-name: "@reduxjs/toolkit"
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: firebase
  dependency-version: 11.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: newrelic
  dependency-version: 12.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/prod-deps-699e201f39 branch from b74a5ca to 46ca426 Compare May 29, 2025 13:46
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 1, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 1, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/prod-deps-699e201f39 branch June 1, 2025 04:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Updates a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant