Bump recharts from 2.15.4 to 3.3.0 #25
Conversation
dependabot
bot
added
dependencies
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
✨🔮 The Orb has been consulted. I will peer into the diffs and whisper my findings. Until the whisper arrives, a fragment of haiku emerges: Diff0's #25 awaits, |
![diff0-agent[bot]](https://avatars.githubusercontent.com/in/2044610?s=60&v=4){kind=small}
There was a problem hiding this comment.
🤖 AI Code Review (Summary Only)
Found 8 issue(s):
🟠 bug (high) in apps/web/package.json:62
Major version upgrade of recharts from 2.15.4 to 3.3.0 may introduce breaking changes
🟡 security (medium) in pnpm-lock.yaml:224
New transitive dependencies introduced with recharts 3.3.0 include Redux and Redux Toolkit which were not previously required
🟡 performance (medium) in pnpm-lock.yaml:224
Bundle size increase due to additional dependencies (Redux ecosystem) being pulled in by recharts 3.3.0
🟡 bug (medium) in pnpm-lock.yaml:5459
New peer dependency requirement: recharts 3.3.0 now requires 'react-is' as a peer dependency which wasn't required in v2
🟢 suggestion (low) in pnpm-lock.yaml:1603
Deprecated dependency warning for @opentelemetry/exporter-jaeger@2.1.0
🟢 suggestion (low) in apps/web/package.json:62
No corresponding test updates or documentation changes included with this major dependency upgrade
🟢 performance (low) in pnpm-lock.yaml:10470
Several dependencies removed that may have been tree-shaken or optimized in recharts v3
🟡 bug (medium) in pnpm-lock.yaml:12258
recharts-scale package has been removed/replaced in the new version, which may affect custom scale configurations
Inline positions unavailable. Powered by diff0 AI
|
Dependabot can't authenticate to a private package registry. Because of this, Dependabot cannot update this pull request. |
Bumps [recharts](https://github.com/recharts/recharts) from 2.15.4 to 3.3.0. - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v2.15.4...v3.3.0) --- updated-dependencies: - dependency-name: recharts dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/recharts-3.3.0
branch
from
a4761ec to
5a829c9
Compare
Bumps recharts from 2.15.4 to 3.3.0.
Release notes
Sourced from recharts's releases.
... (truncated)
Commits
7f4f707Add tests for getAttrsOfCartesianLabel, allow Percent type for custom label p...9bbaa5dMore strictNullChecks refactoring (#6446)189f2353.3.0 version bump (#6463)d558329chore(deps-dev): bump the storybook group across 1 directory with 7 updates (...72bfccbchore(deps-dev): bump eslint-plugin-storybook from 9.1.10 to 9.1.12 (#6458)87a8181chore(deps-dev): bump vite from 6.3.7 to 6.4.0 in /www (#6454)42d0258chore(deps-dev): bump typescript-eslint from 8.46.0 to 8.46.1 (#6451)1a9f9eechore(deps-dev): bump vite from 6.3.6 to 6.3.7 in /www (#6452)57e89b0Only use the YAxis width oscillation detection if the difference is > 1 pixel...debb9a4chore(deps-dev): bump eslint-config-airbnb-extended from 2.3.1 to 2.3.2 (#6448)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)