[Snyk] Upgrade @swc/core from 1.3.68 to 1.13.20 #8157
Conversation
Snyk has created this PR to upgrade @swc/core from 1.3.68 to 1.13.20. See this package in yarn: @swc/core See this project in Snyk: https://app.snyk.io/org/q1bluequantumblockchainlabs.onmicrosoft.com/project/4590850b-6aaf-4257-983f-c8d6bc88021a?utm_source=github&utm_medium=referral&page=upgrade-pr
Review or Edit in CodeSandboxOpen the branch in Web Editor • VS Code • Insiders |
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
|
Warning Review the following alerts detected in dependencies. According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.
|
📝 WalkthroughThis PR performs a significant version upgrade of the SWC compiler used in the Backstage microsite, jumping approximately 10 minor versions from The changes are isolated to the microsite component, updating both the
📊 Changes
🔍 Key Dependency Changes
Sequence DiagramThis diagram shows the interactions between components: sequenceDiagram
participant PM as Package Manager
participant PKG as package.json
participant SWC as @swc/core
participant Counter as @swc/counter
participant Types as @swc/types
participant Binary as Platform Binary
Note over PM,PKG: Dependency Upgrade: @swc/core ^1.3.46 → ^1.13.20
PM->>PKG: Read dependency requirements
PKG-->>PM: @swc/core: ^1.13.20
PM->>SWC: Resolve @swc/core version
Note over SWC: Resolves to v1.14.0
SWC->>PM: Declare new dependencies
activate PM
alt New dependency in v1.14.0
SWC->>Counter: Require @swc/counter ^0.1.3
Counter-->>SWC: v0.1.3 available
end
alt New dependency in v1.14.0
SWC->>Types: Require @swc/types ^0.1.25
Types->>Counter: Require @swc/counter ^0.1.3
Counter-->>Types: v0.1.3 available
Types-->>SWC: v0.1.25 available
end
deactivate PM
Note over PM,Binary: Platform-Specific Binary Selection
PM->>Binary: Detect OS and architecture
Binary-->>PM: Platform metadata
alt os=darwin & cpu=arm64
PM->>Binary: Install @swc/core-darwin-arm64@1.14.0
else os=darwin & cpu=x64
PM->>Binary: Install @swc/core-darwin-x64@1.14.0
else os=linux & cpu=x64
PM->>Binary: Install @swc/core-linux-x64-gnu@1.14.0
else os=win32 & cpu=x64
PM->>Binary: Install @swc/core-win32-x64-msvc@1.14.0
else Other platforms
PM->>Binary: Install appropriate platform binary
end
Binary-->>PM: Binary installed (optional)
Note over PM,PKG: Peer Dependency Updated<br/>@swc/helpers: ^0.5.0 → >=0.5.17
PM->>PKG: Update yarn.lock with new resolutions
PKG-->>PM: Lock file updated
🔒 Security Analysis
Caution 3 comments are outside the diff range and can't be posted inline due to platform limitations.
|
![entelligence-ai-pr-reviews[bot]](https://avatars.githubusercontent.com/in/932812?s=60&v=4){kind=small}
| "@docusaurus/plugin-client-redirects": "0.0.0-5591", | ||
| "@docusaurus/preset-classic": "0.0.0-5591", | ||
| "@swc/core": "^1.3.46", | ||
| "@swc/core": "^1.13.20", |
There was a problem hiding this comment.
Correctness: 🐛 Significant Version Jump Without Gradual Migration: The upgrade jumps from 1.3.46 to 1.13.20/1.14.0, skipping numerous intermediate versions that contained breaking changes. Multiple AST breaking changes occurred between these versions, creating risk of build failures, transpilation errors, or runtime issues in the microsite.
| "@docusaurus/plugin-client-redirects": "0.0.0-5591", | ||
| "@docusaurus/preset-classic": "0.0.0-5591", | ||
| "@swc/core": "^1.3.46", | ||
| "@swc/core": "^1.13.20", |
There was a problem hiding this comment.
Correctness: 🔒 Missing Compatibility Verification: No evidence of compatibility testing with the current Docusaurus version and SWC loader configuration. The microsite uses swc-loader version 0.2.3 which has peer dependency @swc/core: ^1.2.147. SWC 1.14.0 may introduce compatibility issues with this older loader version, and Docusaurus webpack configuration may not be compatible with SWC 1.14.x.
| "@docusaurus/plugin-client-redirects": "0.0.0-5591", | ||
| "@docusaurus/preset-classic": "0.0.0-5591", | ||
| "@swc/core": "^1.3.46", | ||
| "@swc/core": "^1.13.20", |
There was a problem hiding this comment.
Correctness: ✨ Build Pipeline Impact Unknown: The microsite deployment workflow may be affected by SWC changes. The deploy_microsite.yml workflow builds the microsite with yarn build which uses SWC for transpilation, and this needs to be tested to ensure no breakage.
| "@docusaurus/plugin-client-redirects": "0.0.0-5591", | ||
| "@docusaurus/preset-classic": "0.0.0-5591", | ||
| "@swc/core": "^1.3.46", | ||
| "@swc/core": "^1.13.20", |
There was a problem hiding this comment.
Style: ✨ Version Specification Inconsistency: Version specified as ^1.13.20 but resolves to 1.14.0. Consider using exact version pinning for critical build tools like SWC to ensure reproducible builds.
📝 Committable Code Suggestion
‼️ Ensure you review the code suggestion before committing it to the branch. Make sure it replaces the highlighted code, contains no missing lines, and has no issues with indentation.
| "@swc/core": "^1.13.20", | |
| "@swc/core": "1.14.0", |
| "@docusaurus/plugin-client-redirects": "0.0.0-5591", | ||
| "@docusaurus/preset-classic": "0.0.0-5591", | ||
| "@swc/core": "^1.3.46", | ||
| "@swc/core": "^1.13.20", |
There was a problem hiding this comment.
Style: ✨ Missing Changelog or Migration Notes: No documentation of the upgrade reasoning or migration steps. Add context about why this upgrade is needed and what testing was performed to help future maintainers understand the change.
|
This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution! |
Snyk has created this PR to upgrade @swc/core from 1.3.68 to 1.13.20.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 457 versions ahead of your current version.
The recommended version was released a month ago.
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
EntelligenceAI PR Summary
This PR upgrades the SWC (Speedy Web Compiler) in the Backstage microsite from version
^1.3.46to^1.13.20(resolving to1.14.0). The upgrade includes updates to all platform-specific binaries and introduces new transitive dependencies@swc/counterand@swc/types, along with updated peer dependency requirements for@swc/helpers.