chore(security): bump next-mdx-remote to 6.0.0#10
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
There was a problem hiding this comment.
Pull request overview
This PR bumps the next-mdx-remote package from version 5.0.0 to 6.0.0 as a security update. The upgrade includes updates to transitive dependencies in the unist utility packages, modernizing the dependency tree to use newer versions of these utilities.
Changes:
- Updated
next-mdx-remotefrom ^5.0.0 to 6.0.0 (with pinned version) - Updated transitive dependencies:
unist-util-remove(3.1.1 → 4.0.0) andunist-util-visit(5.0.0 → 5.1.0) - Removed obsolete v5 unist utility dependencies that are no longer needed
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Updated next-mdx-remote dependency from ^5.0.0 to pinned 6.0.0 |
| pnpm-lock.yaml | Updated lockfile with new next-mdx-remote version, transitive dependency updates, and removed obsolete v5 unist utilities |
Files not reviewed (1)
- pnpm-lock.yaml: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
package.json
Outdated
| "lucide-react": "^0.553.0", | ||
| "next": "^16.0.7", | ||
| "next-mdx-remote": "^5.0.0", | ||
| "next-mdx-remote": "6.0.0", |
There was a problem hiding this comment.
The version specifier for next-mdx-remote has been changed from a caret range (^5.0.0) to a pinned version (6.0.0). This is inconsistent with the versioning strategy used for nearly all other dependencies in this project, which use caret ranges to allow automatic minor and patch updates. Consider using ^6.0.0 instead to maintain consistency and allow for automatic patch and minor version updates while preventing breaking major version changes.
| "next-mdx-remote": "6.0.0", | |
| "next-mdx-remote": "^6.0.0", |
70e17c5 to
771b852
Compare
Codecov Report✅ All modified and coverable lines are covered by tests. 🚀 New features to boost your workflow:
|
No description provided.