Skip to content

chore(deps): bump stream-json from 3.6.0 to 3.7.0 in /apps/server - #142

Merged
yordis merged 2 commits into
mainfrom
dependabot/npm_and_yarn/apps/server/stream-json-3.7.0
Oct 25, 2026
Merged

chore(deps): bump stream-json from 3.6.0 to 3.7.0 in /apps/server#142
yordis merged 2 commits into
mainfrom
dependabot/npm_and_yarn/apps/server/stream-json-3.7.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps stream-json from 3.6.0 to 3.7.0.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 23, 2026
@cursor

cursor Bot commented Oct 23, 2026 •
edited
Loading

Copy link
Copy Markdown

PR Summary

Low Risk
Lockfile-only dependency bump with no server logic changes; upstream adds parser depth limits which slightly reduces parsing risk.

Overview
Bumps stream-json from 3.6.0 to 3.7.0 in apps/server and refreshes pnpm-lock.yaml. No application source changes.

The server still uses the same stream-json APIs (parser/assembler via AgentSessionJson.ts). The new release mainly brings performance work, dead-code cleanup, and depth capping for DoS hardening in the library itself.

Reviewed by Cursor Bugbot for commit 41aaa34. Bugbot is set up for automated code reviews on this repo. Configure here.

@github-actions github-actions Bot added vouch:trusted PR author is trusted by repo permissions or the VOUCHED list. size:XS labels Oct 23, 2026
@github-actions

github-actions Bot commented Oct 23, 2026 •
edited
Loading

Copy link
Copy Markdown

Thread transfer impact

⚠️ The latest CI run did not produce a thread transfer result for da6ffb9.

This comment will update automatically after the next completed run.

@yordis

yordis commented Oct 25, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

1 similar comment
@yordis

yordis commented Oct 25, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
chore(deps): bump stream-json from 3.6.0 to 3.7.0 in /apps/server
da6ffb9 
Bumps [stream-json](https://github.com/uhop/stream-json) from 3.6.0 to 3.7.0.
- [Commits](uhop/stream-json@3.6.0...3.7.0)

---
updated-dependencies:
- dependency-name: stream-json
  dependency-version: 3.7.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apps/server/stream-json-3.7.0 branch from 9fa2a1d to da6ffb9 Compare October 25, 2026 04:18
@yordis

yordis commented Oct 25, 2026

Copy link
Copy Markdown
Member

@copilot fix CI

@yordis
fix(deps): update stream-json lockfile
41aaa34 
Co-authored-by: yordis <4237280+yordis@users.noreply.github.com>

Copilot AI commented Oct 25, 2026

Copy link
Copy Markdown

@copilot fix CI

Updated pnpm-lock.yaml for stream-json 3.7.0; pinned pnpm frozen-lockfile verification passes. Commit: 41aaa34. The previous CI run also had an unrelated submodule checkout error; the new CI run is currently blocked as action_required and has no jobs.

Copilot AI requested a review from yordis October 25, 2026 07:53
@github-actions github-actions Bot added size:S and removed size:XS labels Oct 25, 2026
@yordis
yordis merged commit 92a5ca1 into main Oct 25, 2026
28 checks passed
@yordis
yordis deleted the dependabot/npm_and_yarn/apps/server/stream-json-3.7.0 branch October 25, 2026 08:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@yordis yordis Awaiting requested review from yordis

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code size:S vouch:trusted PR author is trusted by repo permissions or the VOUCHED list.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@yordis