chore: Bump transitive dep nitropack from 2.13.1 to 2.13.4#20878
Conversation
size-limit report 📦
|
06f6d14 to
6cf89c1
Compare
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 6cf89c1. Configure here.
| source-map-resolve "^0.6.0" | ||
|
|
||
| rollup-plugin-visualizer@^6.0.3, rollup-plugin-visualizer@^6.0.5: | ||
| rollup-plugin-visualizer@^6.0.3, rollup-plugin-visualizer@^7.0.1: |
There was a problem hiding this comment.
Lockfile resolves incompatible major version for rollup-plugin-visualizer
High Severity
The rollup-plugin-visualizer lockfile entry incorrectly merges ^6.0.3 and ^7.0.1 into a single resolution pointing to version 6.0.5. Version 6.0.5 cannot satisfy ^7.0.1 (which requires >=7.0.1 <8.0.0). Since nitropack@2.13.4 depends on ^7.0.1, it will receive the wrong major version, potentially causing runtime failures due to missing features or API differences between v6 and v7.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 6cf89c1. Configure here.
There was a problem hiding this comment.
This is correct, we have an override for that in package.json


As the previous PR only added the version override, this PR actually bumps the transitive dependency.
Previous PR: #20713