chore(deps): update dependency flatted to v3.4.4 - #457
Conversation
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
🚧 Files skipped from review as they are similar to previous changes (1)
📝 WalkthroughWalkthroughThe Estimated code review effort: 1 (Trivial) | ~2 minutes Possibly related PRs
🚥 Pre-merge checks | ✅ 6✅ Passed checks (6 passed)
Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #457 +/- ##
===========================
===========================
🚀 New features to boost your workflow:
|
8a95ff5 to
c356263
Compare
renovate
Bot
changed the title
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@package.json`:
- Line 2951: Update the flatted dependency entry from the unavailable public
version 3.4.4 to the published 3.4.2 release, then regenerate package-lock.json
so its resolved version and registry metadata match the public npm registry.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
Run ID: 1b6a16fd-2760-4313-b33c-f823bdea72c0
⛔ Files ignored due to path filters (1)
package-lock.jsonis excluded by!**/package-lock.json
📒 Files selected for processing (1)
package.json
| }, | ||
| "d3-color": "3.1.0", | ||
| "flatted": "3.4.2", | ||
| "flatted": "3.4.4", |
There was a problem hiding this comment.
🩺 Stability & Availability | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
for version in 3.4.4 3.4.3; do
if npm view "flatted@${version}" version dist.tarball; then
echo "Published: ${version}"
else
echo "Unavailable: ${version}"
fi
doneRepository: deepnote/vscode-deepnote
Length of output: 990
🏁 Script executed:
#!/bin/bash
set -euo pipefail
printf '%s\n' '--- npm registry configuration ---'
npm config get registry
printf '%s\n' '--- flatted references ---'
rg -n -C 2 '"flatted"|flatted-3\.4\.[34]' package.json package-lock.json 2>/dev/null || true
printf '%s\n' '--- package metadata ---'
python3 - <<'PY'
import json
for name in ("package.json", "package-lock.json"):
try:
with open(name) as f:
data = json.load(f)
except FileNotFoundError:
print(f"{name}: absent")
continue
print(f"{name}:")
if name == "package.json":
print(" overrides:", data.get("overrides", {}).get("flatted"))
else:
for key, value in data.get("packages", {}).items():
if key.endswith("node_modules/flatted") or key == "":
if key.endswith("node_modules/flatted"):
print(" ", key, "version=", value.get("version"), "resolved=", value.get("resolved"))
PYRepository: deepnote/vscode-deepnote
Length of output: 2945
🏁 Script executed:
#!/bin/bash
set -euo pipefail
for version in 3.4.4 3.4.3; do
printf '%s\n' "--- public registry: ${version} ---"
npm view --registry=https://registry.npmjs.org "flatted@${version}" version dist.tarball 2>&1 || true
done
printf '%s\n' '--- public tarball status ---'
for version in 3.4.4 3.4.3; do
url="https://registry.npmjs.org/flatted/-/flatted-${version}.tgz"
status="$(curl -L -sS -o /dev/null -w '%{http_code}' "$url" || true)"
printf '%s %s\n' "$version" "$status"
doneRepository: deepnote/vscode-deepnote
Length of output: 154
🌐 Web query:
npm flatted 3.4.4 published version registry.npmjs.org
💡 Result:
As of August 2, 2026, version 3.4.4 of the npm package "flatted" has not been published to the npm registry. The current latest version of "flatted" is 3.4.2, which was published on March 17, 2026 [1][2][3]. While some automated systems or search results may occasionally reference version 3.4.4 in unrelated contexts (such as updates to other packages like "react-scripts" [4] or "composer/semver" [5][6]), there is no evidence of a 3.4.4 release for the "flatted" circular JSON parser package. Official records from the npm registry show version history ending at 3.4.2 [7][2][8].
Citations:
- 1: https://npmx.dev/package-timeline/flatted/v/3.4.2
- 2: https://npmx.dev/package/flatted/versions
- 3: https://npmx.dev/package/flatted
- 4: Bump flatted and react-scripts sarahmajeed/clothing-app#24
- 5: https://libup.wmcloud.org/logs2/2392038
- 6: https://libup.wmcloud.org/logs2/2402475
- 7: https://www.npmjs.com/package/flatted
- 8: https://intel.aikido.dev/packages/npm/flatted
Use a public flatted release.
package-lock.json resolves flatted@3.4.4 from https://registry.npmjs.org, but that version is not published there. Use published version 3.4.2 and regenerate the lockfile, or lock against the private registry that provides 3.4.4.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@package.json` at line 2951, Update the flatted dependency entry from the
unavailable public version 3.4.4 to the published 3.4.2 release, then regenerate
package-lock.json so its resolved version and registry metadata match the public
npm registry.
6069d5b to
23712cc
Compare
23712cc to
68f031c
Compare
|
Note GitHub couldn't provide a complete incremental comparison for this pull request, so CodeRabbit is performing a full review instead. This review may take a little longer. |
This PR contains the following updates:
3.4.2→3.4.4Release Notes
WebReflection/flatted (flatted)
v3.4.4Compare Source
v3.4.3Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.
Summary by CodeRabbit