Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 22, 2026

Bumps lodash-es from 4.17.22 to 4.17.23.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.22 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits/4.17.23)

---
updated-dependencies:
- dependency-name: lodash-es
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 22, 2026
@dependabot dependabot bot requested a review from garybrowndev as a code owner January 22, 2026 02:03
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 22, 2026
@github-actions github-actions bot added the github GitHub configuration, actions, and repository settings label Jan 22, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Jan 22, 2026

🤖 Automated PR Report for ffc3f73

Bundle Size Report (ci-bundle-analysis.yml)

Metric Size
Total dist size 2.57 MB
Main JS bundle 301.03 KB
Main CSS bundle 41.57 KB
Total assets 7 files

Recommendations

  • 🎯 Keep main JS bundle under 200 KB for optimal performance
  • 🎨 Keep CSS bundle under 50 KB
  • 📁 Keep total dist size under 2 MB

Bundle analysis completed at 2026-01-22T02:04:28.425Z

View Workflow Run

Chromium Browser Test Results (ci-chromium-browser-tests.yml)

Suite Status Total Passed Failed Time
E2E Tests ✅ PASS 11 11 0 23.38s
Accessibility Tests ✅ PASS 7 7 0 8.0s

View Workflow Run

Code Coverage Results (ci-coverage-reporting.yml)

Category Lines Statements Functions Branches
Total 62.56% 63.18% 74.57% 59.7%

View Workflow Run

Code Quality Results (ci-code-quality.yml)

Check Status
ESLint ✅ Passed
Prettier ✅ Passed

📊 Code Statistics

Metric Count
Files 29
Lines 15968

View Workflow Run

CodeQL Security Analysis (security-codeql-security-analysis.yml)

Total Alerts: 0

Severity Breakdown

Severity Count
🔴 Error 0
⚠️ Warning 0
ℹ️ Note 0

✅ No security alerts found.

View Workflow Run

Dependency Review (security-dependency-review.yml)

✅ No vulnerabilities or denied packages found.

View Workflow Run

Firefox Browser Test Results (ci-firefox-browser-tests.yml)

Suite Status Total Passed Failed Time
E2E Tests ✅ PASS 11 11 0 24.95s
Accessibility Tests ✅ PASS 7 7 0 10.58s

View Workflow Run

Lighthouse Audit - Desktop (ci-lighthouse-desktop.yml)

📊 Desktop Lighthouse Results

Tested URL: http://localhost:9222/pinball-trainer-standalone.html

Metric Score
Performance 100%
Accessibility 100%
Best Practices 96%
SEO 100%

Reports:

View Workflow Run

Lighthouse Audit - Mobile (ci-lighthouse-mobile.yml)

📊 Mobile Lighthouse Results

Tested URL: http://localhost:9222/pinball-trainer-standalone.html

Metric Score
Performance 91%
Accessibility 100%
Best Practices 96%
SEO 100%

Reports:

View Workflow Run

Lighthouse Audit - Surge Desktop (cd-deploy-pr-preview.yml)

🖥️ Desktop Lighthouse Results

Tested URL: https://pinball-trainer-pr-104.surge.sh/

Metric Score
Performance 100%
Accessibility 100%
Best Practices 96%
SEO 63%

Reports:

View Workflow Run

Lighthouse Audit - Surge Mobile (cd-deploy-pr-preview.yml)

📱 Mobile Lighthouse Results

Tested URL: https://pinball-trainer-pr-104.surge.sh/

Metric Score
Performance 90%
Accessibility 100%
Best Practices 96%
SEO 63%

Reports:

View Workflow Run

npm Audit Results (security-npm-audit.yml)

⚠️ Found 2 vulnerabilities.

Severity Count
Moderate 1
Total 1

View Workflow Run

OWASP Dependency Check (security-owasp-dependency-check.yml)

Total Vulnerabilities: 0

Severity Breakdown

Severity Count
🔴 High/Critical 0
⚠️ Medium 0
ℹ️ Low 0

✅ No vulnerabilities found.

View Workflow Run

Preview Deployment (cd-deploy-pr-preview.yml)

Your preview deployment is ready!

🔗 Preview URL: https://pinball-trainer-pr-104.surge.sh

What's included:

  • ✅ Standalone HTML build (same as production)
  • ✅ All assets embedded inline
  • ✅ Fully offline-capable
  • ✅ Production optimizations

Testing checklist:

  • Test dark mode toggle
  • Test preset loading
  • Test practice mode
  • Test recall mode
  • Test PWA install prompt
  • Test offline functionality

Preview will be updated on each new commit to this PR.


Deployed at 2026-01-22T02:07:21.128Z

View Workflow Run

Pull Request Labeler (automation-label-pull-request.yml)

PR: chore(deps): bump lodash-es from 4.17.22 to 4.17.23 (#104)

Current Labels

  • dependencies
  • github

View Workflow Run

Standalone Build Results (ci-standalone-build.yml)

File Size
pinball-trainer-standalone.html 0.79 MB

View Workflow Run

Trivy Security Scan (security-trivy-scan.yml)

Trivy scan completed. Results have been uploaded to the GitHub Security tab.

Scanned Categories

  • ✅ Vulnerabilities (CRITICAL, HIGH)
  • ✅ Secrets / Credentials
  • ✅ Infrastructure Configuration

View Workflow Run

Visual Regression Results (ci-visual-regression-tests.yml)

Suite Status Total Passed Failed Time
Visual Comparison ✅ PASS 24 24 0 63.98s

View Workflow Run

WebKit Browser Test Results (ci-webkit-browser-tests.yml)

Suite Status Total Passed Failed Time
E2E Tests ✅ PASS 11 10 0 29.96s
Accessibility Tests ✅ PASS 7 7 0 13.83s

View Workflow Run

@codecov
Copy link

codecov bot commented Jan 22, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 23, 2026

Looks like lodash-es is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Jan 23, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/lodash-es-4.17.23 branch January 23, 2026 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github GitHub configuration, actions, and repository settings

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants