Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 26, 2026

Bumps memfs from 4.39.0 to 4.56.2.

Bumps [memfs](https://github.com/streamich/memfs) from 4.39.0 to 4.56.2.
- [Release notes](https://github.com/streamich/memfs/releases)
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md)
- [Commits](streamich/memfs@v4.39.0...v4.56.2)

---
updated-dependencies:
- dependency-name: memfs
  dependency-version: 4.56.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 26, 2026
@greptile-apps
Copy link

greptile-apps bot commented Jan 26, 2026

Greptile Summary

This dependency update bumps memfs from 4.39.0 to 4.56.2, bringing performance improvements and new features without breaking changes.

  • Includes buffer allocation optimizations that prevent O(n^2) overhead
  • Adds improved error handling for exists methods
  • Introduces new features like locking for FSA writable handles and file/folder sorting
  • The codebase only uses basic memfs() functionality for creating in-memory filesystems for rollup bundling in theme-rollup.js
  • All changes appear to be backward-compatible additions and performance improvements

Confidence Score: 5/5

  • Safe to merge - standard dependency update with performance improvements
  • This is a straightforward dependency version bump with no breaking changes. The changelog shows only additive features and performance improvements. The codebase uses memfs minimally (just the basic memfs() function), and the API remains backward-compatible
  • No files require special attention

Important Files Changed

Filename Overview
frontend/asset-processor/package.json Bumped memfs from 4.39.0 to 4.56.2, includes performance improvements and new features

Sequence Diagram

sequenceDiagram
    participant D as Dependabot
    participant P as package.json
    participant L as pnpm-lock.yaml
    participant R as Rollup Build Process
    participant M as memfs (4.56.2)

    D->>P: Bump memfs to 4.56.2
    D->>L: Update lock file with new version
    
    Note over R,M: Runtime behavior (unchanged)
    R->>M: Call memfs(modules, themeBase)
    M->>M: Create in-memory filesystem
    M-->>R: Return { vol } with fs.promises
    R->>M: Use vol.promises for file operations
    Note over M: Performance improvements apply<br/>- Better buffer allocation<br/>- O(n^2) overhead prevention
Loading

@github-actions
Copy link

PR body updated to plaintext for easier squash-merging. Original body content below:


Bumps memfs from 4.39.0 to 4.56.2.

Release notes

Sourced from memfs's releases.

v4.56.2

Full Changelog: streamich/memfs@v4.54.0...v4.56.2

v4.54.0

4.54.0 (2026-01-18)

Features

  • 🎸 add locking for FSA writable handles (35d3519)

v4.53.0

4.53.0 (2026-01-17)

Features

  • implement Result type and improve error handling for exists methods (f95531f), closes #1218

v4.52.0

4.52.0 (2026-01-15)

Bug Fixes

  • 🐛 add deprecated Dirent.path with deprecation notice (ebf8ea9)

Features

  • 🎸 add disposable methods to Dir (d237aa9)
  • 🎸 add Dirent.parentPath (f72f9fe)

v4.51.1

4.51.1 (2025-11-30)

Bug Fixes

  • add glob functions to API lists (445f337)

v4.51.0

4.51.0 (2025-11-12)

Features

  • sort files and folder when using toTreeSync() (673cb7a), closes #1214

v4.50.0

... (truncated)

Changelog

Sourced from memfs's changelog.

4.54.0 (2026-01-18)

Features

  • 🎸 add locking for FSA writable handles (35d3519)

4.53.0 (2026-01-17)

Features

  • implement Result type and improve error handling for exists methods (f95531f), closes #1218

4.52.0 (2026-01-15)

Bug Fixes

  • 🐛 add deprecated Dirent.path with deprecation notice (ebf8ea9)

Features

  • 🎸 add disposable methods to Dir (d237aa9)
  • 🎸 add Dirent.parentPath (f72f9fe)

4.51.1 (2025-11-30)

Bug Fixes

  • add glob functions to API lists (445f337)

4.51.0 (2025-11-12)

Features

  • sort files and folder when using toTreeSync() (673cb7a), closes #1214

4.50.0 (2025-10-28)

Features

  • 🎸 improve Node buffer allocation strategy (d1edb3f)
  • optimize Node buffer management to prevent O(n^2) overhead (95d6f09)

4.49.0 (2025-10-06)

... (truncated)

Commits
  • 47cb9b3 chore: release v4.56.2
  • 90ebbb9 fix: 🐛 add fs snapshot dependency
  • caf6547 chore: release v4.56.1
  • c68fdb0 Merge pull request #1232 from streamich/finalize-monorepo
  • e229748 style: 💄 run Prettier
  • b8561b5 feat: 🎸 add fsa-to-node package
  • 869b339 docs: ✏️ update memfs README.md
  • 03a5d75 feat: 🎸 create node-to-fsa package
  • 22aa85d feat: 🎸 inline snapshotting into volume
  • f136e14 feat: 🎸 create fs-node package
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants