Skip to content

[Snyk] Upgrade @prometheus-io/codemirror-promql from 0.45.6 to 0.304.2#197

Closed
Nexucis wants to merge 1 commit intomainfrom
snyk-upgrade-c1551576922f4053b6a6e8a14ee610bc
Closed

[Snyk] Upgrade @prometheus-io/codemirror-promql from 0.45.6 to 0.304.2#197
Nexucis wants to merge 1 commit intomainfrom
snyk-upgrade-c1551576922f4053b6a6e8a14ee610bc

Conversation

@Nexucis
Copy link
Member

@Nexucis Nexucis commented Jul 25, 2025

snyk-top-banner

Snyk has created this PR to upgrade @prometheus-io/codemirror-promql from 0.45.6 to 0.304.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 63 versions ahead of your current version.

  • The recommended version was released a month ago.

Release notes
Package name: @prometheus-io/codemirror-promql
  • 0.304.2 - 2025-06-26

    v0.304.2

  • 0.304.1 - 2025-05-31

    v0.304.1

  • 0.304.0 - 2025-05-17
  • 0.304.0-rc.0 - 2025-05-02
  • 0.303.1 - 2025-05-02
  • 0.303.0 - 2025-04-15
  • 0.303.0-rc.1 - 2025-04-07
  • 0.303.0-rc.0 - 2025-03-26
  • 0.302.1 - 2025-02-26
  • 0.302.0 - 2025-02-17
  • 0.302.0-rc.1 - 2025-02-04
  • 0.302.0-rc.0 - 2025-02-04
  • 0.301.0 - 2025-01-02
  • 0.301.0-rc.1 - 2024-12-30
  • 0.301.0-rc.0 - 2024-12-20
  • 0.300.1 - 2024-11-28
  • 0.300.0 - 2024-11-14
  • 0.300.0-rc.1 - 2024-11-11
  • 0.300.0-rc.0 - 2024-11-04
  • 0.300.0-beta.1 - 2024-10-14
  • 0.300.0-beta.0 - 2024-09-10
  • 0.55.1 - 2024-11-06
  • 0.55.0 - 2024-10-22
  • 0.55.0-rc.1 - 2024-10-16
  • 0.55.0-rc.0 - 2024-09-20
  • 0.54.1 - 2024-08-27
  • 0.54.0 - 2024-08-09
  • 0.54.0-rc.1 - 2024-08-06
  • 0.54.0-rc.0 - 2024-07-30
  • 0.53.4 - 2025-03-18
  • 0.53.3 - 2024-11-05
  • 0.53.2 - 2024-08-09
  • 0.53.1 - 2024-07-10
  • 0.53.0 - 2024-06-19
  • 0.53.0-rc.1 - 2024-06-11
  • 0.53.0-rc.0 - 2024-06-07
  • 0.52.1 - 2024-05-30
  • 0.52.0 - 2024-05-08
  • 0.52.0-rc.1 - 2024-05-03
  • 0.52.0-rc.0 - 2024-04-30
  • 0.51.2 - 2024-04-10
  • 0.51.1 - 2024-03-28
  • 0.51.0 - 2024-03-19
  • 0.51.0-rc.0 - 2024-03-11
  • 0.50.1 - 2024-02-26
  • 0.50.0 - 2024-02-22
  • 0.50.0-rc.1 - 2024-02-19
  • 0.50.0-rc.0 - 2024-02-13
  • 0.49.1 - 2024-01-15
  • 0.49.0 - 2024-01-15
  • 0.49.0-rc.2 - 2024-01-08
  • 0.49.0-rc.1 - 2023-12-20
  • 0.49.0-rc.0 - 2023-12-12
  • 0.48.1 - 2023-12-08
  • 0.48.0 - 2023-11-16
  • 0.48.0-rc.2 - 2023-11-03
  • 0.48.0-rc.1 - 2023-10-29
  • 0.48.0-rc.0 - 2023-10-17
  • 0.47.2 - 2023-10-12
  • 0.47.0 - 2023-09-06
  • 0.47.0-rc.0 - 2023-08-31
  • 0.46.0 - 2023-07-25
  • 0.46.0-rc.0 - 2023-07-20
  • 0.45.6 - 2024-06-21
from @prometheus-io/codemirror-promql GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @prometheus-io/codemirror-promql from 0.45.6 to 0.304.2.

See this package in npm:
@prometheus-io/codemirror-promql

See this project in Snyk:
https://app.snyk.io/org/perses/project/d421b0c9-31f2-455a-ac73-3bc0916f0f72?utm_source=github&utm_medium=referral&page=upgrade-pr
@Nexucis
Copy link
Member Author

Nexucis commented Sep 15, 2025

previously that was not possible to upgrade this dependencies, I don't remember the issue. Do you remember why @jgbernalp ? And if yes, do you think we will be able to upgrade ?

I am asking because I am currently improving the performance of this lib and it will be great if Perses can get it once it is available

@jgbernalp
Copy link
Contributor

The problem is that Snyk does not generate a package-lock.json I tried to do it via GitHub actions, but we should look into the Snyk configuration for a less hacky solution. The prometheus code mirror dependency is totally fine to upgrade. I tested locally and works without issues: #378

@Nexucis
Copy link
Member Author

Nexucis commented Oct 8, 2025

closing this PR as the update has been done manually in #378

@Nexucis Nexucis closed this Oct 8, 2025
@Nexucis Nexucis deleted the snyk-upgrade-c1551576922f4053b6a6e8a14ee610bc branch October 8, 2025 12:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants