Skip to content

chore(ci): upgrade deps - #1868

Merged
sampotts merged 1 commit into
mainfrom
chore/deps
Jul 28, 2026
Merged

chore(ci): upgrade deps#1868
sampotts merged 1 commit into
mainfrom
chore/deps

Conversation

@sampotts

@sampotts sampotts commented Jul 24, 2026

Copy link
Copy Markdown
Collaborator

Fix security vulnerabilities and related changes to fix builds/tests.


Note

Medium Risk
Wide toolchain upgrades (Vite 8, Rolldown, pnpm 11) and sandbox CDN i18n resolver changes can affect local dev and production builds; player/runtime edits are small and mostly lint-driven.

Overview
Broad dependency bumps across the monorepo (pnpm 11, Biome 2.5.5, Vite 8.1.5, React 19.2.8, tsdown 0.22, Vitest 4.1.10, Turbo, happy-dom 20, etc.) to address security issues and keep CI/builds green.

Tooling config updates Biome to the new schema (preset: "recommended"), adds an SVG linter override, and excludes api-docs test fixtures from lint. Root pnpm peer rules are removed from package.json (workspace policy lives in pnpm-workspace.yaml).

Build plugins now use magic-string for CDN i18n registry rewrites and inline template minification so transforms emit source maps; BuildPlugin types gain optional map / renderChunk support.

Sandbox Vite switches build config to rolldownOptions (with plugin timing checks disabled for the CDN resolver) and refactors the CDN i18n plugin to Vite 8’s filtered object hooks, dropping the old source-i18n stub path.

Smaller follow-ups: React tap/double-tap hooks drop onActivateRef from effect deps (stable via useLatestRef), minimal/default skin CSS ordering/scoping fixes, sandbox HTML a11y (rendition label → span), segment-loading share link default href, i18n provider test custom-element registration order, and minor optional-chaining in SPF/Mux helpers.

Reviewed by Cursor Bugbot for commit 07544b4. Bugbot is set up for automated code reviews on this repo. Configure here.

@netlify

netlify Bot commented Jul 24, 2026

Copy link
Copy Markdown

Deploy Preview for vjs10-site ready!

Name Link
🔨 Latest commit 07544b4
🔍 Latest deploy log https://app.netlify.com/projects/vjs10-site/deploys/6a68134723fa4b0008ac457d
😎 Deploy Preview https://deploy-preview-1868--vjs10-site.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@sampotts
sampotts requested a review from decepulis July 24, 2026 23:00
@vercel

vercel Bot commented Jul 24, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
v10-sandbox Ready Ready Preview, Comment Jul 28, 2026 2:26am

Request Review

@sampotts
sampotts requested a review from mihar-22 July 24, 2026 23:00
@github-actions

github-actions Bot commented Jul 24, 2026

Copy link
Copy Markdown
Contributor

📦 Bundle Size Report

🎨 @videojs/html — no changes
Presets (7)
Entry Initial Lazy
/video (default) 51.13 kB 54.24 kB
/video (default + hls) 190.45 kB 54.24 kB
/video (minimal) 51.18 kB 54.24 kB
/video (minimal + hls) 190.51 kB 54.24 kB
/audio (default) 44.41 kB 54.24 kB
/audio (minimal) 41.67 kB 54.24 kB
/background 4.20 kB
Media (10)
Entry Initial
/media/background-video 1.14 kB
/media/container 1.71 kB
/media/dash-video 214.67 kB
/media/hlsjs-video 141.51 kB
/media/mux-audio 165.02 kB
/media/mux-video 165.05 kB
/media/native-hls-video 9.06 kB
/media/simple-hls-audio-only 19.10 kB
/media/simple-hls-video 21.13 kB
/media/vimeo-video 12.33 kB
Players (5)
Entry Initial
/video/player 8.22 kB
/audio/player 5.38 kB
/background/player 3.92 kB
/live-video/player 7.63 kB
/live-audio/player 5.39 kB
Skins (30)
Entry Type Initial Lazy
/video/minimal-skin.css css 5.70 kB
/video/skin.css css 5.66 kB
/video/minimal-skin js 51.07 kB 54.24 kB
/video/minimal-skin.tailwind js 51.81 kB 54.24 kB
/video/skin js 51.16 kB 54.24 kB
/video/skin.tailwind js 51.92 kB 54.24 kB
/audio/minimal-skin.css css 3.97 kB
/audio/skin.css css 3.86 kB
/audio/minimal-skin js 41.71 kB 54.24 kB
/audio/minimal-skin.tailwind js 42.17 kB 54.24 kB
/audio/skin js 44.43 kB 54.24 kB
/audio/skin.tailwind js 44.96 kB 54.24 kB
/background/skin.css css 133 B
/background/skin js 1.14 kB
/live-video/minimal-skin.css css 5.70 kB
/live-video/skin.css css 5.66 kB
/live-video/minimal-skin js 48.07 kB 54.24 kB
/live-video/minimal-skin.tailwind js 48.51 kB 54.24 kB
/live-video/skin js 49.64 kB 54.24 kB
/live-video/skin.tailwind js 50.22 kB 54.24 kB
/live-audio/minimal-skin.css css 3.97 kB
/live-audio/skin.css css 3.86 kB
/live-audio/minimal-skin js 34.01 kB 54.24 kB
/live-audio/minimal-skin.tailwind js 33.44 kB 54.24 kB
/live-audio/skin js 36.93 kB 54.24 kB
/live-audio/skin.tailwind js 36.49 kB 54.24 kB
/global.css css 183 B
/shared.css css 153 B
/tailwind.css css 161 B
/skin-element js 1.51 kB
UI Components (39)
Entry Initial
/ui/airplay-button 2.53 kB
/ui/alert-dialog 2.94 kB
/ui/alert-dialog-close 2.38 kB
/ui/alert-dialog-description 2.34 kB
/ui/alert-dialog-title 2.32 kB
/ui/audio-track-radio-group 3.02 kB
/ui/buffering-indicator 2.60 kB
/ui/captions-button 2.59 kB
/ui/captions-radio-group 3.03 kB
/ui/cast-button 2.54 kB
/ui/compounds 3.24 kB
/ui/controls 2.90 kB
/ui/error-dialog 2.91 kB
/ui/fullscreen-button 2.54 kB
/ui/hotkey 2.41 kB
/ui/menu 2.93 kB
/ui/mute-button 2.56 kB
/ui/pip-button 2.55 kB
/ui/play-button 2.60 kB
/ui/playback-rate-button 2.65 kB
/ui/playback-rate-radio-group 2.83 kB
/ui/popover 3.06 kB
/ui/poster 2.42 kB
/ui/quality-radio-group 2.99 kB
/ui/seek-button 2.57 kB
/ui/seek-indicator 2.77 kB
/ui/seek-indicator-value 373 B
/ui/slider 2.92 kB
/ui/status-announcer 2.54 kB
/ui/status-indicator 2.61 kB
/ui/status-indicator-value 409 B
/ui/thumbnail 2.61 kB
/ui/time 2.91 kB
/ui/time-slider 2.96 kB
/ui/tooltip 2.94 kB
/ui/volume-indicator 2.58 kB
/ui/volume-indicator-fill 404 B
/ui/volume-indicator-value 466 B
/ui/volume-slider 2.92 kB

Sizes are marginal over the root entry point.

⚛️ @videojs/react — no changes
Presets (7)
Entry Initial Lazy
/video (default) 40.84 kB 54.24 kB
/video (default + hls) 178.81 kB 54.24 kB
/video (minimal) 41.17 kB 54.24 kB
/video (minimal + hls) 179.35 kB 54.24 kB
/audio (default) 33.95 kB 54.24 kB
/audio (minimal) 34.01 kB 54.24 kB
/background 579 B
Media (9)
Entry Initial
/media/background-video 403 B
/media/dash-video 213.00 kB
/media/hlsjs-video 139.91 kB
/media/mux-audio 163.30 kB
/media/mux-video 163.38 kB
/media/native-hls-video 7.29 kB
/media/simple-hls-audio-only 17.36 kB
/media/simple-hls-video 19.43 kB
/media/vimeo-video 10.49 kB
Skins (27)
Entry Type Initial Lazy
/tailwind.css css 161 B
/video/minimal-skin.css css 5.56 kB
/video/skin.css css 5.52 kB
/video/minimal-skin js 41.05 kB 54.24 kB
/video/minimal-skin.tailwind js 47.15 kB 54.24 kB
/video/skin js 40.78 kB 54.24 kB
/video/skin.tailwind js 46.77 kB 54.24 kB
/audio/minimal-skin.css css 3.79 kB
/audio/skin.css css 3.68 kB
/audio/minimal-skin js 33.92 kB 54.24 kB
/audio/minimal-skin.tailwind js 36.17 kB 54.24 kB
/audio/skin js 33.88 kB 54.24 kB
/audio/skin.tailwind js 38.10 kB 54.24 kB
/background/skin.css css 90 B
/background/skin js 272 B
/live-video/minimal-skin.css css 5.56 kB
/live-video/skin.css css 5.52 kB
/live-video/minimal-skin js 35.51 kB 54.24 kB
/live-video/minimal-skin.tailwind js 41.44 kB 54.24 kB
/live-video/skin js 35.46 kB 54.24 kB
/live-video/skin.tailwind js 41.43 kB 54.24 kB
/live-audio/minimal-skin.css css 3.79 kB
/live-audio/skin.css css 3.68 kB
/live-audio/minimal-skin js 24.31 kB 54.24 kB
/live-audio/minimal-skin.tailwind js 27.44 kB 54.24 kB
/live-audio/skin js 24.34 kB 54.24 kB
/live-audio/skin.tailwind js 27.51 kB 54.24 kB
UI Components (33)
Entry Initial
/ui/airplay-button 2.53 kB
/ui/alert-dialog 2.64 kB
/ui/audio-track 2.37 kB
/ui/buffering-indicator 2.53 kB
/ui/captions-button 2.44 kB
/ui/captions-radio-group 2.29 kB
/ui/cast-button 2.51 kB
/ui/controls 2.47 kB
/ui/error-dialog 2.53 kB
/ui/fullscreen-button 2.46 kB
/ui/gesture 2.37 kB
/ui/hotkey 2.32 kB
/ui/live-button 2.42 kB
/ui/menu 2.65 kB
/ui/mute-button 2.43 kB
/ui/pip-button 2.47 kB
/ui/play-button 2.49 kB
/ui/playback-rate 2.45 kB
/ui/playback-rate-button 2.55 kB
/ui/popover 3.10 kB
/ui/poster 2.50 kB
/ui/quality 2.29 kB
/ui/seek-button 2.43 kB
/ui/seek-indicator 2.65 kB
/ui/slider 2.76 kB
/ui/status-announcer 2.36 kB
/ui/status-indicator 2.42 kB
/ui/thumbnail 2.45 kB
/ui/time 2.24 kB
/ui/time-slider 2.56 kB
/ui/tooltip 3.02 kB
/ui/volume-indicator 2.39 kB
/ui/volume-slider 2.52 kB

Sizes are marginal over the root entry point.

🧩 @videojs/core — no changes
Entries (68)
Entry Initial Lazy
. 10.56 kB
/dom 17.67 kB
/dom/media/custom-media-element 2.09 kB
/dom/media/dash 208.97 kB
/dom/media/google-cast 4.03 kB
/dom/media/hls-js 136.02 kB
/dom/media/media-host 1.25 kB
/dom/media/media-played-ranges 576 B
/dom/media/mux 159.44 kB
/dom/media/native-hls 3.07 kB
/dom/media/simple-hls 18.93 kB
/dom/media/simple-hls-audio-only 16.86 kB
/dom/media/vimeo 9.87 kB
/media/predicate 563 B
/i18n 2.66 kB 54.24 kB
/i18n/locales/all 30.58 kB
/i18n/locales/ar 1.21 kB
/i18n/locales/az 1.08 kB
/i18n/locales/bg 1.25 kB
/i18n/locales/bn 1.27 kB
/i18n/locales/bs 1014 B
/i18n/locales/ca 1.05 kB
/i18n/locales/cs 1.04 kB
/i18n/locales/cy 1.00 kB
/i18n/locales/da 996 B
/i18n/locales/de 1.08 kB
/i18n/locales/el 1.45 kB
/i18n/locales/en 621 B
/i18n/locales/es 1010 B
/i18n/locales/et 1.05 kB
/i18n/locales/eu 1.01 kB
/i18n/locales/fa 1.20 kB
/i18n/locales/fi 1.03 kB
/i18n/locales/fr 1.07 kB
/i18n/locales/gd 1.10 kB
/i18n/locales/gl 1014 B
/i18n/locales/he 1.12 kB
/i18n/locales/hi 1.28 kB
/i18n/locales/hr 1.02 kB
/i18n/locales/hu 1.09 kB
/i18n/locales/it 1023 B
/i18n/locales/ja 1.17 kB
/i18n/locales/ko 1.11 kB
/i18n/locales/lv 1.08 kB
/i18n/locales/mr 1.28 kB
/i18n/locales/nb 1000 B
/i18n/locales/ne 1.28 kB
/i18n/locales/nl 1013 B
/i18n/locales/nn 996 B
/i18n/locales/oc 1.05 kB
/i18n/locales/pl 1.12 kB
/i18n/locales/pt 1.01 kB
/i18n/locales/pt-BR 1.01 kB
/i18n/locales/pt-PT 1009 B
/i18n/locales/ro 1.05 kB
/i18n/locales/ru 1.33 kB
/i18n/locales/sk 1.10 kB
/i18n/locales/sl 1.02 kB
/i18n/locales/sr 1.03 kB
/i18n/locales/sv 1022 B
/i18n/locales/te 1.31 kB
/i18n/locales/th 1.29 kB
/i18n/locales/tr 1.07 kB
/i18n/locales/uk 1.36 kB
/i18n/locales/vi 1.08 kB
/i18n/locales/zh 1.01 kB
/i18n/locales/zh-CN 1.01 kB
/i18n/locales/zh-TW 1.01 kB
🏷️ @videojs/element — no changes
Entries (2)
Entry Initial
. 996 B
/context 943 B
📦 @videojs/store — no changes
Entries (3)
Entry Initial
. 1.39 kB
/html 696 B
/react 361 B
🔧 @videojs/utils — no changes
Entries (12)
Entry Initial
/array 104 B
/dom 2.74 kB
/events 319 B
/function 327 B
/jwt 176 B
/object 407 B
/predicate 265 B
/percent 281 B
/string 239 B
/style 190 B
/time 813 B
/number 158 B
📦 @videojs/spf — no changes
Entries (4)
Entry Initial
. 4.46 kB
/dom 6.48 kB
/hls 17.84 kB
/background-video 13.27 kB

ℹ️ How to interpret

JS sizes are initial static graph totals (minified + brotli). Lazy dynamic chunks are shown separately when present.

Icon Meaning
No change
🔺 Increased ≤ 10%
🔴 Increased > 10%
🔽 Decreased
🆕 New (no baseline)

Run pnpm size locally to check current initial sizes.

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 558e922. Configure here.

Comment thread packages/store/package.json
@sampotts
sampotts merged commit 359e56c into main Jul 28, 2026
28 checks passed
@sampotts
sampotts deleted the chore/deps branch July 28, 2026 03:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants