chore(deps): bump express and @types/express by dependabot[bot] · Pull Request #112 · objectstack-ai/objectui

dependabot · 2026-01-19T08:17:47Z

Bumps express and @types/express. These dependencies needed to be updated together.
Updates express from 4.22.1 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Release: 5.2.1 by @UlisesGascon in expressjs/express#6933

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Security

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

What's Changed

build(deps): bump github/codeql-action from 3.28.11 to 3.28.13 by @dependabot[bot] in expressjs/express#6429

Refactor: simplify acceptsLanguages implementation using spread operator by @Ayoub-Mabrouk in expressjs/express#6137

increased code coverage of utils.js file by @ashish3011 in expressjs/express#6386

chore: remove duplicate word by @dufucun in expressjs/express#6456

build(deps): bump github/codeql-action from 3.28.13 to 3.28.16 by @dependabot[bot] in expressjs/express#6498

build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in expressjs/express#6497

build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in expressjs/express#6496

ci: add node.js 24 to test matrix by @Phillip9587 in expressjs/express#6504

ci: update codeql config by @Phillip9587 in expressjs/express#6488

chore: wider range for query test skip by @jonchurch in expressjs/express#6512

chore: fix typos in test by @noritaka1166 in expressjs/express#6535

ci: disable credential persistence for checkout actions by @mertssmnoglu in expressjs/express#6522

ci: allow manual triggering of workflow by @shivarm in expressjs/express#6515

test: add coverage for app.listen() variants by @kgarg1 in expressjs/express#6476

docs: move documentation and charters to the discussions and .github … by @bjohansebas in expressjs/express#6427

build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by @dependabot[bot] in expressjs/express#6549

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in expressjs/express#6548

chore: enforce explicit Buffer import and add lint rule by @shivarm in expressjs/express#6525

chore: use node protocol for querystring by @shivarm in expressjs/express#6520

chore: fix typo by @mountdisk in expressjs/express#6609

build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by @dependabot[bot] in expressjs/express#6618

add deprecation warnings for redirect arguments undefined by @bjohansebas in expressjs/express#6405

ci: run CI when the markdown changes by @bjohansebas in expressjs/express#6632

doc: fix CONTRIBUTING link by @jonchurch in expressjs/express#6653

doc: update contributing guidelines and code of conduct links by @ShubhamOulkar in expressjs/express#6601

build(deps-dev): bump morgan from 1.10.0 to 1.10.1 by @dependabot[bot] in expressjs/express#6679

build(deps-dev): bump cookie-session from 2.1.0 to 2.1.1 by @dependabot[bot] in expressjs/express#6678

lint: add --fix flag to automatic fix linting issue by @shivarm in expressjs/express#6644

chore: ignore yarn.lock file and update example by @shivarm in expressjs/express#6588

lib: use req.socket over deprecated req.connection by @bjohansebas in expressjs/express#6705

doc: update express app example by @shivarm in expressjs/express#6718

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by @dependabot[bot] in expressjs/express#6675

Remove history.md from being packaged on publish by @sheplu in expressjs/express#6780

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

5.2.0 / 2025-12-01

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

deps: body-parser@^2.2.1

A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

5.1.0 / 2025-03-31

Add support for Uint8Array in res.send()

Add support for ETag option in res.sendFile()

Add support for multiple links with the same rel in res.links()

Add funding field to package.json

perf: use loop for acceptParams

refactor: prefix built-in node module imports

deps: remove setprototypeof

deps: remove safe-buffer

deps: remove utils-merge

deps: remove methods

deps: remove depd

deps: debug@^4.4.0

deps: body-parser@^2.2.0

deps: router@^2.2.0

deps: content-type@^1.0.5

deps: finalhandler@^2.1.0

deps: qs@^6.14.0

deps: server-static@2.2.0

deps: type-is@2.0.1

5.0.1 / 2024-10-08

Update cookie semver lock to address CVE-2024-47764

5.0.0 / 2024-09-10

remove:

path-is-absolute dependency - use path.isAbsolute instead

breaking:

res.status() accepts only integers, and input must be greater than 99 and less than 1000

will throw a RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000. for inputs outside this range

will throw a TypeError: Invalid status code: ${code}. Status code must be an integer. for non integer inputs

deps: send@1.0.0

... (truncated)

Commits

dbac741 5.2.1
697547c Revert "sec: security patch for CVE-2024-51999"
4007ad1 Release: 5.2.0 (#6920)
2f64f68 sec: security patch for CVE-2024-51999
ed0ba3f build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#6928)
8eace46 build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (#6929)
30bae81 build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 (#6930)
758d435 deps: body-parser@^2.2.1 (#6922)
77bcd52 docs: update emeritus triagers (#6890)
f33caf1 Nominate to @efekrskl for triage team (#6888)
Additional commits viewable in compare view

Updates @types/express from 4.17.25 to 5.0.6

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependabot · 2026-01-19T08:17:49Z

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-01-19T08:17:52Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectui	Ready	Preview, Comment	Feb 1, 2026 1:47pm
objectui-components	Ready	Preview, Comment	Feb 1, 2026 1:47pm
objectui-crm-app	Ready	Preview, Comment	Feb 1, 2026 1:47pm
objectui-docs	Error		Feb 1, 2026 1:47pm
objectui-site	Error		Feb 1, 2026 1:47pm

github-actions · 2026-01-19T08:22:08Z

⚠️ This is a major version update. Please review carefully before merging.

github-actions · 2026-01-19T08:23:45Z

📦 Bundle Size Report

Package	Size	Gzipped
components (index.js)	1560.46KB	368.00KB
core (index.js)	0.46KB	0.26KB
data-objectql (ObjectQLDataSource.js)	12.09KB	2.84KB
data-objectql (hooks.js)	5.62KB	1.43KB
data-objectql (index.js)	0.62KB	0.36KB
designer (index.js)	1.46KB	0.51KB
plugin-charts (AdvancedChartImpl-C8-XIe1b.js)	74.89KB	15.82KB
plugin-charts (BarChart-CRc8MAtI.js)	551.60KB	127.51KB
plugin-charts (ChartImpl-CRaHSWhr.js)	3.17KB	1.10KB
plugin-charts (index-ClQPzSfD.js)	24.05KB	7.05KB
plugin-charts (index.js)	0.21KB	0.16KB
plugin-editor (MonacoImpl-BSiaJCGx.js)	18.15KB	5.59KB
plugin-editor (index-Bx39x2XN.js)	21.72KB	6.53KB
plugin-editor (index.js)	0.19KB	0.15KB
plugin-kanban (KanbanImpl-mGLdSHcd.js)	76.50KB	20.46KB
plugin-kanban (index-i_5clVsp.js)	23.51KB	6.90KB
plugin-kanban (index.js)	0.18KB	0.15KB
plugin-markdown (MarkdownImpl-Dp8rFxgw.js)	256.79KB	64.50KB
plugin-markdown (index-DDihmVdn.js)	21.25KB	6.37KB
plugin-markdown (index.js)	0.19KB	0.15KB
react (SchemaRenderer.js)	1.44KB	0.73KB
react (index.js)	0.32KB	0.23KB
react (index.test.js)	0.34KB	0.26KB
types (api-types.js)	0.20KB	0.18KB
types (app.js)	0.20KB	0.18KB
types (base.js)	0.20KB	0.18KB
types (complex.js)	0.20KB	0.18KB
types (crud.js)	0.20KB	0.18KB
types (data-display.js)	0.20KB	0.18KB
types (data.js)	0.20KB	0.18KB
types (disclosure.js)	0.20KB	0.18KB
types (feedback.js)	0.20KB	0.18KB
types (form.js)	0.20KB	0.18KB
types (index.js)	0.34KB	0.25KB
types (layout.js)	0.20KB	0.18KB
types (navigation.js)	0.20KB	0.18KB
types (objectql.js)	0.20KB	0.18KB
types (overlay.js)	0.20KB	0.18KB
types (registry.js)	0.20KB	0.18KB

Size Limits

✅ Core packages should be < 50KB gzipped
✅ Component packages should be < 100KB gzipped
⚠️ Plugin packages should be < 150KB gzipped

github-actions · 2026-01-19T08:24:09Z

✅ All checks passed!

✅ Type check passed
✅ Tests passed
✅ Lint check completed

github-actions · 2026-01-20T03:59:30Z

⚠️ This is a major version update. Please review carefully before merging.

github-actions · 2026-01-20T04:03:10Z

📦 Bundle Size Report

Package	Size	Gzipped
components (index.js)	1560.46KB	368.00KB
core (index.js)	0.46KB	0.26KB
data-objectql (ObjectQLDataSource.js)	12.09KB	2.84KB
data-objectql (hooks.js)	5.62KB	1.43KB
data-objectql (index.js)	0.62KB	0.36KB
designer (index.js)	1.46KB	0.51KB
plugin-charts (AdvancedChartImpl-C8-XIe1b.js)	74.89KB	15.82KB
plugin-charts (BarChart-CRc8MAtI.js)	551.60KB	127.51KB
plugin-charts (ChartImpl-CRaHSWhr.js)	3.17KB	1.10KB
plugin-charts (index-ClQPzSfD.js)	24.05KB	7.05KB
plugin-charts (index.js)	0.21KB	0.16KB
plugin-editor (MonacoImpl-BSiaJCGx.js)	18.15KB	5.59KB
plugin-editor (index-Bx39x2XN.js)	21.72KB	6.53KB
plugin-editor (index.js)	0.19KB	0.15KB
plugin-kanban (KanbanImpl-mGLdSHcd.js)	76.50KB	20.46KB
plugin-kanban (index-i_5clVsp.js)	23.51KB	6.90KB
plugin-kanban (index.js)	0.18KB	0.15KB
plugin-markdown (MarkdownImpl-Dp8rFxgw.js)	256.79KB	64.50KB
plugin-markdown (index-DDihmVdn.js)	21.25KB	6.37KB
plugin-markdown (index.js)	0.19KB	0.15KB
react (SchemaRenderer.js)	1.44KB	0.73KB
react (index.js)	0.32KB	0.23KB
react (index.test.js)	0.34KB	0.26KB
types (api-types.js)	0.20KB	0.18KB
types (app.js)	0.20KB	0.18KB
types (base.js)	0.20KB	0.18KB
types (complex.js)	0.20KB	0.18KB
types (crud.js)	0.20KB	0.18KB
types (data-display.js)	0.20KB	0.18KB
types (data.js)	0.20KB	0.18KB
types (disclosure.js)	0.20KB	0.18KB
types (feedback.js)	0.20KB	0.18KB
types (form.js)	0.20KB	0.18KB
types (index.js)	0.34KB	0.25KB
types (layout.js)	0.20KB	0.18KB
types (navigation.js)	0.20KB	0.18KB
types (objectql.js)	0.20KB	0.18KB
types (overlay.js)	0.20KB	0.18KB
types (registry.js)	0.20KB	0.18KB

Size Limits

✅ Core packages should be < 50KB gzipped
✅ Component packages should be < 100KB gzipped
⚠️ Plugin packages should be < 150KB gzipped

github-actions · 2026-01-20T04:03:57Z

✅ All checks passed!

✅ Type check passed
✅ Tests passed
✅ Lint check completed

github-actions · 2026-01-20T14:40:22Z

⚠️ This is a major version update. Please review carefully before merging.

github-actions · 2026-01-20T14:40:35Z

✅ All checks passed!

✅ Type check passed
✅ Tests passed
✅ Lint check completed

github-actions · 2026-01-20T14:41:28Z

📦 Bundle Size Report

Package	Size	Gzipped
components (index.js)	1548.30KB	364.62KB
core (index.js)	0.46KB	0.26KB
data-objectql (ObjectQLDataSource.js)	12.09KB	2.84KB
data-objectql (hooks.js)	5.62KB	1.43KB
data-objectql (index.js)	0.62KB	0.36KB
designer (index.js)	1.46KB	0.51KB
plugin-charts (AdvancedChartImpl-DazADGz5.js)	74.89KB	15.82KB
plugin-charts (BarChart-CRc8MAtI.js)	551.60KB	127.51KB
plugin-charts (ChartImpl-DVw_7KEd.js)	3.17KB	1.10KB
plugin-charts (index-CdgY2AuM.js)	12.39KB	3.83KB
plugin-charts (index.js)	0.21KB	0.16KB
plugin-editor (MonacoImpl-B7ZgZJJG.js)	18.15KB	5.59KB
plugin-editor (index-Dl3HAAqu.js)	10.07KB	3.31KB
plugin-editor (index.js)	0.19KB	0.15KB
plugin-kanban (KanbanImpl-CUWM-JC-.js)	76.50KB	20.46KB
plugin-kanban (index-BV3FWhCb.js)	11.86KB	3.67KB
plugin-kanban (index.js)	0.18KB	0.15KB
plugin-markdown (MarkdownImpl-BRkYjVWf.js)	256.79KB	64.50KB
plugin-markdown (index-D_CdfEXQ.js)	9.59KB	3.16KB
plugin-markdown (index.js)	0.19KB	0.15KB
react (SchemaRenderer.js)	1.44KB	0.73KB
react (index.js)	0.32KB	0.23KB
react (index.test.js)	0.34KB	0.26KB
types (api-types.js)	0.20KB	0.18KB
types (app.js)	0.20KB	0.18KB
types (base.js)	0.20KB	0.18KB
types (complex.js)	0.20KB	0.18KB
types (crud.js)	0.20KB	0.18KB
types (data-display.js)	0.20KB	0.18KB
types (data.js)	0.20KB	0.18KB
types (disclosure.js)	0.20KB	0.18KB
types (feedback.js)	0.20KB	0.18KB
types (form.js)	0.20KB	0.18KB
types (index.js)	0.34KB	0.25KB
types (layout.js)	0.20KB	0.18KB
types (navigation.js)	0.20KB	0.18KB
types (objectql.js)	0.20KB	0.18KB
types (overlay.js)	0.20KB	0.18KB
types (registry.js)	0.20KB	0.18KB

Size Limits

✅ Core packages should be < 50KB gzipped
✅ Component packages should be < 100KB gzipped
⚠️ Plugin packages should be < 150KB gzipped

vercel · 2026-01-23T13:26:26Z

Deployment failed with the following error:

Resource is limited - try again in 2 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/xuyushun441-sys-projects?upgradeToPro=build-rate-limit

github-actions · 2026-01-23T13:26:36Z

⚠️ This is a major version update. Please review carefully before merging.

github-actions · 2026-01-23T13:28:28Z

📦 Bundle Size Report

Package	Size	Gzipped
components (index.js)	1588.71KB	373.06KB
core (index.js)	0.53KB	0.28KB
data-objectql (ObjectQLDataSource.js)	11.05KB	2.64KB
data-objectql (hooks.js)	5.62KB	1.43KB
data-objectql (index.js)	0.62KB	0.36KB
plugin-charts (AdvancedChartImpl-DazADGz5.js)	74.89KB	15.82KB
plugin-charts (BarChart-CRc8MAtI.js)	551.60KB	127.51KB
plugin-charts (ChartImpl-DVw_7KEd.js)	3.17KB	1.10KB
plugin-charts (index-CdgY2AuM.js)	12.39KB	3.83KB
plugin-charts (index.js)	0.21KB	0.16KB
plugin-editor (MonacoImpl-B7ZgZJJG.js)	18.15KB	5.59KB
plugin-editor (index-Dl3HAAqu.js)	10.07KB	3.31KB
plugin-editor (index.js)	0.19KB	0.15KB
plugin-kanban (KanbanImpl-CUWM-JC-.js)	76.50KB	20.46KB
plugin-kanban (index-BV3FWhCb.js)	11.86KB	3.67KB
plugin-kanban (index.js)	0.18KB	0.15KB
plugin-markdown (MarkdownImpl-BRkYjVWf.js)	256.79KB	64.50KB
plugin-markdown (index-D_CdfEXQ.js)	9.59KB	3.16KB
plugin-markdown (index.js)	0.19KB	0.15KB
react (SchemaRenderer.js)	1.44KB	0.73KB
react (index.js)	0.32KB	0.23KB
react (index.test.js)	0.34KB	0.26KB
types (api-types.js)	0.20KB	0.18KB
types (app.js)	0.20KB	0.18KB
types (base.js)	0.20KB	0.18KB
types (complex.js)	0.20KB	0.18KB
types (crud.js)	0.20KB	0.18KB
types (data-display.js)	0.20KB	0.18KB
types (data.js)	0.20KB	0.18KB
types (disclosure.js)	0.20KB	0.18KB
types (feedback.js)	0.20KB	0.18KB
types (form.js)	0.20KB	0.18KB
types (index.js)	0.34KB	0.25KB
types (layout.js)	0.20KB	0.18KB
types (navigation.js)	0.20KB	0.18KB
types (objectql.js)	0.20KB	0.18KB
types (overlay.js)	0.20KB	0.18KB
types (registry.js)	0.20KB	0.18KB

Size Limits

✅ Core packages should be < 50KB gzipped
✅ Component packages should be < 100KB gzipped
⚠️ Plugin packages should be < 150KB gzipped

github-actions · 2026-01-23T13:29:21Z

✅ All checks passed!

✅ Type check passed
✅ Tests passed
✅ Lint check completed

github-actions · 2026-01-26T08:11:44Z

⚠️ This is a major version update. Please review carefully before merging.

github-actions · 2026-01-26T08:13:29Z

📦 Bundle Size Report

Package	Size	Gzipped
components (index.js)	1567.17KB	368.66KB
core (index.js)	0.53KB	0.28KB
plugin-aggrid (AgGridImpl-DKkq6v1B.js)	5.09KB	1.84KB
plugin-aggrid (index-B6NPAFZx.js)	15.66KB	4.51KB
plugin-aggrid (index.js)	0.18KB	0.15KB
plugin-charts (AdvancedChartImpl-DazADGz5.js)	74.89KB	15.82KB
plugin-charts (BarChart-CRc8MAtI.js)	551.60KB	127.51KB
plugin-charts (ChartImpl-DVw_7KEd.js)	3.17KB	1.10KB
plugin-charts (index-CdgY2AuM.js)	12.39KB	3.83KB
plugin-charts (index.js)	0.21KB	0.16KB
plugin-chatbot (index.js)	18.36KB	5.21KB
plugin-editor (MonacoImpl-B7ZgZJJG.js)	18.15KB	5.59KB
plugin-editor (index-Dl3HAAqu.js)	10.07KB	3.31KB
plugin-editor (index.js)	0.19KB	0.15KB
plugin-kanban (KanbanImpl-CUWM-JC-.js)	76.50KB	20.46KB
plugin-kanban (index-BV3FWhCb.js)	11.86KB	3.67KB
plugin-kanban (index.js)	0.18KB	0.15KB
plugin-markdown (MarkdownImpl-BRkYjVWf.js)	256.79KB	64.50KB
plugin-markdown (index-D_CdfEXQ.js)	9.59KB	3.16KB
plugin-markdown (index.js)	0.19KB	0.15KB
plugin-timeline (index.js)	23.90KB	5.95KB
react (SchemaRenderer.js)	1.44KB	0.73KB
react (index.js)	0.36KB	0.23KB
react (index.test.js)	0.34KB	0.26KB
types (api-types.js)	0.20KB	0.18KB
types (app.js)	0.20KB	0.18KB
types (base.js)	0.20KB	0.18KB
types (complex.js)	0.20KB	0.18KB
types (crud.js)	0.20KB	0.18KB
types (data-display.js)	0.20KB	0.18KB
types (data.js)	0.20KB	0.18KB
types (disclosure.js)	0.20KB	0.18KB
types (feedback.js)	0.20KB	0.18KB
types (field-types.js)	0.20KB	0.18KB
types (form.js)	0.20KB	0.18KB
types (index.js)	0.34KB	0.25KB
types (layout.js)	0.20KB	0.18KB
types (navigation.js)	0.20KB	0.18KB
types (objectql.js)	0.20KB	0.18KB
types (overlay.js)	0.20KB	0.18KB
types (registry.js)	0.20KB	0.18KB

Size Limits

✅ Core packages should be < 50KB gzipped
✅ Component packages should be < 100KB gzipped
⚠️ Plugin packages should be < 150KB gzipped

github-actions · 2026-01-26T08:14:29Z

✅ All checks passed!

✅ Type check passed
✅ Tests passed
✅ Lint check completed

github-actions · 2026-01-26T14:56:14Z

⚠️ This is a major version update. Please review carefully before merging.

github-actions · 2026-01-26T15:04:58Z

⚠️ This is a major version update. Please review carefully before merging.

github-actions · 2026-01-26T15:06:36Z

⚠️ This is a major version update. Please review carefully before merging.

dependabot · 2026-01-28T08:39:39Z

Dependabot can't authenticate to a private package registry. Because of this, Dependabot cannot update this pull request.

github-actions · 2026-01-28T09:09:24Z

⚠️ This is a major version update. Please review carefully before merging.

Bumps [express](https://github.com/expressjs/express) and [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express). These dependencies needed to be updated together. Updates `express` from 4.22.1 to 5.2.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@v4.22.1...v5.2.1) Updates `@types/express` from 4.17.25 to 5.0.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express) --- updated-dependencies: - dependency-name: express dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: "@types/express" dependency-version: 5.0.6 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-01-31T09:40:32Z

⚠️ This is a major version update. Please review carefully before merging.

github-actions · 2026-01-31T09:44:11Z

📦 Bundle Size Report

Package	Size	Gzipped
components (index.js)	1761.89KB	416.55KB
core (index.js)	0.61KB	0.30KB
create-plugin (index.js)	9.28KB	2.98KB
data-objectstack (index.js)	16.91KB	4.46KB
fields (index.js)	85.45KB	16.69KB
layout (index.js)	12.63KB	3.91KB
plugin-aggrid (AgGridImpl-BQ6tBvrq.js)	5.27KB	1.92KB
plugin-aggrid (ObjectAgGridImpl-CGFeGvOH.js)	11.44KB	3.52KB
plugin-aggrid (index-CLKYMco3.js)	19.20KB	4.89KB
plugin-aggrid (index.js)	0.22KB	0.16KB
plugin-calendar (index.js)	33.19KB	8.30KB
plugin-charts (AdvancedChartImpl-Cyae7QYH.js)	69.51KB	16.23KB
plugin-charts (BarChart-RKJxvg5Y.js)	535.74KB	134.11KB
plugin-charts (ChartImpl-CrYQhLTB.js)	8.78KB	3.11KB
plugin-charts (index-BGwsUQF8.js)	12.68KB	3.91KB
plugin-charts (index.js)	0.21KB	0.16KB
plugin-chatbot (index.js)	18.39KB	5.22KB
plugin-dashboard (index.js)	11.99KB	3.82KB
plugin-editor (MonacoImpl-hfdmoz6k.js)	18.15KB	5.59KB
plugin-editor (index-CuYbY6xb.js)	10.10KB	3.32KB
plugin-editor (index.js)	0.19KB	0.15KB
plugin-form (index.js)	14.46KB	4.65KB
plugin-gantt (index.js)	18.03KB	5.27KB
plugin-grid (index.js)	40.53KB	11.23KB
plugin-kanban (KanbanImpl-kbzXvR7a.js)	76.50KB	20.46KB
plugin-kanban (index-4iNpG2-h.js)	11.89KB	3.68KB
plugin-kanban (index.js)	0.18KB	0.15KB
plugin-map (index.js)	16.78KB	5.12KB
plugin-markdown (MarkdownImpl-9F_xYhwR.js)	256.79KB	64.50KB
plugin-markdown (index-DZS4FNIJ.js)	9.63KB	3.17KB
plugin-markdown (index.js)	0.19KB	0.15KB
plugin-timeline (index.js)	23.93KB	5.96KB
plugin-view (index.js)	16.69KB	4.93KB
react (LazyPluginLoader.js)	1.10KB	0.58KB
react (SchemaRenderer.js)	3.02KB	1.21KB
react (index.js)	0.39KB	0.25KB
react (index.test.js)	0.34KB	0.26KB
types (api-types.js)	0.20KB	0.18KB
types (app.js)	0.20KB	0.18KB
types (base.js)	0.20KB	0.18KB
types (blocks.js)	0.20KB	0.18KB
types (complex.js)	0.20KB	0.18KB
types (crud.js)	0.20KB	0.18KB
types (data-display.js)	0.20KB	0.18KB
types (data-protocol.js)	0.20KB	0.19KB
types (data.js)	0.20KB	0.18KB
types (disclosure.js)	0.20KB	0.18KB
types (feedback.js)	0.20KB	0.18KB
types (field-types.js)	0.20KB	0.18KB
types (form.js)	0.20KB	0.18KB
types (index.js)	0.34KB	0.25KB
types (layout.js)	0.20KB	0.18KB
types (navigation.js)	0.20KB	0.18KB
types (objectql.js)	0.20KB	0.18KB
types (overlay.js)	0.20KB	0.18KB
types (plugin-scope.js)	0.20KB	0.18KB
types (registry.js)	0.20KB	0.18KB
types (reports.js)	0.20KB	0.18KB
types (theme.js)	0.20KB	0.18KB
types (views.js)	0.20KB	0.18KB

Size Limits

✅ Core packages should be < 50KB gzipped
✅ Component packages should be < 100KB gzipped
⚠️ Plugin packages should be < 150KB gzipped

github-actions · 2026-01-31T09:45:32Z

✅ All checks passed!

✅ Type check passed
✅ Tests passed
✅ Lint check completed

The test failures in feedback-overlay-renderers, form-renderers, and layout-data-renderers were caused by beforeAll hooks timing out when importing the renderers module. This was happening due to the default 10s hook timeout being insufficient for complex module imports when tests run in parallel. The fix increases the hookTimeout from 10s (default) to 30s to accommodate the time needed for renderer module initialization, especially when multiple test files are running concurrently. Fixes: https://github.com/objectstack-ai/objectui/actions/runs/21542544467/job/62079189230 Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

…ings

github-actions · 2026-02-01T13:31:02Z

📦 Bundle Size Report

Package	Size	Gzipped
components (index.js)	1762.80KB	416.83KB
core (index.js)	0.63KB	0.30KB
create-plugin (index.js)	9.28KB	2.98KB
data-objectstack (index.js)	16.99KB	4.48KB
fields (index.js)	85.84KB	16.82KB
layout (index.js)	12.63KB	3.91KB
plugin-aggrid (AgGridImpl-BQ6tBvrq.js)	5.27KB	1.92KB
plugin-aggrid (ObjectAgGridImpl-CGFeGvOH.js)	11.44KB	3.52KB
plugin-aggrid (index-CLKYMco3.js)	19.20KB	4.89KB
plugin-aggrid (index.js)	0.22KB	0.16KB
plugin-calendar (index.js)	33.19KB	8.30KB
plugin-charts (AdvancedChartImpl-Cyae7QYH.js)	69.51KB	16.23KB
plugin-charts (BarChart-RKJxvg5Y.js)	535.74KB	134.11KB
plugin-charts (ChartImpl-CrYQhLTB.js)	8.78KB	3.11KB
plugin-charts (index-BGwsUQF8.js)	12.68KB	3.91KB
plugin-charts (index.js)	0.21KB	0.16KB
plugin-chatbot (index.js)	18.39KB	5.22KB
plugin-dashboard (index.js)	11.99KB	3.82KB
plugin-editor (MonacoImpl-hfdmoz6k.js)	18.15KB	5.59KB
plugin-editor (index-CuYbY6xb.js)	10.10KB	3.32KB
plugin-editor (index.js)	0.19KB	0.15KB
plugin-form (index.js)	15.06KB	4.83KB
plugin-gantt (index.js)	18.03KB	5.27KB
plugin-grid (index.js)	40.64KB	11.25KB
plugin-kanban (KanbanImpl-kbzXvR7a.js)	76.50KB	20.46KB
plugin-kanban (index-4iNpG2-h.js)	11.89KB	3.68KB
plugin-kanban (index.js)	0.18KB	0.15KB
plugin-map (index.js)	16.78KB	5.12KB
plugin-markdown (MarkdownImpl-9F_xYhwR.js)	256.79KB	64.50KB
plugin-markdown (index-DZS4FNIJ.js)	9.63KB	3.17KB
plugin-markdown (index.js)	0.19KB	0.15KB
plugin-timeline (index.js)	23.93KB	5.96KB
plugin-view (index.js)	16.69KB	4.93KB
react (LazyPluginLoader.js)	1.10KB	0.58KB
react (SchemaRenderer.js)	3.02KB	1.21KB
react (index.js)	0.39KB	0.25KB
react (index.test.js)	0.34KB	0.26KB
types (api-types.js)	0.20KB	0.18KB
types (app.js)	0.20KB	0.18KB
types (base.js)	0.20KB	0.18KB
types (blocks.js)	0.20KB	0.18KB
types (complex.js)	0.20KB	0.18KB
types (crud.js)	0.20KB	0.18KB
types (data-display.js)	0.20KB	0.18KB
types (data-protocol.js)	0.20KB	0.19KB
types (data.js)	0.20KB	0.18KB
types (disclosure.js)	0.20KB	0.18KB
types (feedback.js)	0.20KB	0.18KB
types (field-types.js)	0.20KB	0.18KB
types (form.js)	0.20KB	0.18KB
types (index.js)	0.34KB	0.25KB
types (layout.js)	0.20KB	0.18KB
types (navigation.js)	0.20KB	0.18KB
types (objectql.js)	0.20KB	0.18KB
types (overlay.js)	0.20KB	0.18KB
types (plugin-scope.js)	0.20KB	0.18KB
types (registry.js)	0.20KB	0.18KB
types (reports.js)	0.20KB	0.18KB
types (theme.js)	0.20KB	0.18KB
types (ui-action.js)	0.20KB	0.18KB
types (views.js)	0.20KB	0.18KB

Size Limits

✅ Core packages should be < 50KB gzipped
✅ Component packages should be < 100KB gzipped
⚠️ Plugin packages should be < 150KB gzipped

dependabot bot added the dependencies label Jan 19, 2026

vercel bot had a problem deploying to Preview January 19, 2026 08:20 Failure

dependabot bot force-pushed the dependabot/npm_and_yarn/multi-b251156d90 branch from dbcfab8 to 3e61ded Compare January 19, 2026 08:21

vercel bot had a problem deploying to Preview January 19, 2026 08:26 Failure

dependabot bot force-pushed the dependabot/npm_and_yarn/multi-b251156d90 branch from 3e61ded to 01f9b64 Compare January 20, 2026 03:59

vercel bot had a problem deploying to Preview January 20, 2026 04:03 Failure

dependabot bot force-pushed the dependabot/npm_and_yarn/multi-b251156d90 branch from 01f9b64 to 676eefb Compare January 20, 2026 14:38

vercel bot temporarily deployed to Preview – objectui-docs January 20, 2026 14:38 Inactive

vercel bot had a problem deploying to Preview – objectui-site January 20, 2026 14:42 Failure

dependabot bot force-pushed the dependabot/npm_and_yarn/multi-b251156d90 branch from 676eefb to 505f0d0 Compare January 23, 2026 13:26

vercel bot had a problem deploying to Preview – objectui-site January 23, 2026 13:29 Failure

dependabot bot force-pushed the dependabot/npm_and_yarn/multi-b251156d90 branch from 505f0d0 to 14f7c3e Compare January 26, 2026 08:11

vercel bot had a problem deploying to Preview January 26, 2026 14:56 Failure

dependabot bot force-pushed the dependabot/npm_and_yarn/multi-b251156d90 branch 2 times, most recently from d33d1ac to 8ffb74d Compare January 26, 2026 15:04

vercel bot had a problem deploying to Preview January 26, 2026 15:06 Failure

dependabot bot force-pushed the dependabot/npm_and_yarn/multi-b251156d90 branch from 8ffb74d to 5306934 Compare January 26, 2026 15:06

vercel bot had a problem deploying to Preview January 26, 2026 15:06 Failure

dependabot bot force-pushed the dependabot/npm_and_yarn/multi-b251156d90 branch from 5306934 to ab4f8ac Compare January 28, 2026 09:09

vercel bot had a problem deploying to Preview – objectui January 28, 2026 09:16 Failure

vercel bot deployed to Preview – objectui-crm-app January 28, 2026 09:17 View deployment

dependabot bot force-pushed the dependabot/npm_and_yarn/multi-b251156d90 branch from ab4f8ac to 6bf9576 Compare January 31, 2026 09:40

vercel bot deployed to Preview – objectui January 31, 2026 09:48 View deployment

vercel bot deployed to Preview – objectui-components January 31, 2026 09:49 View deployment

vercel bot deployed to Preview – objectui-crm-app January 31, 2026 09:50 View deployment

Copilot AI and others added 3 commits February 1, 2026 13:09

Initial plan

98636bd

Merge pull request #317 from objectstack-ai/copilot/update-build-sett…

22b0cab

…ings

github-actions bot added the configuration label Feb 1, 2026

vercel bot deployed to Preview – objectui-crm-app February 1, 2026 13:43 View deployment

vercel bot deployed to Preview – objectui-components February 1, 2026 13:44 View deployment

vercel bot deployed to Preview – objectui February 1, 2026 13:47 View deployment

Conversation

dependabot bot commented on behalf of github Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.2.1

What's Changed

v5.2.0

Important: Security

What's Changed

5.2.1 / 2025-12-01

5.2.0 / 2025-12-01

5.1.0 / 2025-03-31

5.0.1 / 2024-10-08

5.0.0 / 2024-09-10

Uh oh!

dependabot bot commented on behalf of github Jan 19, 2026

Labels

Uh oh!

vercel bot commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 19, 2026

Uh oh!

github-actions bot commented Jan 19, 2026

📦 Bundle Size Report

Size Limits

Uh oh!

github-actions bot commented Jan 19, 2026

Uh oh!

github-actions bot commented Jan 20, 2026

Uh oh!

github-actions bot commented Jan 20, 2026

📦 Bundle Size Report

Size Limits

Uh oh!

github-actions bot commented Jan 20, 2026

Uh oh!

github-actions bot commented Jan 20, 2026

Uh oh!

github-actions bot commented Jan 20, 2026

Uh oh!

github-actions bot commented Jan 20, 2026

📦 Bundle Size Report

Size Limits

Uh oh!

vercel bot commented Jan 23, 2026

Uh oh!

github-actions bot commented Jan 23, 2026

Uh oh!

github-actions bot commented Jan 23, 2026

📦 Bundle Size Report

Size Limits

Uh oh!

github-actions bot commented Jan 23, 2026

Uh oh!

github-actions bot commented Jan 26, 2026

Uh oh!

github-actions bot commented Jan 26, 2026

📦 Bundle Size Report

Size Limits

Uh oh!

github-actions bot commented Jan 26, 2026

Uh oh!

github-actions bot commented Jan 26, 2026

Uh oh!

github-actions bot commented Jan 26, 2026

Uh oh!

github-actions bot commented Jan 26, 2026

Uh oh!

dependabot bot commented on behalf of github Jan 28, 2026

Uh oh!

github-actions bot commented Jan 28, 2026

Uh oh!

github-actions bot commented Jan 31, 2026

Uh oh!

github-actions bot commented Jan 31, 2026

📦 Bundle Size Report

Size Limits

Uh oh!

github-actions bot commented Jan 31, 2026

Uh oh!

dependabot bot commented on behalf of github Jan 19, 2026 •

edited

Loading

vercel bot commented Jan 19, 2026 •

edited

Loading