Skip to content

Comments

Bump @jridgewell/gen-mapping from 0.3.5 to 0.3.13#813

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/jridgewell/gen-mapping-0.3.13
Closed

Bump @jridgewell/gen-mapping from 0.3.5 to 0.3.13#813
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/jridgewell/gen-mapping-0.3.13

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps @jridgewell/gen-mapping from 0.3.5 to 0.3.13.

Changelog

Sourced from @​jridgewell/gen-mapping's changelog.

[0.3.13] - 2025-08-12

Full Changelog: jridgewell/sourcemaps@gen-mapping/0.3.12...gen-mapping/0.3.13

[0.3.12] - 2025-07-01

Full Changelog: jridgewell/sourcemaps@gen-mapping/0.3.11...gen-mapping/0.3.12

[0.3.11] - 2025-06-30

  • Update UMD Wrapper to fix webpack build issue: #33
  • Add getOwnPropertyDescriptors polyfill to support Node v6: #34

Full Changelog: jridgewell/sourcemaps@gen-mapping/0.3.10...gen-mapping/0.3.11

[0.3.10] - 2025-06-30

Full Changelog: jridgewell/sourcemaps@gen-mapping/0.3.9...gen-mapping/0.3.10

[0.3.9] - 2025-06-29

Full Changelog: jridgewell/sourcemaps@gen-mapping/0.3.5...gen-mapping/0.3.9

Commits
  • a969b67 gen-mapping/0.3.13
  • aab8d72 Use default subpath condition for fallback
  • c780a90 Update links to point to monorepo
  • e2fa5d7 remapping/2.3.4
  • 26fe89d gen-mapping/0.3.12
  • a1c0fa0 Reorder subpath exports
  • dd0615a gen-mapping: Use Object.assign to avoid needing getOwnPropertyDescriptors...
  • 82195c5 gen-mapping/0.3.11
  • 58ea44b Update changelogs
  • e0c7250 Why isn't GH autolinking commit SHAs?
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@jridgewell/gen-mapping](https://github.com/jridgewell/sourcemaps/tree/HEAD/packages/gen-mapping) from 0.3.5 to 0.3.13.
- [Changelog](https://github.com/jridgewell/sourcemaps/blob/main/packages/gen-mapping/CHANGELOG.md)
- [Commits](https://github.com/jridgewell/sourcemaps/commits/gen-mapping/0.3.13/packages/gen-mapping)

---
updated-dependencies:
- dependency-name: "@jridgewell/gen-mapping"
  dependency-version: 0.3.13
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Change requested in dependencies javascript Pull requests that update Javascript code labels Jan 1, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 1, 2026 12:01
@github-actions
Copy link

github-actions bot commented Jan 1, 2026

🤖 Claude Code Review

I'll perform a comprehensive code review of this package-lock.json diff against the provided checklist.

Code Review Analysis

✅ Code Quality

Style Guide Compliance

Passed - This is an automatically generated package-lock.json file that follows npm's standard format. No manual code style issues apply.

Commented-out Code

Passed - No commented-out code present.

Meaningful Variable Names

Passed - N/A for lock files (auto-generated).

DRY Principle

Passed - N/A for lock files (auto-generated).

Defects & Logic Errors

Passed - This is a dependency update that:

  • Bumps @jridgewell/gen-mapping from 0.3.5 to 0.3.13
  • Removes duplicate chokidar entries marked as peer: true
  • Removes unused @jridgewell/set-array dependency
  • Adds missing optional platform-specific packages for @parcel/watcher and @rollup/rollup
  • Changes several packages from peer: true to regular dependencies or vice versa

Key Changes:

  • Line 4235-4240: @jridgewell/gen-mapping updated to 0.3.13, removing @jridgewell/set-array dependency
  • Lines 145-163, 386-404, 589-607, etc.: Removes duplicate chokidar v4.0.3 entries that were marked as peer: true and optional: true
  • Lines 5246-5422: Adds missing @parcel/watcher-* platform-specific optional packages (android-arm64, darwin-arm64, darwin-x64, freebsd-x64, linux-arm-glibc, linux-arm64-glibc, linux-arm64-musl, win32-arm64, win32-ia32, win32-x64)
  • Lines 5751, 15939: Removes peer: true flag from some @rollup packages

No bugs, security vulnerabilities, or logic errors detected.

Project Memory Configuration

⚠️ Warning - No .claude/CLAUDE.md file found in the repository to check against project-specific requirements.


❌ Testing

Unit Tests

Not Applicable - This is a dependency lock file update. No functional code changes require unit tests.

Integration Tests

Not Applicable - Lock file changes don't require integration tests.

Edge Cases

Not Applicable - Lock file updates are tested through the dependency's own test suites.

Test Coverage

Not Applicable - No testable code in lock files.


⚠️ Documentation

README Updated

⚠️ Cannot Verify - Dependency updates typically don't require README updates unless they introduce breaking changes. Based on the diff, this appears to be maintenance updates (cleaning up peer dependencies and adding missing optional packages). No README update needed.

API Documentation

Not Applicable - No API changes in lock file updates.

Inline Comments

Not Applicable - Lock files are auto-generated.

CHANGELOG.md

Missing - The CHANGELOG.md should document this dependency update. Recommendation:

### Dependencies
- Bumped @jridgewell/gen-mapping from 0.3.5 to 0.3.13
- Cleaned up duplicate chokidar peer dependencies
- Added missing platform-specific optional packages for @parcel/watcher and @rollup/rollup

Markdown Formatting

Not Applicable - No markdown files modified in this diff.


✅ Security

No Hardcoded Credentials

Passed - No credentials found.

Input Validation

Not Applicable - Lock file contains no executable code.

Error Handling

Not Applicable - Lock file contains no executable code.

Sensitive Data in Logs

Not Applicable - Lock file contains no logging code.

License Files

Passed - No .lic files or AQAAAD strings detected in the diff.


Summary

Overall Assessment: ✅ APPROVED with minor documentation recommendation

This is a clean dependency maintenance update that:

  1. Updates @jridgewell/gen-mapping to a newer patch version
  2. Removes duplicate and incorrectly flagged peer dependencies for chokidar
  3. Adds missing optional platform-specific packages for better cross-platform support
  4. Corrects peer dependency flags on various packages

Recommendation:

  • Update CHANGELOG.md to document these dependency changes
  • Verify that npm install runs successfully after this update
  • Consider running the build and test suite to ensure no breaking changes were introduced

No critical issues found. The changes improve dependency tree consistency and cross-platform support.

Automated code review analyzing defects and coding standards

@arawinters
Copy link
Contributor

Superseded by #818 (combined dependency updates)

@arawinters arawinters closed this Jan 6, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 6, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/jridgewell/gen-mapping-0.3.13 branch January 6, 2026 19:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Change requested in dependencies javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant