Skip to content

Comments

Bump electron-to-chromium from 1.5.178 to 1.5.267#816

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/electron-to-chromium-1.5.267
Closed

Bump electron-to-chromium from 1.5.178 to 1.5.267#816
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/electron-to-chromium-1.5.267

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps electron-to-chromium from 1.5.178 to 1.5.267.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [electron-to-chromium](https://github.com/kilian/electron-to-chromium) from 1.5.178 to 1.5.267.
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/master/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.178...v1.5.267)

---
updated-dependencies:
- dependency-name: electron-to-chromium
  dependency-version: 1.5.267
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Change requested in dependencies javascript Pull requests that update Javascript code labels Jan 1, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 1, 2026 12:01
@github-actions
Copy link

github-actions bot commented Jan 1, 2026

🤖 Claude Code Review

I'll perform a comprehensive code review of this package-lock.json diff against the provided checklist.

Code Review

Code Quality

Code follows style guide - N/A for package-lock.json (auto-generated file)

No commented-out code - None found

Meaningful variable names - N/A for package-lock.json

DRY principle followed - N/A for package-lock.json

Identify Defects - No bugs, logic errors, or security vulnerabilities identified. This appears to be a dependency update that:

  • Removes duplicate chokidar entries across multiple node_modules paths
  • Adds missing optional platform-specific @parcel/watcher-* packages
  • Updates electron-to-chromium from 1.5.178 to 1.5.267
  • Adds "peer": true flags to several peer dependencies for proper dependency resolution
  • Removes unnecessary "peer": true flags from some @rollup packages that were incorrectly marked

The changes are consistent with npm's lockfile format and represent dependency deduplication and proper peer dependency marking.

Project memory configuration - No .claude/CLAUDE.md file exists in the repository to consider.

Testing

Unit tests for new functions - N/A - This is a dependency update only, no new functions added

Integration tests for new endpoints - N/A - No new endpoints

Edge cases covered - N/A - No code changes

Test coverage > 80% - Cannot verify from this diff alone; no test files modified

Documentation

Readme updated if needed - Not required for package-lock.json changes

API docs updated - Not required for package-lock.json changes

Inline comments for complex logic - N/A for package-lock.json

CHANGELOG.md updated - No CHANGELOG.md update detected in the diff. This should be updated to document:

  • Dependency updates (electron-to-chromium bump)
  • Package-lock.json maintenance (deduplication, peer dependency corrections)

Markdown files formatting - No markdown files in this diff

Security

No hardcoded credentials - None found

Input validation implemented - N/A for package-lock.json

Proper error handling - N/A for package-lock.json

No sensitive data in logs - None found

No license files (.lic) or AQAAAD strings - None found in the diff


Summary

Overall Assessment: ✅ APPROVED with minor recommendation

This is a clean dependency maintenance update with the following changes:

  1. Deduplication: Removes 5 duplicate chokidar node_modules entries that were nested under various Angular packages
  2. Platform support: Adds 9 missing optional @parcel/watcher-* packages for various platforms (android-arm64, darwin-arm64/x64, freebsd-x64, linux variants, win32 variants)
  3. Dependency update: Updates electron-to-chromium from 1.5.178 to 1.5.267 (89 versions)
  4. Peer dependency corrections: Properly marks numerous packages as peer dependencies with "peer": true flag and removes incorrect peer markings from rollup platform-specific packages

No security issues, bugs, or logic errors identified.

Recommendation: Consider updating CHANGELOG.md to document these dependency maintenance changes for transparency, though it's not strictly required for lockfile updates.

Automated code review analyzing defects and coding standards

@arawinters
Copy link
Contributor

Superseded by #818 (combined dependency updates)

@arawinters arawinters closed this Jan 6, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 6, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/electron-to-chromium-1.5.267 branch January 6, 2026 19:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Change requested in dependencies javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant