Skip to content

chore: begin Canton Node SDK dependency refresh - #418

Merged
HardlyDifficult merged 1 commit into
mainfrom
cursor/all-deps-latest-20260923
Sep 23, 2026
Merged

HardlyDifficult merged 1 commit into
mainfrom
cursor/all-deps-latest-20260923

Conversation

@HardlyDifficult

Copy link
Copy Markdown
Collaborator

Summary

First step of the Canton Node SDK dependency refresh: bump exactly three root runtime dependencies in package.json to their current latest stable npm versions.

What changed

Only package.json (3 lines in dependencies):

Dependency Before After
axios 1.19.0 1.20.0
ws 8.21.2 8.21.3
zod 4.4.3 4.6.5

What this PR is / is not

  • Is: the opening slice of a broader dependency refresh; more upgrade PRs will follow.
  • Is not: the complete dependency upgrade. Remaining dependencies (runtime and dev) are intentionally untouched in this change.

Validation

  • npm run build (openapi typegen + client-methods generation + tsc7 core + tsconfig.lint build) passed locally after the bumps.
  • Local Jest run did not complete (was aborted locally, not a reported failure); CI is the validation gate for this PR.
  • No lockfile added: this repo intentionally ignores package-lock.json.

Made with Cursor

Bump axios 1.19.0 -> 1.20.0, ws 8.21.2 -> 8.21.3, and zod 4.4.3 -> 4.6.5
in root package.json runtime dependencies.

Build (npm run build, including tsc7 core + lint configs) passed locally
after the bumps. Local Jest run did not complete; CI is the validation
gate for this change.

Part of the broader dependency refresh; more upgrades to follow.

Co-authored-by: Cursor <cursoragent@cursor.com>
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​ws@​8.21.39910010089100
Addednpm/​axios@​1.20.09810010095100
Addednpm/​zod@​4.6.510010010095100

View full report

@HardlyDifficult
HardlyDifficult marked this pull request as ready for review September 23, 2026 19:38
Copilot AI balanced review requested due to automatic review settings September 23, 2026 19:38

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The reviewed dependency updates have no unresolved issues.

Review effort: Balanced
Findings: None

What changed in this PR

Begins the Canton Node SDK dependency refresh by updating three runtime dependencies.

Changes:

  • Bumps axios to 1.20.0.
  • Bumps ws to 8.21.3.
  • Bumps zod to 4.6.5.
File Description
package.json Updates the three specified runtime dependency versions.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@HardlyDifficult HardlyDifficult self-assigned this Sep 23, 2026
@HardlyDifficult
HardlyDifficult merged commit 2bccc2b into main Sep 23, 2026
11 checks passed
@HardlyDifficult
HardlyDifficult deleted the cursor/all-deps-latest-20260923 branch September 23, 2026 20:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants