Skip to content

build(deps-dev): bump sort-package-json from 2.6.0 to 3.6.1#1304

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/sort-package-json-3.6.1
Open

build(deps-dev): bump sort-package-json from 2.6.0 to 3.6.1#1304
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/sort-package-json-3.6.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps sort-package-json from 2.6.0 to 3.6.1.

Release notes

Sourced from sort-package-json's releases.

v3.6.1

3.6.1 (2026-01-25)

Bug Fixes

  • stop forcing exports "types" to be first (#398) (15e1140)

v3.6.0

3.6.0 (2025-12-14)

Features

  • sort dependencies according to detected package manager, support devEngines field (#382) (e3f2370)

v3.5.2

3.5.2 (2025-12-14)

Bug Fixes

  • handle colon-prefixed script names in sorter (#389) (0b528c2)

v3.5.1

3.5.1 (2025-12-08)

Bug Fixes

v3.5.0

3.5.0 (2025-11-26)

Features

  • sort types and default in exports field (#349) (7f22864)

v3.4.0

3.4.0 (2025-07-02)

Features

v3.3.1

3.3.1 (2025-06-25)

... (truncated)

Commits
  • 15e1140 fix: stop forcing exports "types" to be first (#398)
  • e3f2370 feat: sort dependencies according to detected package manager, support `devEn...
  • 0b528c2 fix: handle colon-prefixed script names in sorter (#389)
  • e6052c4 fix: improve-scripts-sorting (#376)
  • f94ab01 refactor: simplify & dry (#385)
  • fe45870 ci: reintroduce GITHUB_TOKEN (#387)
  • 4014ba1 ci: drop specified secrets, rely on implicit GH token (#386)
  • c5c791c ci: fix release workflow (#384)
  • d6a3a66 chore: use semver per-method import (#380)
  • c3bf18a chore: update dependencies, enable trust publishing (#381)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for sort-package-json since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sort-package-json](https://github.com/keithamus/sort-package-json) from 2.6.0 to 3.6.1.
- [Release notes](https://github.com/keithamus/sort-package-json/releases)
- [Commits](keithamus/sort-package-json@v2.6.0...v3.6.1)

---
updated-dependencies:
- dependency-name: sort-package-json
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 4, 2026
Copy link
Copy Markdown

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot merge

@codacy-production
Copy link
Copy Markdown

codacy-production Bot commented May 4, 2026

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes.

Copy link
Copy Markdown

@codacy-production codacy-production Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

The upgrade of sort-package-json to version 3.6.1 aligns with the project's Node.js requirements and Codacy standards. No security flaws, logic bugs, or quality regressions were identified. While the acceptance criteria are met, the major version transition suggests a need for manual verification of the sorting results to ensure no breaking changes in JSON formatting occurred.

About this PR

  • Major version updates in sorting tools can introduce changes to key ordering logic. It is recommended to verify that the new formatting does not conflict with existing CI/CD or linting tools.

Test suggestions

  • Verify that package.json remains correctly formatted according to the new version's sorting rules.
  • Verify compatibility with Node.js >= 20.0.0 as specified in the project's engines field.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify that package.json remains correctly formatted according to the new version's sorting rules.

TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants