Skip to content

fix: address breaking change from typebox patch release - #58

Merged
gmaclennan merged 6 commits into
mainfrom
ac/typebox-update
Jul 21, 2026
Merged

fix: address breaking change from typebox patch release#58
gmaclennan merged 6 commits into
mainfrom
ac/typebox-update

Conversation

@achou11

@achou11 achou11 commented Jun 22, 2026

Copy link
Copy Markdown
Member

Seems like ReadonlyType was renamed to ReadonlyObject in 1.1.28. Our semver range includes this version, causing any consuming app that may update their lockfile to pull in these changes and result in runtime errors.

Wondering if we should consider tightening the semver range in this case. Not sure what typebox's release behavior generally is.

@achou11
achou11 requested a review from gmaclennan June 22, 2026 19:37
@socket-security

socket-security Bot commented Jun 22, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedtypebox@​1.0.61 ⏵ 1.3.6100100100 +196 +2100

View full report

Comment thread package-lock.json
Comment on lines -6777 to -6783
},
"stubs/empty-fetch": {
"extraneous": true
},
"stubs/empty-fetch-stub": {
"version": "1.0.0",
"extraneous": true

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

got this diff when running npm install - maybe due to different npm versions locally? can revert if preferred

@achou11 achou11 changed the title fix: address breaking change from typebox minor bump fix: address breaking change from typebox patch release Jun 25, 2026
achou11 added a commit to digidem/comapeo-desktop that referenced this pull request Jun 26, 2026
- Upgrades Electron to 42
- Upgrades development Node version to 24.17.0
- Using Node >=24.16.0 causes a transitive dep for `@electron/packager`
to break, requiring an override (see
e0565af). Apparently, Node
[24.18.0](https://nodejs.org/en/blog/release/v24.18.0) fixes the issue
but the relevant electron upstream projects are replacing the dep
anyways.
- Update in transitive dep causes a runtime error from
`@comapeo/map-server` to occur. For now, we specify an override for the
offending transitive dep (see
digidem/comapeo-map-server#58)
- Sentry configuration is updated to move away from deprecated APIs in
Sentry core (see c3a08da)
@gmaclennan

Copy link
Copy Markdown
Member

It seems like this change was reverted (see sinclairzx81/typebox#1582 (comment)), but the same comment also references breaking changes in minor releases (with semver coming in 2.x), so can you change the dep to ~ rather than ^ so we don't get minor releases?

@achou11

achou11 commented Jul 16, 2026

Copy link
Copy Markdown
Member Author

It seems like this change was reverted (see sinclairzx81/typebox#1582 (comment)), but the same comment also references breaking changes in minor releases (with semver coming in 2.x), so can you change the dep to ~ rather than ^ so we don't get minor releases?

Done in d5f8d93

@gmaclennan
gmaclennan merged commit 19c8d8b into main Jul 21, 2026
12 checks passed
@gmaclennan
gmaclennan deleted the ac/typebox-update branch July 21, 2026 20:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants