You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@texera.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/06 06:27:02 UTC
[PR] chore(deps): bump ajv from 8.10.0 to 8.18.0 in /agent-service [texera]
dependabot[bot] opened a new pull request, #4962:
URL: https://github.com/apache/texera/pull/4962
Bumps [ajv](https://github.com/ajv-validator/ajv) from 8.10.0 to 8.18.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ajv-validator/ajv/releases">ajv's releases</a>.</em></p>
<blockquote>
<h2>v8.18.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: allow tree-shaking by adding <code>"sideEffects": false</code> to <code>package.json</code> by <a href="https://github.com/josdejong"><code>@josdejong</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2480">ajv-validator/ajv#2480</a></li>
<li>fix: <a href="https://redirect.github.com/ajv-validator/ajv/issues/2482">#2482</a> Infinity and NaN serialise to null by <a href="https://github.com/jasoniangreen"><code>@jasoniangreen</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2487">ajv-validator/ajv#2487</a></li>
<li>fix: small grammatical error in managing-schemas.md by <a href="https://github.com/monteiro-renato"><code>@monteiro-renato</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2508">ajv-validator/ajv#2508</a></li>
<li>fix: typos in schema-language.md by <a href="https://github.com/monteiro-renato"><code>@monteiro-renato</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2507">ajv-validator/ajv#2507</a></li>
<li>fix(pattern): use configured RegExp engine with $data keyword to mitigate ReDoS attacks (CVE-2025-69873) by <a href="https://github.com/epoberezkin"><code>@epoberezkin</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2586">ajv-validator/ajv#2586</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/josdejong"><code>@josdejong</code></a> made their first contribution in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2480">ajv-validator/ajv#2480</a></li>
<li><a href="https://github.com/monteiro-renato"><code>@monteiro-renato</code></a> made their first contribution in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2508">ajv-validator/ajv#2508</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/ajv-validator/ajv/compare/v8.17.1...v8.18.0">https://github.com/ajv-validator/ajv/compare/v8.17.1...v8.18.0</a></p>
<h2>v8.17.1</h2>
<h2>What's Changed</h2>
<ul>
<li>bump version to 8.17.1 by <a href="https://github.com/jasoniangreen"><code>@jasoniangreen</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2472">ajv-validator/ajv#2472</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/ajv-validator/ajv/compare/v8.17.0...v8.17.1">https://github.com/ajv-validator/ajv/compare/v8.17.0...v8.17.1</a></p>
<h2>Plus everything in 8.17.0 which failed to release</h2>
<p>The only functional change is to switch from uri-js (which is no longer supported), to fast-uri. This is the second attempt and the team on fast-uri have been really helpful addressing the issues we found last time.</p>
<p>Revert "Revert fast-uri change (<a href="https://redirect.github.com/ajv-validator/ajv/pull/2444">ajv-validator/ajv#2444</a>)" by <a href="https://github.com/gurgunday"><code>@gurgunday</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2448">ajv-validator/ajv#2448</a>
fix: ignore new eslint error for <code>@typescript-eslint/no-extraneous-class</code> by <a href="https://github.com/jasoniangreen"><code>@jasoniangreen</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2455">ajv-validator/ajv#2455</a>
docs: clarify behaviour of addVocabulary by <a href="https://github.com/jasoniangreen"><code>@jasoniangreen</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2454">ajv-validator/ajv#2454</a>
docs: refactor to improve legibility by <a href="https://github.com/blottn"><code>@blottn</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2432">ajv-validator/ajv#2432</a>
Fix grammatical typo in managing-schemas.md by <a href="https://github.com/wetneb"><code>@wetneb</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2305">ajv-validator/ajv#2305</a>
docs: Fix broken strict-mode link by <a href="https://github.com/alexanderjsx"><code>@alexanderjsx</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2459">ajv-validator/ajv#2459</a>
feat: add test for encoded refs and bump fast-uri by <a href="https://github.com/jasoniangreen"><code>@jasoniangreen</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2449">ajv-validator/ajv#2449</a>
fix: changes for <code>@typescript-eslint/array-type</code> rule by <a href="https://github.com/jasoniangreen"><code>@jasoniangreen</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2467">ajv-validator/ajv#2467</a>
fixes <a href="https://redirect.github.com/ajv-validator/ajv/issues/2217">ajv-validator/ajv#2217</a> - clarify custom keyword naming by <a href="https://github.com/jasoniangreen"><code>@jasoniangreen</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2457">ajv-validator/ajv#2457</a></p>
<h2>v8.17.0</h2>
<h2>What's Changed</h2>
<p>The only functional change is to switch from uri-js (which is no longer supported), to fast-uri. This is the second attempt and the team on fast-uri have been really helpful addressing the issues we found last time.</p>
<ul>
<li>Revert "Revert fast-uri change (<a href="https://redirect.github.com/ajv-validator/ajv/issues/2444">#2444</a>)" by <a href="https://github.com/gurgunday"><code>@gurgunday</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2448">ajv-validator/ajv#2448</a></li>
<li>fix: ignore new eslint error for <code>@typescript-eslint/no-extraneous-class</code> by <a href="https://github.com/jasoniangreen"><code>@jasoniangreen</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2455">ajv-validator/ajv#2455</a></li>
<li>docs: clarify behaviour of addVocabulary by <a href="https://github.com/jasoniangreen"><code>@jasoniangreen</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2454">ajv-validator/ajv#2454</a></li>
<li>docs: refactor to improve legibility by <a href="https://github.com/blottn"><code>@blottn</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2432">ajv-validator/ajv#2432</a></li>
<li>Fix grammatical typo in managing-schemas.md by <a href="https://github.com/wetneb"><code>@wetneb</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2305">ajv-validator/ajv#2305</a></li>
<li>docs: Fix broken strict-mode link by <a href="https://github.com/alexanderjsx"><code>@alexanderjsx</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2459">ajv-validator/ajv#2459</a></li>
<li>feat: add test for encoded refs and bump fast-uri by <a href="https://github.com/jasoniangreen"><code>@jasoniangreen</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2449">ajv-validator/ajv#2449</a></li>
<li>fix: changes for <code>@typescript-eslint/array-type</code> rule by <a href="https://github.com/jasoniangreen"><code>@jasoniangreen</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2467">ajv-validator/ajv#2467</a></li>
<li>fixes <a href="https://redirect.github.com/ajv-validator/ajv/issues/2217">#2217</a> - clarify custom keyword naming by <a href="https://github.com/jasoniangreen"><code>@jasoniangreen</code></a> in <a href="https://redirect.github.com/ajv-validator/ajv/pull/2457">ajv-validator/ajv#2457</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ajv-validator/ajv/commit/142ce84b807c4fe66e619c22480a28d0e4bd50fa"><code>142ce84</code></a> 8.18.0</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/720a23fa453ffae8340e92c9b0fe886c54cfe0d5"><code>720a23f</code></a> fix(pattern): use configured RegExp engine with $data keyword to mitigate ReD...</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/82735a15826a30cc51e97a1bbfb59b3d388e4b98"><code>82735a1</code></a> fix: typos in schema-language.md (<a href="https://redirect.github.com/ajv-validator/ajv/issues/2507">#2507</a>)</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/b17ec32cd97542e90ae27231d8a8bce88b9e53b6"><code>b17ec32</code></a> fix: small grammatical error in managing-schemas.md (<a href="https://redirect.github.com/ajv-validator/ajv/issues/2508">#2508</a>)</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/69568d08564303e2c32a2de61feb833b41075f96"><code>69568d0</code></a> fix: <a href="https://redirect.github.com/ajv-validator/ajv/issues/2482">#2482</a> Infinity and NaN serialise to null (<a href="https://redirect.github.com/ajv-validator/ajv/issues/2487">#2487</a>)</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/f06766f33ed7291f84c19f22a1286a34475fbdaf"><code>f06766f</code></a> feat: allow tree-shaking by adding ``"sideEffects": false<code>to</code>package.json` ...</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/9050ba1359fb87cd7c143f3c79513ea7624ea443"><code>9050ba1</code></a> bump version to 8.17.1 (<a href="https://redirect.github.com/ajv-validator/ajv/issues/2472">#2472</a>)</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/f7831b41c3a27064c6219f51a1e7371ffb582dfe"><code>f7831b4</code></a> fixes <a href="https://redirect.github.com/ajv-validator/ajv/issues/2217">#2217</a> - clarify custom keyword naming (<a href="https://redirect.github.com/ajv-validator/ajv/issues/2457">#2457</a>)</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/a523784388a79ce65e42caf4d2731da36a94b386"><code>a523784</code></a> fix: changes for <code>@typescript-eslint/array-type</code> rule (<a href="https://redirect.github.com/ajv-validator/ajv/issues/2467">#2467</a>)</li>
<li><a href="https://github.com/ajv-validator/ajv/commit/595fe58e64e8d5fb8a50fd7a58f9e7f3bcca0bac"><code>595fe58</code></a> feat: add test for encoded refs and bump fast-uri (<a href="https://redirect.github.com/ajv-validator/ajv/issues/2449">#2449</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/ajv-validator/ajv/compare/v8.10.0...v8.18.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/texera/network/alerts).
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): bump ajv from 8.10.0 to 8.18.0 in /agent-service [texera]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #4962:
URL: https://github.com/apache/texera/pull/4962#issuecomment-4755518991
Backport to [`release/v1.2`](https://github.com/apache/texera/tree/release/v1.2) succeeded as [`acff77a`](https://github.com/apache/texera/commit/acff77ab2e2dcfb2b75ab2da34cc16528aa95195). [Run](https://github.com/apache/texera/actions/runs/27853687854)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): bump ajv from 8.10.0 to 8.18.0 in /agent-service [texera]
Posted by "aglinxinyuan (via GitHub)" <gi...@apache.org>.
aglinxinyuan merged PR #4962:
URL: https://github.com/apache/texera/pull/4962
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): bump ajv from 8.10.0 to 8.18.0 in /agent-service [texera]
Posted by "aglinxinyuan (via GitHub)" <gi...@apache.org>.
aglinxinyuan commented on PR #4962:
URL: https://github.com/apache/texera/pull/4962#issuecomment-4385716115
@bobbai00 can decide.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): bump ajv from 8.10.0 to 8.18.0 in /agent-service [texera]
Posted by "codecov-commenter (via GitHub)" <gi...@apache.org>.
codecov-commenter commented on PR #4962:
URL: https://github.com/apache/texera/pull/4962#issuecomment-4385830104
## [Codecov](https://app.codecov.io/gh/apache/texera/pull/4962?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) Report
:white_check_mark: All modified and coverable lines are covered by tests.
:white_check_mark: Project coverage is 42.49%. Comparing base ([`8b5dbf8`](https://app.codecov.io/gh/apache/texera/commit/8b5dbf81b66e903e79416fc8a58e90544b0e45d4?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)) to head ([`6937b20`](https://app.codecov.io/gh/apache/texera/commit/6937b20bb2130db9f6d2ce41f24b79e1e6a5b7a7?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)).
:warning: Report is 2 commits behind head on main.
<details><summary>Additional details and impacted files</summary>
```diff
@@ Coverage Diff @@
## main #4962 +/- ##
=========================================
Coverage 42.49% 42.49%
Complexity 2180 2180
=========================================
Files 1005 1005
Lines 37429 37429
Branches 3914 3914
=========================================
Hits 15907 15907
Misses 20558 20558
Partials 964 964
```
| [Flag](https://app.codecov.io/gh/apache/texera/pull/4962/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | Coverage Δ | |
|---|---|---|
| [agent-service](https://app.codecov.io/gh/apache/texera/pull/4962/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `33.72% <ø> (ø)` | |
Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache#carryforward-flags-in-the-pull-request-comment) to find out more.
</details>
[:umbrella: View full report in Codecov by Sentry](https://app.codecov.io/gh/apache/texera/pull/4962?dropdown=coverage&src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache).
:loudspeaker: Have feedback on the report? [Share it here](https://about.codecov.io/codecov-pr-comment-feedback/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache).
<details><summary> :rocket: New features to boost your workflow: </summary>
- :snowflake: [Test Analytics](https://docs.codecov.com/docs/test-analytics): Detect flaky tests, report on failures, and find test suite problems.
- :package: [JS Bundle Analysis](https://docs.codecov.com/docs/javascript-bundle-analysis): Save yourself from yourself by tracking and limiting bundle sizes in JS merges.
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): bump ajv from 8.10.0 to 8.18.0 in /agent-service [texera]
Posted by "chenlica (via GitHub)" <gi...@apache.org>.
chenlica commented on PR #4962:
URL: https://github.com/apache/texera/pull/4962#issuecomment-4464176163
@bobbai00 When you get a chance, please add test cases to the AI agent service.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): bump ajv from 8.10.0 to 8.18.0 in /agent-service [texera]
Posted by "Yicong-Huang (via GitHub)" <gi...@apache.org>.
Yicong-Huang commented on PR #4962:
URL: https://github.com/apache/texera/pull/4962#issuecomment-4385685767
shall we add tests to agent service before bumping its library? we don't know if it works
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] chore(deps): bump ajv from 8.10.0 to 8.18.0 in /agent-service [texera]
Posted by "Copilot (via GitHub)" <gi...@apache.org>.
Copilot commented on code in PR #4962:
URL: https://github.com/apache/texera/pull/4962#discussion_r3193565181
##########
agent-service/package.json:
##########
@@ -18,7 +18,7 @@
"@ai-sdk/openai": "2.0.79",
"@elysiajs/cors": "1.4.0",
"ai": "5.0.108",
- "ajv": "8.10.0",
+ "ajv": "8.18.0",
"dagre": "0.8.5",
Review Comment:
`bun install --frozen-lockfile` is used in CI for agent-service, but only `package.json` was updated here; `agent-service/bun.lock` still pins ajv to the previous version. This will likely fail CI and also keep the actual installed/bundled Ajv version unchanged. Please regenerate and commit the updated `bun.lock` (and refresh `agent-service/LICENSE-binary` if the bundled package versions change) so the lockfile and license snapshot match the new dependency version.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org