chore(deps)(deps): bump recharts from 2.15.4 to 3.8.1#141
chore(deps)(deps): bump recharts from 2.15.4 to 3.8.1#141dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [recharts](https://github.com/recharts/recharts) from 2.15.4 to 3.8.1. - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v2.15.4...v3.8.1) --- updated-dependencies: - dependency-name: recharts dependency-version: 3.8.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
WalkthroughA dependência ChangesAtualização de Versão Recharts
Estimated code review effort🎯 2 (Simple) | ⏱️ ~8 minutos Suggested reviewers
|
| Check name | Status | Explanation | Resolution |
|---|---|---|---|
| Description check | A descrição fornecida pelo Dependabot é técnica e completa com release notes, mas não segue o template obrigatório do repositório (📝 Descrição, 🎯 Tipo de mudança, checklist, etc). | Preencha o template oficial do PR com seções obrigatórias: 📝 Descrição, 🎯 Tipo de mudança (marque breaking change), ✅ Checklist (validar ESLint, tsc, testes) e |
✅ Passed checks (4 passed)
| Check name | Status | Explanation |
|---|---|---|
| Title check | ✅ Passed | O título é claro e específico, descrevendo a principal mudança: atualização da dependência recharts de v2.15.4 para v3.8.1. |
| Docstring Coverage | ✅ Passed | No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. |
| Linked Issues check | ✅ Passed | Check skipped because no linked issues were found for this pull request. |
| Out of Scope Changes check | ✅ Passed | Check skipped because no linked issues were found for this pull request. |
✏️ Tip: You can configure your own custom pre-merge checks in the settings.
✨ Finishing Touches
🧪 Generate unit tests (beta)
- Create PR with unit tests
- Commit unit tests in branch
dependabot/npm_and_yarn/recharts-3.8.1
Comment @coderabbitai help to get the list of available commands and usage tips.
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@package.json`:
- Line 159: O bump de major para "recharts": "^3.8.1" pode introduzir breaking
changes; antes de aceitar, verifique compatibilidade: execute e manualmente
teste todos os componentes de chart usados na aplicação (renders, interactions,
tooltips, legends), insira testes de integração/usability para os componentes
que usam Recharts (procure por usos de componentes como <LineChart>, <BarChart>,
<CartesianGrid> etc. nos seus arquivos de UI), compare as props usadas contra a
API documentada da v3 e revise o changelog entre 2.15.4 e 3.8.1 para breaking
changes; se algum comportamento mudou, reverta para a versão anterior ou adapte
os usages/prop names conforme necessário e só então atualize package.json para a
nova versão.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: b86d3dfe-a2da-4404-8be9-d4bb1d434b09
⛔ Files ignored due to path filters (1)
package-lock.jsonis excluded by!**/package-lock.json,!**/package-lock.json
📒 Files selected for processing (1)
package.json
| "react-markdown": "^10.1.0", | ||
| "react-router-dom": "6.30.3", | ||
| "recharts": "^2.10.3", | ||
| "recharts": "^3.8.1", |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "Comparando metadados de publicação: recharts@2.15.4 vs recharts@3.8.1"
for v in 2.15.4 3.8.1; do
echo ""
echo "=== recharts@$v ==="
curl -s "https://registry.npmjs.org/recharts/$v" | jq '{
version,
publishedBy: ._npmUser.name,
maintainers,
scripts,
dist: {
integrity: .dist.integrity,
shasum: .dist.shasum,
tarball: .dist.tarball
}
}'
done
echo ""
echo "Checando scripts de ciclo de instalação em 3.8.1 (preinstall/install/postinstall/prepare)"
curl -s "https://registry.npmjs.org/recharts/3.8.1" \
| jq '.scripts // {} | {preinstall, install, postinstall, prepare}'Repository: adm01-debug/Promo_Gifts
Length of output: 6211
Valide compatibilidade antes de aceitar esse major bump de recharts.
recharts 2.x → 3.x é um major bump significativo que pode gerar regressões. Embora a supply chain não apresente sinais críticos (novo publicador corkscreewe é maintainer já existente e mudança em script prepare é legítima — husky 9+ simplificou de "husky install" para "husky"), é essencial validar que os componentes da UI/charts não regrediram.
Checklist mínimo:
- Testar todos os gráficos em uso da aplicação
- Verificar se APIs de componentes usados mantêm compatibilidade
- Revisar changelog de breaking changes entre 2.15.4 e 3.8.1
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@package.json` at line 159, O bump de major para "recharts": "^3.8.1" pode
introduzir breaking changes; antes de aceitar, verifique compatibilidade:
execute e manualmente teste todos os componentes de chart usados na aplicação
(renders, interactions, tooltips, legends), insira testes de
integração/usability para os componentes que usam Recharts (procure por usos de
componentes como <LineChart>, <BarChart>, <CartesianGrid> etc. nos seus arquivos
de UI), compare as props usadas contra a API documentada da v3 e revise o
changelog entre 2.15.4 e 3.8.1 para breaking changes; se algum comportamento
mudou, reverta para a versão anterior ou adapte os usages/prop names conforme
necessário e só então atualize package.json para a nova versão.
❌ Fechando esta PR — major bump requer refactor manualPacote: Este upgrade tem breaking changes que não podem ser mergeados via dependabot automático. O componente base + callsites precisam ser refatorados em uma PR humana dedicada. Tracking issue: #155 — onde o time pode discutir priorização e atribuir. @dependabot ignore this minor version (pra dependabot não recriar a PR automaticamente) Decisão tomada na Tarefa 7 do redeploy Promo_Gifts. Doc: |
|
OK, I won't notify you about version 3.8.x again, unless you re-open this PR. |
Tarefa 7 do redeploy. Triagei 7 PRs dependabot abertas há semanas. Resultado: - 4 mergeadas: #138, #139, #144, #145 (devtools + CI actions, baixo risco) - 3 fechadas: #140, #141, #142 (runtime majors com breaking changes) - 1 issue criada: #155 (tracking dos 3 majors pendentes) Critério: triagem por RISCO REAL (devtools vs runtime), não por minor/major. Decisões persistidas em docs/redeploy/REDEPLOY-T7-DEPENDABOT.md: - Lista completa das 7 PRs com decisão e razão - Critérios de triagem reutilizáveis - Achados sobre falsos-positivos (CDN 522 do esm.sh) - Recomendação de dependabot.yml para reduzir ruído futuro - Status atualizado do plano de redeploy Closes part of #155 (T7 do plano) Co-authored-by: Joaquim (via Claude Code redeploy T2) <joaquim@atomicabr.com.br> Co-authored-by: Claude <noreply@anthropic.com>
1 participant
Bumps recharts from 2.15.4 to 3.8.1.
Release notes
Sourced from recharts's releases.
... (truncated)
Commits
5b10788chore(deps-dev): bump diff from 8.0.3 to 8.0.4 (#7156)222396fchore(deps): bump react-router-dom from 7.13.1 to 7.13.2 (#7164)c2642dachore(deps-dev): bump typescript-eslint from 8.57.1 to 8.57.2 (#7166)b186929fix(RechartsWrapper): prevent ResizeObserver memory leak on ref update (#7161)738f71ffix(Tooltip): prevent crash on sparse or undefined payload entries (#7149)00daf0bchore(deps-dev): bump rollup from 4.59.0 to 4.60.0 (#7158)eba4f2achore(deps-dev): bump marked from 17.0.4 to 17.0.5 (#7157)201d060fix: resolve keyboard navigation and tooltip issues for Pie charts (#6921) (#...670d092chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (#7150)86ca8defix: stackOffset expand should not override numerical XAxis domain (#7152)Maintainer changes
This version was pushed to npm by corkscreewe, a new releaser for recharts since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by CodeRabbit
Notas de Lançamento