chore(deps): bump @mdx-js/loader from 2.3.0 to 3.1.1#34
chore(deps): bump @mdx-js/loader from 2.3.0 to 3.1.1#34dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [@mdx-js/loader](https://github.com/mdx-js/mdx/tree/HEAD/packages/loader) from 2.3.0 to 3.1.1. - [Release notes](https://github.com/mdx-js/mdx/releases) - [Changelog](https://github.com/mdx-js/mdx/blob/main/changelog.md) - [Commits](https://github.com/mdx-js/mdx/commits/3.1.1/packages/loader) --- updated-dependencies: - dependency-name: "@mdx-js/loader" dependency-version: 3.1.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits. |
There was a problem hiding this comment.
Pull request overview
This pull request upgrades @mdx-js/loader from version 2.3.0 to 3.1.1, a major version bump initiated by Dependabot. The upgrade includes significant changes to the MDX processing pipeline, with numerous transitive dependencies also being upgraded to new major versions.
Changes:
- Updated
@mdx-js/loaderfrom 2.3.0 to 3.1.1 (major version upgrade) - Updated
@mdx-js/mdxfrom 2.3.0 to 3.1.1 as a transitive dependency - Webpack peer dependency changed to optional in the new loader version
- Multiple MDX-related utilities upgraded to new major versions (micromark, mdast, unified, etc.)
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| apps/roadbook/package.json | Updated @mdx-js/loader version in both dependencies and devDependencies sections |
| pnpm-lock.yaml | Extensive lock file updates reflecting the @mdx-js/loader upgrade and all transitive dependency changes, including new major versions of MDX processing utilities |
Files not reviewed (1)
- pnpm-lock.yaml: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| @@ -12,14 +12,14 @@ | |||
| "react": "^18.2.0", | |||
| "react-dom": "^18.2.0", | |||
| "@mdx-js/react": "^2.3.0", | |||
There was a problem hiding this comment.
This upgrade bumps @mdx-js/loader from version 2.3.0 to 3.1.1, which is a major version change. However, @mdx-js/react remains at version 2.3.0.
According to MDX documentation, @mdx-js/loader v3 and @mdx-js/react v2 have compatibility issues. The loader v3 uses a new runtime architecture that expects @mdx-js/react v3. This mismatch can cause runtime errors when rendering MDX content.
You should also update @mdx-js/react to version 3.x to match the loader version. Update the package.json to use "@mdx-js/react": "^3.0.0" or later.
| "@mdx-js/react": "^2.3.0", | |
| "@mdx-js/react": "^3.0.0", |
| "react-dom": "^18.2.0", | ||
| "@mdx-js/react": "^2.3.0", | ||
| "@mdx-js/loader": "^2.3.0", | ||
| "@mdx-js/loader": "^3.1.1", |
There was a problem hiding this comment.
The @mdx-js/loader package is listed in both dependencies and devDependencies. Since this is a build-time tool used by Next.js/webpack to process MDX files during the build step, it should only be in devDependencies. Remove it from the dependencies section to avoid including unnecessary build tools in production.
| "@mdx-js/loader": "^3.1.1", |
Bumps @mdx-js/loader from 2.3.0 to 3.1.1.
Release notes
Sourced from
@mdx-js/loader's releases.... (truncated)
Commits
50aa8df3.1.1def2cbaUpdate dev-dependenciesb3351faUpdate dev-dependenciese587c8cUpdateremark-preset-wooormeee85d53.1.02cb0728Refactor code-style7b3f558Fix tests for Node 2311ac939Addrehype-twoslashf12afdaRefactor to use TypeScript@importJSDoc tags3a794abFix ESM type import in Webpack loaderDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)