chore(deps): bump deps by rhamzeh · Pull Request #398 · openfga/js-sdk

rhamzeh · 2026-05-06T22:35:44Z

Description

What problem is being solved?

How is it being solved?

What changes are made to solve it?

References

Review Checklist

I have clicked on "allow edits by maintainers".
I have added documentation for new/changed functionality in this PR or in a PR to openfga.dev [Provide a link to any relevant PRs in the references section above]
The correct base branch is being used, if not main
I have added tests to validate that the change in functionality is working as expected

Summary by CodeRabbit

Chores
- Updated runtime and development dependency versions, including OpenTelemetry API, Axios, TypeScript tooling, ESLint, and testing frameworks.

coderabbitai · 2026-05-06T22:35:57Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: dbdd74ed-ef04-4c0d-bad1-5eb19916acef

📥 Commits

Reviewing files that changed from the base of the PR and between 6b03882 and d994a1f.

⛔ Files ignored due to path filters (1)

package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (1)

package.json

Walkthrough

This PR updates the package.json manifest for @openfga/sdk, bumping runtime dependencies (@opentelemetry/api, axios) and development dependencies (@types/node, @typescript-eslint/*, globals, jest, nock, ts-jest) to newer patch versions.

Changes

Dependency Version Updates

Layer / File(s)	Summary
Runtime Dependencies `package.json`	`@opentelemetry/api` bumped from `^1.9.0` to `^1.9.1` and `axios` bumped from `1.15.0` to `1.16.0`.
Development Dependencies `package.json`	`@types/node` (`^25.2.2` → `^25.6.0`), `@typescript-eslint/eslint-plugin` and `@typescript-eslint/parser` (`^8.55.0` → `^8.59.2`), `globals` (`^17.3.0` → `^17.6.0`), `jest` (`30.2.0` → `30.3.0`), `nock` (`^14.0.11` → `^14.0.14`), and `ts-jest` (`29.4.6` → `29.4.9`) are all updated to newer versions.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

openfga/js-sdk#248: Both PRs update @typescript-eslint/eslint-plugin and @typescript-eslint/parser versions in package.json.
openfga/js-sdk#241: Both PRs update overlapping dependency versions including axios, @typescript-eslint/*, nock, and ts-jest.
openfga/js-sdk#365: Both PRs modify the axios dependency version in package.json.

Suggested reviewers

SoulPancake
sergiught
ewanharris

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title 'chore(deps): bump deps' is vague and uses a generic term 'bump deps' without specifying which dependencies or versions were changed.	Make the title more specific by including key dependency names or versions, e.g., 'chore(deps): bump typescript-eslint and jest versions' or 'chore(deps): update dev and runtime dependencies'.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch chore/deps

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

socket-security · 2026-05-06T22:36:12Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
jest@30.2.0 ⏵ 30.3.0	⁺¹	⁺¹
@typescript-eslint/parser@8.57.1 ⏵ 8.59.2	⁺¹	⁺¹
@typescript-eslint/eslint-plugin@8.57.1 ⏵ 8.59.2	⁺¹	⁺¹
@types/node@25.5.0 ⏵ 25.6.0			⁺¹
globals@17.4.0 ⏵ 17.6.0	⁺¹	⁺¹
axios@1.16.0
@opentelemetry/api@1.9.1
ts-jest@29.4.6 ⏵ 29.4.9
nock@14.0.11 ⏵ 14.0.14	⁺¹	⁺¹

View full report

socket-security · 2026-05-06T22:36:14Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		License policy violation: npm `caniuse-lite` under CC-BY-4.0 License: CC-BY-4.0 - The applicable license policy does not permit this license (5) (npm metadata) License: CC-BY-4.0 - The applicable license policy does not permit this license (5) (package/package.json) License: CC-BY-4.0 - The applicable license policy does not permit this license (5) (package/LICENSE) From: package-lock.json → `npm/[email protected]` → `npm/[email protected]` → `npm/[email protected]` ℹ Read more on: This package \| This alert \| What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `[email protected]`. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/[email protected]`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

codecov-commenter · 2026-05-06T22:36:54Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.59%. Comparing base (6b03882) to head (d994a1f).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #398   +/-   ##
=======================================
  Coverage   85.59%   85.59%           
=======================================
  Files          26       26           
  Lines        1270     1270           
  Branches      250      250           
=======================================
  Hits         1087     1087           
  Misses        110      110           
  Partials       73       73

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copilot

Pull request overview

This PR updates the SDK’s runtime and development dependencies to newer patch/minor versions, keeping the project’s tooling and HTTP/telemetry dependencies current.

Changes:

Bumped runtime dependencies: @opentelemetry/api and axios.
Bumped dev tooling dependencies: @types/node, @typescript-eslint/*, globals, jest, nock, and ts-jest.
Regenerated package-lock.json to reflect the updated dependency graph.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Updates direct dependency and devDependency versions.
package-lock.json	Updates the resolved dependency tree and integrity metadata for the bumped packages.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

chore(deps): bump deps

d994a1f

Copilot AI review requested due to automatic review settings May 6, 2026 22:35

rhamzeh requested a review from a team as a code owner May 6, 2026 22:35

rhamzeh enabled auto-merge May 6, 2026 22:35

Copilot started reviewing on behalf of rhamzeh May 6, 2026 22:36 View session

Copilot AI reviewed May 6, 2026

View reviewed changes

rhamzeh mentioned this pull request May 7, 2026

chore(deps): bump axios from 1.15.0 to 1.15.2 #402

Closed

emilic approved these changes May 7, 2026

View reviewed changes

rhamzeh added this pull request to the merge queue May 7, 2026

Merged via the queue into main with commit d0723e8 May 7, 2026
31 checks passed

rhamzeh deleted the chore/deps branch May 7, 2026 13:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump deps#398

chore(deps): bump deps#398
rhamzeh merged 1 commit into
mainfrom
chore/deps

rhamzeh commented May 6, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented May 6, 2026 •

edited

Loading

❌ Failed checks (1 inconclusive)

Uh oh!

socket-security Bot commented May 6, 2026

Uh oh!

socket-security Bot commented May 6, 2026

Uh oh!

codecov-commenter commented May 6, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

rhamzeh commented May 6, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

What problem is being solved?

How is it being solved?

What changes are made to solve it?

References

Review Checklist

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented May 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

❌ Failed checks (1 inconclusive)

Uh oh!

socket-security Bot commented May 6, 2026

Uh oh!

socket-security Bot commented May 6, 2026

Uh oh!

codecov-commenter commented May 6, 2026

Codecov Report

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

rhamzeh commented May 6, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented May 6, 2026 •

edited

Loading