8000 Update prettier to 3.9.10 by gominimal-pkgmgr-mgr[bot] · Pull Request #856 · gominimal/pkgs · GitHub
[go: up one dir, main page]

Skip to content

Update prettier to 3.9.10 - #856

Merged
bryan-minimal merged 1 commit into
mainfrom
update-prettier-3.9.10
Oct 12, 2026
Merged

bryan-minimal merged 1 commit into
mainfrom
update-prettier-3.9.10

Conversation

@gominimal-pkgmgr-mgr
Copy link
Copy Markdown
Contributor

Update prettier 3.9.9 → 3.9.10

Source: github:prettier/prettier
Release: https://github.com/prettier/prettier/releases/tag/3.9.10
Changelog: prettier/prettier@3.9.9...3.9.10
Released: unknown (non-GitHub source or tag-only fallback)

Note

Auto-applied structural fixes:

  • Regenerated package-lock.json for prettier@3.9.10 (version, resolved URL and integrity hash move together; npm ci installs exactly this tree).

Vulnerability impact

Partition analysis at 3.9.10 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

  • 1 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.

Vulnerabilities fixed (1)

This update clears 1 vulnerabilities affecting 3.9.9:

CVE / GHSA Severity Fixed in
GHSA-4cm8-f57v-mqm6 MEDIUM 3.9.10
Advisory summaries
  • GHSA-4cm8-f57v-mqm6 — Prettier quadratic CPU consumption when formatting GFM Markdown tables (Published 2026-10-11)

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)
Component Old New
~ prettier 3.9.9 3.9.10
~ prettier-upstream 3.9.9 3.9.10

Changes

Old New
Version 3.9.9 3.9.10
Source npm:prettier@3.9.9 (lockfile) npm:prettier@3.9.10 (lockfile)

No source-tarball SHA256: pinned by a committed npm package-lock.json, which carries a per-dependency integrity hash for the whole tree — there's no single source artifact to checksum.

Quality suggestions

  • Missing tests block. This package has no standalone tests, so the buildbot will only verify compilation — not functional correctness. Consider adding a minimal smoke test (e.g., a --version or small round-trip invocation) as part of this PR so future bumps catch regressions. See packages/python/build.ncl for a simple example.

Created by pkgmgr

@gominimal-pkgmgr-mgr
gominimal-pkgmgr-mgr Bot requested a review from a team as a code owner October 11, 2026 22:48
@coderabbitai
coderabbitai Bot commented Oct 11, 2026
Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: gominimal/pkgs/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 8a7f5618-738b-4eb3-b501-c643b56db905

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@bryan-minimal
bryan-minimal added this pull request to the merge queue Oct 12, 2026
Merged via the queue into main with commit 495844d Oct 12, 2026
11 checks passed
@bryan-minimal
bryan-minimal deleted the update-prettier-3.9.10 branch October 12, 2026 19:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

0