Skip to content

chore(deps-dev): bump @builder.io/qwik-city from 1.9.1 to 1.19.0#4270

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/builder.io/qwik-city-1.19.0
Closed

chore(deps-dev): bump @builder.io/qwik-city from 1.9.1 to 1.19.0#4270
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/builder.io/qwik-city-1.19.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Feb 7, 2026 •
edited by cursor bot
Loading

Bumps @builder.io/qwik-city from 1.9.1 to 1.19.0.

Release notes

Sourced from @​builder.io/qwik-city's releases.

@​builder.io/qwik-city@1.19.0

Minor Changes

  • ✨ allow mocking route loaders & actions in QwikCityMockProvider (by @​alexismch in #8102)

Patch Changes

  • 🐞🩹 qwik-city spa routeStateInternal and routeLocation url origins mismatch (by @​maiieul in #8234)

  • feat(qwik-city): add getOrigin option to QwikCityBunOptions and QwikCityDenoOptions for improved URL handling (by @​JerryWu1234 in #8251)

  • Make RequestEvents readonly instead of frozen (by @​DustinJSilk in #8135)

@​builder.io/qwik-city@1.18.0

Patch Changes

  • execute cleanup cb for all component tree while calling dispose.cleanup method returned by render fn (by @​sashkashishka in #8164)

@​builder.io/qwik-city@1.17.2

Patch Changes

  • 🐞🩹 history behavior in some edge cases has been brought inline with the E2E tests that were accidentally disabled. (the tests can't be disabled any more either) (by @​wmertens in 206f3e0)

  • 🐞🩹 SPA routing is broken unless origin matches value in in vite.config #8093 (by @​termermc in #8097)

    If the SSG origin was set to localhost:3000 and a user visited from 127.0.0.1:3000, SPA routing would be broken.

    Internally, useNavigate's context provider goto checks the new destination with the last route location. If the origin is different, it just does a normal browser navigation. This makes sense; links to other origins cannot use SPA routing. However, the initial route it compares was using an origin that came from the server environment.

    Now, the first navigation will set that initial route to the browser's actual href, eliminating the erroneous origin mismatch for SPA navigations.

  • 🐞🩹 this in various Qwik-City handlers is now RequestEvent again. (by @​wmertens in #8111)

@​builder.io/qwik-city@1.17.1

Patch Changes

  • 🐞🩹 zod is now imported as import * as z from 'zod', which vastly improves bundling. The Insights app client code reduced by 12kB. (by @​wmertens in #8042)

@​builder.io/qwik-city@1.17.0

Patch Changes

  • 🐞🩹 SSG sometimes hangs after completion, now we forcibly exit the SSG process when this happens. (by @​wmertens in #7957)

  • 🐞🩹 return 404 for missing /build/ files. (by @​gioboa in #7914)

  • 🐞🩹 redirecting internal q-data.json requests will keep the q-data.json suffix so that the client can still fetch the correct one (by @​wmertens in #7988)

... (truncated)

Changelog

Sourced from @​builder.io/qwik-city's changelog.

1.19.0

Minor Changes

  • ✨ allow mocking route loaders & actions in QwikCityMockProvider (by @​alexismch in #8102)

Patch Changes

  • 🐞🩹 qwik-city spa routeStateInternal and routeLocation url origins mismatch (by @​maiieul in #8234)

  • feat(qwik-city): add getOrigin option to QwikCityBunOptions and QwikCityDenoOptions for improved URL handling (by @​JerryWu1234 in #8251)

  • Make RequestEvents readonly instead of frozen (by @​DustinJSilk in #8135)

1.18.0

Patch Changes

  • execute cleanup cb for all component tree while calling dispose.cleanup method returned by render fn (by @​sashkashishka in #8164)

1.17.2

Patch Changes

  • 🐞🩹 history behavior in some edge cases has been brought inline with the E2E tests that were accidentally disabled. (the tests can't be disabled any more either) (by @​wmertens in 206f3e0)

  • 🐞🩹 SPA routing is broken unless origin matches value in in vite.config #8093 (by @​termermc in #8097)

    If the SSG origin was set to localhost:3000 and a user visited from 127.0.0.1:3000, SPA routing would be broken.

    Internally, useNavigate's context provider goto checks the new destination with the last route location. If the origin is different, it just does a normal browser navigation. This makes sense; links to other origins cannot use SPA routing. However, the initial route it compares was using an origin that came from the server environment.

    Now, the first navigation will set that initial route to the browser's actual href, eliminating the erroneous origin mismatch for SPA navigations.

  • 🐞🩹 this in various Qwik-City handlers is now RequestEvent again. (by @​wmertens in #8111)

1.17.1

Patch Changes

  • 🐞🩹 zod is now imported as import * as z from 'zod', which vastly improves bundling. The Insights app client code reduced by 12kB. (by @​wmertens in #8042)

1.17.0

Patch Changes

  • 🐞🩹 SSG sometimes hangs after completion, now we forcibly exit the SSG process when this happens. (by @​wmertens in #7957)

... (truncated)

Commits
  • 97df2e6 Version Packages
  • 25dbde0 Merge branch 'main' into upcoming
  • c0c65d7 fix: trailing slash in path
  • eebf610 Merge commit from fork
  • 8bbd973 fix: content-type header handling
  • 189e01c fix: refactor form parsing
  • 898bcf4 refactor(qwik-city): remove deprecated origin option from QwikCityBunOptions ...
  • 91f4f25 feat(qwik-city): add getOrigin option to QwikCityBunOptions and QwikCityDenoO...
  • 595214a feat(untrack): accept signals/stores directly, pass arguments
  • 20a2285 chore(deps): bump undici from 7.16.0 to 7.18.2 in the npm_and_yarn group acro...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note

Medium Risk
Primarily a dependency bump, but it substantially changes the transitive build toolchain (vite/rollup/esbuild and image/MDX tooling), which can affect builds and test behavior.

Overview
Updates the Qwik City test/snippet packages to use @builder.io/qwik-city@^1.19.0 (from ^1.9.1).

Regenerates yarn.lock accordingly, pulling in the newer qwik-city dependency tree (notably updated vite/rollup/esbuild ranges and related packages like vite-imagetools, sharp, zod, and MDX tooling).

Written by Cursor Bugbot for commit 2ffda32. This will update automatically on new commits. Configure here.

@dependabot
chore(deps-dev): bump @builder.io/qwik-city from 1.9.1 to 1.19.0
2ffda32 
Bumps [@builder.io/qwik-city](https://github.com/QwikDev/qwik/tree/HEAD/packages/qwik-city) from 1.9.1 to 1.19.0.
- [Release notes](https://github.com/QwikDev/qwik/releases)
- [Changelog](https://github.com/QwikDev/qwik/blob/main/packages/qwik-city/CHANGELOG.md)
- [Commits](https://github.com/QwikDev/qwik/commits/@builder.io/qwik-city@1.19.0/packages/qwik-city)

---
updated-dependencies:
- dependency-name: "@builder.io/qwik-city"
  dependency-version: 1.19.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 7, 2026
@dependabot dependabot bot mentioned this pull request Feb 7, 2026
Closed
@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Feb 7, 2026

⚠️ No Changeset found

Latest commit: 2ffda32

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

cursor[bot]
cursor bot reviewed Feb 7, 2026
View reviewed changes
Copy link
Copy Markdown

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.

Comment thread packages/sdks/e2e/qwik-city/package.json
"devDependencies": {
"@builder.io/qwik": "^1.9.1",
"@builder.io/qwik-city": "^1.9.1",
"@builder.io/qwik-city": "^1.19.0",
Copy link
Copy Markdown

@cursor cursor bot Feb 7, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Mismatched qwik and qwik-city package versions

High Severity

@builder.io/qwik remains at ^1.9.1 while @builder.io/qwik-city is bumped to ^1.19.0. These packages are released together from the same monorepo (QwikDev/qwik) and are designed to work at matching versions. A 10-minor-version gap is very likely to cause runtime incompatibilities, as qwik-city 1.19.0 may depend on internal APIs or behaviors introduced in newer versions of qwik that don't exist in 1.9.1.

Additional Locations (1)

Fix in Cursor Fix in Web

@nx-cloud
Copy link
Copy Markdown

nx-cloud bot commented Feb 7, 2026 •
edited
Loading

🤖 Nx Cloud AI Fix Eligible

An automatically generated fix could have helped fix failing tasks for this run, but Self-healing CI is disabled for this workspace. Visit workspace settings to enable it and get automatic fixes in future runs.

To disable these notifications, a workspace admin can disable them in workspace settings.

View your CI Pipeline Execution ↗ for commit 2ffda32

Command Status Duration Result
nx test @snippet/react ❌ Failed 4m 36s View ↗
nx test @e2e/qwik-city ❌ Failed 1m 47s View ↗
nx test @snippet/qwik-city ❌ Failed 1m 42s View ↗
nx test @e2e/nextjs-sdk-next-app ✅ Succeeded 8m 11s View ↗
nx test @e2e/angular-17 ✅ Succeeded 7m 47s View ↗
nx test @e2e/nuxt ✅ Succeeded 6m 44s View ↗
nx test @e2e/angular-17-ssr ✅ Succeeded 6m 31s View ↗
nx test @e2e/react-sdk-next-15-app ✅ Succeeded 6m 21s View ↗
Additional runs (37) ✅ Succeeded ... View ↗

☁️ Nx Cloud last updated this comment at 2026-02-07 18:22:20 UTC

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 20, 2026

Superseded by #4388.

@dependabot dependabot bot closed this Mar 20, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/builder.io/qwik-city-1.19.0 branch March 20, 2026 16:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cursor cursor[bot] cursor[bot] left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants