Skip to content

[Snyk] Upgrade @codemirror/state from 6.7.4 to 6.7.5 - #1307

Open
cld-sec wants to merge 11 commits into
developfrom
snyk-upgrade-3caa5db8a64ce7cca316742f7d4f9021
Open

cld-sec wants to merge 11 commits into
developfrom
snyk-upgrade-3caa5db8a64ce7cca316742f7d4f9021

Conversation

@cld-sec

@cld-sec cld-sec commented Oct 6, 2026

Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to upgrade @codemirror/state from 6.7.4 to 6.7.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released 21 days ago.

Breaking Change Risk

Merge Risk: Low

Notice: This assessment is enhanced by AI.


Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

dependabot Bot and others added 8 commits October 1, 2026 06:34
Bumps [moment](https://github.com/moment/moment) from 2.30.1 to 2.31.0.
- [Release notes](https://github.com/moment/moment/releases)
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.30.1...2.31.0)

---
updated-dependencies:
- dependency-name: moment
  dependency-version: 2.31.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 2.1.4 to 2.1.7.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v2.1.4...v2.1.7)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 2.1.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…e-expansion-2.1.7

chore(deps-dev): bump brace-expansion from 2.1.4 to 2.1.7
Bumps [markdown-it](https://github.com/markdown-it/markdown-it) to 14.3.2 and updates ancestor dependencies [markdown-it](https://github.com/markdown-it/markdown-it) and [@wordpress/scripts](https://github.com/WordPress/gutenberg/tree/HEAD/packages/scripts). These dependencies need to be updated together.


Updates `markdown-it` from 14.3.0 to 14.3.2
- [Changelog](https://github.com/markdown-it/markdown-it/blob/14.3.2/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@14.3.0...14.3.2)

Updates `markdown-it` from 12.3.2 to 14.3.2
- [Changelog](https://github.com/markdown-it/markdown-it/blob/14.3.2/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@14.3.0...14.3.2)

Updates `@wordpress/scripts` from 35.0.0 to 36.0.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/scripts/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/scripts@36.0.0/packages/scripts)

---
updated-dependencies:
- dependency-name: markdown-it
  dependency-version: 14.3.2
  dependency-type: indirect
- dependency-name: markdown-it
  dependency-version: 14.3.2
  dependency-type: indirect
- dependency-name: "@wordpress/scripts"
  dependency-version: 36.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
…nt-2.31.0

chore(deps): bump moment from 2.30.1 to 2.31.0
The @wordpress/scripts 36 bump pulls in wp-prettier 3.9.6, which
changes ternary indentation and call wrapping. Reformat the three
files flagged by lint:js so CI passes.
…i-d90b91a059

chore(deps): bump markdown-it and @wordpress/scripts
Snyk has created this PR to upgrade @codemirror/state from 6.7.4 to 6.7.5.

See this package in npm:
@codemirror/state

See this project in Snyk:
https://app.snyk.io/org/cloudinaryltd/project/96b8a37d-7953-4bdc-a10b-bd7b659552ac?utm_source=github&utm_medium=referral&page=upgrade-pr
@cld-sec

cld-sec commented Oct 6, 2026

Copy link
Copy Markdown
Author

Merge Risk: Low

This is a patch version upgrade for @codemirror/state. Patch releases are intended for backward-compatible bug fixes and minor enhancements, and no breaking changes are expected.

Source: Package documentation

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

Snyk has created this PR to upgrade @codemirror/state from 6.7.4 to 6.7.5.

See this package in npm:
@codemirror/state

See this project in Snyk:
https://app.snyk.io/org/cloudinaryltd/project/96b8a37d-7953-4bdc-a10b-bd7b659552ac?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade @codemirror/state from 6.7.4 to 6.7.5.

See this package in npm:
@codemirror/state

See this project in Snyk:
https://app.snyk.io/org/cloudinaryltd/project/96b8a37d-7953-4bdc-a10b-bd7b659552ac?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade @codemirror/state from 6.7.4 to 6.7.5.

See this package in npm:
@codemirror/state

See this project in Snyk:
https://app.snyk.io/org/cloudinaryltd/project/96b8a37d-7953-4bdc-a10b-bd7b659552ac?utm_source=github&utm_medium=referral&page=upgrade-pr
@gabrielcld2
gabrielcld2 changed the base branch from master to develop October 14, 2026 12:38

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants