Skip to content

Bump the npm-dependencies group across 1 directory with 10 updates - #4110

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/components/dash-table/npm-dependencies-f9f34243d3
Open

Bump the npm-dependencies group across 1 directory with 10 updates#4110
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/components/dash-table/npm-dependencies-f9f34243d3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 10 updates in the /components/dash-table directory:

Package From To
webpack 5.111.1 5.112.0
webpack-dev-server 6.0.0 6.1.0
@babel/helper-create-regexp-features-plugin 7.29.7 7.29.10
@babel/helpers 7.29.7 7.29.10
@babel/runtime 7.29.7 7.29.10
@babel/traverse 7.29.8 7.29.12
@types/node 26.6.2 26.6.6
@types/ws 8.18.1 8.18.2
webpack-dev-middleware 8.3.0 8.5.0
webpack-sources 3.5.1 3.6.0

Updates webpack from 5.111.1 to 5.112.0

Release notes

Sourced from webpack's releases.

v5.112.0

Minor Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.112.0

Minor Changes

... (truncated)

Commits
  • 755c49e chore(release): new release (#22170)
  • 35b066f feat(javascript): fold switches, PURE IIFEs, null tests, Babel helpers and pr...
  • edea0f5 refactor(css,html): give the ASCII helpers one Infra name in both parsers (#2...
  • 916cf37 fix(css): keep a rule nested under a selector opening on a combinator when lo...
  • 2ebe482 ci: pin Chrome and Firefox to the builds puppeteer-core names (#22703)
  • ed18fa1 fix(css): reach for no newer spelling where a target browser is one the data ...
  • 26d315a refactor: ask the dependency and module kind instead of flags and type string...
  • 3020447 refactor(cache): normalize build dependencies once (#22704)
  • 9b5fab7 fix(deps): bump the dependencies group with 4 updates (#22683)
  • b46763e feat: apply top-level plugins of a multi-configuration to the MultiCompiler (...
  • Additional commits viewable in compare view

Updates webpack-dev-server from 6.0.0 to 6.1.0

Release notes

Sourced from webpack-dev-server's releases.

v6.1.0

Minor Changes

  • Run as a plugin from the top-level plugins of a multi-configuration, serving every configuration from one server. (by @​alexander-akait in #5765)

  • Fix client progress modes, socket URL credentials, overlay and progress lifecycles, server startup error handling and local IP lookup; export BaseServer. (by @​alexander-akait in #5739)

  • The browser client, the error overlay and both transports now come from webpack-dev-middleware, so this package has no client code of its own. Every option keeps its name and meaning, allowedHosts and the origin checks still apply here, and this server's { type } messages are still sent next to the middleware's, so React Refresh keeps working. client/index.js, client/socket.js and client/clients/WebSocketClient.js still resolve while the client's internal files are gone, and the console wording, the overlay and the progress indicator are now the middleware's. client.webSocketTransport: "sse" adds Server-Sent Events, a universal build now runs in Node without the client throwing, and sendMessage(), getClientEntry() and getClientHotEntry() still work, a subclass's overrides included, but are deprecated. (by @​alexander-akait in #5750)

Patch Changes

  • Keep hot and live reload working after a cancelled "Leave site?" dialog. (by @​alexander-akait in #5744)

  • Keep the overlay for a runtime error thrown while the page is still loading. (by @​alexander-akait in #5745)

  • Validate the Host and Origin headers and enforce same-origin checks on WebSocket upgrade requests handled by proxies with ws: true. This prevents cross-origin pages from connecting to proxied WebSocket services through the development server. (by @​UlisesGascon in cb1534a)

  • Validate options with a precompiled schema to cut ~115ms from startup. (by @​alexander-akait in #5746)

  • Validate Host and HTTP/2 authority headers independently of Origin protocol exceptions, including when allowedHosts is "all". Handle malformed open-editor URLs with a controlled response and parse their query without relying on the Host header. (by @​bjohansebas in #5771)

Changelog

Sourced from webpack-dev-server's changelog.

6.1.0

Minor Changes

  • Run as a plugin from the top-level plugins of a multi-configuration, serving every configuration from one server. (by @​alexander-akait in #5765)

  • Fix client progress modes, socket URL credentials, overlay and progress lifecycles, server startup error handling and local IP lookup; export BaseServer. (by @​alexander-akait in #5739)

  • The browser client, the error overlay and both transports now come from webpack-dev-middleware, so this package has no client code of its own. Every option keeps its name and meaning, allowedHosts and the origin checks still apply here, and this server's { type } messages are still sent next to the middleware's, so React Refresh keeps working. client/index.js, client/socket.js and client/clients/WebSocketClient.js still resolve while the client's internal files are gone, and the console wording, the overlay and the progress indicator are now the middleware's. client.webSocketTransport: "sse" adds Server-Sent Events, a universal build now runs in Node without the client throwing, and sendMessage(), getClientEntry() and getClientHotEntry() still work, a subclass's overrides included, but are deprecated. (by @​alexander-akait in #5750)

Patch Changes

  • Keep hot and live reload working after a cancelled "Leave site?" dialog. (by @​alexander-akait in #5744)

  • Keep the overlay for a runtime error thrown while the page is still loading. (by @​alexander-akait in #5745)

  • Validate the Host and Origin headers and enforce same-origin checks on WebSocket upgrade requests handled by proxies with ws: true. This prevents cross-origin pages from connecting to proxied WebSocket services through the development server. (by @​UlisesGascon in cb1534a)

  • Validate options with a precompiled schema to cut ~115ms from startup. (by @​alexander-akait in #5746)

  • Validate Host and HTTP/2 authority headers independently of Origin protocol exceptions, including when allowedHosts is "all". Handle malformed open-editor URLs with a controlled response and parse their query without relying on the Host header. (by @​bjohansebas in #5771)

Commits
  • 50f2c43 chore(release): new release (#5740)
  • 807c441 fix: validate host headers and handle malformed editor URLs (#5771)
  • b4eb797 feat: run as a plugin from the top-level plugins of a multi-configuration (#5...
  • 9915359 fix: update generated websocket proxy types (#5767)
  • cb1534a Merge commit from fork
  • be1ca90 chore(deps): bump the dependencies group across 1 directory with 19 updates (...
  • dc9a72c feat: run on webpack-dev-middleware's client, with compatibility kept here (#...
  • d16ad96 chore(deps): bump the dependencies group with 3 updates (#5762)
  • 69077c9 chore(deps-dev): bump hono (#5756)
  • 6a11ab1 chore(deps): bump the dependencies group across 1 directory with 4 updates (#...
  • Additional commits viewable in compare view

Updates @babel/helper-create-regexp-features-plugin from 7.29.7 to 7.29.10

Release notes

Sourced from @​babel/helper-create-regexp-features-plugin's releases.

v7.29.10 (2026-10-07)

🐛 Bug Fix

  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-traverse

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 2

v7.29.9 (2026-09-18)

🐛 Bug Fix

🏠 Internal

Committers: 4

v7.29.8 (2026-07-31)

👓 Spec Compliance

  • babel-generator, babel-parser, babel-plugin-transform-spread, babel-traverse, babel-types

🐛 Bug Fix

  • babel-generator
  • babel-node, babel-plugin-transform-modules-systemjs

Committers: 2

Commits

Updates @babel/helpers from 7.29.7 to 7.29.10

Release notes

Sourced from @​babel/helpers's releases.

v7.29.10 (2026-10-07)

🐛 Bug Fix

  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-traverse

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 2

v7.29.9 (2026-09-18)

🐛 Bug Fix

🏠 Internal

Committers: 4

v7.29.8 (2026-07-31)

👓 Spec Compliance

  • babel-generator, babel-parser, babel-plugin-transform-spread, babel-traverse, babel-types

🐛 Bug Fix

  • babel-generator
  • babel-node, babel-plugin-transform-modules-systemjs

Committers: 2

Commits

Updates @babel/runtime from 7.29.7 to 7.29.10

Release notes

Sourced from @​babel/runtime's releases.

v7.29.10 (2026-10-07)

🐛 Bug Fix

  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-traverse

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 2

v7.29.9 (2026-09-18)

🐛 Bug Fix

🏠 Internal

Committers: 4

v7.29.8 (2026-07-31)

👓 Spec Compliance

  • babel-generator, babel-parser, babel-plugin-transform-spread, babel-traverse, babel-types

🐛 Bug Fix

  • babel-generator
  • babel-node, babel-plugin-transform-modules-systemjs

Committers: 2

Commits

Updates @babel/traverse from 7.29.8 to 7.29.12

Release notes

Sourced from @​babel/traverse's releases.

v7.29.12 (2026-10-29)

🐛 Bug Fix

  • babel-parser
  • babel-plugin-transform-block-scoping
  • babel-generator
  • babel-plugin-transform-optional-chaining, babel-traverse
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #18225 [7.x backport] fix: avoid removable fields as decorator evaluation hosts (@​nyan-left)

Committers: 2

v7.29.11 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

... (truncated)

Commits

Updates @types/node from 26.6.2 to 26.6.6

Commits

Updates @types/ws from 8.18.1 to 8.18.2

Commits

Updates webpack-dev-middleware from 8.3.0 to 8.5.0

Release notes

Sourced from webpack-dev-middleware's releases.

v8.5.0

Minor Changes

  • hot.token also takes { value, required }. With required: false a token is minted (or value used) and handed to the injected client as usual, but the endpoint does not refuse a client without it, so a server with policy of its own can compare it in onConnect alongside, say, the origins it already allows. The instance's new hot.tokenRequired says which applies. (by @​alexander-akait in #2486)

v8.4.0

Minor Changes

  • The client posts build events to the page the way webpack-dev-server's does (webpackOk, webpackErrors, webpackClose and the rest), logs Disconnected! when the connection drops and clears the build's problems from the overlay until it is back. progress accepts "circular" or "linear". Reloads skip a page that is already navigating away, use the nearest ancestor with a url of its own inside an about:blank iframe, and in apply: "reload" follow a sibling compilation's build too. (by @​alexander-akait in #2425)

  • HotModuleReplacementPlugin now goes to every compilation the middleware serves, including server bundles that hot-reload through webpack/hot/poll. hot.client.transport also accepts a module exporting a client class of your own, and the new hot.ws option is passed to the ws server (compression, verifyClient, or a port or server of its own), with hot.cors and hot.token still checked. The connection the runtime holds is exported as webpack-dev-middleware/client/socket for tooling that listens alongside it. (by @​alexander-akait in #2472)

  • Grouped etag, lastModified, cacheControl and cacheImmutable into cache.*, and mimeTypes and mimeTypeDefault into mime.*; the old names warn and keep working until the next major release, and the grouped name wins when both are set. Media types now resolve through mime-db directly, and mime.types belongs to its own middleware instead of being written into the table mime-types shares with the whole process. instance.context.options is a copy of the options passed, cache.control included. (by @​alexander-akait in #2455)

  • hot.client.apply ("hmr", "hmr-only", "reload" or "nothing") says what a build does to the page, so a project without HMR still reloads on a change; a single page can choose its own mode with ?webpack-dev-middleware-apply=, and publishing { action: "reload" } reloads every page. hot.client.connect (false, or { retries, timeout }) controls connecting and reconnecting, with retries honoured on both transports. The hot, liveReload, reload, autoConnect, reconnect and timeout query parameters they replace are still read until the next major release, with a deprecation warning for this package's own three. (by @​alexander-akait in #2458)

  • Added hot.client, which sets the browser runtime's options on the middleware under the same names the entry query takes, so a configuration no longer needs a hand-written query string. url accepts a url or its parts ({ port: 8080 }) and resolves the rest in the page, pageParamPrefix renames the per-page ?webpack-dev-middleware-apply= parameter, and logging accepts { level, name } so an embedding package can label the console with its own name. (by @​alexander-akait in #2436)

  • Added hot.cors to choose which origins may reach the hot endpoint: Server-Sent Events still allow every origin until the next major release, while the new WebSocket transport allows only local origins and refuses others with 403 before the handshake. Added hot.token, a secret the injected client carries and the endpoint requires, for the case where a browser sends no Origin; it is off by default. (by @​alexander-akait in #2444)

  • hot now adds the client and HotModuleReplacementPlugin to the compilation itself, so enabling it is all a webpack configuration needs. hot.inject says what is added: "all" (the default), "plugin" for a page with a client of its own, "client" for a configuration that applies the plugin itself, or "none". Web workers get a client too, nothing is injected into a non-browser target, and the HMR plugin is left out when hot.client.apply is reload or nothing. (by @​alexander-akait in #2430)

  • The instance gains attach(server), handleUpgrade(req, socket, head), onConnect(fn) (now given the request as well as the client), publish(payload) and publishTo(client, payload), so a server can own the upgrade, decide who may listen and put payloads of its own on the stream, such as ProgressPlugin ticks. The client understands { action: "error", message }, logging the reason a server refused it and posting it to the page as webpackError. (by @​alexander-akait in #2431)

  • hot.transport chooses how events reach the browser: Server-Sent Events (the default), "ws" for a WebSocket, or a transport of your own, which only needs onConnect, publish, publishTo and close. The client speaks both built-in wires, also exported as webpack-dev-middleware/client/sse and webpack-dev-middleware/client/ws, and behaves the same on either. (by @​alexander-akait in #2420)

  • overlay.id names the overlay element, so a package embedding it can keep the id its users already query. The new webpack-dev-middleware/client/problem export formats one of webpack's errors or warnings with formatProblem, and showProblems accepts webpack's objects as well as strings. (by @​alexander-akait in #2438)

Patch Changes

  • Bound the internal url and Range header caches, which grew for the life of the process and were never released, even by close(). (by @​alexander-akait in #2405)

  • The client exports ship type declarations and are marked as the ES modules they are. The client logs through webpack's Logger without webpack/lib/logging/runtime.js, so universal and ["web", "node"] bundles no longer pull in a node builtin and a page enforcing Trusted Types needs no guard. A module that re-exports the client can hand it its options through __webpack_dev_middleware_client_query__, and ?autoConnect is read like every other boolean. (by @​alexander-akait in #2428)

  • Deprecated hot.progress, which keeps working until the next major release: a server that applies ProgressPlugin itself ended up with two on one compiler. Remove it, apply the plugin yourself and hand its ticks to publish; the browser-side hot.client.progress is unaffected. (by @​alexander-akait in #2451)

  • The client keeps doing what webpack-dev-server's did: (by @​alexander-akait in #2472)

    • A page url with a malformed escape no longer stops every update.
    • apply: "reload" reloads a reconnected page whose build is out of date.
    • A build's warnings are logged and posted along with its errors.
    • An entry written for that server's query (hostname, port, pathname, live-reload, hot=only) still connects, with no deprecation warning for that server's own spelling.
    • The published client is ES5 down to the logger.
    • The overlay sits at the highest z-index and closes on Esc.
    • The building indicator works without Shadow DOM and is announced as a progress bar.

  • The overlay takes focus when it opens and gives it back when it closes, keeps an uncaught runtime error through a successful build, passes a rejected value to runtimeErrors filters as error.cause, and no longer shows an empty card or leaves the building indicator up after a multi-compiler build. File references in absolute, Windows and file:// stack frames are now clickable. The ANSI-to-HTML conversion is built in, dropping ansi-html-community and fixing its handling of combined, short and unbalanced sequences. (by @​alexander-akait in #2437)

  • Validate options with a precompiled schema to cut ~155ms from startup. (by @​alexander-akait in #2413)

... (truncated)

Changelog

Sourced from webpack-dev-middleware's changelog.

8.5.0

Minor Changes

  • hot.token also takes { value, required }. With required: false a token is minted (or value used) and handed to the injected client as usual, but the endpoint does not refuse a client without it, so a server with policy of its own can compare it in onConnect alongside, say, the origins it already allows. The instance's new hot.tokenRequired says which applies. (by @​alexander-akait in #2486)

8.4.0

Minor Changes

  • The client posts build events to the page the way webpack-dev-server's does (webpackOk, webpackErrors, webpackClose and the rest), logs Disconnected! when the connection drops and clears the build's problems from the overlay until it is back. progress accepts "circular" or "linear". Reloads skip a page that is already navigating away, use the nearest ancestor with a url of its own inside an about:blank iframe, and in apply: "reload" follow a sibling compilation's build too. (by @​alexander-akait in #2425)

  • HotModuleReplacementPlugin now goes to every compilation the middleware serves, including server bundles that hot-reload through Description has been truncated

@dependabot
Bump the npm-dependencies group across 1 directory with 10 updates
6194f72 
Bumps the npm-dependencies group with 10 updates in the /components/dash-table directory:

| Package | From | To |
| --- | --- | --- |
| [webpack](https://github.com/webpack/webpack) | `5.111.1` | `5.112.0` |
| [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `6.0.0` | `6.1.0` |
| [@babel/helper-create-regexp-features-plugin](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-create-regexp-features-plugin) | `7.29.7` | `7.29.10` |
| [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) | `7.29.7` | `7.29.10` |
| [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.29.7` | `7.29.10` |
| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.29.8` | `7.29.12` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.6` |
| [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.18.1` | `8.18.2` |
| [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `8.3.0` | `8.5.0` |
| [webpack-sources](https://github.com/webpack/webpack-sources) | `3.5.1` | `3.6.0` |



Updates `webpack` from 5.111.1 to 5.112.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.111.1...v5.112.0)

Updates `webpack-dev-server` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-server@v6.0.0...v6.1.0)

Updates `@babel/helper-create-regexp-features-plugin` from 7.29.7 to 7.29.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.10/packages/babel-helper-create-regexp-features-plugin)

Updates `@babel/helpers` from 7.29.7 to 7.29.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.10/packages/babel-helpers)

Updates `@babel/runtime` from 7.29.7 to 7.29.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.10/packages/babel-runtime)

Updates `@babel/traverse` from 7.29.8 to 7.29.12
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.12/packages/babel-traverse)

Updates `@types/node` from 26.6.2 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/ws` from 8.18.1 to 8.18.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ws)

Updates `webpack-dev-middleware` from 8.3.0 to 8.5.0
- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)
- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-middleware@v8.3.0...v8.5.0)

Updates `webpack-sources` from 3.5.1 to 3.6.0
- [Release notes](https://github.com/webpack/webpack-sources/releases)
- [Changelog](https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-sources@v3.5.1...v3.6.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.112.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: webpack-dev-server
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@babel/helper-create-regexp-features-plugin"
  dependency-version: 7.29.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@babel/helpers"
  dependency-version: 7.29.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@babel/runtime"
  dependency-version: 7.29.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@babel/traverse"
  dependency-version: 7.29.12
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/ws"
  dependency-version: 8.18.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: webpack-dev-middleware
  dependency-version: 8.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: webpack-sources
  dependency-version: 3.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 2, 2026
@coderabbitai

coderabbitai Bot commented Nov 2, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Repository UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 89c85f9a-c5f7-4326-a921-d65a82e95e83

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

@sonarqubecloud

sonarqubecloud Bot commented Nov 2, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@github-actions

github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Dash performance benchmarks

✅ all within thresholds

scenario metric p90 (ms) median growth baseline p90 note
✅ callback_chain chain_ms 448.4 429.2 0.94x 499.1
✅ callback_chain graph_ms 2.0 2.0 1.0x 2.4
✅ callback_fanout fanout_ms 79.8 76.0 0.91x 92.5
✅ deep_nesting render_ms 54.0 52.9 1.22x 56.8
✅ full_children_replace replace_ms 5195.6 1885.7 17.14x 4697.1
✅ initial_render_large render_ms 687.7 571.2 1.27x 694.4
✅ initial_render_small render_ms 99.2 90.6 1.03x 104.0
✅ patch_append_nested append_ms 137.3 88.5 2.58x 192.3
✅ patch_append_toplevel append_ms 127.2 74.5 2.35x 140.2
✅ patch_scalar_update_large update_ms 143.9 130.5 0.88x 202.9
✅ wildcard_all_resolve wildcard_ms 294.7 288.5 0.98x 313.6
✅ wildcard_all_resolve graph_ms 1.4 1.4 1.0x 1.3

growth = late-third / early-third per-op time; ~1 is flat, a large value means the per-op cost scales with accumulated state.

machine scale vs baseline: 0.94x - divided out of the baseline ratios so they compare like for like (the absolute warn/fail ceilings are left un-scaled); calibrated on initial_render_small.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants