Conversation
Bumps [react-icons](https://github.com/react-icons/react-icons) from 5.5.0 to 5.6.0. - [Release notes](https://github.com/react-icons/react-icons/releases) - [Commits](react-icons/react-icons@v5.5.0...v5.6.0) --- updated-dependencies: - dependency-name: react-icons dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
🤖 Cursor Dependency AnalysisCURSOR_API_KEY is not set; analysis was skipped. |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
🤖 Cursor Dependency AnalysisHere's my analysis: 1. Usage in this repoSingle usage site in import { FaCheck, FaKeyboard, FaPlay, FaTimes } from 'react-icons/fa';All four icons ( 2. Do changes intersect with usage?No. The upstream diff between v5.5.0 and v5.6.0 has exactly two source-level changes:
All other commits in the release are internal dependency bumps (webpack, vite, babel, etc.) that don't ship to consumers. 3. Risks / unknowns
4. RecommendationMerge. This is a safe, low-risk minor bump. The only code-level change (type narrowing) is beneficial for React 19, and none of the updated icon sets are used by this project. |
|
@dependabot rebase |
|
Looks like react-icons is up-to-date now, so this is no longer needed. |
Bumps react-icons from 5.5.0 to 5.6.0.
Release notes
Sourced from react-icons's releases.
... (truncated)
Commits
6501a41v5.6.0387e780update iconsfb057e75.5.1-snapshot.06f74755update eslint73c281fBump ajv from 6.12.6 to 6.14.0 (#1116)3f2b264Bump astro from 5.14.1 to 5.15.9 (#1091)04adc76Bump devalue from 5.6.2 to 5.6.3 (#1115)44a5e85Bump jsonpath from 1.1.1 to 1.2.1 (#1113)e2c1d6cBump webpack from 5.94.0 to 5.104.1 (#1110)f3dca02Bump diff from 5.2.0 to 5.2.2 (#1107)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Low Risk
Single dependency patch/minor bump with lockfile update; no application logic changes.
Overview
Updates the
react-iconsdependency from5.5.0to5.6.0inpackage.json, and refreshespackage-lock.jsonto the new resolved tarball/integrity metadata.Written by Cursor Bugbot for commit b4c37b2. This will update automatically on new commits. Configure here.