Skip to content

build(deps-dev): bump solid-js from 1.9.10 to 1.9.14 - #15

Merged
aorumbayev merged 2 commits into
mainfrom
dependabot/bun/solid-js-1.9.14
Jul 27, 2026
Merged

build(deps-dev): bump solid-js from 1.9.10 to 1.9.14#15
aorumbayev merged 2 commits into
mainfrom
dependabot/bun/solid-js-1.9.14

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor

Bumps solid-js from 1.9.10 to 1.9.14.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 9, 2026
@greptile-apps

greptile-apps Bot commented Jul 9, 2026

Copy link
Copy Markdown

PR author is in the excluded authors list.

@socket-security

socket-security Bot commented Jul 9, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedsolid-js@​1.9.10 ⏵ 1.9.14100 +110010096 +1100

View full report

@socket-security

socket-security Bot commented Jul 9, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm seroval is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ?npm/solid-js@1.9.14npm/seroval@1.5.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/seroval@1.5.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@dependabot
dependabot Bot force-pushed the dependabot/bun/solid-js-1.9.14 branch from b40ecd3 to e39d0c2 Compare July 11, 2026 17:42
@dependabot dependabot Bot changed the title build(deps-dev): bump solid-js from 1.9.10 to 1.9.14 bump solid-js from 1.9.10 to 1.9.14 Jul 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bun/solid-js-1.9.14 branch from e39d0c2 to 149720c Compare July 16, 2026 22:56
aorumbayev and others added 2 commits July 21, 2026 16:53
* refactor: gate src complexity before test support files

Replace the logic/TUI two-tier split with src at MI 52 first and test/
support files at MI 40 second so the fast verify path scores all source
before slower test fixtures.

* refactor: restore logic/TUI complexity tiers and cohesive layout

Score non-TUI logic at MI 52 and the TUI surface at 50, then fold artificial
verifyx micro-splits back into cohesive modules so the gate matches the
architecture instead of forcing file fragmentation.

* feat: render intake gates with markdown two-column dialogs

Replace host DialogSelect/Prompt/Confirm for the intake chain so
assumptions, questions, and mode rationale are readable as markdown,
with short actions beside the body (answer step stays full-width stacked).

* fix: tolerate trailing commas in OpenCode plugin config

Hand-edited opencode.json often keeps a trailing comma; strict JSON
parse made plugin:install:prod fail with an opaque SyntaxError.

* fix: make board keyboard selection reliable and add Tab cycling

Keep selectedColumn synced with the highlighted card, auto-select on refresh, blur leftover host focus on open, and cycle root tasks with Tab/Shift+Tab.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: clarify intake decision action labels

Approve/Reject were ambiguous when a clarifying question was on screen; Accept assumption / Override with answer name the object of the choice.

* feat: lead Review menu with approve

* fix: scroll task details overflow

* refactor: remove test-only DI seams and dead flexibility

- delete CreateTaskDependencies bag and createUpdateController's optional
  check/confirm/runCommand/now; tests mock modules instead
- dedupe patch.ts lock/read/merge/update skeleton into withKaganUpdate
- delete shellGitRunner; server uses bunGitRunner (now a const, not a factory)
- board passes store instead of drilling cap/sendBackStopThreshold/checkCommand
- inline buildEditorContext/listEditorSignals/listEditorDialogControls into hook
- drop dead code: setupCommand field, unused checkCommand hook prop, test:ci
  script, HOST_DIALOG_WIDTH size param, oxfmt pass in install-plugin
- fold eligible predicate into spawnHelper; store parses options once
- delete update-launch.test.ts (re-implemented wiring) and duplicate
  gateBadges mode tests; simplify git-shell fixture (preload already isolates)

* fix: strip trailing commas with string-aware scanner

Raw regex fallback also removed ", }" / ", ]" sequences inside quoted
config values, silently rewriting them on the reparse-and-write path.
Bumps [solid-js](https://github.com/solidjs/solid) from 1.9.10 to 1.9.14.
- [Release notes](https://github.com/solidjs/solid/releases)
- [Changelog](https://github.com/solidjs/solid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/solidjs/solid/commits)

---
updated-dependencies:
- dependency-name: solid-js
  dependency-version: 1.9.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title bump solid-js from 1.9.10 to 1.9.14 build(deps-dev): bump solid-js from 1.9.10 to 1.9.14 Jul 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bun/solid-js-1.9.14 branch from 149720c to 8848487 Compare July 21, 2026 14:56
@aorumbayev
aorumbayev merged commit a6ec11c into main Jul 27, 2026
4 checks passed
@aorumbayev
aorumbayev deleted the dependabot/bun/solid-js-1.9.14 branch July 27, 2026 19:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant