Skip to content

testdata: bump loro-crdt from 1.12.5 to 1.13.2 in /testdata/gen#3

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/testdata/gen/loro-crdt-1.13.2
Open

testdata: bump loro-crdt from 1.12.5 to 1.13.2 in /testdata/gen#3
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/testdata/gen/loro-crdt-1.13.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Bumps loro-crdt from 1.12.5 to 1.13.2.

Release notes

Sourced from loro-crdt's releases.

loro-crdt-map@1.13.2

loro-crdt-map

1.13.0

Minor Changes

  • fa888d8: Add mergeable child containers: child containers created under a map key that converge across peers on concurrent first-write instead of forking. Exposed as ensureMergeable{Counter,Map,List,MovableList,Text,Tree} on LoroMap. A mergeable child lives at a deterministic ContainerID derived from (parent, key, kind), and its visibility is driven by a binary ref the parent map stores at the key, so deletes and kind conflicts resolve through the map's regular LWW.

1.12.4

Patch Changes

  • a6e23b6: Optimize snapshot export for shallow documents by reusing cached shallow-root state instead of checking out to the shallow root and back to latest.

1.12.2

Patch Changes

  • cc587ed: Add a browser package remapping so Vite/Rolldown production builds load WASM without top-level await or circular wasm wrapper chunks.

    Also make the base64 entry easier to bundle with plain esbuild, Rollup, and Next.js Webpack by avoiding static Node builtin require() calls and top-level await in browser bundles.

  • 8f57f4c: Reduce memory usage for read-only access to snapshot-imported documents by avoiding unnecessary lazy container state initialization.

1.12.0

Minor Changes

  • 7dfda87: Make update imports atomic across oplog and document state application.

    • import and import_json_updates now roll back imported oplog changes when state application fails, so malformed updates do not leave the document with oplog/state divergence.
    • Pending changes that are activated during import are included in the rollback boundary when they can affect state application.
    • Import rollback uses conditional guards to avoid adding fixed overhead to successful detached or no-op imports.

Patch Changes

  • 64aa97c: Harden encoding, snapshot, and import paths against malformed input

    • JSON schema import (import_json_updates): out-of-range compressed peer indices now return DecodeError instead of being silently accepted as raw peer IDs; mismatched JsonOpContent vs container type returns DecodeError instead of panicking.
    • Outdated binary encoding decoder (decode_op): malformed op streams (missing delete iterators, type mismatches) now return DecodeDataCorruptionError instead of panicking.
    • Fast snapshot decoder (decode_snapshot_blob_meta): truncated or oversized section lengths now return DecodeDataCorruptionError instead of panicking on slice indexing.
    • Change store KV import (import_all): corrupted VersionVector/Frontiers metadata now returns DecodeDataCorruptionError instead of panicking.
    • Value encoding (LoroValueKind::from_u8, read_str): invalid byte values and invalid UTF-8 now return DecodeDataCorruptionError instead of panicking.
    • LoroDoc::diff(): checkout failures during diff calculation are now propagated as LoroError instead of panicking; state restore uses unwrap() to fail-fast on internal errors.
    • try_get_text/list/map/tree/movable_list/counter: now return None for wrong root container types instead of panicking.
    • Detached list insert out-of-bounds: returns LoroError::OutOfBound instead of panicking.
    • Tree mov_after/mov_before on deleted node: returns TreeNodeDeletedOrNotExist instead of panicking.
    • JsonChange::op_len: empty ops array returns 0 instead of panicking.
    • renew_peer_id: avoids theoretical collision with PeerID::MAX.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [loro-crdt](https://github.com/loro-dev/loro) from 1.12.5 to 1.13.2.
- [Release notes](https://github.com/loro-dev/loro/releases)
- [Commits](https://github.com/loro-dev/loro/compare/loro-crdt@1.12.5...loro-crdt@1.13.2)

---
updated-dependencies:
- dependency-name: loro-crdt
  dependency-version: 1.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants