Skip to content

fix: dependabot updates and build fixes#9

Merged
sakib-pronto merged 311 commits into
productionfrom
bugfix/dependabot_fixes
Jun 12, 2026
Merged

fix: dependabot updates and build fixes#9
sakib-pronto merged 311 commits into
productionfrom
bugfix/dependabot_fixes

Conversation

@bpanchal75

@bpanchal75 bpanchal75 commented Jun 12, 2026

Copy link
Copy Markdown

Summary

  • Merges upstream swagger-api/swagger-ui master (v5.32.6) to pick up dependabot dependency bumps, security patches (CVE fixes, nginx/axios/swagger-client updates), and tooling improvements.
  • Fixes sidebar stylesheet compilation with the modern Sass module compiler by importing shared variables/mixins and updating method color usage.
  • Fixes a mismatched JSX heading tag in info.jsx that blocked the core bundle from compiling.

Test plan

  • npm install completes without errors
  • npm run build succeeds (stylesheets + bundles)
  • npm run test:unit passes
  • Dev server loads and sidebar styles render correctly
  • Info section heading displays correctly in the UI
  • Docker image builds successfully (if applicable)

Made with Cursor

dependabot Bot and others added 30 commits March 14, 2025 23:44
dependabot Bot and others added 18 commits May 4, 2026 08:57
## [5.32.6](swagger-api/swagger-ui@v5.32.5...v5.32.6) (2026-05-12)

### Bug Fixes

* **deps-dev:** address undici vulnerability ([swagger-api#10870](swagger-api#10870)) ([35f5a6a](swagger-api@35f5a6a))
* **docker:** address CVE-2026-27135 nghttp2-libs vulnerability ([swagger-api#10879](swagger-api#10879)) ([0a63415](swagger-api@0a63415))
…api#10894)

Bumps nginx from 1.30.0-alpine to 1.31.0-alpine.

---
updated-dependencies:
- dependency-name: nginx
  dependency-version: 1.31.0-alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Integrate upstream swagger-ui v5.32.6 while preserving Atheer customizations:
workspace instance support, sidebar, auth token validation, and language header.

Co-authored-by: Cursor <cursoragent@cursor.com>
Ensure sidebar styles can resolve shared Sass variables when built with the modern Sass module compiler.

Co-authored-by: Cursor <cursoragent@cursor.com>
Import the shared Sass mixins and use current public method color variables so sidebar styles compile with the modern Sass compiler.

Co-authored-by: Cursor <cursoragent@cursor.com>
Fix the mismatched JSX heading tag so the core bundle compiles successfully.

Co-authored-by: Cursor <cursoragent@cursor.com>

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces support for OpenAPI Specification 3.2.x, including the new QUERY HTTP method, and updates several core dependencies and stylesheets. It also refactors multiple components to replace deprecated React lifecycle methods with modern equivalents. The review highlights several critical issues: a missing prop in AuthItem that causes a runtime error, an overly restrictive type check in example.jsx blocking primitive examples, a potential infinite update loop in content-type.jsx, and browser compatibility risks from ES2018 lookbehind regexes. Additionally, bugs were identified regarding incorrect operations on Immutable maps, stale closures in React hooks, shared global HOC caching that ignores instance-specific props, and a potential unhandled non-array return value in sample generation.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

Comment thread src/core/plugins/oas31/wrap-components/auth/auth-item.jsx
Comment thread src/core/components/example.jsx
Comment thread src/core/components/content-type.jsx
Comment thread src/core/plugins/json-schema-2020-12-samples/fn/core/random.js
Comment thread src/core/plugins/json-schema-5-samples/fn/index.js
Comment thread src/core/plugins/oas31/wrap-components/model.jsx
Comment thread src/core/plugins/oas31/wrap-components/model.jsx
Comment thread src/core/plugins/oas32/wrap-components/model.jsx
Comment thread src/core/plugins/oas32/wrap-components/model.jsx
Comment thread src/core/plugins/json-schema-2020-12-samples/fn/main.js
@sakib-pronto sakib-pronto merged commit b2cc838 into production Jun 12, 2026
0 of 2 checks passed
@sakib-pronto sakib-pronto deleted the bugfix/dependabot_fixes branch June 17, 2026 05:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.