chore(deps): Bump bacon/bacon-qr-code from 2.0.8 to 3.1.1 - #329
chore(deps): Bump bacon/bacon-qr-code from 2.0.8 to 3.1.1#329dependabot[bot] wants to merge 1 commit into
Conversation
dj4oC
left a comment
dj4oC
left a comment
There was a problem hiding this comment.
Dependabot PR (bacon/bacon-qr-code 2.0.8 → 3.1.1).
- Security: no findings from the diff itself.
- Stability: major version bump (2.x → 3.x) — worth a maintainer check for breaking API changes before merge (QR-code generation for TOTP enrollment).
- Performance: no findings.
- Test coverage: n/a (dependency bump only).
- TODOs found: none.
- Dependency touched: yes — confirmed covered by
dependabot.yml. - CI status: failing —
Commits / Validate semantic commitsandlint. Same systemic Dependabot-commit-message-vs-conventional-commit-lint mismatch as #330; repo-level config fix needed, not a per-PR patch. - Stale review: no.
Verdict
Commenting — not approving while CI is red and given the major-version bump warrants a changelog check.
🤖 Automated review by Claude Code (security · stability · performance · coverage)
Generated by Claude Code
dj4oC
left a comment
dj4oC
left a comment
There was a problem hiding this comment.
- Security: no findings
- Stability: no findings — routine composer bump, no breaking change
- Performance: no findings
- Test coverage: N/A (dependency bump only)
- TODOs found: none
- Dependency touched: yes — confirmed covered by dependabot.yml (composer ecosystem)
- CI status: all green (CLA)
- Stale review: no
Dependabot fast-lane: CI green, no open questions, no CVE regression. Auto-merging per policy.
Generated by Claude Code
|
@dependabot rebase |
Bumps [bacon/bacon-qr-code](https://github.com/Bacon/BaconQrCode) from 2.0.8 to 3.1.1. - [Release notes](https://github.com/Bacon/BaconQrCode/releases) - [Changelog](https://github.com/Bacon/BaconQrCode/blob/main/CHANGELOG.md) - [Commits](Bacon/BaconQrCode@2.0.8...v3.1.1) --- updated-dependencies: - dependency-name: bacon/bacon-qr-code dependency-version: 3.1.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
ccba447 to
856ebd2
Compare
|
Holding: CI is failing (not a rebase conflict). Failing check(s): Commits / Validate semantic commits, WebUI acceptance tests / Acceptance tests (8.3, mariadb:10.6, webUITOTPGuests), lint. A rebase won't fix this — needs a human/upstream fix. |
|
Holding: CI is failing (not a rebase conflict). Two distinct causes: (1) |
phil-davis
changed the title
2 participants
Bumps bacon/bacon-qr-code from 2.0.8 to 3.1.1.
Release notes
Sourced from bacon/bacon-qr-code's releases.
... (truncated)
Changelog
Sourced from bacon/bacon-qr-code's changelog.
... (truncated)
Commits
4da2233chore(main): release 3.1.1 (#237)cde3eaefix: add CLAUDE.md to vendor excludes (#236)3cce2b8ci: update workflow actions to latest versions11485d8chore(main): release 3.1.0 (#229)6146e80feat(imagick): add antialias option to ImagickImageBackEnd (#209) (#235)ec5d4c4fix(svg): mention xmlwriter extension in error message (#232)092067afix(eps): correct elliptic arc to curve conversion sweep handling (#233)03c2273docs: document ImageMagick path fill rendering bug (#234)bf7d67cchore: add CLAUDE.md for Claude Code guidancec6e0271refactor(mask): simplify MaskUtil::getDataMaskBit implementation (#226)