[Snyk] Upgrade svix from 1.89.0 to 1.94.0 - #58
Merged
Conversation
Snyk has created this PR to upgrade svix from 1.89.0 to 1.94.0. See this package in npm: svix See this project in Snyk: https://app.snyk.io/org/bernardosm/project/fcb427ab-450a-473a-921f-25bc0a49fc59?utm_source=github&utm_medium=referral&page=upgrade-pr
Contributor
Author
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
Snyk edits package.json only, so `bun install --frozen-lockfile` failed with "lockfile had changes, but lockfile is frozen" and the lint job has been red since 2026-06-15. This regenerates the lockfile so CI can run. Claude-Session: https://claude.ai/code/session_01F1stiNzuNtJXoXtiW9ZCbs
ericviana
added a commit
that referenced
this pull request
Jul 27, 2026
…#60) Publish runs on every push to main and unconditionally calls `npm publish`, so any merge that does not bump the version fails the run with: npm error You cannot publish over the previously published versions: 4.0.2. That just happened twice, on #52 and #58. The noise matters: a permanently red publish job is how blindpay-cli's genuinely broken publish went unnoticed for two and a half months and left npm three versions behind. This adds the same version guard already merged into blindpay-cli and blindpay-mcp, so an unchanged version is a no-op instead of a failure. Also tags and creates a GitHub release on publish. This repo has published up to 4.0.2 on npm and has zero git tags, so there is currently no way to see what shipped in a release from the repo alone. Two notes, neither addressed here: - `.changeset/` has around 20 accumulated changeset files and no workflow consumes them, so version bumps are effectively manual edits to package.json. Worth either wiring up `changeset version` or dropping changesets. - main currently carries the #52 and #58 fixes at an unbumped 4.0.2, so they are unreleased. The next version bump ships them. Claude-Session: https://claude.ai/code/session_01F1stiNzuNtJXoXtiW9ZCbs
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade svix from 1.89.0 to 1.94.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 6 versions ahead of your current version.
The recommended version was released a month ago.
Issues fixed by the recommended upgrade:
SNYK-JS-UUID-16133035
Release notes
Package name: svix
-
1.94.0 - 2026-05-19
- Libs (New): Webhooks AutoConfig SDK
- Libs/Java: Restore compatibility with Java 1.8 in Webhooks verification
-
1.93.0 - 2026-05-07
- Server: Warn when Redis pending timeout is shorter than worker request timeout + buffer (thanks @ vinay0826)
- Server: Add missing messageattempt index (as a new kind of background migration)
- CLI: Show input / output JSON examples in
- Libs/Java: Restore compatibility with Java 1.8
-
1.92.2 - 2026-04-23
- Libs/JavaScript: Remove dependency on
-
1.91.1 - 2026-04-21
- Fix docker build
- cli: bump rand to 0.9 by @ svix-jbrown in #2265
- get cargo-deny to be quiet by @ svix-jbrown in #2266
- py: update pytest by @ svix-jbrown in #2268
- py: update requests by @ svix-jbrown in #2267
- deps: update direct rand dependency to 0.10 by @ svix-jbrown in #2271
- fix postman CI: install openapi-to-postmanv2 before running script by @ tasn in #2270
- use docker/github-builder for building docker images by @ svix-jbrown in #2272
- Version 1.91.1. by @ tasn in #2273
-
1.91.0 - 2026-04-20
- Server: Remove old endpoint secrets on rotation
- Libs/Ruby: various fixes to the ruby sdk
-
1.90.0 - 2026-04-02
- Server: Add
- This replaces
- Libs/All: Update to latest Svix Cloud spec
-
1.89.0 - 2026-03-19
- Server: Add a prune helper command to delete old data
- Server: Invalidate CMA cache when creating/updating endpoints or apps
- Server: Return empty JSON object from v1.message-attempt.resend
- Server: Build Docker image with Rust 1.94
- Bridge: Add support for PLAIN sasl auth for confluent cloud
- Bridge: Build Docker image with Rust 1.94
- Libs/Python: Set
from svix GitHub release notesWhat's Changed
Full Changelog: v1.93.0...v1.94.0
What's Changed
--helpoutputFull Changelog: v1.92.2...v1.93.0
What's Changed
uuid(thanks @ ulrichstark)Full Changelog: v1.91.1...v1.92.2
Changes
What's Changed
Full Changelog: v1.91.0...v1.91.1
What's Changed
Full Changelog: v1.90.0...v1.91.0
What's Changed
throttleRateto endpoint and applicationrateLimitbecause the name caused some confusion(but is kept as a deprecated field for backwards compatibility)
Full Changelog: v1.89.0...v1.90.0
What's Changed
__str__on errorsFull Changelog: v1.88.0...v1.89.0
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: