Skip to content

chore(deps): consolidate Kahuna dependency updates - #5158

Draft
AWare wants to merge 10 commits into
mainfrom
copilot/kahuna-dependabot-aggregate
Draft

chore(deps): consolidate Kahuna dependency updates#5158
AWare wants to merge 10 commits into
mainfrom
copilot/kahuna-dependabot-aggregate

Conversation

@AWare

@AWare AWare commented Oct 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Created with help of Copilot (gpt-6-luna).6.1 sol ¯_(ツ)_/¯

What does this change?

Consolidates compatible Kahuna updates from #5150, #5153, #5154, #5156, and #5157: rx-dom, angular-xeditable, uri-templates, eslint-plugin-react, image-minimizer-webpack-plugin, webpack-cli, and immutable. Also disables react/prop-types for TypeScript components, where prop types are covered by TypeScript and the updated React plugin otherwise reports errors.

Other candidates were left out where current peer constraints conflict: React Aria 1.22.1 exceeds @guardian/stand 0.0.73's supported range; ESLint 10 is unsupported by eslint-plugin-react 7.37.5; the TypeScript ESLint parser 8 update requires a matching plugin; Babel 8 requires a newer Babel loader. The older nanoid, moment, js-yaml, brace-expansion, and svgo updates are already reflected in the current lockfile.

How should a reviewer test this change?

  • npm --prefix kahuna ci --no-audit --no-fund — passed.
  • npm --prefix kahuna test — passed (38 lint warnings).
  • npm --prefix kahuna run dist — passed (webpack asset-size warnings).

How can success be measured?

Kahuna dependency installation, lint/tests, and production asset build complete successfully.

Who should look at this?

@guardian/digital-cms

Tested? Documented?

  • locally by committer
  • locally by Guardian reviewer
  • on the Guardian's TEST environment
  • relevant documentation added or amended (if needed)

dependabot Bot and others added 10 commits October 30, 2026 10:44
@dependabot @AWare
chore(deps): bump the minor-and-patch group in /kahuna with 4 updates
039442d 
Bumps the minor-and-patch group in /kahuna with 4 updates: [angular-xeditable](https://github.com/vitalets/angular-xeditable), [react-aria-components](https://github.com/adobe/react-spectrum), [uri-templates](https://github.com/geraintluff/uri-templates) and [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react).


Updates `angular-xeditable` from 0.8.1 to 0.10.2
- [Release notes](https://github.com/vitalets/angular-xeditable/releases)
- [Changelog](https://github.com/vitalets/angular-xeditable/blob/master/CHANGELOG.txt)
- [Commits](vitalets/angular-xeditable@0.8.1...0.10.2)

Updates `react-aria-components` from 1.20.0 to 1.22.1
- [Release notes](https://github.com/adobe/react-spectrum/releases)
- [Commits](https://github.com/adobe/react-spectrum/compare/react-aria-components@1.20.0...react-aria-components@1.22.1)

Updates `uri-templates` from 0.1.5 to 0.2.0
- [Commits](https://github.com/geraintluff/uri-templates/commits)

Updates `eslint-plugin-react` from 7.28.0 to 7.37.5
- [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases)
- [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](jsx-eslint/eslint-plugin-react@v7.28.0...v7.37.5)

---
updated-dependencies:
- dependency-name: angular-xeditable
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react-aria-components
  dependency-version: 1.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: uri-templates
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint-plugin-react
  dependency-version: 7.37.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @AWare
chore(deps): bump image-minimizer-webpack-plugin in /kahuna
da1d6b0 
Bumps [image-minimizer-webpack-plugin](https://github.com/webpack/image-minimizer-webpack-plugin) from 3.2.3 to 5.0.0.
- [Release notes](https://github.com/webpack/image-minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/image-minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/image-minimizer-webpack-plugin@v3.2.3...v5.0.0)

---
updated-dependencies:
- dependency-name: image-minimizer-webpack-plugin
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @AWare
chore(deps): bump eslint from 8.6.0 to 10.13.0 in /kahuna
de4de02 
Bumps [eslint](https://github.com/eslint/eslint) from 8.6.0 to 10.13.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v8.6.0...v10.13.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @AWare
chore(deps): bump webpack-cli from 4.9.1 to 7.2.3 in /kahuna
5594982 
Bumps [webpack-cli](https://github.com/webpack/webpack-cli) from 4.9.1 to 7.2.3.
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@4.9.1...webpack-cli@7.2.3)

---
updated-dependencies:
- dependency-name: webpack-cli
  dependency-version: 7.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @AWare
chore(deps): bump immutable from 4.3.9 to 5.1.9 in /kahuna
13aeef9 
Bumps [immutable](https://github.com/immutable-js/immutable-js) from 4.3.9 to 5.1.9.
- [Release notes](https://github.com/immutable-js/immutable-js/releases)
- [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md)
- [Commits](immutable-js/immutable-js@v4.3.9...v5.1.9)

---
updated-dependencies:
- dependency-name: immutable
  dependency-version: 5.1.9
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @AWare
chore(deps): bump @typescript-eslint/parser in /kahuna
f56192a 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.9.1 to 8.72.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @AWare
chore(deps): bump @babel/core from 7.29.6 to 8.0.9 in /kahuna
995fbfe 
Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.29.6 to 8.0.9.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.9/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 8.0.9
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @AWare
chore(deps): bump @babel/preset-env from 7.28.0 to 8.0.7 in /kahuna
da82250 
Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.28.0 to 8.0.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-preset-env)

---
updated-dependencies:
- dependency-name: "@babel/preset-env"
  dependency-version: 8.0.7
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @AWare
chore(deps): bump rx-dom from 6.0.0 to 7.0.3 in /kahuna
c79ddd5 
Bumps [rx-dom](https://github.com/Reactive-Extensions/RxJS-DOM) from 6.0.0 to 7.0.3.
- [Release notes](https://github.com/Reactive-Extensions/RxJS-DOM/releases)
- [Commits](Reactive-Extensions/RxJS-DOM@v6.0.0...v7.0.3)

---
updated-dependencies:
- dependency-name: rx-dom
  dependency-version: 7.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@AWare
chore(deps): consolidate Kahuna dependency updates
c0c04b5 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@AWare AWare added the maintenance Departmental tracking: maintenance work, not a fix or a feature label Oct 30, 2026
This was referenced Oct 30, 2026
Closed
Closed
Closed
Closed
Closed
Closed
@github-actions

github-actions Bot commented Oct 30, 2026

Copy link
Copy Markdown

Deploy build 16104 of media-service::grid::all to TEST

All deployment options

From guardian/actions-riff-raff.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

maintenance Departmental tracking: maintenance work, not a fix or a feature

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@AWare