From bc5e3d7dad9402a944d44f6c9123bdeb72546a59 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 11 Aug 2026 22:42:57 +0000 Subject: [PATCH 1/2] Bump mingo from 7.2.3 to 7.2.4 Bumps [mingo](https://github.com/kofrasa/mingo) from 7.2.3 to 7.2.4. - [Changelog](https://github.com/kofrasa/mingo/blob/main/CHANGELOG.md) - [Commits](https://github.com/kofrasa/mingo/compare/7.2.3...7.2.4) --- updated-dependencies: - dependency-name: mingo dependency-version: 7.2.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 53162ae..42c033c 100644 --- a/package.json +++ b/package.json @@ -16,7 +16,7 @@ "dependencies": { "lodash.clonedeep": "^4.5.0", "lodash.isobject": "^3.0.2", - "mingo": "6.1.0 - 7.2.3" + "mingo": "6.1.0 - 7.2.5" }, "peerDependencies": { "sharedb": "^1.0.0-beta || ^2.0.0 || ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0" From 4174b7a23d597706282712aa2d791283ebb0c39e Mon Sep 17 00:00:00 2001 From: Alec Gibson <12036746+alecgibson@users.noreply.github.com> Date: Mon, 24 Aug 2026 14:33:22 +0000 Subject: [PATCH 2/2] =?UTF-8?q?=F0=9F=94=A7=20Use=20caret=20ranges=20for?= =?UTF-8?q?=20`mingo`?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit At the moment, `mingo` is declared with an explicit upper bound as a hyphen range. Every upstream patch release therefore needs a Dependabot PR and a manifest edit just to be permitted — this commit's parent is one such bump, and the bound it landed on (`7.2.5`) isn't even a published version. That bound isn't load-bearing any more. It was originally introduced as `6.1.0 - 6.2.1` to keep out `mingo@6.2.2`, which broke the CommonJS require of `mingo/init/system`. When Dependabot later widened the range to span `mingo@7`, the cap went with it, so `6.2.2` has been permitted ever since. This change swaps the range for `^6.1.0 || ^7.0.0`. It admits exactly the same versions at the bottom, still spans both majors, and still requires a deliberate change for `mingo@8` — but new `7.x` patches no longer need one. Tested across `6.1.0` to `7.2.4`: the only failures are `6.2.2` and `7.1.1` (an upstream bug in mingo's own CJS build), both of which the previous range already allowed. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 42c033c..9c64cae 100644 --- a/package.json +++ b/package.json @@ -16,7 +16,7 @@ "dependencies": { "lodash.clonedeep": "^4.5.0", "lodash.isobject": "^3.0.2", - "mingo": "6.1.0 - 7.2.5" + "mingo": "^6.1.0 || ^7.0.0" }, "peerDependencies": { "sharedb": "^1.0.0-beta || ^2.0.0 || ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0"