Skip to content

chore(deps): bump stack-trace from 0.0.10 to 1.0.0 - #533

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/stack-trace-1.0.0
Closed

chore(deps): bump stack-trace from 0.0.10 to 1.0.0#533
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/stack-trace-1.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps stack-trace from 0.0.10 to 1.0.0.

Release notes

Sourced from stack-trace's releases.

v1.0.0

What's Changed

New Contributors

Full Changelog: felixge/node-stack-trace@v0.0.10...v1.0.0

1.0.0-pre2

What's Changed

New Contributors

Full Changelog: felixge/node-stack-trace@1.0.0-pre1...1.0.0-pre2

1.0.0-pre1

What's Changed

New Contributors

... (truncated)

Commits
  • 68ba537 bump version
  • dc0109b Address PR #66 review comments, verify and close issues #13, #25 (#67)
  • e19d06c Migrate tests to native node:test, remove Babel/Jest tooling, and clarify lon...
  • 2f11520 fix(tests): make stack frame comparison test environment-independent for Jest...
  • 5b67838 Fixed lock file
  • dabeee2 chore: migrate from Travis CI to GitHub Actions
  • 1d6b4c7 Fixed url
  • 5933e73 chore: update .npmignore (#58)
  • 6afc300 Bump minimatch from 3.0.4 to 3.1.2 (#43)
  • ba06dcd Adjust node engine requirements to be less restrictive (#39)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by niemyjski, a new releaser for stack-trace since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 1, 2026
Bumps [stack-trace](https://github.com/felixge/node-stack-trace) from 0.0.10 to 1.0.0.
- [Release notes](https://github.com/felixge/node-stack-trace/releases)
- [Commits](felixge/node-stack-trace@v0.0.10...v1.0.0)

---
updated-dependencies:
- dependency-name: stack-trace
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/stack-trace-1.0.0 branch from 4540936 to 1e05dc0 Compare August 3, 2026 20:49
@TheRealAgentK

Copy link
Copy Markdown
Contributor

Closing this automated major-version update intentionally after runtime compatibility review.

stack-trace 1.0.0 is not compatible with the current Raygun4Node package contract:

  • Version 1.0.0 is ESM-only ("type": "module"), while Raygun4Node is compiled and published as CommonJS.
  • Version 1.0.0 requires Node.js >=20.0.0, while Raygun4Node declares support for Node.js >=14.17.0.
  • The full Raygun4Node test suite passes on the proposed update, but the dedicated CommonJS consumer test fails on Node 20, 22, and 24 because the compiled SDK attempts to require() the ESM-only dependency.
  • AWS Lambda consumes Raygun4Node through CommonJS, so merging this update would also risk breaking the Lambda provider and downstream CommonJS applications.
  • The currently pinned stack-trace 0.0.10 release has no npm audit vulnerability, so there is no security justification for accepting this compatibility regression.

A future major-version dependency replacement or module-format migration must be handled as deliberate product work, with an approved Node support floor, CommonJS/ESM strategy, packed-package consumer testing, and coordinated AWS Lambda validation. It must not be applied as an automated dependency-only update.

@dependabot ignore this major version

@dependabot dependabot Bot closed this Aug 4, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you about version 1.x.x again, unless you re-open this PR.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/stack-trace-1.0.0 branch August 4, 2026 01:15
@TheRealAgentK

Copy link
Copy Markdown
Contributor

Long-term remediation is now tracked in #539. That issue records the compatibility policy decisions, replacement strategies, parser fidelity fixtures, CommonJS packaging tests, AWS Lambda validation, and release criteria required to remove the legacy dependency safely.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant