Skip to content

chore: bump packages - #276

Merged
mohammadalfaiyazbitgo merged 2 commits into
masterfrom
bump-versions-2026-10-07
Oct 7, 2026
Merged

mohammadalfaiyazbitgo merged 2 commits into
masterfrom
bump-versions-2026-10-07

Conversation

@mohammadalfaiyazbitgo

Copy link
Copy Markdown
Contributor

Summary

  • Bump all 74 @bitgo-beta/* dependencies to the current beta dist-tag on npm (SDK beta train has advanced ~1 week since chore: bump packages #274).
  • Regenerated package-lock.json under Node 22.1.0 (.nvmrc).

Notes

  • All bumps are beta-counter-only; no base (major/minor/patch) version changes, including the @bitgo-beta/statics override (15.1.1-beta.2041 → 15.1.1-beta.2116).
  • npm run build passes locally under Node 22.1.0.
  • Prerequisite for the next release (per "Releasing Advanced Wallets"). chore: does not itself trigger a release.

@danielpeng1

Copy link
Copy Markdown
Contributor

@claude review all the bumps

@github-actions

github-actions Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

Claude finished @danielpeng1's task —— View job


Reviewing Package Dependency Bumps

  • Read repository guidelines (CLAUDE.md)
  • Analyze package.json changes
  • Review dependency version consistency
  • Check for potential issues with the bumps
  • Provide comprehensive review feedback

Review Summary ✅

This PR successfully updates 74 @bitgo-beta/* dependencies and includes security-related overrides. The changes look good and follow the described scope.

What Was Updated

@bitgo-beta Dependencies (74 packages):

  • All dependencies follow consistent beta versioning pattern: [base-version]-beta.[counter]
  • Beta counters range from ~555 to ~2312, showing significant advancement since last update
  • Base versions remain unchanged as stated (major/minor/patch versions preserved)
  • Key packages updated include:
    • @bitgo-beta/sdk-core: 2019 → 2088 (+69)
    • @bitgo-beta/statics: 2041 → 2116 (+75)
    • Various coin SDK packages with consistent beta counter bumps

Security Override Updates:

  • basic-ftp: ^5.3.0 → ^6.2.1 (major version bump for security)
  • shell-quote: ^1.9.0 → ^1.11.0 (minor version bump for security)
  • proxy-addr: Added new override at ^2.0.8

Validation Points ✅

  1. Version Consistency: All @bitgo-beta/* packages follow the same versioning pattern
  2. No Base Version Changes: Confirmed no major/minor/patch version changes, only beta counters
  3. Override Alignment: Both dependencies and overrides sections updated consistently for core packages
  4. Security Focus: Additional security-related package overrides added per commit message
  5. Scope Adherence: Changes match exactly what's described in the PR description

Potential Considerations

  • Large Beta Counter Jumps: Some packages show significant beta counter increases (e.g., sdk-coin-algo: 489 → 555), which is expected for a ~1 week advancement
  • Dependency Count: 74 packages is substantial but expected for the BitGo SDK ecosystem
  • Lock File: package-lock.json regenerated under Node 22.1.0 per .nvmrc as mentioned

Recommendation

✅ APPROVE - This is a clean, well-scoped dependency update that:

  • Maintains version consistency across all beta packages
  • Includes necessary security overrides
  • Follows the established beta release process
  • Matches the PR description exactly

The changes appear to be mechanically generated (likely via the npm run bump-versions script) which reduces the risk of manual errors.

@mohammadalfaiyazbitgo
mohammadalfaiyazbitgo merged commit 3750ac9 into master Oct 7, 2026
23 checks passed
@mohammadalfaiyazbitgo
mohammadalfaiyazbitgo deleted the bump-versions-2026-10-07 branch October 7, 2026 16:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants