Skip to content

Bump shiki from 3.23.0 to 4.1.0 - #524

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/shiki-4.0.2
Closed

Bump shiki from 3.23.0 to 4.1.0#524
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/shiki-4.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 23, 2026

Copy link
Copy Markdown
Contributor

Bumps shiki from 3.23.0 to 4.1.0.

Release notes

Sourced from shiki's releases.

v4.1.0

   🐞 Bug Fixes

    View changes on GitHub

v4.0.2

   🐞 Bug Fixes

    View changes on GitHub

v4.0.1

   🐞 Bug Fixes

    View changes on GitHub

v4.0.0

   🚨 Breaking Changes

   🚀 Features

    View changes on GitHub
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 23, 2026
@crimsonstrife

crimsonstrife commented Mar 23, 2026

Copy link
Copy Markdown
Owner

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@deepsource-io

deepsource-io Bot commented Mar 23, 2026

Copy link
Copy Markdown

DeepSource Code Review

We reviewed changes in 2b30267...72dd7ee on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
PHP Jun 2, 2026 2:34p.m. Review ↗
JavaScript Jun 2, 2026 2:34p.m. Review ↗
Python Jun 2, 2026 2:34p.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

@crimsonstrife

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) from 3.23.0 to 4.1.0.
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.1.0/packages/shiki)

---
updated-dependencies:
- dependency-name: shiki
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump shiki from 3.23.0 to 4.0.2 Bump shiki from 3.23.0 to 4.1.0 Jun 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/shiki-4.0.2 branch from e10a2b9 to 72dd7ee Compare June 2, 2026 14:33
@dependabot @github

dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #575.

@dependabot dependabot Bot closed this Jun 8, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/shiki-4.0.2 branch June 8, 2026 00:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant