Skip to content

chore(deps): april updates#764

Merged
petermasking merged 3 commits intomainfrom
763-dependency-updates-april
Apr 1, 2026
Merged

chore(deps): april updates#764
petermasking merged 3 commits intomainfrom
763-dependency-updates-april

Conversation

@basmasking
Copy link
Copy Markdown
Member

Fixes #763

Changes proposed in this pull request:

  • updated dependencies published before 2026-03-30

@MaskingTechnology/jitar

@basmasking basmasking linked an issue Apr 1, 2026 that may be closed by this pull request
@basmasking basmasking requested a review from petermasking as a code owner April 1, 2026 08:00
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 1, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: d15d7278-3ab2-414f-86ed-856919840a48

📥 Commits

Reviewing files that changed from the base of the PR and between adced54 and 9ec88a8.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (22)
  • package.json
  • packages/analysis/package.json
  • packages/build/package.json
  • packages/cli/package.json
  • packages/configuration/package.json
  • packages/create-jitar/package.json
  • packages/errors/package.json
  • packages/execution/package.json
  • packages/health/package.json
  • packages/http/package.json
  • packages/init/package.json
  • packages/jitar/package.json
  • packages/logging/package.json
  • packages/middleware/package.json
  • packages/plugin-vite/package.json
  • packages/runtime/package.json
  • packages/scheduling/package.json
  • packages/serialization/package.json
  • packages/services/package.json
  • packages/sourcing/package.json
  • packages/validation/package.json
  • tools/eslint-plugin/package.json

Summary by CodeRabbit

  • New Features

    • Integrated telemetry and observability middleware into the segmentation example application.
  • Chores

    • Released version 0.10.8 across all packages.
    • Updated development dependencies to use flexible semantic versioning ranges.
    • Updated minify development dependency in website package.

Walkthrough

Adds OpenTelemetry-based telemetry to the segmentation example (new telemetry module and middleware, plus service configs), appends a query parameter to a sample HTTP request, and bumps many package versions/devDependency ranges.

Changes

Cohort / File(s) Summary
Telemetry integration
examples/segmentation/src/telemetry/telemetry.ts, examples/segmentation/src/telemetry/telemetryMiddleware.ts, examples/segmentation/services/data.json, examples/segmentation/services/gateway.json, examples/segmentation/services/process.json
New OpenTelemetry driver + telemetry instance and a middleware wrapper; services configured to include ./telemetry/telemetryMiddleware.
Example request
examples/segmentation/requests.http
Appended ?aaa=x query parameter to the GET http://localhost:3000/rpc/reporting/getData request.
Root & package manifests
package.json, website/package.json, packages/*/package.json, tools/eslint-plugin/package.json
Bumped root and many package versions from 0.10.70.10.8; updated root devDependencies to caret ranges and updated website minify version.

Sequence Diagram(s)

sequenceDiagram
    autonumber
    actor Client
    participant Gateway
    participant Service
    participant TelemetryMiddleware as Telemetry\nMiddleware
    participant OTDriver as OpenTelemetry\nDriver

    Client->>Gateway: HTTP GET /rpc/reporting/getData?aaa=x
    Gateway->>Service: RPC call reporting/getData (headers, args)
    Service->>TelemetryMiddleware: invoke middleware (route mapping)
    TelemetryMiddleware->>OTDriver: record span / attributes (aaa, headers)
    TelemetryMiddleware-->>Service: continue request
    Service-->>Gateway: RPC response
    Gateway-->>Client: HTTP response
Loading

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly related PRs

Suggested reviewers

  • petermasking

Poem

🐰 I hopped through code with eager paws,

added traces, mapped the RPCs' cause,
middleware plants a tiny flag,
deps nudged forward, no more lag.
🥕✨

🚥 Pre-merge checks | ✅ 2 | ❌ 3

❌ Failed checks (3 inconclusive)

Check name Status Explanation Resolution
Title check ❓ Inconclusive The title 'chore(deps): april updates' is vague and generic, using non-descriptive terms that don't convey specific information about the actual changes beyond broad categorization. Consider a more specific title that describes the primary change, such as 'chore(deps): add telemetry middleware integration and version bumps' or similar.
Linked Issues check ❓ Inconclusive The linked issue #763 provides no specific coding requirements or objectives, only stating 'Dependency updates april' without details. The PR implements version bumps and adds telemetry middleware, but compliance cannot be fully assessed. Review the full issue #763 details to confirm whether the telemetry middleware addition and dependency updates align with stated requirements.
Out of Scope Changes check ❓ Inconclusive The PR includes significant in-scope telemetry feature addition (new telemetry.ts and telemetryMiddleware.ts files, config updates) alongside dependency version updates, but the scope alignment with issue #763 cannot be confirmed. Clarify whether the telemetry middleware integration was included in issue #763 scope or if this represents an additional feature beyond dependency updates.
✅ Passed checks (2 passed)
Check name Status Explanation
Description check ✅ Passed The description follows the template structure with issue reference, proposed changes, and team mention, though the changes listed are minimal and lack detail about the telemetry feature addition.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@basmasking basmasking changed the title #763: updated dependencies to 2026-03-30 chore(deps): april updates Apr 1, 2026
Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 3

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@examples/segmentation/src/telemetry/telemetry.ts`:
- Around line 7-9: The telemetry mapping for the key 'reporting/getData'
references an argument name 'aaa' that does not exist because the handler
function getData() (in reporting/getData.ts) declares no parameters; fix by
either removing the arguments array or making it an empty array for
'reporting/getData', or alternatively add the corresponding parameter name to
the getData function to match 'aaa'—update the mapping or the getData signature
so both sides use the same parameter names.

In `@examples/segmentation/src/telemetry/telemetryMiddleware.ts`:
- Around line 2-6: The example imports TelemetryMiddleware from
'@jitar-plugins/telemetry' (see telemetryMiddleware.ts) but that package is not
declared in the examples/segmentation package.json; add
"@jitar-plugins/telemetry" to the dependencies section of
examples/segmentation/package.json with an appropriate version (match workspace
version or a compatible semver) so the example can install and resolve
TelemetryMiddleware at runtime.

In `@package.json`:
- Around line 27-38: The package.json dependency ranges were changed but
package-lock.json wasn’t updated; run a fresh install to regenerate and pin
resolved versions: run npm install (or npm ci && npm install) in the repo root
to produce an updated package-lock.json that reflects the caret ranges in
package.json, verify the lockfile changes, and commit the new package-lock.json
so CI and local installs use deterministic, pinned versions.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 8b0c3191-dd7d-4313-af33-d961a24051e3

📥 Commits

Reviewing files that changed from the base of the PR and between 24a53ef and adced54.

⛔ Files ignored due to path filters (3)
  • documentation/package-lock.json is excluded by !**/package-lock.json
  • package-lock.json is excluded by !**/package-lock.json
  • website/package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (8)
  • examples/segmentation/requests.http
  • examples/segmentation/services/data.json
  • examples/segmentation/services/gateway.json
  • examples/segmentation/services/process.json
  • examples/segmentation/src/telemetry/telemetry.ts
  • examples/segmentation/src/telemetry/telemetryMiddleware.ts
  • package.json
  • website/package.json

Comment on lines +2 to +6
import { TelemetryMiddleware } from '@jitar-plugins/telemetry';

import telemetry from './telemetry';

export default new TelemetryMiddleware(telemetry);
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Locate segmentation/example package manifests and check telemetry deps
fd -i 'package.json' examples | xargs -r rg -n -C2 '"@jitar-plugins/telemetry"|"@theshelf/telemetry"|"@theshelf/telemetry-driver-otel"'

Repository: MaskingTechnology/jitar

Length of output: 51


🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Check if examples/segmentation directory exists and list its structure
echo "=== Checking examples/segmentation directory ==="
if [ -d "examples/segmentation" ]; then
  ls -la examples/segmentation/
  echo ""
  # Check for package.json
  if [ -f "examples/segmentation/package.json" ]; then
    echo "=== Content of examples/segmentation/package.json ==="
    cat -n examples/segmentation/package.json
  else
    echo "No package.json found in examples/segmentation/"
  fi
else
  echo "examples/segmentation directory does not exist"
fi

echo ""
echo "=== All package.json files in examples ==="
find examples -name "package.json" -type f 2>/dev/null | head -20

Repository: MaskingTechnology/jitar

Length of output: 1961


🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Check the actual imports in the file being reviewed
echo "=== Checking telemetryMiddleware.ts imports ==="
if [ -f "examples/segmentation/src/telemetry/telemetryMiddleware.ts" ]; then
  cat -n examples/segmentation/src/telemetry/telemetryMiddleware.ts
else
  echo "File not found at examples/segmentation/src/telemetry/telemetryMiddleware.ts"
  # Search for it
  echo ""
  echo "=== Searching for telemetryMiddleware.ts ==="
  find examples -name "telemetryMiddleware.ts" -type f 2>/dev/null
fi

Repository: MaskingTechnology/jitar

Length of output: 311


Add missing @jitar-plugins/telemetry dependency to examples/segmentation/package.json.

The file imports @jitar-plugins/telemetry but this dependency is not declared in the example's package manifest. Since examples are not included in the workspace setup and npm hoisting does not apply to them, the package must be explicitly declared in examples/segmentation/package.json dependencies.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@examples/segmentation/src/telemetry/telemetryMiddleware.ts` around lines 2 -
6, The example imports TelemetryMiddleware from '@jitar-plugins/telemetry' (see
telemetryMiddleware.ts) but that package is not declared in the
examples/segmentation package.json; add "@jitar-plugins/telemetry" to the
dependencies section of examples/segmentation/package.json with an appropriate
version (match workspace version or a compatible semver) so the example can
install and resolve TelemetryMiddleware at runtime.

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Apr 1, 2026

@petermasking petermasking merged commit f8233e3 into main Apr 1, 2026
25 checks passed
@petermasking petermasking deleted the 763-dependency-updates-april branch April 1, 2026 09:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Dependency updates april

2 participants