[Snyk] Upgrade monaco-editor from 0.45.0 to 0.55.1#2
Conversation
Snyk has created this PR to upgrade monaco-editor from 0.45.0 to 0.55.1. See this package in npm: monaco-editor See this project in Snyk: https://app.snyk.io/org/iamdrewfortini/project/99309f48-74af-46aa-84af-7f4e384d6ed2?utm_source=github&utm_medium=referral&page=upgrade-pr
Summary of ChangesHello @iamdrewfortini, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request updates the Highlights
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request upgrades monaco-editor from version 0.45.0 to 0.55.1. While keeping dependencies up-to-date is good practice, this upgrade appears to have a critical side effect. Numerous development dependencies, including tailwindcss and its ecosystem, are being moved into production dependencies in package-lock.json. This is indicated by the removal of the "dev": true flag for these packages. This will lead to a significantly larger production bundle, which is undesirable. I've added a specific comment highlighting this issue. Please investigate the dependency tree to find out why this is happening before merging.
| "version": "3.4.17", | ||
| "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-3.4.17.tgz", | ||
| "integrity": "sha512-w33E2aCvSDP0tW9RZuNXadXlkHXqFzSkQew/aIa2i/Sj8fThxwovwlXHSPXTbAHwEIhBFXAedUhP2tueAKP8Og==", | ||
| "dev": true, |
There was a problem hiding this comment.
This change, and many others like it in this file, removes the "dev": true flag from a development dependency. This indicates that tailwindcss is now being treated as a production dependency, which will unnecessarily bloat your production bundle. This issue seems to affect many other development-only packages like postcss and autoprefixer.
This is likely a side-effect of the monaco-editor upgrade causing npm to resolve the dependency tree incorrectly. Please investigate why these dev dependencies are being pulled into the production dependency graph. You might need to run npm ls <package-name> to find out what is depending on it as a production dependency.
2 participants
Snyk has created this PR to upgrade monaco-editor from 0.45.0 to 0.55.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 265 versions ahead of your current version.
The recommended version was released 2 months ago.
Release notes
Package name: monaco-editor
-
0.55.1 - 2025-11-20
- #5121: Fixes missing language exports
- #5122: v0.55.1
-
0.55.0 - 2025-11-20
- #5120: Fixes npx playwright install --with-deps
- #5118: Fixes #5113
- #5117: v0.55.0
- #5116: Install playwright dependencies in monaco-editor-core job
- #5105: Fixes website
- #5104: fixes website & adds editor.api.d.ts
- #5102: Fixes typedoc & updates pipelines to test website
- #5100: Updates website dependencies
- #5071: Bump vite from 5.4.20 to 5.4.21 in /samples/browser-esm-vite-react
- #4961: Bump on-headers and compression in /samples
- #5040: Bump @ babel/runtime from 7.18.9 to 7.28.4 in /website
- #5095: Bump vite from 7.1.9 to 7.1.11 in /samples/browser-esm-vite
- #5097: Cleans up build scripts
- #5098: Dont build the editor when building the website
- #5099: Run tests
- #5094: Adds vite esm example
- #5093: Adds playground support for esmUrl
- #5092: Updates changelog
- #5090: Adds localization section to readme
- #5089: Adds missing NLS files
- #5088: Dont use .js for typescript imports, as rollup adds them to the output
- #5070: Bump vite from 7.1.5 to 7.1.11
- #5069: Bump playwright and @ playwright/test
- #5058: Add monaco-editor-core dependencies to monaco-editor after updating monaco-editor-core.
- #5053: Bump loader-utils from 2.0.2 to 2.0.4 in /website
- #5055: Bump postcss and css-loader in /website
- #5054: Bump json5 from 2.2.1 to 2.2.3 in /website
- #4973: Fix Kotlin number literals
- #4991: Bump vite from 2.9.17 to 5.4.20 in /samples/browser-esm-vite-react
- #5039: Bump webpack from 5.90.1 to 5.102.1 in /website
- #5037: Bump ws in /website
- #5010: [Bug] Multiple issues with how monaco-editor is published
- #5051: Fixes #5010
- #5050: Updates typescript to 5.9.3
- #5048: Uses rollup for ESM build and d.ts bundling.
- #5044: First iteration of monaco editor lsp client
- #5033: uses rollup to bundle monaco-editor's monaco.d.ts
- #5042: uses ts instead of js
- #5041: Bump brace-expansion in /website
- #5034: Uses npm for website, hosts playground runner on https://isolated-playground.github.io for better isolation.
- #5036: Turns on formatOnSave
- #5035: Removes filler
- #5031: Inlines AMD = false
-
0.55.0-rc - 2025-11-18
- #5116: Install playwright dependencies in monaco-editor-core job
- #5105: Fixes website
- #5104: fixes website & adds editor.api.d.ts
- #5102: Fixes typedoc & updates pipelines to test website
- #5100: Updates website dependencies
- #5071: Bump vite from 5.4.20 to 5.4.21 in /samples/browser-esm-vite-react
- #4961: Bump on-headers and compression in /samples
- #5040: Bump @ babel/runtime from 7.18.9 to 7.28.4 in /website
- #5095: Bump vite from 7.1.9 to 7.1.11 in /samples/browser-esm-vite
- #5097: Cleans up build scripts
- #5098: Dont build the editor when building the website
- #5099: Run tests
- #5094: Adds vite esm example
- #5093: Adds playground support for esmUrl
- #5092: Updates changelog
-
0.55.0-dev-20251107 - 2025-11-07
- #5090: Adds localization section to readme
- #5089: Adds missing NLS files
- #5088: Dont use .js for typescript imports, as rollup adds them to the output
-
0.55.0-dev-20251106 - 2025-11-06
-
0.55.0-dev-20251105 - 2025-11-05
-
0.55.0-dev-20251104 - 2025-11-04
-
0.55.0-dev-20251103 - 2025-11-03
-
0.55.0-dev-20251102 - 2025-11-02
-
0.55.0-dev-20251101 - 2025-11-01
-
0.55.0-dev-20251031 - 2025-10-31
-
0.55.0-dev-20251030 - 2025-10-30
-
0.55.0-dev-20251029 - 2025-10-29
-
0.55.0-dev-20251028 - 2025-10-28
-
0.55.0-dev-20251027 - 2025-10-27
-
0.55.0-dev-20251026 - 2025-10-26
-
0.55.0-dev-20251025 - 2025-10-25
-
0.55.0-dev-20251024 - 2025-10-24
-
0.55.0-dev-20251023 - 2025-10-23
-
0.55.0-dev-20251022 - 2025-10-22
-
0.55.0-dev-20251021 - 2025-10-21
-
0.55.0-dev-20251020 - 2025-10-20
-
0.55.0-dev-20251019 - 2025-10-19
-
0.55.0-dev-20251018 - 2025-10-18
-
0.55.0-dev-20251017 - 2025-10-17
-
0.55.0-dev-20251016 - 2025-10-16
-
0.55.0-dev-20251015 - 2025-10-15
-
0.55.0-dev-20251014 - 2025-10-14
-
0.55.0-dev-20251013 - 2025-10-13
-
0.55.0-dev-20251012 - 2025-10-12
-
0.55.0-dev-20251011 - 2025-10-11
-
0.55.0-dev-20251010.1 - 2025-10-10
-
0.55.0-dev-20251010 - 2025-10-10
-
0.55.0-dev-20251009 - 2025-10-09
-
0.55.0-dev-20251008 - 2025-10-08
-
0.55.0-dev-20251007 - 2025-10-07
-
0.54.0 - 2025-10-06
-
0.54.0-dev-20251006 - 2025-10-06
-
0.54.0-dev-20251005 - 2025-10-05
-
0.54.0-dev-20251004 - 2025-10-04
-
0.54.0-dev-20251003 - 2025-10-03
-
0.54.0-dev-20251002 - 2025-10-02
-
0.54.0-dev-20251001 - 2025-10-01
-
0.54.0-dev-20250930 - 2025-09-30
-
0.54.0-dev-20250929 - 2025-09-29
-
0.54.0-dev-20250928 - 2025-09-28
-
0.54.0-dev-20250926 - 2025-09-26
-
0.54.0-dev-20250925 - 2025-09-25
-
0.54.0-dev-20250924 - 2025-09-24
-
0.54.0-dev-20250923 - 2025-09-23
-
0.54.0-dev-20250922 - 2025-09-22
-
0.54.0-dev-20250919 - 2025-09-19
-
0.54.0-dev-20250918 - 2025-09-18
-
0.54.0-dev-20250917 - 2025-09-17
-
0.54.0-dev-20250916 - 2025-09-16
-
0.54.0-dev-20250915 - 2025-09-15
-
0.54.0-dev-20250914 - 2025-09-14
-
0.54.0-dev-20250913 - 2025-09-13
-
0.54.0-dev-20250912 - 2025-09-12
-
0.54.0-dev-20250911 - 2025-09-11
-
0.54.0-dev-20250910 - 2025-09-10
-
0.54.0-dev-20250909 - 2025-09-09
-
0.53.0 - 2025-09-08
-
0.53.0-rc2 - 2025-09-08
-
0.53.0-dev-20250908 - 2025-09-08
-
0.53.0-dev-20250907 - 2025-09-07
-
0.53.0-dev-20250906 - 2025-09-06
-
0.53.0-dev-20250905 - 2025-09-05
-
0.53.0-dev-20250904 - 2025-09-04
-
0.53.0-dev-20250903 - 2025-09-03
-
0.53.0-dev-20250902 - 2025-09-02
-
0.53.0-dev-20250901 - 2025-09-01
-
0.53.0-dev-20250831 - 2025-08-31
-
0.53.0-dev-20250830 - 2025-08-30
-
0.53.0-dev-20250829 - 2025-08-29
-
0.53.0-dev-20250828.2 - 2025-08-28
-
0.53.0-dev-20250828.1 - 2025-08-28
-
0.53.0-dev-20250828 - 2025-08-28
-
0.52.2 - 2024-12-09
-
0.52.0 - 2024-09-19
-
0.52.0-rc2 - 2024-09-18
-
0.51.0 - 2024-08-23
-
0.51.0-rc3 - 2024-08-22
-
0.51.0-rc2 - 2024-08-21
-
0.51.0-rc - 2024-08-19
-
0.51.0-dev-20240807 - 2024-08-07
-
0.51.0-dev-20240806 - 2024-08-06
-
0.51.0-dev-20240805 - 2024-08-05
-
0.51.0-dev-20240804 - 2024-08-04
-
0.51.0-dev-20240803 - 2024-08-03
-
0.51.0-dev-20240802 - 2024-08-02
-
0.51.0-dev-20240801 - 2024-08-01
-
0.51.0-dev-20240731 - 2024-07-31
-
0.51.0-dev-20240730 - 2024-07-30
-
0.51.0-dev-20240729 - 2024-07-29
-
0.51.0-dev-20240728 - 2024-07-28
-
0.51.0-dev-20240727 - 2024-07-27
-
0.51.0-dev-20240726-2 - 2024-07-26
-
0.51.0-dev-20240628 - 2024-06-28
-
0.51.0-dev-20240627 - 2024-06-27
-
0.51.0-dev-20240626 - 2024-06-26
-
0.51.0-dev-20240625 - 2024-06-25
-
0.51.0-dev-20240624 - 2024-06-24
-
0.51.0-dev-20240623 - 2024-06-23
-
0.51.0-dev-20240622 - 2024-06-22
-
0.51.0-dev-20240621 - 2024-06-21
-
0.50.0 - 2024-06-20
-
0.50.0-rc - 2024-06-19
-
0.50.0-dev-20240620 - 2024-06-20
-
0.50.0-dev-20240619 - 2024-06-19
-
0.50.0-dev-20240618 - 2024-06-18
-
0.50.0-dev-20240617 - 2024-06-17
-
0.50.0-dev-20240616 - 2024-06-16
-
0.50.0-dev-20240615 - 2024-06-15
-
0.50.0-dev-20240614 - 2024-06-14
-
0.50.0-dev-20240613 - 2024-06-13
-
0.50.0-dev-20240612 - 2024-06-12
-
0.50.0-dev-20240611 - 2024-06-11
-
0.50.0-dev-20240610 - 2024-06-10
-
0.50.0-dev-20240609 - 2024-06-09
-
0.50.0-dev-20240608 - 2024-06-08
-
0.50.0-dev-20240607 - 2024-06-07
-
0.50.0-dev-20240606 - 2024-06-06
-
0.50.0-dev-20240605 - 2024-06-05
-
0.50.0-dev-20240604 - 2024-06-04
-
0.50.0-dev-20240603 - 2024-06-03
-
0.50.0-dev-20240602 - 2024-06-02
-
0.50.0-dev-20240601 - 2024-06-01
-
0.50.0-dev-20240531 - 2024-05-31
-
0.50.0-dev-20240530 - 2024-05-30
-
0.50.0-dev-20240529 - 2024-05-29
-
0.50.0-dev-20240528 - 2024-05-28
-
0.50.0-dev-20240527 - 2024-05-27
-
0.50.0-dev-20240526 - 2024-05-26
-
0.50.0-dev-20240525 - 2024-05-25
-
0.49.0 - 2024-05-24
-
0.49.0-rc - 2024-05-22
-
0.49.0-dev-20240524 - 2024-05-24
-
0.49.0-dev-20240523 - 2024-05-23
-
0.49.0-dev-20240522 - 2024-05-22
-
0.49.0-dev-20240521 - 2024-05-21
-
0.49.0-dev-20240520 - 2024-05-20
-
0.49.0-dev-20240519 - 2024-05-19
-
0.49.0-dev-20240518 - 2024-05-18
-
0.49.0-dev-20240517 - 2024-05-17
-
0.49.0-dev-20240516 - 2024-05-16
-
0.49.0-dev-20240515 - 2024-05-15
-
0.49.0-dev-20240510 - 2024-05-10
-
0.49.0-dev-20240509 - 2024-05-09
-
0.49.0-dev-20240508 - 2024-05-08
-
0.49.0-dev-20240507 - 2024-05-07
-
0.49.0-dev-20240506 - 2024-05-06
-
0.49.0-dev-20240505 - 2024-05-05
-
0.49.0-dev-20240504 - 2024-05-04
-
0.49.0-dev-20240503 - 2024-05-03
-
0.49.0-dev-20240502 - 2024-05-02
-
0.49.0-dev-20240501 - 2024-05-01
-
0.49.0-dev-20240430 - 2024-04-30
-
0.49.0-dev-20240429 - 2024-04-29
-
0.49.0-dev-20240428 - 2024-04-28
-
0.49.0-dev-20240427 - 2024-04-27
-
0.49.0-dev-20240426 - 2024-04-26
-
0.49.0-dev-20240425 - 2024-04-25
-
0.49.0-dev-20240424 - 2024-04-24
-
0.49.0-dev-20240423 - 2024-04-23
-
0.48.0 - 2024-04-23
-
0.48.0-rc - 2024-04-22
-
0.48.0-dev-20240421 - 2024-04-22
-
0.48.0-dev-20240420 - 2024-04-22
-
0.48.0-dev-20240418 - 2024-04-18
-
0.48.0-dev-20240417 - 2024-04-17
-
0.48.0-dev-20240416 - 2024-04-16
-
0.48.0-dev-20240415 - 2024-04-15
-
0.48.0-dev-20240414 - 2024-04-14
-
0.48.0-dev-20240413 - 2024-04-13
-
0.48.0-dev-20240412 - 2024-04-12
-
0.48.0-dev-20240411 - 2024-04-11
-
0.48.0-dev-20240410 - 2024-04-10
-
0.48.0-dev-20240409 - 2024-04-09
-
0.48.0-dev-20240408 - 2024-04-08
-
0.48.0-dev-20240407 - 2024-04-07
-
0.48.0-dev-20240406 - 2024-04-06
-
0.48.0-dev-20240405 - 2024-04-05
-
0.48.0-dev-20240404 - 2024-04-04
-
0.48.0-dev-20240403 - 2024-04-03
-
0.48.0-dev-20240402 - 2024-04-02
-
0.48.0-dev-20240401 - 2024-04-01
-
0.48.0-dev-20240331 - 2024-03-31
-
0.48.0-dev-20240330 - 2024-03-30
-
0.48.0-dev-20240329 - 2024-03-29
-
0.48.0-dev-20240328 - 2024-03-28
-
0.48.0-dev-20240327 - 2024-03-27
-
0.48.0-dev-20240325 - 2024-03-25
-
0.48.0-dev-20240324 - 2024-03-24
-
0.48.0-dev-20240323 - 2024-03-23
-
0.48.0-dev-20240322 - 2024-03-22
-
0.48.0-dev-20240321 - 2024-03-21
-
0.48.0-dev-20240320 - 2024-03-20
-
0.48.0-dev-20240319 - 2024-03-19
-
0.47.0 - 2024-03-08
-
0.47.0-rc - 2024-03-08
-
0.47.0-dev-20240308 - 2024-03-08
-
0.47.0-dev-20240307 - 2024-03-07
-
0.47.0-dev-20240306 - 2024-03-06
-
0.47.0-dev-20240305 - 2024-03-05
-
0.47.0-dev-20240304 - 2024-03-04
-
0.47.0-dev-20240303 - 2024-03-03
-
0.47.0-dev-20240302 - 2024-03-02
-
0.47.0-dev-20240301 - 2024-03-01
-
0.47.0-dev-20240229 - 2024-02-29
-
0.47.0-dev-20240228 - 2024-02-28
-
0.47.0-dev-20240227 - 2024-02-27
-
0.47.0-dev-20240225 - 2024-02-25
-
0.47.0-dev-20240224 - 2024-02-24
-
0.47.0-dev-20240223 - 2024-02-23
-
0.47.0-dev-20240222 - 2024-02-22
-
0.47.0-dev-20240221 - 2024-02-21
-
0.47.0-dev-20240220 - 2024-02-20
-
0.47.0-dev-20240219 - 2024-02-19
-
0.47.0-dev-20240218 - 2024-02-18
-
0.47.0-dev-20240217 - 2024-02-17
-
0.47.0-dev-20240216 - 2024-02-16
-
0.47.0-dev-20240215 - 2024-02-15
-
0.47.0-dev-20240214 - 2024-02-14
-
0.47.0-dev-20240213 - 2024-02-13
-
0.47.0-dev-20240212 - 2024-02-12
-
0.47.0-dev-20240211 - 2024-02-11
-
0.47.0-dev-20240210 - 2024-02-10
-
0.47.0-dev-20240209 - 2024-02-09
-
0.47.0-dev-20240208 - 2024-02-08
-
0.46.0 - 2024-02-08
-
0.46.0-rc - 2024-02-07
-
0.46.0-dev-20240207 - 2024-02-07
-
0.46.0-dev-20240202 - 2024-02-02
-
0.46.0-dev-20240201 - 2024-02-01
-
0.46.0-dev-20240131 - 2024-01-31
-
0.46.0-dev-20240130 - 2024-01-30
-
0.46.0-dev-20240129 - 2024-01-29
-
0.46.0-dev-20240128 - 2024-01-28
-
0.46.0-dev-20240127 - 2024-01-27
-
0.46.0-dev-20240126 - 2024-01-26
-
0.46.0-dev-20240125 - 2024-01-25
-
0.46.0-dev-20240124 - 2024-01-24
-
0.46.0-dev-20240123 - 2024-01-23
-
0.46.0-dev-20240122 - 2024-01-23
-
0.46.0-dev-20240121 - 2024-01-23
-
0.46.0-dev-20240120 - 2024-01-23
-
0.46.0-dev-20240119 - 2024-01-23
-
0.46.0-dev-20240118 - 2024-01-23
-
0.46.0-dev-20240117 - 2024-01-23
-
0.46.0-dev-20240116 - 2024-01-23
-
0.46.0-dev-20240115 - 2024-01-23
-
0.46.0-dev-20240114 - 2024-01-23
-
0.46.0-dev-20240113 - 2024-01-23
-
0.46.0-dev-20240112 - 2024-01-23
-
0.46.0-dev-20240111 - 2024-01-23
-
0.46.0-dev-20240110 - 2024-01-23
-
0.46.0-dev-20240109 - 2024-01-23
-
0.46.0-dev-20231214 - 2023-12-14
-
0.46.0-dev-20231213 - 2023-12-13
-
0.46.0-dev-20231212 - 2023-12-12
-
0.46.0-dev-20231211 - 2023-12-11
-
0.46.0-dev-20231210 - 2023-12-10
-
0.46.0-dev-20231209 - 2023-12-09
-
0.46.0-dev-20231208 - 2023-12-08
-
0.45.0 - 2023-12-07
from monaco-editor GitHub release notesChanges:
This list of changes was auto generated.
Changes:
See More
This list of changes was auto generated.
Changes:
See More
This list of changes was auto generated.
Changes:
This list of changes was auto generated.
Merge pull request #5070 from microsoft/dependabot/npm_and_yarn/vite-…
…7.1.11
Bump vite from 7.1.5 to 7.1.11
Merge pull request #5070 from microsoft/dependabot/npm_and_yarn/vite-…
…7.1.11
Bump vite from 7.1.5 to 7.1.11
Merge pull request #5070 from microsoft/dependabot/npm_and_yarn/vite-…
…7.1.11
Bump vite from 7.1.5 to 7.1.11
Merge pull request #5070 from microsoft/dependabot/npm_and_yarn/vite-…
…7.1.11
Bump vite from 7.1.5 to 7.1.11
Merge pull request #5070 from microsoft/dependabot/npm_and_yarn/vite-…
…7.1.11
Bump vite from 7.1.5 to 7.1.11
Merge pull request #5070 from microsoft/dependabot/npm_and_yarn/vite-…
…7.1.11
Bump vite from 7.1.5 to 7.1.11
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: