Skip to content

fix(deps): update @descope/core-js-sdk to ^2.64.0#751

Merged
dorsha merged 1 commit into
mainfrom
chore/bump-core-js-2.64.0
Jun 22, 2026
Merged

fix(deps): update @descope/core-js-sdk to ^2.64.0#751
dorsha merged 1 commit into
mainfrom
chore/bump-core-js-2.64.0

Conversation

@dorsha

@dorsha dorsha commented Jun 22, 2026

Copy link
Copy Markdown
Member

Summary

Bump @descope/core-js-sdk from ^2.58.0 to ^2.64.0.

core-js-sdk 2.64.0 adds Cloudflare status code 520 ("Web Server Returned an Unknown Error") to the HTTP client's transient retry list (alongside 503/521/522/524/530). node-sdk's HTTP layer is fetchWrapper from core-js-sdk, so this propagates the retry-on-520 behavior here — matching the change already made in go-sdk (descope/go-sdk#775), python-sdk (descope/python-sdk#1581), java (descope/descope-java#337), dotnet (descope/descope-dotnet#224) and php (descope/descope-php#111).

Source change: descope/descope-js#1423. Originating request: https://github.com/descope/etc/issues/14039

Notes

  • package-lock.json regenerated via npm install --package-lock-only; the only changes are the core-js-sdk resolution (2.58.0 → 2.64.0) and its tslib runtime dependency (deduped 2.6.2 → 2.8.1).

🤖 Generated with Claude Code

Picks up core-js-sdk 2.64.0, which adds Cloudflare status code 520
("Web Server Returned an Unknown Error") to the HTTP client's transient
retry list (descope/descope-js#1423). This propagates the retry-on-520
behavior to node-sdk, matching go-sdk, python-sdk, java, dotnet and php.

Relates to descope/etc#14039

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@shuni-bot-dev

shuni-bot-dev Bot commented Jun 22, 2026

Copy link
Copy Markdown

🐕 Review complete — View session on Shuni Portal 🐾

@shuni-bot-dev shuni-bot-dev Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🐕 Shuni's Review

Bumps @descope/core-js-sdk from ^2.58.0 to ^2.64.0 (adds retry-on-520 to the HTTP client). The lockfile changes are exactly as described — version + integrity bump, tslib added as a core-js-sdk dep and deduped to 2.8.1 (still satisfies ^2.0.0).

No issues found — good bones! Woof! 🦴

@dorsha dorsha enabled auto-merge (squash) June 22, 2026 16:06
@dorsha dorsha merged commit b55fdb1 into main Jun 22, 2026
28 checks passed
@dorsha dorsha deleted the chore/bump-core-js-2.64.0 branch June 22, 2026 16:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants