Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 8, 2026

Bumps the patch group with 1 update: unrun.

Updates unrun from 0.2.22 to 0.2.24

Release notes

Sourced from unrun's releases.

v0.2.24

   🐞 Bug Fixes

    View changes on GitHub

v0.2.23

   🚀 Features

    View changes on GitHub
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patch group with 1 update: [unrun](https://github.com/Gugustinette/unrun).


Updates `unrun` from 0.2.22 to 0.2.24
- [Release notes](https://github.com/Gugustinette/unrun/releases)
- [Commits](Gugustinette/unrun@v0.2.22...v0.2.24)

---
updated-dependencies:
- dependency-name: unrun
  dependency-version: 0.2.24
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added automated dependencies Pull requests that update a dependency file labels Jan 8, 2026
@socket-security
Copy link

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm unrun is 98.0% likely obfuscated

Confidence: 0.98

Location: Package overview

From: pnpm-lock.yamlnpm/[email protected]npm/[email protected]

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@github-actions
Copy link

github-actions bot commented Jan 8, 2026

📊 Benchmark Results

get-sync.bench.ts

getSync() > random keys - small key size (100 records)

Implementation Rank Operations/sec Mean (ms) Min (ms) Max (ms) RME (%) Samples
🥇 lmdb 1 20.97K ops/sec 47.68 41.64 595.439 1.07 10,487
🥈 rocksdb 2 4.28K ops/sec 233.489 199.665 24,022.981 9.45 2,142

getSync() > sequential keys - small key size (100 records)

Implementation Rank Operations/sec Mean (ms) Min (ms) Max (ms) RME (%) Samples
🥇 lmdb 1 24.36K ops/sec 41.05 35.62 7,839.117 3.19 12,181
🥈 rocksdb 2 4.66K ops/sec 214.383 205.139 674.06 0.237 2,333

ranges.bench.ts

getRange() > small range (100 records, 50 range)

Implementation Rank Operations/sec Mean (ms) Min (ms) Max (ms) RME (%) Samples
🥇 lmdb 1 23.53K ops/sec 42.50 37.32 856.082 0.996 11,766
🥈 rocksdb 2 3.58K ops/sec 279.391 251.425 787.699 1.25 1,791

realistic-load.bench.ts

Realistic write load with workers > write variable records with transaction log

Implementation Rank Operations/sec Mean (ms) Min (ms) Max (ms) RME (%) Samples
🥇 rocksdb 1 190.47 ops/sec 5,250.213 69.20 140,716.4 44.60 384
🥈 lmdb 2 25.87 ops/sec 38,656.822 327.396 1,223,878.243 137.215 64.00

transaction-log.bench.ts

Transaction log > read 100 iterators while write log with 100 byte records

Implementation Rank Operations/sec Mean (ms) Min (ms) Max (ms) RME (%) Samples
🥇 rocksdb 1 28.83K ops/sec 34.68 17.06 528.917 0.792 14,416
🥈 lmdb 2 407.24 ops/sec 2,455.557 143.934 8,176.504 5.65 204

Transaction log > read one entry from random position from log with 1000 100 byte records

Implementation Rank Operations/sec Mean (ms) Min (ms) Max (ms) RME (%) Samples
🥇 rocksdb 1 559.82K ops/sec 1.79 1.56 338.116 0.356 279,911
🥈 lmdb 2 291.22K ops/sec 3.43 1.77 8,011.315 5.14 145,611

worker-put-sync.bench.ts

putSync() > random keys - small key size (100 records, 10 workers)

Implementation Rank Operations/sec Mean (ms) Min (ms) Max (ms) RME (%) Samples
🥇 rocksdb 1 858.90 ops/sec 1,164.283 1,010.921 1,887.546 0.322 1,718
🥈 lmdb 2 0.94 ops/sec 1,061,686.703 880,691.904 1,118,312.11 4.67 10.00

worker-transaction-log.bench.ts

Transaction log with workers > write log with 100 byte records

Implementation Rank Operations/sec Mean (ms) Min (ms) Max (ms) RME (%) Samples
🥇 rocksdb 1 18.16K ops/sec 55.07 30.58 5,957.208 0.835 36,315
🥈 lmdb 2 805.60 ops/sec 1,241.31 293.523 12,548.201 5.23 1,613

Results from commit cb23387

@cb1kenobi cb1kenobi merged commit 1150b50 into main Jan 8, 2026
20 checks passed
@cb1kenobi cb1kenobi deleted the dependabot/npm_and_yarn/patch-fb3552c12f branch January 8, 2026 15:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants