chore(deps): bump ical.js from 2.2.0 to 2.2.1#311
chore(deps): bump ical.js from 2.2.0 to 2.2.1#311dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [ical.js](https://github.com/kewisch/ical.js) from 2.2.0 to 2.2.1. - [Release notes](https://github.com/kewisch/ical.js/releases) - [Changelog](https://github.com/kewisch/ical.js/blob/main/CHANGELOG.md) - [Commits](kewisch/ical.js@v2.2.0...v2.2.1) --- updated-dependencies: - dependency-name: ical.js dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
There was a problem hiding this comment.
Greptile Summary
This PR is a routine dependency update that bumps the ical.js library from version 2.2.0 to 2.2.1. This is a patch release that includes several bug fixes and improvements:
- TypeScript JSDoc documentation fixes for better developer experience
- Performance improvement to prevent infinite loops when processing recurring events with no occurrences over a 28-year period
- Bug fix for
BYYEARDAY=366edge cases that could cause dates to wrap incorrectly into the next year - Resolution of a regression in vCard 3 text value handling
The ical.js library is used within the DeltaHacks Portal for handling iCalendar data, which aligns with the application's event management functionality. The portal includes schedule management features and has an ICS file (Final_Deltahacks_Schedule_-_FINAL.ics) in the public directory, indicating calendar functionality integration. This dependency update ensures the calendar parsing and event handling components have the latest bug fixes and stability improvements.
Important Files Changed
Changed Files
| Filename | Score | Overview |
|---|---|---|
| package.json | 4/5 | Minor dependency version bump for ical.js from 2.2.0 to 2.2.1 with bug fixes |
Confidence score: 4/5
- This PR is safe to merge with minimal risk as it's a patch version update with only bug fixes
- Score reflects the routine nature of dependency updates and the stability improvements included
- No files require special attention as this is a straightforward dependency bump
1 file reviewed, no comments
fvcci
left a comment
There was a problem hiding this comment.
I think it's better if we just remove ical.js and ical-js-parser entirely. We don't actually need these deps anymore
see this: #389 |
Bumps ical.js from 2.2.0 to 2.2.1.
Release notes
Sourced from ical.js's releases.
Commits
277d52cBump version for 2.2.1de1b553Update Dependencies980e22aFix #893, regression in vCard 3 text values.19c1cb8Bump tmp from 0.2.3 to 0.2.4 in the npm_and_yarn groupec04a98Prevent BYYEARDAY=366 from wrapping into the next year. (#906)4dc20d6Bump chai from 5.2.0 to 5.2.17b85626Bump@octokit/corefrom 7.0.2 to 7.0.33107648Bump eslint from 9.30.1 to 9.32.0f63e41aRun updates before installing dependencies638024fBump@stylistic/eslint-pluginfrom 5.1.0 to 5.2.2You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)