[Snyk] Upgrade @tamagui/config from 1.108.0 to 1.132.15 #8173

revan-zhang · 2025-08-23T07:16:43Z

Snyk has created this PR to upgrade @tamagui/config from 1.108.0 to 1.132.15.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 318 versions ahead of your current version.
The recommended version was released a month ago.

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @tamagui/config from 1.108.0 to 1.132.15. See this package in yarn: @tamagui/config See this project in Snyk: https://app.snyk.io/org/rayston92/project/36b8ecf2-a391-4de8-a4da-442218fe4f1a?utm_source=github&utm_medium=referral&page=upgrade-pr

coderabbitai · 2025-08-23T07:16:50Z

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing Touches

🧪 Generate unit tests

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch snyk-upgrade-a9358b393b3593ba46cc75f64442d0ac

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>, please review it.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
Add @coderabbitai summary or Summary to generate the high-level summary at a specific location in the PR description.
Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
Please see the configuration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Status, Documentation and Community

Visit our Status Page to check the current availability of CodeRabbit.
Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

revan-zhang · 2025-08-23T07:17:20Z

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

✅ license/snyk check is complete. No issues have been found. (View Details)

socket-security · 2025-08-23T07:18:04Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@esbuild/aix-ppc64@0.23.0
	@esbuild/android-arm64@0.23.0
	@esbuild/darwin-arm64@0.23.0
	@esbuild/darwin-x64@0.23.0
	@esbuild/freebsd-arm64@0.23.0
	@esbuild/freebsd-x64@0.23.0
	@esbuild/linux-arm@0.23.0
	@esbuild/linux-arm64@0.23.0
	@esbuild/linux-ia32@0.23.0
	@esbuild/linux-loong64@0.23.0
	@esbuild/linux-mips64el@0.23.0
	@esbuild/linux-ppc64@0.23.0
	@esbuild/linux-riscv64@0.23.0
	@esbuild/linux-s390x@0.23.0
	@esbuild/linux-x64@0.23.0
	@esbuild/openbsd-arm64@0.23.0
	@esbuild/openbsd-x64@0.23.0
	@esbuild/sunos-x64@0.23.0
	@esbuild/win32-arm64@0.23.0
	@esbuild/win32-ia32@0.23.0
	@esbuild/win32-x64@0.23.0
	@esbuild/netbsd-x64@0.23.0
	electron-check-biometric-auth-changed@0.0.6
	@emotion/memoize@0.8.1
	@babel/plugin-transform-react-jsx-development@7.22.5
	@babel/plugin-syntax-async-generators@7.8.4
	@babel/plugin-syntax-bigint@7.8.3
	@babel/plugin-syntax-import-meta@7.10.4
	@babel/plugin-syntax-json-strings@7.8.3
	@babel/plugin-syntax-logical-assignment-operators@7.10.4
	@babel/plugin-syntax-nullish-coalescing-operator@7.8.3
	@babel/plugin-syntax-numeric-separator@7.10.4
	@babel/plugin-syntax-object-rest-spread@7.8.3
See 232 more rows in the dashboard

View full report

socket-security · 2025-08-23T07:18:05Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		`@electron/[email protected]` has an HTTP dependency. Dependency: @electron/node-gyp @https://github.com/electron/node-gyp#06b29aafb7708acef8b3669835c8a7857ebc92d2 Location: Package overview From: `?` → `npm/[email protected]` → `npm/@electron/[email protected]` ℹ Read more on: This package \| This alert \| What are http dependencies? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `[email protected]`. Suggestion: Publish the HTTP URL dependency to npm or a private package repository and consume it from there. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@electron/[email protected]`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		`[email protected]` has Obfuscated code. Confidence: 0.96 Location: Package overview From: `?` → `npm/[email protected]` → `npm/[email protected]` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `[email protected]`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/[email protected]`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

revan-zhang requested review from ezailWang, huhuanming, originalix and sidmorizon as code owners August 23, 2025 07:16

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Snyk] Upgrade @tamagui/config from 1.108.0 to 1.132.15 #8173

[Snyk] Upgrade @tamagui/config from 1.108.0 to 1.132.15 #8173

revan-zhang commented Aug 23, 2025

Uh oh!

coderabbitai bot commented Aug 23, 2025

Review skipped

Chat

Support

CodeRabbit Commands (Invoked using PR/Issue comments)

Other keywords and placeholders

CodeRabbit Configuration File (`.coderabbit.yaml`)

Status, Documentation and Community

Uh oh!

revan-zhang commented Aug 23, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Aug 23, 2025

Uh oh!

socket-security bot commented Aug 23, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

[Snyk] Upgrade @tamagui/config from 1.108.0 to 1.132.15 #8173

Are you sure you want to change the base?

[Snyk] Upgrade @tamagui/config from 1.108.0 to 1.132.15 #8173

Conversation

revan-zhang commented Aug 23, 2025

Snyk has created this PR to upgrade @tamagui/config from 1.108.0 to 1.132.15.

Uh oh!

coderabbitai bot commented Aug 23, 2025

Review skipped

Chat

Support

CodeRabbit Commands (Invoked using PR/Issue comments)

Other keywords and placeholders

CodeRabbit Configuration File (.coderabbit.yaml)

Status, Documentation and Community

Uh oh!

revan-zhang commented Aug 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🎉 Snyk checks have passed. No issues have been found so far.

Uh oh!

socket-security bot commented Aug 23, 2025

Uh oh!

socket-security bot commented Aug 23, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

CodeRabbit Configuration File (`.coderabbit.yaml`)

revan-zhang commented Aug 23, 2025 •

edited

Loading