Skip to content

build(deps): bump ky from 1.12.0 to 2.1.0 - #2260

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/ky-1.14.0
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/ky-1.14.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 7, 2025 •

Copy link
Copy Markdown
Contributor

Bumps ky from 1.12.0 to 2.1.0.

Release notes

Sourced from ky's releases.

v2.1.0

Improvements

  • Add QUERY method support (#873) 6edddd9
  • Allow parseJson to handle empty bodies (#877) 294fe63
  • Reject malformed HTTP URLs with baseUrl be60db5
  • Improve Retry-After handling (#874) 3419113
  • Harden retry c426f19

Fixes

  • Fix progress callbacks for empty request and response bodies (#881) 99644d0
  • Fix signal replacement when extending instances (#880) 0bda554
  • Fix extend() dropping numeric retry limit when merging with an object (#867) 06375ef
  • Fix handling of Safari errors with domains 61d6d66

sindresorhus/ky@v2.0.2...v2.1.0

v2.0.2

  • Fix init hook URLSearchParams deletions add0703
  • Fix tuple searchParams mutations leaking across init-hook requests (#861) 346f898

sindresorhus/ky@v2.0.1...v2.0.2

v2.0.1

  • Improve compatibility with custom fetch implementations (#858) 2971991
  • Fix fetch option forwarding 2df9b7e

sindresorhus/ky@v2.0.0...v2.0.1

v2.0.0

Breaking

  • Require Node.js 22 f1da0fc
  • Unify hook signatures around a single state object (#827) ecdd45e
    • All hooks now receive a single {request, options, retryCount, ...} state object instead of separate arguments.
  • Rename prefixUrl to prefix, and allow leading slashes in input (#606) 1f2ad7f
  • Make beforeError hook receive all errors, not just HTTPError (#829) 101c74b
  • Make .json() throw on empty bodies and 204 responses instead of returning an empty string (#854) 1b8e1ff
  • Merge searchParams with input URL instead of replacing (#840) 29e78fe
  • Strip Ky-specific properties from normalized options passed to hooks (#826) 433febd
  • Treat hook errors as fatal outside retry handling (#834) 90c6d00

New

... (truncated)

Commits
  • d27ad21 2.1.0
  • 99644d0 Fix progress callbacks for empty request and response bodies (#881)
  • 0bda554 Fix signal replacement when extending instances (#880)
  • 294fe63 Allow parseJson to handle empty bodies (#877)
  • c426f19 Harden retry
  • be60db5 Reject malformed HTTP URLs with baseUrl
  • 3419113 Improve Retry-After handling (#874)
  • 06375ef Fix extend() dropping numeric retry limit when merging with an object (#867)
  • 6edddd9 Add QUERY method support (#873)
  • f37e82c Fix flaky totalTimeout retry test
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 7, 2025
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ky-1.14.0 branch from 49e6f03 to 52b1dac Compare November 7, 2025 09:22
@grzanka

grzanka commented Nov 10, 2025

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ky-1.14.0 branch 4 times, most recently from b9799dc to e2882b1 Compare November 12, 2025 07:48
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ky-1.14.0 branch 4 times, most recently from 7788b82 to 1e495bb Compare November 21, 2025 07:14
@grzanka

grzanka commented Nov 21, 2025

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ky-1.14.0 branch 3 times, most recently from 1169674 to 0730c50 Compare November 25, 2025 09:29
@grzanka

grzanka commented Mar 31, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ky-1.14.0 branch from 0730c50 to 85c22b9 Compare March 31, 2026 07:21
@martastn

martastn commented Sep 20, 2026 •

Copy link
Copy Markdown
Contributor

Review:

ky is the small fetch wrapper this frontend uses for HTTP requests. This PR bumps it from 1.12.0 to 1.14.3- two minor releases plus a few patches. I compared the changelog and commit history across these versions: it's all new opt-in features and internal bug fixes, no breaking changes.

Where ky is actually used in this repo:

  • src/services/AuthService.tsx- the core auth logic. Creates the main instance via ky.create({ prefixUrl, parseJson, hooks: { afterResponse } }), plus an .extend({ retry: 0 }) variant used for server-reachability checks. The afterResponse hook reads response.json() and rejects the promise on error statuses.
  • src/services/RemoteWorkerSimulationService.ts- uses the shared instance with timeout: 30000 and searchParams (plain objects and URLSearchParams) for simulation-related requests. ky itself is only imported here as a type (KyInstance).

Why this is safe:

  • New APIs introduced in 1.13/1.14 (context, retry.shouldRetry, retry.jitter, retry.retryOnTimeout, ky.retry(), throwHttpErrors as a function) aren't set anywhere in our code, so they can't affect us either way.
  • The only change that touches a pattern we actually use is the 1.14.2 fix for response-body cleanup after afterResponse hooks- the same hook shape used in AuthService.tsx. It only makes ky cancel the response stream more reliably when a hook throws/rejects; it doesn't change what our code observes (the promise still rejects and our .catch() still runs the same way).
  • The searchParams/Request-wrapping refactor is an internal implementation detail- for plain objects and URLSearchParams (how we call it), the resulting request is identical.
  • Other patch fixes (retry.methods casing, backoffLimit handling, empty context in JSON body) touch options we never configure.
  • Installed ky@1.14.3 locally on this branch and ran npx tsc --noEmit- passes cleanly, so no type regressions in how we consume HTTPError, KyInstance, or the hook/options types.

Confirmed safe to merge.

@martastn martastn self-assigned this Sep 20, 2026
@martastn

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot dependabot Bot changed the title build(deps): bump ky from 1.12.0 to 1.14.0 build(deps): bump ky from 1.12.0 to 2.1.0 Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ky-1.14.0 branch from 85c22b9 to 41fabdd Compare September 21, 2026 15:54
@grzanka

grzanka commented Sep 21, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [ky](https://github.com/sindresorhus/ky) from 1.12.0 to 2.1.0.
- [Release notes](https://github.com/sindresorhus/ky/releases)
- [Commits](sindresorhus/ky@v1.12.0...v2.1.0)

---
updated-dependencies:
- dependency-name: ky
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ky-1.14.0 branch from 41fabdd to 3a32db5 Compare September 21, 2026 17:33

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants