bito-code-review[bot] commented on PR #42804:
URL: https://github.com/apache/superset/pull/42804#issuecomment-5199113162
<!-- Bito Reply -->
The pull request already includes a comment in `.github/dependabot.yml`
explaining why `simple-zstd` is pinned to version 1.4.2. This comment serves as
the documentation for why the package should not be bumped, addressing the
concern about preventing accidental upgrades.
**.github/dependabot.yml**
```
# v2.0.0 renamed ZSTDDecompress to decompress and made it async, breaking
# the webpack dev proxy (see #38662, #39138, #39139). Dependabot
reopened
# the same bump in #39369 after the first revert, so pin it here
instead
# of relying on a package.json comment (package.json is JSON and can't
# hold comments). Remove this once the proxy code is updated to await
# the async decompress() API.
- dependency-name: "simple-zstd"
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
