Skip to content

[Snyk] Upgrade swc-loader from 0.2.3 to 0.2.7#11672

Open
q1blue wants to merge 1 commit intomasterfrom
snyk-upgrade-b838e3955735fd7c03ef884c78d2b0e3
Open

[Snyk] Upgrade swc-loader from 0.2.3 to 0.2.7#11672
q1blue wants to merge 1 commit intomasterfrom
snyk-upgrade-b838e3955735fd7c03ef884c78d2b0e3

Conversation

@q1blue
Copy link
Collaborator

@q1blue q1blue commented Feb 6, 2026

snyk-top-banner

Snyk has created this PR to upgrade swc-loader from 0.2.3 to 0.2.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 3 versions ahead of your current version.

  • The recommended version was released 23 days ago.


Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:


EntelligenceAI PR Summary

Updates swc-loader dependency in Storybook from version 0.2.3 to 0.2.7 with associated lockfile changes.

  • Bumped swc-loader version to ^0.2.7 in package.json
  • Added new transitive dependency @swc/counter@^0.1.3 in yarn.lock
  • Updated checksums for swc-loader package
  • Modified TypeScript patch resolution hash
  • Maintains compatibility with existing peer dependencies (@swc/core and webpack)

@codesandbox
Copy link

codesandbox bot commented Feb 6, 2026

Review or Edit in CodeSandbox

Open the branch in Web EditorVS CodeInsiders

Open Preview

@snyk-io
Copy link

snyk-io bot commented Feb 6, 2026

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@socket-security
Copy link

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
License policy violation: npm atob under CC-BY-3.0

License: CC-BY-3.0 - the applicable license policy does not allow this license (4) (package/LICENSE.DOCS)

From: ?npm/atob@2.1.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/atob@2.1.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@entelligence-ai-pr-reviews
Copy link

Walkthrough

This PR updates the swc-loader dependency in the Storybook package from version 0.2.3 to 0.2.7. This is a minor version bump within the 0.2.x range that maintains backward compatibility while likely including bug fixes and performance improvements for the SWC (Speedy Web Compiler) loader used in Storybook's build process. The update introduces a new transitive dependency on @swc/counter@^0.1.3 and updates the corresponding checksums in the lockfile. This is a routine dependency maintenance update that keeps the build tooling current.

Changes

File(s) Summary
storybook/package.json Updated swc-loader dependency version from ^0.2.3 to ^0.2.7.
storybook/yarn.lock Updated swc-loader from version 0.2.3 to 0.2.7, added new dependency @swc/counter@^0.1.3 with its checksum and metadata, updated checksums for swc-loader, and included minor hash change in TypeScript patch resolution.

Sequence Diagram

This diagram shows the interactions between components:

sequenceDiagram
    participant Webpack
    participant swc-loader as swc-loader (v0.2.7)
    participant Counter as @swc/counter (NEW)
    participant SWC as @swc/core
    
    Note over Webpack,SWC: Storybook Build Process
    
    Webpack->>swc-loader: Load and process source files
    activate swc-loader
    
    Note over swc-loader,Counter: Version 0.2.7 introduces counter dependency
    
    swc-loader->>Counter: Initialize counter for tracking
    activate Counter
    Counter-->>swc-loader: Counter instance ready
    deactivate Counter
    
    swc-loader->>SWC: Transform code using SWC compiler
    activate SWC
    
    loop For each file transformation
        SWC->>SWC: Parse and transform source code
        swc-loader->>Counter: Track transformation metrics
        activate Counter
        Counter-->>swc-loader: Metrics recorded
        deactivate Counter
    end
    
    SWC-->>swc-loader: Transformed code
    deactivate SWC
    
    swc-loader-->>Webpack: Processed module
    deactivate swc-loader
    
    Note over Webpack: Bundle continues with transformed code
Loading

▶️AI Code Reviews for VS Code, Cursor, Windsurf
Install the extension

Note for Windsurf Please change the default marketplace provider to the following in the windsurf settings:

Marketplace Extension Gallery Service URL: https://marketplace.visualstudio.com/_apis/public/gallery

Marketplace Gallery Item URL: https://marketplace.visualstudio.com/items

Entelligence.ai can learn from your feedback. Simply add 👍 / 👎 emojis to teach it your preferences. More shortcuts below

Emoji Descriptions:

  • ⚠️ Potential Issue - May require further investigation.
  • 🔒 Security Vulnerability - Fix to ensure system safety.
  • 💻 Code Improvement - Suggestions to enhance code quality.
  • 🔨 Refactor Suggestion - Recommendations for restructuring code.
  • ℹ️ Others - General comments and information.

Interact with the Bot:

  • Send a message or request using the format:
    @entelligenceai + *your message*
Example: @entelligenceai Can you suggest improvements for this code?
  • Help the Bot learn by providing feedback on its responses.
    @entelligenceai + *feedback*
Example: @entelligenceai Do not comment on `save_auth` function !

Also you can trigger various commands with the bot by doing
@entelligenceai command

The current supported commands are

  1. config - shows the current config
  2. retrigger_review - retriggers the review

More commands to be added soon.

@gemini-code-assist
Copy link

Summary of Changes

Hello @q1blue, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request primarily focuses on upgrading the swc-loader dependency within the storybook project. This update ensures the project utilizes the latest features and improvements available in swc-loader, potentially enhancing performance and compatibility. The yarn.lock file is also updated to maintain consistency with the new dependency versions.

Highlights

  • Dependency Upgrade: This PR upgrades the swc-loader dependency from version 0.2.3 to 0.2.7 in the storybook project.
  • Yarn Lockfile Update: The yarn.lock file has been updated to reflect the new version of swc-loader and its dependencies, including the addition of @swc/counter.
  • Potential TypeScript Patch Update: The checksum for a TypeScript patch in yarn.lock has been updated, which may indicate a change in the patch.
Changelog
  • storybook/package.json
    • Updated swc-loader dependency from version 0.2.3 to 0.2.7.
  • storybook/yarn.lock
    • Updated lockfile to reflect changes in swc-loader and its dependencies.
    • Added @swc/counter dependency.
    • Updated checksum for TypeScript patch.
Activity
  • Snyk bot automatically opened this pull request to upgrade the swc-loader dependency.
  • The PR description includes links to Snyk for further information, customization, and settings related to upgrade PRs.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This PR upgrades swc-loader to version 0.2.7 in the storybook package. The change is good, but I've left a comment regarding an inconsistency it introduces, as the same dependency in packages/cli is not updated. Please address this to ensure dependency consistency across the monorepo.

"react-dom": "^17.0.2",
"react-hot-loader": "^4.13.0",
"swc-loader": "^0.2.3"
"swc-loader": "^0.2.7"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

While updating swc-loader here is correct, the same dependency exists in packages/cli/package.json and is still at version ^0.2.3. To maintain consistency and avoid potential issues with multiple versions of the same dependency, please also update swc-loader to ^0.2.7 in packages/cli/package.json.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants