Skip to content

chore(deps): bump ky from 1.14.3 to 2.0.2 in /packages/client - #216

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/packages/client/ky-2.0.2
Open

chore(deps): bump ky from 1.14.3 to 2.0.2 in /packages/client#216
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/packages/client/ky-2.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps ky from 1.14.3 to 2.0.2.

Release notes

Sourced from ky's releases.

v2.0.2

  • Fix init hook URLSearchParams deletions add0703
  • Fix tuple searchParams mutations leaking across init-hook requests (#861) 346f898

sindresorhus/ky@v2.0.1...v2.0.2

v2.0.1

  • Improve compatibility with custom fetch implementations (#858) 2971991
  • Fix fetch option forwarding 2df9b7e

sindresorhus/ky@v2.0.0...v2.0.1

v2.0.0

Breaking

  • Require Node.js 22 f1da0fc
  • Unify hook signatures around a single state object (#827) ecdd45e
    • All hooks now receive a single {request, options, retryCount, ...} state object instead of separate arguments.
  • Rename prefixUrl to prefix, and allow leading slashes in input (#606) 1f2ad7f
  • Make beforeError hook receive all errors, not just HTTPError (#829) 101c74b
  • Make .json() throw on empty bodies and 204 responses instead of returning an empty string (#854) 1b8e1ff
  • Merge searchParams with input URL instead of replacing (#840) 29e78fe
  • Strip Ky-specific properties from normalized options passed to hooks (#826) 433febd
  • Treat hook errors as fatal outside retry handling (#834) 90c6d00

New

  • Add totalTimeout option for an overall timeout across all retries (#848) c20d7c7
  • Add baseUrl option for standard URL resolution (#606) 1f2ad7f
    • baseUrl uses standard URL resolution: /users means origin-root, users means relative to the base path.
    • prefix does simple string joining first, so /users and users both append to the prefix the same way. Use it only when you want that behavior.
  • Add data property to HTTPError with pre-parsed response body (#823) 1341f5c
    • The response body is automatically consumed and parsed, fixing resource leaks and making error details immediately available without awaiting (#642).
  • Add init hook (#841) 87c6740
  • Add NetworkError class and tighten retry logic (#842) eaf0b80
  • Add Standard Schema validation for .json() (#830) 94741a9
  • Add replaceOption helper for .extend() (#846) bb8412e
  • Add request and options to beforeError hook state (#835) 01e0b85
  • Add request/response context to parseJson option (#849) 3713ce8
  • Don't throw HTTPError for opaque responses from no-cors requests (#847) 1d15eb6
  • Gracefully ignore onUploadProgress when request streams are unsupported (#845) 1e38ff4

Fixes

  • Fix beforeRequest hooks being skipped when a Request is returned (#832) aec65db
  • Ignore non-Errors returned by beforeError hooks (#833) a541fc0

... (truncated)

Commits


Note

Medium Risk
Major-version HTTP client upgrade can break ServiceClient (prefixUrl) and other ky usage without code changes; impact is limited to outbound requests in the client package.

Overview
Updates the ky HTTP client dependency in @polymarket/client from ^1.14.3 to ^2.0.2 (major release).

No application code changes are included in this diff. Ky v2 introduces breaking API changes (e.g. prefixUrl renamed to prefix, hook signature changes, stricter .json() behavior). The client still configures ky.create({ prefixUrl: ... }) in ServiceClient, so builds or runtime behavior should be verified against v2 unless a follow-up migration lands with this bump.

Reviewed by Cursor Bugbot for commit 73393d5. Bugbot is set up for automated code reviews on this repo. Configure here.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 17, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 6affa5e. Configure here.

"it-merge": "^3.0.14",
"it-pushable": "^3.2.3",
"ky": "^1.14.3",
"ky": "^2.0.2",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ky v2 breaks prefixUrl usage

High Severity

Bumping ky to v2 renames prefixUrl to prefix, but ServiceClient still creates its instance with prefixUrl. After the upgrade that option is ignored, so every service-scoped request loses its configured root URL and is sent to the wrong place.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 6affa5e. Configure here.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/client/ky-2.0.2 branch 3 times, most recently from cb06820 to 48e2dbb Compare July 24, 2026 10:00
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/client/ky-2.0.2 branch 3 times, most recently from 54853e6 to 566e2d6 Compare July 31, 2026 10:14
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/client/ky-2.0.2 branch 3 times, most recently from d903d82 to f593c91 Compare August 7, 2026 14:02
Bumps [ky](https://github.com/sindresorhus/ky) from 1.14.3 to 2.0.2.
- [Release notes](https://github.com/sindresorhus/ky/releases)
- [Commits](sindresorhus/ky@v1.14.3...v2.0.2)

---
updated-dependencies:
- dependency-name: ky
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/client/ky-2.0.2 branch from f593c91 to 73393d5 Compare August 13, 2026 15:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants