Skip to content

chore(deps): Bump amqplib from 0.10.9 to 1.0.3#1582

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/amqplib-1.0.3
Open

chore(deps): Bump amqplib from 0.10.9 to 1.0.3#1582
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/amqplib-1.0.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 9, 2026

Bumps amqplib from 0.10.9 to 1.0.3.

Changelog

Sourced from amqplib's changelog.

v1.0.3

  • Fix AssertionError crash when backpressure occurs while draining newStreams in Mux (fixes #841)

v1.0.2

  • Replace url-parse with WHATWG URL API

v1.0.1

  • Fix TLS connection failure when connecting to an AMQPS broker using an IP address (IPv4 or IPv6) — setting servername to an IP is not permitted by TLS SNI and throws ERR_INVALID_ARG_VALUE in Node.js 25+

v1.0.0

  • BREAKING: Update minimum Node.js requirement to v18
  • Introduce Biome formatter for consistent code formatting
  • Add automated formatting via pre-commit hooks using Lefthook
  • Format entire codebase with standardised formatting rules
  • Add npm format script for manual code formatting
  • Enable noUnusedFunctionParameters lint rule and fix all violations
  • Enable noUnusedVariables lint rule and remove all unused variables from codebase
  • Replace all var declarations with let/const for modern JavaScript standards
  • Ensure parseInt calls use explicit radix parameter for clarity and reliability
  • Fix precision loss in test data generators by using JavaScript safe integer limits
  • Add block scoping to switch statement cases to prevent variable declaration issues
  • Enforce const usage for variables that are never reassigned
  • Add node: protocol prefix to Node.js builtin module imports for clarity
  • Use modern exponentiation operator (**) instead of Math.pow()
  • Replace string concatenation with modern template literals
  • Remove redundant 'use strict' directives as modules are automatically in strict mode
  • Refactor assignment-in-expression patterns to improve code clarity and readability
  • Replace comma operators with individual statements for clearer, more readable code
  • Split comma-separated variable declarations into individual statements for consistency
  • Replace Object.prototype.hasOwnProperty() with safer Object.hasOwn() method
  • Enforce strict equality checks (=== and !==) instead of loose equality (== and !=)
  • Replace global isNaN with Number.isNaN for safer type checking
  • Ensure no variable redeclarations exist to prevent shadowing issues
  • Replace global isFinite with Number.isFinite for safer numeric validation
  • Enable useArrowFunction lint rule to prefer arrow functions for cleaner syntax
  • Enable noUselessCatch lint rule to prevent useless catch blocks that only rethrow errors
  • Enable noArguments rule to enforce modern rest parameters instead of legacy arguments object
  • Enable bracketSpacing formatting rule to add spaces inside object literals
  • Migrate test suite from Mocha to Node.js built-in test runner
Commits
  • 6a1e54f 1.0.3
  • c20957d Update changelog in preparation for v1.0.3
  • 45100f7 Fix AssertionError crash when backpressure empties newStreams in Mux
  • b2cfaa2 1.0.2
  • b03e914 Update changelog in preparation for v1.0.2
  • 98d2404 Replace url-parse with WHATWG URL API
  • 0542670 Add URI spec conformance tests and replace credential unit tests
  • e7d14cc 1.0.1
  • 81e9c48 Update CHANGELOG.md
  • ed1553e Update README.md
  • Additional commits viewable in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 9, 2026
@dependabot dependabot bot requested a review from a team as a code owner April 9, 2026 05:26
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 9, 2026

Important

Review skipped

Auto incremental reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: lokalise/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: b670248d-d28d-4216-8ba9-ad99ce4c56ba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
📝 Walkthrough

Walkthrough

The amqplib dependency version in package.json was updated from ^0.10.9 to ^1.0.3. This is a major version bump that changes the AMQP client library implementation installed in the project. No other configuration, scripts, or dependencies were modified.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Linked Issues check ⚠️ Warning The linked issue (#841) concerns bumping @aws-sdk/credential-providers, which is completely unrelated to this PR's objective of updating amqplib. Verify that the linked issue is correct; this PR updates amqplib, not @aws-sdk/credential-providers. Link the correct issue or remove the incorrect link.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly summarizes the main change: bumping amqplib from version 0.10.9 to 1.0.3, which matches the changeset.
Out of Scope Changes check ✅ Passed All changes are in-scope: only the amqplib dependency version in package.json was modified, with no unrelated code changes.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description check ✅ Passed The pull request description clearly relates to the changeset, detailing the amqplib dependency version bump from 0.10.9 to 1.0.3 with comprehensive changelog information.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/npm_and_yarn/amqplib-1.0.3

Comment @coderabbitai help to get the list of available commands and usage tips.

Bumps [amqplib](https://github.com/amqp-node/amqplib) from 0.10.9 to 1.0.3.
- [Release notes](https://github.com/amqp-node/amqplib/releases)
- [Changelog](https://github.com/amqp-node/amqplib/blob/main/CHANGELOG.md)
- [Commits](amqp-node/amqplib@v0.10.9...v1.0.3)

---
updated-dependencies:
- dependency-name: amqplib
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/amqplib-1.0.3 branch from 72fd4a8 to 5b90d75 Compare April 9, 2026 05:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants