Skip to content

chore(deps): bump csv-parse from 5.5.6 to 7.0.2 - #4586

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/csv-parse-7.0.2
Open

chore(deps): bump csv-parse from 5.5.6 to 7.0.2#4586
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/csv-parse-7.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps csv-parse from 5.5.6 to 7.0.2.

Changelog

Sourced from csv-parse's changelog.

7.0.2 (2026-08-02)

Bug Fixes

  • csv-parse: prototype replacement reachable via columns (#497)

Performance Improvements

  • csv-parse: avoid unnecessary allocation in ResizeableBuffer.toString (#495)

7.0.1 (2026-07-02)

Bug Fixes

  • csv-parse: ship stream cjs export (#490)

7.0.0 (2026-06-14)

⚠ WARNING

This version was published by mistake, there is no breaking changes. Also, for some reason, the associated version's changelog included many commit messages from version 6.0.0.

Features

  • csv-parse: delimiter discover (fix #400)
  • csv-parse: delimiter_auto sample
  • csv-parse: desactivate delimiter splitting when empty array
  • csv-parse: dont modify prototype in sync (see #479)
  • csv-parse: export CsvError and normalize_options
  • csv-parse: remove comment about sync parse old usage

Bug Fixes

  • csv-parse: align trim with ECMAScript whitespace (fix #482) (#483)

6.2.1 (2026-03-20)

Bug Fixes

  • csv-parse: prototype pollution with objname option (fix #479)

6.2.0 (2026-03-17)

Features

  • csv-parse: alig info interfaces with js api
  • csv-parse: info bytes_records (fix #446)
  • csv-parse: remove non-existing ts function declaration
  • csv-parse: remove ts usage of all in error type
  • csv-parse: returned type generic for on_record (fix #461 #464 #466) (#468)

... (truncated)

Commits
  • 288c9c6 chore(release): publish
  • 2ad6c07 refactor(csv-parse): rename group_columns_by_name tests
  • eb4d148 fix(csv-parse): prototype replacement reachable via columns (#497)
  • 1d4ed3b perf(csv-parse): avoid unnecessary allocation in ResizeableBuffer.toString (#...
  • 6e0d5a3 chore(release): publish
  • abfe4de build: latest dependencies
  • a5ef896 docs(csv-parse): fix changelog message from previous version
  • 230af8e fix(csv-parse): ship stream cjs export (#490)
  • 3d71f0b chore(release): publish
  • 2ba4897 build: use ts nodenext
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for csv-parse since your current version.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 8, 2026
@cursor

cursor Bot commented Sep 8, 2026 •
edited
Loading

Copy link
Copy Markdown

PR Summary

Medium Risk
Major-version bump on CSV parsing used by import scripts and Temporal workers; parsing edge cases (whitespace/trim, column handling) may differ without compile-time signal.

Overview
Bumps csv-parse from 5.5.6 to 7.0.2 in backend, automatic_projects_discovery_worker, and script_executor_worker, with matching pnpm-lock.yaml updates (including consolidation of duplicate express/send/serve-static lock entries).

There are no application code changes; existing call sites keep using sync csv-parse/sync in backend import scripts and streaming parse({ columns, skip_empty_lines, trim }) in discovery and onboarding flows. The upgrade mainly pulls in upstream fixes (e.g. prototype-pollution hardening, trim behavior aligned with ECMAScript whitespace) that could slightly change how some CSV rows are parsed.

Reviewed by Cursor Bugbot for commit bdf9604. Bugbot is set up for automated code reviews on this repo. Configure here.

@github-actions

github-actions Bot commented Sep 8, 2026

Copy link
Copy Markdown
Contributor

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

  • feat: add user authentication (CM-123)
  • feat: add user authentication (IN-123)

Projects:

  • CM: Community Data Platform
  • IN: Insights

Please add a Jira issue key to your PR title.

@CLAassistant

CLAassistant commented Sep 8, 2026

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/csv-parse-7.0.2 branch 11 times, most recently from 4d3112b to a4deb66 Compare September 18, 2026 09:01
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/csv-parse-7.0.2 branch 6 times, most recently from e1792c6 to 43fc607 Compare September 21, 2026 18:04
@dependabot
chore(deps): bump csv-parse from 5.5.6 to 7.0.2
bdf9604 
Bumps [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) from 5.5.6 to 7.0.2.
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@7.0.2/packages/csv-parse)

---
updated-dependencies:
- dependency-name: csv-parse
  dependency-version: 7.0.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/csv-parse-7.0.2 branch from 43fc607 to bdf9604 Compare September 21, 2026 20:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@CLAassistant