Skip to content

chore(deps): Bump amqplib from 0.10.9 to 1.0.3 - #1582

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/amqplib-1.0.3
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/amqplib-1.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 9, 2026

Copy link
Copy Markdown
Contributor

Bumps amqplib from 0.10.9 to 1.0.3.

Changelog

Sourced from amqplib's changelog.

v1.0.3

  • Fix AssertionError crash when backpressure occurs while draining newStreams in Mux (fixes #841)

v1.0.2

  • Replace url-parse with WHATWG URL API

v1.0.1

  • Fix TLS connection failure when connecting to an AMQPS broker using an IP address (IPv4 or IPv6) — setting servername to an IP is not permitted by TLS SNI and throws ERR_INVALID_ARG_VALUE in Node.js 25+

v1.0.0

  • BREAKING: Update minimum Node.js requirement to v18
  • Introduce Biome formatter for consistent code formatting
  • Add automated formatting via pre-commit hooks using Lefthook
  • Format entire codebase with standardised formatting rules
  • Add npm format script for manual code formatting
  • Enable noUnusedFunctionParameters lint rule and fix all violations
  • Enable noUnusedVariables lint rule and remove all unused variables from codebase
  • Replace all var declarations with let/const for modern JavaScript standards
  • Ensure parseInt calls use explicit radix parameter for clarity and reliability
  • Fix precision loss in test data generators by using JavaScript safe integer limits
  • Add block scoping to switch statement cases to prevent variable declaration issues
  • Enforce const usage for variables that are never reassigned
  • Add node: protocol prefix to Node.js builtin module imports for clarity
  • Use modern exponentiation operator (**) instead of Math.pow()
  • Replace string concatenation with modern template literals
  • Remove redundant 'use strict' directives as modules are automatically in strict mode
  • Refactor assignment-in-expression patterns to improve code clarity and readability
  • Replace comma operators with individual statements for clearer, more readable code
  • Split comma-separated variable declarations into individual statements for consistency
  • Replace Object.prototype.hasOwnProperty() with safer Object.hasOwn() method
  • Enforce strict equality checks (=== and !==) instead of loose equality (== and !=)
  • Replace global isNaN with Number.isNaN for safer type checking
  • Ensure no variable redeclarations exist to prevent shadowing issues
  • Replace global isFinite with Number.isFinite for safer numeric validation
  • Enable useArrowFunction lint rule to prefer arrow functions for cleaner syntax
  • Enable noUselessCatch lint rule to prevent useless catch blocks that only rethrow errors
  • Enable noArguments rule to enforce modern rest parameters instead of legacy arguments object
  • Enable bracketSpacing formatting rule to add spaces inside object literals
  • Migrate test suite from Mocha to Node.js built-in test runner
Commits
  • 6a1e54f 1.0.3
  • c20957d Update changelog in preparation for v1.0.3
  • 45100f7 Fix AssertionError crash when backpressure empties newStreams in Mux
  • b2cfaa2 1.0.2
  • b03e914 Update changelog in preparation for v1.0.2
  • 98d2404 Replace url-parse with WHATWG URL API
  • 0542670 Add URI spec conformance tests and replace credential unit tests
  • e7d14cc 1.0.1
  • 81e9c48 Update CHANGELOG.md
  • ed1553e Update README.md
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 9, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner April 9, 2026 05:26
@coderabbitai

coderabbitai Bot commented Apr 9, 2026

Copy link
Copy Markdown
📝 Walkthrough

Walkthrough

The amqplib dependency version in package.json was updated from ^0.10.9 to ^1.0.3. This is a major version bump that changes the AMQP client library implementation installed in the project. No other configuration, scripts, or dependencies were modified.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Linked Issues check ⚠️ Warning The linked issue (#841) concerns bumping @aws-sdk/credential-providers, which is completely unrelated to this PR's objective of updating amqplib. Verify that the linked issue is correct; this PR updates amqplib, not @aws-sdk/credential-providers. Link the correct issue or remove the incorrect link.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly summarizes the main change: bumping amqplib from version 0.10.9 to 1.0.3, which matches the changeset.
Out of Scope Changes check ✅ Passed All changes are in-scope: only the amqplib dependency version in package.json was modified, with no unrelated code changes.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description check ✅ Passed The pull request description provides detailed information about the amqplib dependency update from 0.10.9 to 1.0.3, including a comprehensive changelog and commit history that directly relate to the changes in package.json.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/npm_and_yarn/amqplib-1.0.3

Comment @coderabbitai help to get the list of available commands and usage tips.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/amqplib-1.0.3 branch 3 times, most recently from 67f19aa to 6cd3377 Compare April 16, 2026 05:26
Bumps [amqplib](https://github.com/amqp-node/amqplib) from 0.10.9 to 1.0.3.
- [Release notes](https://github.com/amqp-node/amqplib/releases)
- [Changelog](https://github.com/amqp-node/amqplib/blob/main/CHANGELOG.md)
- [Commits](amqp-node/amqplib@v0.10.9...v1.0.3)

---
updated-dependencies:
- dependency-name: amqplib
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/amqplib-1.0.3 branch from 6cd3377 to c128a95 Compare April 16, 2026 05:29
@dependabot @github

dependabot Bot commented on behalf of github Apr 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like amqplib is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 19, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/amqplib-1.0.3 branch April 19, 2026 21:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants