Skip to content

chore(deps): upgrade chokidar to v5 - #3730

Closed
Larslllllll wants to merge 2 commits into
resend:canaryfrom
Larslllllll:chore/upgrade-chokidar-v5
Closed

Larslllllll wants to merge 2 commits into
resend:canaryfrom
Larslllllll:chore/upgrade-chokidar-v5

Conversation

@Larslllllll

@Larslllllll Larslllllll commented Sep 5, 2026 •

Copy link
Copy Markdown

Summary

Fixes #3728. chokidar v4.0.3 was released without npm provenance, causing pnpm with trustPolicy: no-downgrade to reject the package:

Failed to resolve dependency: High-risk trust downgrade for chokidar@4.0.3

chokidar v5.0.0 includes provenance and requires Node.js >=20.19, which is satisfied by the existing >=20.0.0 engine constraint.

Changes

  • packages/react-email/package.json: Updated chokidar from ^4.0.3 to ^5.0.0

Fixes #3728.


Summary by cubic

Upgrades chokidar to v5 so pnpm with trustPolicy: no-downgrade accepts it, and bundles a Next.js security bump, markdown endpoints for LLM agents, a Section padding fix, an editor alignment fix, and a new ZeptoMail example. Section now keeps padding on the same element as className so Tailwind responsive variants can override it; the editor's Left alignment button resolves inherited alignment instead of reporting a false left, and explicit left alignment now persists to HTML.

Dependencies

  • chokidar v4.0.3 was released without npm provenance, so pnpm rejected it under trustPolicy: no-downgrade; v5.0.0 includes provenance and requires Node >=20.19, which the existing engine constraint already satisfies.
  • Next.js 16.3.3 fixes critical-severity vulnerabilities (GHSA-2xp9-vwfh-vxw4, CVE-2026-75604).

New Features

  • Components and templates pages are served as markdown via new /api/markdown routes, with Accept negotiation and .md URL rewrites handled by proxy middleware.
  • robots.txt now emits a Content-Signal header for AI agents.
  • Added a ZeptoMail example.

Written for commit 483dcbb. Summary will update on new commits.

Review in cubic

Pilars Agent added 2 commits September 6, 2026 01:07
…e override

Before this fix, the Section component split padding styles to <td>
while keeping className on <table>. This caused Tailwind responsive
variants (e.g. max-sm:px-5) to be applied to <table> while base
padding sat on <td>, making responsive overrides impossible.

After: all styles (including padding) are passed through to <table>,
matching where className is applied. This allows responsive variants
to properly override base padding via CSS cascade.

Fixes #3693.
Fixes #3728. chokidar v4.0.3 lacks npm provenance causing
pnpm trustPolicy no-downgrade to reject the package.
v5 requires Node.js >=20.19, satisfied by the existing >=20.0.0 engine constraint.
@vercel

vercel Bot commented Sep 5, 2026

Copy link
Copy Markdown
Contributor

Someone is attempting to deploy a commit to the resend Team on Vercel.

A member of the Team first needs to authorize it.

@changeset-bot

changeset-bot Bot commented Sep 5, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 483dcbb

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@react-email/editor Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@github-actions github-actions Bot added the linear-synced PR has been synced to Linear label Sep 6, 2026
@gabrielmfern

Copy link
Copy Markdown
Member

can you point this at canary instead?

closing the duplicate #3731

@felipefreitag
felipefreitag changed the base branch from main to canary September 23, 2026 13:32
@felipefreitag

Copy link
Copy Markdown
Member

Hey, this one was targeting main instead of canary and it's missing a changeset; closing it in favor of #3755

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

linear-synced PR has been synced to Linear

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Please upgrade chokidar to v5

3 participants