build(deps-dev): Bump lucide-react from 1.25.0 to 1.27.0 by dependabot[bot] · Pull Request #604 · FailproofAI/failproofai

dependabot · 2026-07-27T21:05:43Z

Bumps lucide-react from 1.25.0 to 1.27.0.

Release notes

Version 1.27.0

What's Changed

feat(icons): removed brand names from tags & revised brand stopwords by @karsa-mistmere in lucide-icons/lucide#4575

fix(docs): Fix site build by @ericfennis in lucide-icons/lucide#4582

fix(icons): optimised square-scissors icons by @karsa-mistmere in lucide-icons/lucide#4581

fix(packages/angular): add more supported attributes for SVG nodes by @karsa-mistmere in lucide-icons/lucide#4570

feat(icons): added pending-cw icon by @NielsLazaroms in lucide-icons/lucide#4439

fix(icons): changed zap and zap-off icons by @kapowaz in lucide-icons/lucide#4536

feat(icons): add square-off icon by @october-learns in lucide-icons/lucide#4496

chore(deps-dev): bump astro from 6.4.8 to 7.1.0 by @dependabot[bot] in lucide-icons/lucide#4572

fix(icons): changed toolbox icon by @karsa-mistmere in lucide-icons/lucide#4571

feat(icons): add scan-square by @samuelalake in lucide-icons/lucide#4550

feat(icons): added user-shield icon by @MArtytraM99 in lucide-icons/lucide#3099

feat(icons): added mosque icon by @iskepr in lucide-icons/lucide#4494

fix(request-review): Remove pull_request_target by @ericfennis in lucide-icons/lucide#4593

fix(icons): changed feather icon by @karsa-mistmere in lucide-icons/lucide#4584

feat(ci): added custom prettier plugin for icon SVG files by @karsa-mistmere in lucide-icons/lucide#4576

ci(ci.yml): Remove concurrency in ci.yml by @ericfennis in lucide-icons/lucide#4595

fix(icons): changed barrel icon by @karsa-mistmere in lucide-icons/lucide#4592

feat(lab): Migrate lab to main repo. by @ericfennis in lucide-icons/lucide#4521

fix(icons): changed trophy icon by @karsa-mistmere in lucide-icons/lucide#4591

feat(analytics): add utm source and medium by @jguddas in lucide-icons/lucide#4596

feat(docs): Add lab requirement in pull_request_template.md by @danielbayley in lucide-icons/lucide#3651

feat(icons): replaces podcast icon with new mic-* icons by @karsa-mistmere in lucide-icons/lucide#4583

feat(icons): add layout-freeform by @samuelalake in lucide-icons/lucide#4543

New Contributors

@NielsLazaroms made their first contribution in lucide-icons/lucide#4439

@kapowaz made their first contribution in lucide-icons/lucide#4536

@october-learns made their first contribution in lucide-icons/lucide#4496

@samuelalake made their first contribution in lucide-icons/lucide#4550

@iskepr made their first contribution in lucide-icons/lucide#4494

Full Changelog: lucide-icons/lucide@1.26.0...1.27.0

Version 1.26.0

What's Changed

fix(docs): fix home page package links & accessible labels by @karsa-mistmere in lucide-icons/lucide#4540

fix(icons): changed columns-3-cog icon by @kamilasw in lucide-icons/lucide#4578

fix(icons): extended metadata of ad icon by @karsa-mistmere in lucide-icons/lucide#4579

fix(icons): changed book-open icons by @karsa-mistmere in lucide-icons/lucide#4565

feat(icons): added shield-keyhole icon by @karsa-mistmere in lucide-icons/lucide#4580

New Contributors

@kamilasw made their first contribution in lucide-icons/lucide#4578

Full Changelog: lucide-icons/lucide@1.25.0...1.26.0

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) from 1.25.0 to 1.27.0. - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.27.0/packages/lucide-react) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 1.27.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-27T21:05:58Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	lucide-react@1.25.0 ⏵ 1.27.0			⁺¹	⁺¹

View full report

hermes-exosphere · 2026-07-27T21:06:07Z

Automated code review started - full review. Results will be posted here.

hermes-exosphere

✅ Auto-approved: all 10 CI checks passing. Ready to merge.

hermes-exosphere · 2026-07-27T21:24:38Z

⏳ Automated code review in progress...

✅ Phase 0: Existing comments analyzed (0 human review threads, 0 unresolved bot threads)
✅ Phase 1: Full context gathered
✅ Phase 2: Deep analysis complete (single lockfile hash change)
✅ Phase 3: Build & test evidence collected
- Build: ✅ passed
- Unit tests: 2357/2357 ✅ passed (131 files)
- E2E tests: 307/307 ✅ passed (15 files)
- Lint: 0 errors, 5 pre-existing warnings
- CI: All 9 checks ✅ green
⏳ Phase 4: Posting review summary...

hermes-exosphere · 2026-07-27T21:25:39Z

Automated Code Review

Executive Summary

This is a straightforward Dependabot dependency bump: lucide-react from 1.25.0 to 1.27.0. The change is a single hash update in bun.lock with no API contract changes, no semver breaks, and no code modifications. All CI checks, unit tests (2357), and E2E tests (307) pass cleanly. Low risk, ready to merge.

Change Architecture

package.json (unchanged): lucide-react ^1.18.0
        |
        v
bun.lock: lucide-react@1.25.0 --> lucide-react@1.27.0  (hash-only update)
        |
        v
CI Verification: Build [PASS], Unit Tests 2357/2357 [PASS], E2E 307/307 [PASS], Lint 0 errors [PASS]

Breaking Changes

No breaking changes detected.

Semver range: ^1.18.0 in package.json -> 1.27.0 is within range
Peer dependencies: unchanged (react ^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0)
Icons used: GitBranch, ChevronDown, Star, BookOpen, MessageCircle, MessageSquareWarning, Copy, Check, Folder, Search, X, RefreshCw, Calendar, File, ChevronLeft, ChevronRight, Link2, Workflow, Play, Brain, Wrench, ArrowLeft, Download — all stable across 1.25.0 -> 1.27.0

Issues Found

No issues found. The change is a lockfile-only hash update with no code modifications.

Evidence — Build & Test Results

Build: PASS (bun install + full production build successful)
Unit Tests: 2357/2357 PASS (131 files, 140s)
E2E Tests: 307/307 PASS (15 files, 22s)
Lint: 0 errors, 5 pre-existing warnings
Docker smoke test: npm pack succeeded (16.5 MB tarball, 1688 files)

CI Status (all 9 checks):

quality: PASS
OSV-Scanner: PASS
test (default): PASS
test (log-debug, debug): PASS
test (hook-log-file, 1): PASS
build: PASS
docs: PASS
test-e2e: PASS
Socket Security: PASS

Issue Linkage

No issue linked. This is a standard Dependabot dependency bump — no issue required.

Human Review Feedback

No human review comments on this PR. The only comment aside from this automated review is from socket-security[bot] (automated dependency scan), which reports all scores at 80+ (no alerts).

Suggestions

Consider enabling auto-merge for minor/patch Dependabot PRs that pass CI — this one is a textbook candidate. The package.json uses ^1.18.0, so the lockfile bump from 1.25.0 to 1.27.0 is fully within the declared compatibility range.

Verdict

VERDICT: APPROVED

Automated code review · 2026-07-27 21:18 UTC

hermes-exosphere

Automated review: All checks pass, no issues found. VERDICT: APPROVED.

hermes-exosphere

Automated review: Approved. ✅

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026

hermes-exosphere approved these changes Jul 27, 2026

View reviewed changes

NiveditJain merged commit 5f37b80 into main Jul 28, 2026
10 checks passed

dependabot Bot deleted the dependabot/bun/lucide-react-1.27.0 branch July 28, 2026 05:43

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps-dev): Bump lucide-react from 1.25.0 to 1.27.0 - #604

build(deps-dev): Bump lucide-react from 1.25.0 to 1.27.0#604
NiveditJain merged 1 commit into
mainfrom
dependabot/bun/lucide-react-1.27.0

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

socket-security Bot commented Jul 27, 2026

Uh oh!

hermes-exosphere commented Jul 27, 2026

Uh oh!

hermes-exosphere left a comment

Uh oh!

hermes-exosphere commented Jul 27, 2026

Uh oh!

hermes-exosphere commented Jul 27, 2026

Uh oh!

hermes-exosphere left a comment

Uh oh!

hermes-exosphere left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026

Version 1.27.0

What's Changed

New Contributors

Version 1.26.0

What's Changed

New Contributors

Uh oh!

socket-security Bot commented Jul 27, 2026

Uh oh!

hermes-exosphere commented Jul 27, 2026

Uh oh!

hermes-exosphere left a comment

Choose a reason for hiding this comment

Uh oh!

hermes-exosphere commented Jul 27, 2026

Uh oh!

hermes-exosphere commented Jul 27, 2026

Automated Code Review

Executive Summary

Change Architecture

Breaking Changes

Issues Found

Evidence — Build & Test Results

Issue Linkage

Human Review Feedback

Suggestions

Verdict

Uh oh!

hermes-exosphere left a comment

Choose a reason for hiding this comment

Uh oh!

hermes-exosphere left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants