Skip to content

chore(deps-dev): Bump ky from 1.14.3 to 2.0.0 - #29

Merged
cursor[bot] merged 3 commits into
mainfrom
dependabot/npm_and_yarn/ky-2.0.0
Jul 29, 2026
Merged

chore(deps-dev): Bump ky from 1.14.3 to 2.0.0#29
cursor[bot] merged 3 commits into
mainfrom
dependabot/npm_and_yarn/ky-2.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 7, 2026

Copy link
Copy Markdown
Contributor

Bumps ky from 1.14.3 to 2.0.0.

Release notes

Sourced from ky's releases.

v2.0.0

Breaking

  • Require Node.js 22 f1da0fc
  • Unify hook signatures around a single state object (#827) ecdd45e
    • All hooks now receive a single {request, options, retryCount, ...} state object instead of separate arguments.
  • Rename prefixUrl to prefix, and allow leading slashes in input (#606) 1f2ad7f
  • Make beforeError hook receive all errors, not just HTTPError (#829) 101c74b
  • Make .json() throw on empty bodies and 204 responses instead of returning an empty string (#854) 1b8e1ff
  • Merge searchParams with input URL instead of replacing (#840) 29e78fe
  • Strip Ky-specific properties from normalized options passed to hooks (#826) 433febd
  • Treat hook errors as fatal outside retry handling (#834) 90c6d00

New

  • Add totalTimeout option for an overall timeout across all retries (#848) c20d7c7
  • Add baseUrl option for standard URL resolution (#606) 1f2ad7f
  • Add data property to HTTPError with pre-parsed response body (#823) 1341f5c
    • The response body is automatically consumed and parsed, fixing resource leaks and making error details immediately available without awaiting (#642).
  • Add init hook (#841) 87c6740
  • Add NetworkError class and tighten retry logic (#842) eaf0b80
  • Add Standard Schema validation for .json() (#830) 94741a9
  • Add replaceOption helper for .extend() (#846) bb8412e
  • Add request and options to beforeError hook state (#835) 01e0b85
  • Add request/response context to parseJson option (#849) 3713ce8
  • Don't throw HTTPError for opaque responses from no-cors requests (#847) 1d15eb6
  • Gracefully ignore onUploadProgress when request streams are unsupported (#845) 1e38ff4

Fixes

  • Fix beforeRequest hooks being skipped when a Request is returned (#832) aec65db
  • Ignore non-Errors returned by beforeError hooks (#833) a541fc0

Migration guide

Hook signatures

All hooks now receive a single state object instead of separate arguments.

hooks: {
-	beforeRequest: [(request, options) => {
+	beforeRequest: [({request, options}) => {
		request.headers.set('X-Custom', 'value');
	}],
-	afterResponse: [(request, options, response) => {
+	afterResponse: [({request, options, response}) => {
		log(response.status);
</tr></table> 

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [ky](https://github.com/sindresorhus/ky) from 1.14.3 to 2.0.0.
- [Release notes](https://github.com/sindresorhus/ky/releases)
- [Commits](sindresorhus/ky@v1.14.3...v2.0.0)

---
updated-dependencies:
- dependency-name: ky
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 7, 2026
Resolve package-lock.json conflict, keeping ky 2.0.0.

Co-authored-by: ProxyMesh AI <proxymeshai@users.noreply.github.com>
@cursor
cursor Bot enabled auto-merge (squash) July 29, 2026 22:02
cursor[bot]
cursor Bot approved these changes Jul 29, 2026
Resolve package-lock.json conflict, keeping ky 2.0.0.

Co-authored-by: ProxyMesh AI <proxymeshai@users.noreply.github.com>
@cursor
cursor Bot merged commit 5c0f621 into main Jul 29, 2026
2 checks passed
@cursor
cursor Bot deleted the dependabot/npm_and_yarn/ky-2.0.0 branch July 29, 2026 22:03

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved: Dependabot ky 1.14.3 → 2.0.0 version bump limited to package manifests, conflicts already resolved, and required integration check passing. Auto-merge is already enabled; no reviewers assigned.

Open in Web View Automation 

Sent by Cursor Approval Agent: oss dependabot approver

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant