[Snyk] Upgrade @swc/core from 1.3.68 to 1.13.20 #8155

q1blue · 2025-10-23T03:26:07Z

Snyk has created this PR to upgrade @swc/core from 1.3.68 to 1.13.20.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 457 versions ahead of your current version.
The recommended version was released a month ago.

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

EntelligenceAI PR Summary

This PR updates the SWC (SpeedyWebCompiler) core package version in the microsite from ^1.3.46 to ^1.13.20, along with corresponding platform-specific binaries and dependencies in the yarn.lock file. This represents a significant version jump that brings performance benefits but introduces compatibility risks.

Snyk has created this PR to upgrade @swc/core from 1.3.68 to 1.13.20. See this package in yarn: @swc/core See this project in Snyk: https://app.snyk.io/org/q1bluequantumblockchainlabs.onmicrosoft.com/project/4590850b-6aaf-4257-983f-c8d6bc88021a?utm_source=github&utm_medium=referral&page=upgrade-pr

codesandbox · 2025-10-23T03:26:11Z

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

snyk-io · 2025-10-23T03:26:42Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

entelligence-ai-pr-reviews · 2025-10-23T03:36:14Z

📝 Walkthrough

This PR updates the SWC (SpeedyWebCompiler) core package version in the microsite from ^1.3.46 to ^1.13.20. SWC is used for TypeScript/JSX compilation in the Docusaurus-based documentation site. The update includes all corresponding platform-specific binaries and dependencies in the yarn.lock file.

While this update brings potential performance improvements, it introduces several critical risks: version fragmentation across the project (microsite using 1.13.20 while other components use 1.3.46), missing critical peer dependencies required by the newer SWC version, and potential breaking changes in the SWC 1.13.x API that may affect the custom webpack configuration.

📊 Changes

File	Change
`microsite/package.json`	Updated `@swc/core` version from `^1.3.46` to `^1.13.20`
`microsite/yarn.lock`	Updated all SWC-related dependencies and lockfile entries

Sequence Diagram

This diagram shows the interactions between components:

sequenceDiagram
    title SWC Core Package Update Flow

    participant Dev as "Developer"
    participant PM as "Package Manager"
    participant SWC as "@swc/core v1.13.20"
    participant Platform as "Platform-specific Binaries"
    participant Counter as "@swc/counter"
    participant Types as "@swc/types"
    participant App as "Application"

    Dev->>PM: Update @swc/core from v1.3.46 to v1.13.20
    activate PM
    
    PM->>SWC: Install @swc/core v1.13.20
    activate SWC
    
    SWC->>Platform: Load appropriate platform binary
    Note over Platform: Platform-specific implementations:<br>darwin-arm64, darwin-x64, linux-arm,<br>linux-arm64-gnu, linux-arm64-musl,<br>linux-x64-gnu, linux-x64-musl,<br>win32-arm64-msvc, win32-ia32-msvc,<br>win32-x64-msvc
    
    SWC->>Counter: Require @swc/counter ^0.1.3
    activate Counter
    Note over Counter: New dependency in v1.13.20
    
    SWC->>Types: Require @swc/types ^0.1.25
    activate Types
    Note over Types: New dependency in v1.13.20
    
    Types->>Counter: Require @swc/counter ^0.1.3
    
    SWC-->>PM: Installation complete
    deactivate SWC
    
    PM-->>Dev: Dependencies updated
    deactivate PM
    
    App->>SWC: Use SWC for transpilation
    SWC->>Counter: Track usage metrics
    SWC->>Types: Use type definitions
    
    SWC-->>App: Return transpiled code
    
    Note over Dev, App: The update maintains the same API<br>but adds new dependencies and<br>updates platform-specific binaries

🔒 Security Analysis

Vulnerabilities: 0
Bugs: 0
Code Smells: 0
Security Hotspots: 0

Caution

4 comments are outside the diff range and can't be posted inline due to platform limitations.

⚠️ View Outside Diff Range Comments (4)

🔴 Critical High Priority · 1 issue

microsite/docusaurus.config.js · 1 comment

1. Lines 77-93 · Correctness

Potential breaking changes in SWC 1.13.x: Major version jump introduces breaking changes in AST structure, module system, and plugin compatibility that may cause the custom webpack configuration to fail.

🟡 Medium Medium Priority · 1 issue

microsite/docusaurus.config.js · 1 comment

1. Lines 86 · Correctness

Inconsistent target configuration: Microsite uses target: 'es2017' while other parts (CLI, Storybook) use target: 'es2019'. This inconsistency may cause compatibility issues.
🟢 Minor Low Priority · 2 issues
microsite/docusaurus.config.js · 2 comments

1. Lines 77-93 · Performance

Performance optimization opportunity: The new SWC version includes performance improvements that could be leveraged, including enhanced dead code elimination, better inlining of arrow functions, and optimized memory allocation.

2. Lines 77-93 · Performance

Configuration enhancement: Consider enabling new SWC 1.13.x optimization features for better performance.
Committable Code Suggestion

‼️ Ensure you review the code suggestion before committing it to the branch. Make sure it replaces the highlighted code, contains no missing lines, and has no issues with indentation.
optimizer: {
  simplify: true,
  globals: { vars: { __DEBUG__: 'false' } }
},
minify: true

▶️ ⚡ AI Code Reviews for VS Code, Cursor, Windsurf
Install the extension

Note for Windsurf

Please change the default marketplace provider to the following in the windsurf settings:

Marketplace Extension Gallery Service URL: https://marketplace.visualstudio.com/_apis/public/gallery

Marketplace Gallery Item URL: https://marketplace.visualstudio.com/items

Entelligence.ai can learn from your feedback. Simply add 👍 / 👎 emojis to teach it your preferences. More shortcuts below

Emoji Descriptions:

⚠️ Potential Issue - May require further investigation.
🔒 Security Vulnerability - Fix to ensure system safety.
💻 Code Improvement - Suggestions to enhance code quality.
🔨 Refactor Suggestion - Recommendations for restructuring code.
ℹ️ Others - General comments and information.

Interact with the Bot:

Send a message or request using the format:
@entelligenceai + *your message*

Example: @entelligenceai Can you suggest improvements for this code?

Help the Bot learn by providing feedback on its responses.
@entelligenceai + *feedback*

Example: @entelligenceai Do not comment on `save_auth` function !

Also you can trigger various commands with the bot by doing
@entelligenceai command

The current supported commands are

config - shows the current config
retrigger_review - retriggers the review

More commands to be added soon.

entelligence-ai-pr-reviews · 2025-10-23T03:36:15Z

microsite/package.json

    "@docusaurus/plugin-client-redirects": "0.0.0-5591",
    "@docusaurus/preset-classic": "0.0.0-5591",
-    "@swc/core": "^1.3.46",
+    "@swc/core": "^1.13.20",


Correctness: Version fragmentation risk: The microsite now uses SWC 1.13.20 while other parts of the project still use 1.3.46, creating version fragmentation that can cause AST compatibility issues, plugin conflicts, and inconsistent build behavior.

entelligence-ai-pr-reviews · 2025-10-23T03:36:20Z

microsite/package.json

    "@docusaurus/plugin-client-redirects": "0.0.0-5591",
    "@docusaurus/preset-classic": "0.0.0-5591",
-    "@swc/core": "^1.3.46",
+    "@swc/core": "^1.13.20",


Correctness: Missing critical peer dependencies: The upgrade to SWC 1.13.20 introduces new required dependencies that are missing, including @swc/types, @swc/counter, and updated @swc/helpers.

📝 Committable Code Suggestion

‼️ Ensure you review the code suggestion before committing it to the branch. Make sure it replaces the highlighted code, contains no missing lines, and has no issues with indentation.

Suggested change

"@swc/core": "^1.13.20",

{

"dependencies": {

"@docusaurus/core": "0.0.0-5591",

"@docusaurus/plugin-client-redirects": "0.0.0-5591",

"@docusaurus/preset-classic": "0.0.0-5591",

"@swc/core": "^1.13.20",

"@swc/types": "^0.1.25",

"@swc/counter": "^0.1.3",

"@swc/helpers": ">=0.5.17",

"clsx": "^1.1.1",

"docusaurus-plugin-sass": "^0.2.3",

"luxon": "^3.0.0",

"react": "^17.0.2",

"react-dom": "^17.0.2"

}

entelligence-ai-pr-reviews · 2025-10-23T03:36:21Z

microsite/package.json

    "@docusaurus/plugin-client-redirects": "0.0.0-5591",
    "@docusaurus/preset-classic": "0.0.0-5591",
-    "@swc/core": "^1.3.46",
+    "@swc/core": "^1.13.20",


Correctness: swc-loader compatibility: The project uses swc-loader@^0.2.3 which has peer dependency @swc/core: ^1.2.147. The new version 1.13.20 might not be tested with this loader version.

github-actions · 2025-10-30T03:40:37Z

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

github-actions bot added the microsite label Oct 23, 2025

entelligence-ai-pr-reviews bot reviewed Oct 23, 2025

View reviewed changes

github-actions bot added the stale label Oct 30, 2025

github-actions bot closed this Nov 4, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Snyk] Upgrade @swc/core from 1.3.68 to 1.13.20 #8155

[Snyk] Upgrade @swc/core from 1.3.68 to 1.13.20 #8155

Uh oh!

q1blue commented Oct 23, 2025 •

edited by entelligence-ai-pr-reviews bot

Loading

Uh oh!

codesandbox bot commented Oct 23, 2025

Uh oh!

snyk-io bot commented Oct 23, 2025

Uh oh!

entelligence-ai-pr-reviews bot commented Oct 23, 2025

Emoji Descriptions:

Interact with the Bot:

Uh oh!

entelligence-ai-pr-reviews bot Oct 23, 2025

Uh oh!

entelligence-ai-pr-reviews bot Oct 23, 2025

Uh oh!

entelligence-ai-pr-reviews bot Oct 23, 2025

Uh oh!

github-actions bot commented Oct 30, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

-    "@swc/core": "^1.13.20",
+    {
+      "dependencies": {
+        "@docusaurus/core": "0.0.0-5591",
+        "@docusaurus/plugin-client-redirects": "0.0.0-5591",
+        "@docusaurus/preset-classic": "0.0.0-5591",
+        "@swc/core": "^1.13.20",
+        "@swc/types": "^0.1.25",
+        "@swc/counter": "^0.1.3",
+        "@swc/helpers": ">=0.5.17",
+        "clsx": "^1.1.1",
+        "docusaurus-plugin-sass": "^0.2.3",
+        "luxon": "^3.0.0",
+        "react": "^17.0.2",
+        "react-dom": "^17.0.2"
+      }

[Snyk] Upgrade @swc/core from 1.3.68 to 1.13.20 #8155

[Snyk] Upgrade @swc/core from 1.3.68 to 1.13.20 #8155

Uh oh!

Conversation

q1blue commented Oct 23, 2025 • edited by entelligence-ai-pr-reviews bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Snyk has created this PR to upgrade @swc/core from 1.3.68 to 1.13.20.

EntelligenceAI PR Summary

Uh oh!

codesandbox bot commented Oct 23, 2025

Review or Edit in CodeSandbox

Uh oh!

snyk-io bot commented Oct 23, 2025

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

entelligence-ai-pr-reviews bot commented Oct 23, 2025

📝 Walkthrough

📊 Changes

Sequence Diagram

🔒 Security Analysis

Emoji Descriptions:

Interact with the Bot:

Uh oh!

entelligence-ai-pr-reviews bot Oct 23, 2025

Choose a reason for hiding this comment

Uh oh!

entelligence-ai-pr-reviews bot Oct 23, 2025

Choose a reason for hiding this comment

Uh oh!

entelligence-ai-pr-reviews bot Oct 23, 2025

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Oct 30, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

q1blue commented Oct 23, 2025 •

edited by entelligence-ai-pr-reviews bot

Loading