Home Original page

security: bump Remix packages to ^2.17.2 in integration test app by thomasrockhu-codecov · Pull Request #300 · codecov/codecov-javascript-bundler-plugins

Skip to content

Navigation Menu

Sign in

Appearance settings

Conversation

@thomasrockhu-codecov

Summary

Updates @remix-run/* in integration-tests/test-apps/remix to ^2.17.2 for GHSA-9583-h5hc-x8cw and related patched transitive dependencies.

Test plan

  • CI passes for this branch.

Made with Cursor

Aligns test-remix with patched Remix releases (GHSA-9583-h5hc-x8cw and
related transitive advisories).

Made-with: Cursor

@sentry

@codecov-notifications

@sentry

Bundle Report

Changes will increase total bundle size by 301.99kB (3.9%) ⬆️. This is within the configured threshold ✅

Detailed changes
Bundle name Size Change
@codecov/remix-vite-plugin-esm 3.02kB 2.06kB (215.05%) ⬆️
@codecov/bundler-plugin-core-esm 312.6kB 297.93kB (2030.71%) ⬆️
@codecov/rollup-plugin-esm 6.41kB 5.11kB (392.55%) ⬆️
@codecov/nuxt-plugin-esm 855 bytes -2.36kB (-73.37%) ⬇️
@codecov/solidstart-plugin-esm 949 bytes -2.08kB (-68.72%) ⬇️
@codecov/example-sveltekit-app-client-esm 727.67kB 2 bytes (0.0%) ⬆️
@codecov/example-sveltekit-app-server-esm 984.06kB 1 bytes (0.0%) ⬆️
@codecov/nextjs-webpack-plugin-esm 4.86kB 3.74kB (336.0%) ⬆️
@codecov/astro-plugin-esm 862 bytes -2.41kB (-73.62%) ⬇️

Affected Assets, Files, and Routes:

view changes for bundle: @codecov/example-astro-5-app-server-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
manifest_ziL3wCGc.mjs (New) 3.37kB 3.37kB 100.0% 🚀
manifest_BA0otjRv.mjs (Deleted) -3.37kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/rollup-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.mjs (New) 6.41kB 6.41kB 100.0% 🚀
index.d.ts (Deleted) -1.3kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/example-next-app-client-array-push

Assets Changed:

Asset Name Size Change Total Size Change (%)
server/middleware-*.js 852 bytes 888 bytes 2366.67% ⚠️
server/middleware-*.js -852 bytes 36 bytes -95.95%
static/CRh74Peql6c6e_7Z_gKot/_buildManifest.js (New) 224 bytes 224 bytes 100.0% 🚀
static/CRh74Peql6c6e_7Z_gKot/_ssgManifest.js (New) 77 bytes 77 bytes 100.0% 🚀
static/EITuvk575kkc0RfG6Ld02/_buildManifest.js (Deleted) -224 bytes 0 bytes -100.0% 🗑️
static/EITuvk575kkc0RfG6Ld02/_ssgManifest.js (Deleted) -77 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/solidstart-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.cts (New) 949 bytes 949 bytes 100.0% 🚀
index.mjs (Deleted) -3.03kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/nextjs-webpack-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.mjs (New) 4.86kB 4.86kB 100.0% 🚀
index.d.cts (Deleted) -1.11kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/example-sveltekit-app-client-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
_app/immutable/chunks/entry.*.js 2 bytes 31.45kB 0.01%
view changes for bundle: @codecov/example-astro-app-server-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
manifest_D258MTNK.mjs (New) 3.34kB 3.34kB 100.0% 🚀
manifest_AsQUdY4I.mjs (Deleted) -3.34kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/example-sveltekit-app-server-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
chunks/internal.js 1 bytes 18.48kB 0.01%
view changes for bundle: @codecov/vite-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.ts (New) 1.24kB 1.24kB 100.0% 🚀
index.d.mts (Deleted) -1.24kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/example-next-15-app-client-array-push

Assets Changed:

Asset Name Size Change Total Size Change (%)
server/middleware-*.js 885 bytes 921 bytes 2458.33% ⚠️
server/middleware-*.js -885 bytes 36 bytes -96.09%
static/QqFjfPKDimpPaHPUmzncB/_buildManifest.js (New) 543 bytes 543 bytes 100.0% 🚀
static/QqFjfPKDimpPaHPUmzncB/_ssgManifest.js (New) 77 bytes 77 bytes 100.0% 🚀
static/Px67TmhvAuDjCrZV4M8hD/_buildManifest.js (Deleted) -543 bytes 0 bytes -100.0% 🗑️
static/Px67TmhvAuDjCrZV4M8hD/_ssgManifest.js (Deleted) -77 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/bundle-analyzer-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.mts (New) 2.77kB 2.77kB 100.0% 🚀
cli.d.mts (New) 342 bytes 342 bytes 100.0% 🚀
index.d.cts (Deleted) -2.77kB 0 bytes -100.0% 🗑️
cli.d.cts (Deleted) -342 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/remix-vite-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.mjs (New) 3.02kB 3.02kB 100.0% 🚀
index.d.cts (Deleted) -957 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/sveltekit-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.mts (New) 891 bytes 891 bytes 100.0% 🚀
index.d.ts (Deleted) -891 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/astro-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.ts (New) 862 bytes 862 bytes 100.0% 🚀
index.mjs (Deleted) -3.27kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/nuxt-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.cts (New) 855 bytes 855 bytes 100.0% 🚀
index.mjs (Deleted) -3.21kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/bundler-plugin-core-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.mjs (New) 312.6kB 312.6kB 100.0% 🚀
index.d.mts (Deleted) -14.67kB 0 bytes -100.0% 🗑️ 
Made-with: Cursor

# Conflicts:
#	pnpm-lock.yaml

thomasrockhu-codecov added a commit that referenced this pull request

Apr 3, 2026 
Combine changes from PR #300 and PR #301 into PR #299: align
integration-tests and integration-tests/test-apps/remix with patched
Remix releases (GHSA-9583-h5hc-x8cw and related advisories).

Made-with: Cursor

@thomasrockhu-codecov

Closing in favor of #299, which now includes the integration test app Remix bumps.

1 participant

@thomasrockhu-codecov