[Snyk] Upgrade @mastra/core from 0.22.2 to 0.23.3#63
Conversation
Snyk has created this PR to upgrade @mastra/core from 0.22.2 to 0.23.3. See this package in npm: @mastra/core See this project in Snyk: https://app.snyk.io/org/ssdeanx/project/97f9b44f-04aa-4c4a-a071-4c3e5cc49f97?utm_source=github&utm_medium=referral&page=upgrade-pr
|
Important Review skippedIgnore keyword(s) in the title. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the ✨ Finishing touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Summary of ChangesHello @ssdeanx, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request updates the Highlights
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
|
🤖 Hi @ssdeanx, I've received your request, and I'm working on it now! You can track my progress in the logs for more details. |
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request from Snyk upgrades @mastra/core from 0.22.2 to 0.23.3. While keeping dependencies up-to-date is important, this change introduces a potential version inconsistency within the @mastra ecosystem. I've added a comment highlighting that @mastra/deployer remains at version ^0.22.2, which could be incompatible with the new version of @mastra/core. To prevent potential runtime issues, it's advisable to update related @mastra packages together.
| "@mastra/cloud": "^0.1.20", | ||
| "@mastra/cloudflare-d1": "^0.13.6", | ||
| "@mastra/core": "^0.22.2", | ||
| "@mastra/core": "^0.23.3", |
There was a problem hiding this comment.
This upgrade of @mastra/core may cause issues due to version mismatches with other @mastra packages. The @mastra/deployer package is still at version ^0.22.2, which matches the previous version of @mastra/core. It's common for packages within the same scope (like @mastra/*) to have dependencies on each other and require synchronized versioning. To ensure compatibility and prevent potential runtime errors, I recommend also upgrading @mastra/deployer and any other related packages to a compatible ^0.23.x version.
No issues found. The upgrade of @mastra/core from 0.22.2 to 0.23.3 updates the lockfile and package.json without code changes. However, note that several other @mastra packages (e.g., @mastra/deployer ^0.22.2) have peer dependency constraints requiring core <0.23.0, which this violates. Monitor for runtime issues or update those packages accordingly.
Mention @roomote in a comment to request specific changes to this pull request or fix all unresolved issues. |
|
🤖 I'm sorry @ssdeanx, but I was unable to process your request. Please see the logs for more details. |
There was a problem hiding this comment.
Pull request overview
This PR upgrades @mastra/core from version 0.22.2 to 0.23.3, a jump of 7 versions released over approximately one month. However, this upgrade introduces critical peer dependency incompatibilities that will prevent the application from installing or running correctly.
Key changes:
@mastra/coreupgraded from ^0.22.2 to ^0.23.3@mastra/schema-compatinternally upgraded from 0.11.4 to 0.11.6@mastra/loggersupgraded from 0.10.17 to 0.10.19 (with proper peer dependency support for <0.25.0-0)- Various transitive Babel dependencies updated (7.28.4 → 7.28.5)
Critical Issue: Most @mastra ecosystem packages still require @mastra/core: <0.23.0-0, making them incompatible with version 0.23.3. This will cause npm/yarn to fail during installation or runtime due to unmet peer dependencies.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Updates @mastra/core version to ^0.23.3, which is incompatible with most other @mastra packages in the dependency tree |
| package-lock.json | Reflects the version bump and includes transitive dependency updates; shows multiple peer dependency conflicts with packages requiring @mastra/core <0.23.0-0 |
| "@mastra/cloud": "^0.1.20", | ||
| "@mastra/cloudflare-d1": "^0.13.6", | ||
| "@mastra/core": "^0.22.2", | ||
| "@mastra/core": "^0.23.3", |
There was a problem hiding this comment.
Critical Peer Dependency Incompatibility
Upgrading @mastra/core to version 0.23.3 will break compatibility with multiple @mastra packages that have peer dependency constraints requiring @mastra/core: <0.23.0-0.
The following packages in your dependencies are incompatible with @mastra/core@0.23.3:
- @mastra/deployer@0.22.2 - requires
>=0.22.0-0 <0.23.0-0 - @mastra/evals@0.14.1 - requires
>=0.21.0-0 <0.23.0-0 - @mastra/mcp@0.14.0 - requires
>=0.20.1-0 <0.23.0-0 - @mastra/couchbase@0.11.14 - requires
>=0.18.1-0 <0.23.0-0 - Many other @mastra packages - require
>=0.18.1-0 <0.23.0-0
Recommendation: Either:
- Upgrade all incompatible @mastra packages to versions that support @mastra/core@0.23.x (if available)
- Wait for compatible versions of these packages to be released
- Revert this upgrade and stay on @mastra/core@0.22.2 until the ecosystem catches up
Note: @mastra/loggers was properly updated to 0.10.19 which supports <0.25.0-0, but this is the exception rather than the rule.
| "@mastra/core": "^0.23.3", | |
| "@mastra/core": "^0.22.2", |
Snyk has created this PR to upgrade @mastra/core from 0.22.2 to 0.23.3.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 7 versions ahead of your current version.
The recommended version was released a month ago.
Release notes
Package name: @mastra/core
-
0.23.3 - 2025-10-29
-
0.23.2 - 2025-10-29
-
0.23.2-alpha.1 - 2025-10-28
-
0.23.2-alpha.0 - 2025-10-28
-
0.23.1 - 2025-10-24
-
0.23.0 - 2025-10-24
-
0.23.0-alpha.0 - 2025-10-24
-
0.22.2 - 2025-10-22
from @mastra/core GitHub release notesImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: