Skip to content

chore(deps): bump ky from 1.14.3 to 2.0.2 - #215

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ky-2.0.2
Open

chore(deps): bump ky from 1.14.3 to 2.0.2#215
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ky-2.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps ky from 1.14.3 to 2.0.2.

Release notes

Sourced from ky's releases.

v2.0.2

  • Fix init hook URLSearchParams deletions add0703
  • Fix tuple searchParams mutations leaking across init-hook requests (#861) 346f898

sindresorhus/ky@v2.0.1...v2.0.2

v2.0.1

  • Improve compatibility with custom fetch implementations (#858) 2971991
  • Fix fetch option forwarding 2df9b7e

sindresorhus/ky@v2.0.0...v2.0.1

v2.0.0

Breaking

  • Require Node.js 22 f1da0fc
  • Unify hook signatures around a single state object (#827) ecdd45e
    • All hooks now receive a single {request, options, retryCount, ...} state object instead of separate arguments.
  • Rename prefixUrl to prefix, and allow leading slashes in input (#606) 1f2ad7f
  • Make beforeError hook receive all errors, not just HTTPError (#829) 101c74b
  • Make .json() throw on empty bodies and 204 responses instead of returning an empty string (#854) 1b8e1ff
  • Merge searchParams with input URL instead of replacing (#840) 29e78fe
  • Strip Ky-specific properties from normalized options passed to hooks (#826) 433febd
  • Treat hook errors as fatal outside retry handling (#834) 90c6d00

New

  • Add totalTimeout option for an overall timeout across all retries (#848) c20d7c7
  • Add baseUrl option for standard URL resolution (#606) 1f2ad7f
    • baseUrl uses standard URL resolution: /users means origin-root, users means relative to the base path.
    • prefix does simple string joining first, so /users and users both append to the prefix the same way. Use it only when you want that behavior.
  • Add data property to HTTPError with pre-parsed response body (#823) 1341f5c
    • The response body is automatically consumed and parsed, fixing resource leaks and making error details immediately available without awaiting (#642).
  • Add init hook (#841) 87c6740
  • Add NetworkError class and tighten retry logic (#842) eaf0b80
  • Add Standard Schema validation for .json() (#830) 94741a9
  • Add replaceOption helper for .extend() (#846) bb8412e
  • Add request and options to beforeError hook state (#835) 01e0b85
  • Add request/response context to parseJson option (#849) 3713ce8
  • Don't throw HTTPError for opaque responses from no-cors requests (#847) 1d15eb6
  • Gracefully ignore onUploadProgress when request streams are unsupported (#845) 1e38ff4

Fixes

  • Fix beforeRequest hooks being skipped when a Request is returned (#832) aec65db
  • Ignore non-Errors returned by beforeError hooks (#833) a541fc0

... (truncated)

Commits


Note

Medium Risk
Major-version ky upgrade affects all HTTP/RPC traffic in the client without code updates in this diff; verify build, tests, and prefixUrlprefix compatibility before release.

Overview
Bumps the ky HTTP client dependency in @polymarket/client from 1.14.3 to 2.0.2 (lockfile updated accordingly). This is a major release: Node ≥22, hook APIs use a single state object, prefixUrl is renamed to prefix, searchParams merge behavior changes, and .json() can throw on empty/204 bodies.

There are no source changes in this PR—only package.json / pnpm-lock.yaml. Runtime usage (e.g. ServiceClient still passes prefixUrl) may need a follow-up to match ky v2 unless types/build already fail and block merge.

Reviewed by Cursor Bugbot for commit c71e32d. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 17, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 7017d32. Configure here.

"it-merge": "^3.0.14",
"it-pushable": "^3.2.3",
"ky": "^1.14.3",
"ky": "^2.0.2",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ky v2 breaks ServiceClient

High Severity

Bumping ky to v2 without updating ServiceClient leaves ky.create using the removed prefixUrl option (renamed to prefix in v2). The service root is likely ignored, so relative API paths may resolve incorrectly and Polymarket HTTP calls can fail or hit the wrong host.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 7017d32. Configure here.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ky-2.0.2 branch 3 times, most recently from e531eee to f2d9fdf Compare July 24, 2026 10:00
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ky-2.0.2 branch 3 times, most recently from 6e0b74a to 933bfc3 Compare July 31, 2026 10:15
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ky-2.0.2 branch 2 times, most recently from 800a484 to fe26dd5 Compare August 6, 2026 11:01
Bumps [ky](https://github.com/sindresorhus/ky) from 1.14.3 to 2.0.2.
- [Release notes](https://github.com/sindresorhus/ky/releases)
- [Commits](sindresorhus/ky@v1.14.3...v2.0.2)

---
updated-dependencies:
- dependency-name: ky
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ky-2.0.2 branch from fe26dd5 to c71e32d Compare August 7, 2026 14:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants