Skip to content

chore(deps): bump ky from 1.14.3 to 2.0.2 in /packages/client - #216

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/packages/client/ky-2.0.2
Open

chore(deps): bump ky from 1.14.3 to 2.0.2 in /packages/client#216
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/packages/client/ky-2.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps ky from 1.14.3 to 2.0.2.

Release notes

Sourced from ky's releases.

v2.0.2

  • Fix init hook URLSearchParams deletions add0703
  • Fix tuple searchParams mutations leaking across init-hook requests (#861) 346f898

sindresorhus/ky@v2.0.1...v2.0.2

v2.0.1

  • Improve compatibility with custom fetch implementations (#858) 2971991
  • Fix fetch option forwarding 2df9b7e

sindresorhus/ky@v2.0.0...v2.0.1

v2.0.0

Breaking

  • Require Node.js 22 f1da0fc
  • Unify hook signatures around a single state object (#827) ecdd45e
    • All hooks now receive a single {request, options, retryCount, ...} state object instead of separate arguments.
  • Rename prefixUrl to prefix, and allow leading slashes in input (#606) 1f2ad7f
  • Make beforeError hook receive all errors, not just HTTPError (#829) 101c74b
  • Make .json() throw on empty bodies and 204 responses instead of returning an empty string (#854) 1b8e1ff
  • Merge searchParams with input URL instead of replacing (#840) 29e78fe
  • Strip Ky-specific properties from normalized options passed to hooks (#826) 433febd
  • Treat hook errors as fatal outside retry handling (#834) 90c6d00

New

  • Add totalTimeout option for an overall timeout across all retries (#848) c20d7c7
  • Add baseUrl option for standard URL resolution (#606) 1f2ad7f
    • baseUrl uses standard URL resolution: /users means origin-root, users means relative to the base path.
    • prefix does simple string joining first, so /users and users both append to the prefix the same way. Use it only when you want that behavior.
  • Add data property to HTTPError with pre-parsed response body (#823) 1341f5c
    • The response body is automatically consumed and parsed, fixing resource leaks and making error details immediately available without awaiting (#642).
  • Add init hook (#841) 87c6740
  • Add NetworkError class and tighten retry logic (#842) eaf0b80
  • Add Standard Schema validation for .json() (#830) 94741a9
  • Add replaceOption helper for .extend() (#846) bb8412e
  • Add request and options to beforeError hook state (#835) 01e0b85
  • Add request/response context to parseJson option (#849) 3713ce8
  • Don't throw HTTPError for opaque responses from no-cors requests (#847) 1d15eb6
  • Gracefully ignore onUploadProgress when request streams are unsupported (#845) 1e38ff4

Fixes

  • Fix beforeRequest hooks being skipped when a Request is returned (#832) aec65db
  • Ignore non-Errors returned by beforeError hooks (#833) a541fc0

... (truncated)

Commits


Note

Medium Risk
Major-version upgrade of the shared HTTP transport with known breaking API changes, while call sites are unchanged in this diff—runtime or compile failures are possible until ky usage is aligned with v2.

Overview
Bumps the ky HTTP client dependency in @polymarket/client from ^1.14.3 to ^2.0.2 (major release). The diff is limited to packages/client/package.json; no application code is updated in this PR.

Ky 2.x includes breaking API changes (e.g. prefixUrl renamed to prefix, hook signature changes, stricter .json() behavior on empty/204 responses). The client still configures ky via prefixUrl in ServiceClient, so reviewers should confirm typecheck/tests pass and whether a follow-up migration is required.

Reviewed by Cursor Bugbot for commit f593c91. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 17, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 6affa5e. Configure here.

"it-merge": "^3.0.14",
"it-pushable": "^3.2.3",
"ky": "^1.14.3",
"ky": "^2.0.2",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ky v2 breaks prefixUrl usage

High Severity

Bumping ky to v2 renames prefixUrl to prefix, but ServiceClient still creates its instance with prefixUrl. After the upgrade that option is ignored, so every service-scoped request loses its configured root URL and is sent to the wrong place.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 6affa5e. Configure here.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/client/ky-2.0.2 branch 3 times, most recently from cb06820 to 48e2dbb Compare July 24, 2026 10:00
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/client/ky-2.0.2 branch 3 times, most recently from 54853e6 to 566e2d6 Compare July 31, 2026 10:14
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/client/ky-2.0.2 branch 2 times, most recently from d1067ff to d903d82 Compare August 6, 2026 11:01
Bumps [ky](https://github.com/sindresorhus/ky) from 1.14.3 to 2.0.2.
- [Release notes](https://github.com/sindresorhus/ky/releases)
- [Commits](sindresorhus/ky@v1.14.3...v2.0.2)

---
updated-dependencies:
- dependency-name: ky
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/client/ky-2.0.2 branch from d903d82 to f593c91 Compare August 7, 2026 14:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants