chore(deps): update dependency @rsbuild/core to v1.7.6

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@rsbuild/core (source)	1.7.3 → 1.7.6

---

Release Notes

web-infra-dev/rsbuild (@​rsbuild/core)

v1.7.6

Compare Source

What's Changed

Document 📖

• docs(v1): add algolia site verification meta tag by @​SoonIter in #​7600
• docs(v1): update algolia indexName to rsbuild-v1 by @​SoonIter in #​7604

Other Changes

• fix(deps): update ws to version 8.21.0 to address vulnerability by @​joshivilas in #​7981
• chore: upgrade pnpm for v1 by @​chenjiahan in #​7990
• release: v1.7.6 by @​chenjiahan in #​7989

New Contributors

• @​joshivilas made their first contribution in #​7981

Full Changelog: web-infra-dev/rsbuild@v1.7.5...v1.7.6

v1.7.5

Compare Source

What's Changed

Bug Fixes 🐞

• fix(deps): update @​swc/helpers to ^0.5.20 by @​chenjiahan in #​7406

Other Changes

• release: v1.7.5 by @​chenjiahan in #​7407

Full Changelog: web-infra-dev/rsbuild@v1.7.4...v1.7.5

v1.7.4

Compare Source

What's Changed

Bug Fixes 🐞

• fix(core): upgrade webpack-bundle-analyzer to 5.3.0 by @​colinaaa in #​7389
• fix(deps): update @​rspack/core to v1.7.10 by @​chenjiahan in #​7390

Other Changes

• release: v1.7.4 by @​chenjiahan in #​7391

Full Changelog: web-infra-dev/rsbuild@v1.7.3...v1.7.4

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • Between 08:00 AM and 11:59 AM, only on Tuesday (* 8-11 * * 2)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bito-code-review]

Impact Analysis by Bito

Cross-Repository Impact Analysis

What Changed	Impact of Change	Suggested Review Actions
@rsbuild/core devDependency upgraded from 1.7.3 to 1.7.6 in two reference implementation packages (react-web-sdk, web-sdk_react)	- No cross-repo consumers found for @rsbuild/core in the organization index (mcp_BitoAIArchitect_searchCode returned zero_hits): @rsbuild/core is a dev/build tool dependency, not a runtime library. Cross-repo consumers of these implementations would depend on the published npm packages (@contentful/optimization-react-web, @contentful/optimization-web), not on the internal @rsbuild/core version directly. - intra-repo: implementations/react-web-sdk and implementations/web-sdk_react: The version bump affects only the local build tooling for these two reference implementations. The change does not alter runtime behavior, exposed APIs, or published package contracts.	- Verify the rsbuild 1.7.3 → 1.7.6 changelog for breaking build/dev-tool changes (note: rsbuild minor versions typically do not break existing configs) - Run pnpm build and pnpm dev in both implementations to confirm the upgrade does not break local builds - Run pnpm test:e2e in both implementations to validate end-to-end test tooling works with the new version

Code Paths Analyzed

Impact:
Low-impact change. Only the dev/build tooling version for @rsbuild/core is bumped in two reference implementation packages. No runtime code, APIs, or published package contracts are affected.

Flow:
devDependencies only → affects pnpm dev, pnpm build, pnpm serve:e2e scripts → no impact on published npm packages or cross-repo runtime consumers

Direct Changes (Diff Files):
• implementations/react-web-sdk/package.json [9-10] — devDependency @rsbuild/core bumped from 1.7.3 to 1.7.6
• implementations/web-sdk_react/package.json [9-10] — devDependency @rsbuild/core bumped from 1.7.3 to 1.7.6

Repository Impact:
• implementations/react-web-sdk — build tooling: @rsbuild/core upgrade may bring bug fixes or performance improvements to the rsbuild dev server and production bundler. No changes to runtime behavior.
• implementations/web-sdk_react — build tooling: Same as above. The two implementations share an identical change pattern, suggesting a coordinated upgrade.
• packages/web — potential upstream dependency: Both implementations depend on @contentful/optimization-web, which lives in packages/web. The rsbuild upgrade does not change the package contract, but any rsbuild configuration shared from packages/web should be tested.
• packages/react — potential upstream dependency: react-web-sdk additionally depends on @contentful/optimization-react-web from packages/react. Same consideration as above.

Cross-Repository Dependencies:
• Other Contentful repositories consuming @contentful/optimization-web or @contentful/optimization-react-web: Published npm packages are unaffected by this devDependency change. Downstream consumers will not be impacted.
• create-contentful-app (indexed repo, similarity 0.44): May reference or template these implementations. However, @rsbuild/core is a devDependency — consuming repos would not inherit this version.

Database/Caching Impact:
• None

API Contract Violations:
• No API contracts are modified. This is a devDependency version bump with no runtime API changes.

Infrastructure Dependencies:
• CI/CD: pnpm install will resolve the new @rsbuild/core version. Build jobs running pnpm build in these implementations will use rsbuild 1.7.6.
• Dockerfile: not present in diff — no container image changes required.
• No database migrations, environment variables, or feature flags are affected.

Additional Insights:
• rsbuild plugin compatibility: @rsbuild/plugin-react remains at 1.4.5 in both files — ensure this version is compatible with rsbuild 1.7.6. Check rsbuild/plugin-react changelog for peerDependency requirements.
• Consistent upgrade pattern: Both implementations receive an identical @rsbuild/core upgrade (1.7.3 → 1.7.6). This suggests a coordinated change, likely from a dependency management tool (e.g., Renovate) scanning for outdated build tooling.

Testing Recommendations

Frontend Impact:
• Run pnpm dev and pnpm build in implementations/react-web-sdk to confirm rsbuild 1.7.6 works correctly with the existing rsbuild config
• Run pnpm dev and pnpm build in implementations/web-sdk_react with the same validation
• Check rsbuild 1.7.6 release notes for any breaking changes to dev server behavior, HMR, or production bundling that could affect these React implementations

Service Integration:
• These are reference implementations — integration tests run via the e2e-web test suite. Run pnpm test:e2e in both implementations after the upgrade to confirm full E2E pipeline (build → preview → test) is unaffected.

Data Serialization:
• None.

Privacy Compliance:
• None.

Backward Compatibility:
• rsbuild is a build tool, not a runtime dependency — backward compatibility is not a concern. However, verify that rsbuild.config.ts files in both implementations do not rely on any APIs that changed between 1.7.3 and 1.7.6.

OAuth Functionality:
• None

Reliability Testing:
• None

Additional Insights:
• Verify @rsbuild/plugin-react 1.4.5 peerDependency requirement is satisfied by rsbuild 1.7.6 (check plugin's package.json or changelog)
• Ensure pnpm-lock.yaml is updated in the PR to lock the new @rsbuild/core version — verify the lock file is included in the diff or was updated in a prior commit

_{Analysis based on known dependency patterns and edges. Actual impact may vary.}

[bito-code-review]

Code Review Agent Run #cb1a48

Actionable Suggestions - 0

Review Details

• Files reviewed - 2 · Commit Range: eecfa53..eecfa53

  • implementations/react-web-sdk/package.json
  • implementations/web-sdk_react/package.json
• Files skipped - 0
• Tools

  • Whispers (Secret Scanner) - ✔︎ Successful
  • Detect-secrets (Secret Scanner) - ✔︎ Successful

---

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

• /review - Manually triggers a full AI review.

• /pause - Pauses automatic reviews on this pull request.

• /resume - Resumes automatic reviews.

• /resolve - Marks all Bito-posted review comments as resolved.

• /abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Default Agent You can customize the agent settings here or contact your Bito workspace admin at jared.jolton@contentful.com.

Documentation & Help

• Customize agent settings
• Review rules
• General documentation
• FAQ

AI Code Review powered by

[bito-code-review]

✅ Review Settings Overridden

Status: Overridden Successfully

Guidelines:

• Accepted:

  • General : Review Posture, Repo Truth And Boundaries, Domain Invariants

  • Language : typescript= TypeScript Review Evidence

Note: Extra guidelines beyond 3 general purpose guidelines and 1 language specific guideline per language are not processed. Guidelines are fetched from the source branch.

[bito-code-review]

Code Review Agent Run #8179c9

Actionable Suggestions - 0

Review Details

• Files reviewed - 2 · Commit Range: 9eb2387..9eb2387

  • implementations/react-web-sdk/package.json
  • implementations/web-sdk_react/package.json
• Files skipped - 0
• Tools

  • Whispers (Secret Scanner) - ✔︎ Successful
  • Detect-secrets (Secret Scanner) - ✔︎ Successful

---

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

• /review - Manually triggers a full AI review.

• /pause - Pauses automatic reviews on this pull request.

• /resume - Resumes automatic reviews.

• /resolve - Marks all Bito-posted review comments as resolved.

• /abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Default Agent You can customize the agent settings here or contact your Bito workspace admin at jared.jolton@contentful.com.

Documentation & Help

• Customize agent settings
• Review rules
• General documentation
• FAQ

AI Code Review powered by

[bito-code-review]

Code Review Agent Run #5fc399

Actionable Suggestions - 0

Additional Suggestions - 1

• implementations/web-sdk_react/package.json - 1

  • Workspace catalog mismatch · Line 39-39
    The workspace catalog in pnpm-workspace.yaml (line 27) still pins '@rsbuild/core' to '^1.7.3', while both implementation package.json files now reference '1.7.6'. This inconsistency may cause pnpm to resolve different versions depending on how packages are consumed.

Review Details

• Files reviewed - 2 · Commit Range: f215b62..f215b62

  • implementations/react-web-sdk/package.json
  • implementations/web-sdk_react/package.json
• Files skipped - 0
• Tools

  • Whispers (Secret Scanner) - ✔︎ Successful
  • Detect-secrets (Secret Scanner) - ✔︎ Successful

---

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

• /review - Manually triggers a full AI review.

• /pause - Pauses automatic reviews on this pull request.

• /resume - Resumes automatic reviews.

• /resolve - Marks all Bito-posted review comments as resolved.

• /abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Default Agent You can customize the agent settings here or contact your Bito workspace admin at jared.jolton@contentful.com.

Documentation & Help

• Customize agent settings
• Review rules
• General documentation
• FAQ

AI Code Review powered by

[bito-code-review]

Code Review Agent Run #d17fa1

Actionable Suggestions - 0

Review Details

• Files reviewed - 2 · Commit Range: 21631b3..21631b3

  • implementations/react-web-sdk/package.json
  • implementations/web-sdk_react/package.json
• Files skipped - 0
• Tools

  • Whispers (Secret Scanner) - ✔︎ Successful
  • Detect-secrets (Secret Scanner) - ✔︎ Successful

---

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

• /review - Manually triggers a full AI review.

• /pause - Pauses automatic reviews on this pull request.

• /resume - Resumes automatic reviews.

• /resolve - Marks all Bito-posted review comments as resolved.

• /abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Default Agent You can customize the agent settings here or contact your Bito workspace admin at jared.jolton@contentful.com.

Documentation & Help

• Customize agent settings
• Review rules
• General documentation
• FAQ

AI Code Review powered by

[bito-code-review]

Code Review Agent Run #d50e2c

Actionable Suggestions - 0

Review Details

• Files reviewed - 2 · Commit Range: 97deea1..97deea1

  • implementations/react-web-sdk/package.json
  • implementations/web-sdk_react/package.json
• Files skipped - 0
• Tools

  • Whispers (Secret Scanner) - ✔︎ Successful
  • Detect-secrets (Secret Scanner) - ✔︎ Successful

---

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

• /review - Manually triggers a full AI review.

• /pause - Pauses automatic reviews on this pull request.

• /resume - Resumes automatic reviews.

• /resolve - Marks all Bito-posted review comments as resolved.

• /abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Default Agent You can customize the agent settings here or contact your Bito workspace admin at jared.jolton@contentful.com.

Documentation & Help

• Customize agent settings
• Review rules
• General documentation
• FAQ

AI Code Review powered by