-
Notifications
You must be signed in to change notification settings - Fork 347
[Snyk] Security upgrade parcel from 1.12.4 to 2.0.0 #3294
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-QS-14724253
prodsecmachine
commented
Dec 30, 2025
This major version upgrade from Parcel 1 to 2 is a complete rewrite and introduces significant breaking changes. The npm package has been renamed, configuration has been overhauled, and plugin APIs are not compatible. Manual intervention is required to migrate.
Highlights:
- Package Name Change: The npm package
parcel-bundlermust be replaced withparcel. - Configuration: Parcel 2 introduces a
.parcelrcfile for configuration, replacing implicit setups. JavaScript is no longer transpiled by default; you must define abrowserslistinpackage.json.
Source: Parcel documentation
Recommendation: Follow the official Parcel 1 to 2 migration guide, update package names, create a .parcelrc configuration, and test thoroughly before merging.
Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.
A documentation preview will be available soon.
Request a new doc build by commenting
- Rebuild this PR:
run docs-build - Rebuild this PR and all Elastic docs:
run docs-build rebuild
run docs-build is much faster than run docs-build rebuild. A rebuild should only be needed in rare situations.
If your PR continues to fail for an unknown reason, the doc build pipeline may be broken. Elastic employees can check the pipeline status here.
snyk-top-banner
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-QS-14724253
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Allocation of Resources Without Limits or Throttling