chore(deps): update dependency gsap to v3.13.0#711
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| <meta charset="UTF-8" /> | ||
| <title>tier-1-title-card</title> | ||
| <script src="https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/gsap.min.js"></script> | ||
| <script src="https://cdnjs.cloudflare.com/ajax/libs/gsap/3.13.0/gsap.min.js"></script> |
| <meta charset="UTF-8" /> | ||
| <title>tier-2-multi-scene</title> | ||
| <script src="https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/gsap.min.js"></script> | ||
| <script src="https://cdnjs.cloudflare.com/ajax/libs/gsap/3.13.0/gsap.min.js"></script> |
| <meta charset="UTF-8" /> | ||
| <title>tier-3-data-driven</title> | ||
| <script src="https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/gsap.min.js"></script> | ||
| <script src="https://cdnjs.cloudflare.com/ajax/libs/gsap/3.13.0/gsap.min.js"></script> |
vanceingalls
left a comment
vanceingalls
left a comment
There was a problem hiding this comment.
First review at a91f320a. Renovate PR. CI is mostly "skipping" (only skills/remotion-to-hyperframes/assets/test-corpus/*/hf-src/index.html files touched — these don't trigger the build matrix). Required checks that ran are green.
Audited
- Diff: gsap
3.12.5→3.13.0referenced in 3 test-corpusindex.htmlfiles - Renovate release notes:
3.12.5 → 3.12.6 → 3.12.7 → 3.13.0(3 minor bumps coalesced)
Strength
- Scope is small and contained — only test-corpus assets, not the main
packages/*/package.jsongsap dependency. These files exist for the remotion-to-hyperframes skill's test corpus and are referenced via CDN. - Renovate's confidence badge: typically gsap minors are non-breaking (the lib is mature, follows semver strictly).
Important — check for breaking API changes in 3.13.0
I can't pull the gsap CHANGELOG inline, but gsap 3.13.0 (released around 2025-Q4) reportedly contains new features (no removed APIs documented at this revision). Renovate's release-notes section in the PR body is empty of changelog detail because gsap's release notes are on greensock.com rather than GitHub.
Recommend: spot-check one of the 3 test-corpus compositions in a browser to confirm gsap.to(...), timelines, easing all still work. The test corpus is the canonical regression set for the skill — if it breaks, the whole remotion-to-hyperframes flow regresses silently.
Important — is this only test-corpus, or does it leak into prod?
The 3 files are index.html test-corpus assets. grep gsap@ -r packages/ would confirm whether the main packages also pin a gsap version (and to what). If main packages still pin 3.12.x, this PR creates a version skew where the skill's test corpus uses 3.13.0 but the actual hyperframes install uses 3.12.x. That can mask bugs — the skill testing-corpus passes against 3.13, but agents using HyperFrames in production hit 3.12 issues.
Cleaner state: pin both to the same version, or unpin the test-corpus and let it fetch latest.
Verdict
Verdict: COMMENT
Reasoning: Renovate PR, contained scope (test-corpus only), CI green on the required checks. Vance check before merging — gsap minors are usually safe but worth running one of the test compositions to confirm no breaking changes; also worth confirming this doesn't create a version skew with the main packages' gsap pin.
— Vai
vanceingalls
left a comment
vanceingalls
left a comment
There was a problem hiding this comment.
Renovate gsap v3.13.0 bump. Vai's prior comment-review held off stamping pending Vance's nod; Vance authorized. No required CI failures, lockfile-only diff.
Verdict: APPROVE
Reasoning: Routine dep bump, no failures, low-risk version increment.
— Vai
2 participants
This PR contains the following updates:
3.12.5→3.13.0Release Notes
greensock/GSAP (gsap)
v3.13.0Compare Source
v3.12.7Compare Source
v3.12.6Compare Source
Configuration
📅 Schedule: (in timezone America/Los_Angeles)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.