Repository navigation
build(deps-dev): bump the npm-dependencies group across 1 directory with 3 updates - #15
Conversation
…ith 3 updates Bumps the npm-dependencies group with 3 updates in the /sdk/typescript directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [tsup](https://github.com/egoist/tsup) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `@types/node` from 26.6.4 to 26.6.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `tsup` from 8.5.1 to 9.0.0 - [Release notes](https://github.com/egoist/tsup/releases) - [Commits](egoist/tsup@v8.5.1...v9.0.0) Updates `vitest` from 5.0.3 to 5.0.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.6.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: tsup dependency-version: 9.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: vitest dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
intel352
left a comment
intel352
left a comment
There was a problem hiding this comment.
Independent agent review of exact candidate 365337a against main a144d90: SHIP-IT. No Critical or Important findings.
Scope is limited to the SDK manifest and lockfile: the three Dependabot development-dependency upgrades plus esbuild 0.28.2 to satisfy tsup 9's ^0.28.2 requirement. The correction changes esbuild and its 26 platform records only. SDK source, production dependency records, exports, and public API remain unchanged.
The independent adversarial review checked all required bug classes, all 176 lock records, 91 dependency relationships, 100 optional relationships, 37 peer relationships, supported Node 22 engines, installed versions, registry/integrity fields, and actual ESM/CommonJS loading with identical 49 exports. No errors were found. Local final-candidate validation passed 69 tests, type checking, build, packed-file allowlist/declaration/clean consumer checks, and actual TypeScript provider conformance (13 passed, four unadvertised optional-capability skips, zero failures).
This approval records the requested independent agent assessment under Jon's authorized Dependabot maintenance. Hosted exact-head CI and current policy are checked separately before merge.
Hosted exact-head verification is complete: push run 39320698004 passed all eight jobs, including clean public consumers. Following the approved close/reopen synchronization, fresh PR run 39329544401 passed all seven executed jobs; its clean-consumer job skipped under the unchanged push-only condition. Both runs identify head 365337a. PR15 now exposes this reviewed head and base a144d90.
Bumps the npm-dependencies group with 3 updates in the /sdk/typescript directory: @types/node, tsup and vitest.
Updates
@types/nodefrom 26.6.4 to 26.6.5Commits
Updates
tsupfrom 8.5.1 to 9.0.0Release notes
Sourced from tsup's releases.
Commits
198479bchore: release v9.0.03079ea3feat(type): expose the Plugin type (#1264)13f68ebci: enable npm stage publishing380e94etest: fix failing testsb601adfchore: merge test lockfile into the root as a pnpm workspace00139a4chore: cleanup lockfile6cec950chore: build tsup with its own source via tsx6705d39chore: upgrade deps, replace source-map with source-map-jsa2c0810feat: upgrade esbuild & chokidar980525efix: removebaseUrlin tsconfig (#1390)Updates
vitestfrom 5.0.3 to 5.0.5Release notes
Sourced from vitest's releases.
... (truncated)
Commits
7a825dbchore: release v5.0.5 (#11609)6621a72fix: abort all running tests on cancel (#11606)e9c3d72fix: release mocks of finished test files (#11607)8dd67c2fix(browser): run global setup once with instances (#11596)6c5a447fix: run hook cleanups when a later hook fails (#11605)9697b38fix: keep the import frame in native loader errors (#11599)6498b66fix(browser): wait 30s for the browser to close (#11601)f161e6dfix(browser): drop late connections of closed sessions (#11600)fe86a64fix: skip builtin loading in async leak detector (#11598)6ae8e89fix(reporter): end reason'failed'on worker crash (#11568)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsMaintainer correction and validation
The previous esbuild override forced 0.28.1 below tsup 9.0.0's declared ^0.28.2 range. This update pins esbuild 0.28.2 and regenerates only its lockfile entries/platform packages. The dependency upgrades remain limited to the SDK manifest and lockfile. Current main is integrated to satisfy strict branch freshness.
Constraint proof using the original and corrected lockfiles: original esbuild 0.28.1 does not satisfy ^0.28.2; corrected and installed esbuild 0.28.2 does satisfy ^0.28.2.
Validation at branch head 365337a with task-local Node 22.23.3:
No runtime dependency, public SDK API, or release version change is included. Independent exact-head assessment and hosted CI are checked before merge.