chore(deps): consolidate 19 dependabot PRs into one - #111
Merged
Conversation
Combines 19 open dependabot PRs into one batch. Manifest pins applied and each
app's bun.lock regenerated once (frozen-lockfile verified); paths-filter bumped
across all workflows.
api: bullmq 5.77.3; nodemailer 8.0.8; resend 6.12.4; @anthropic-ai/sdk 0.98.0;
openai 6.39.0; eslint-plugin-{oauth-security,structured-logging,
test-conventions,audit-log,cache-keys} 0.1.2; knip 6.14.2 (parity)
ui: @tanstack/react-query(+devtools) 5.100.14; vitest(+coverage-v8) 4.1.7;
storybook(+addon-a11y,addon-themes,react-vite) 10.4.1; knip 6.14.2;
eslint-plugin-{i18n-keys,test-conventions} 0.1.2; vite 8.0.14
docs: ws 8.21.0; astro 6.3.7; wrangler 4.94.0
ci: dorny/paths-filter v4.0.1 (#102)
knip bumped in api too for shared-tool-version-parity (the ui-only PR #105 would
otherwise break that lint-meta rule on main).
Excluded: #104 @casl/ability 6->7 (major; needs review on its own).
Validated: bun run check (api, ui), ui test:ci + build, docs build:ci all green;
bun install --frozen-lockfile passes in all three apps.
Closes #89, #90, #91, #92, #93, #94, #95, #96, #97, #98, #99, #100, #101, #102,
#103, #105, #106, #107, #108
agjs
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Consolidates the open dependabot backlog into a single batch so it can be reviewed and merged once. Manifest pins applied, each app's
bun.lockregenerated once, anddorny/paths-filterbumped across all workflows.Bumps
api — bullmq 5.77.3 · nodemailer 8.0.8 · resend 6.12.4 · @anthropic-ai/sdk 0.98.0 · openai 6.39.0 · eslint-plugin-{oauth-security,structured-logging,test-conventions,audit-log,cache-keys} 0.1.2 · knip 6.14.2 (parity)
ui — @tanstack/react-query(+devtools) 5.100.14 · vitest(+coverage-v8) 4.1.7 · storybook(+addon-a11y,addon-themes,react-vite) 10.4.1 · knip 6.14.2 · eslint-plugin-{i18n-keys,test-conventions} 0.1.2 · vite 8.0.14
docs — ws 8.21.0 · astro 6.3.7 · wrangler 4.94.0
ci — dorny/paths-filter v4.0.1 (#102)
Notes
@casl/ability6→7, major) — left as its own PR for review.shared-tool-version-paritylint-meta rule requires shared dev tooling to match across apps (merging chore(deps)(deps-dev): bump knip from 6.14.1 to 6.14.2 in /apps/ui #105 alone would breakmain), so api's knip was bumped to 6.14.2 too.Validation
Full pre-push gate passed: api
validate(coverage 86.31% lines / 83.17% functions), uivalidate, docs gate, infra/compose gate.bun install --frozen-lockfileclean in all three apps.Closes #89, #90, #91, #92, #93, #94, #95, #96, #97, #98, #99, #100, #101, #102, #103, #105, #106, #107, #108