chore(deps): consolidate Dependabot PRs #152–#155 (typescript-eslint + react parity) - #156
Merged
Merged
Conversation
- react / react-dom 19.2.6 -> 19.2.7, @types/react 19.2.15 -> 19.2.16 (#153) - typescript-eslint 8.60.0 -> 8.60.1 (#152) + @typescript-eslint/utils override Adds react / react-dom 19.2.7 to overrides. zustand declares react as an exact-pinned optional peer (5.0.13 -> react 19.2.6), so bumping the top-level react to 19.2.7 leaves zustand on its own nested 19.2.6 copy -> two React instances -> 'Cannot read properties of null (reading useCallback)' / 'mismatching versions of React and the renderer' in the consent-store tests. The override collapses react to a single copy. Rationale documented in //overrides. This is why #153 failed validate + Playwright on its own.
- react / react-dom 19.2.6 -> 19.2.7, @types/react override 19.2.15 -> 19.2.16 Mirrors the apps/ui bumps so package-override-parity stays green: ui now overrides react@19.2.7 and @types/react@19.2.16, and docs must resolve the same versions (sibling-mirror check).
agjs
enabled auto-merge (squash)
June 9, 2026 15:56
agjs
disabled auto-merge
June 9, 2026 16:06
This was referenced Jun 9, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Consolidates the 4 new Dependabot PRs (#152–#155) into one. Two of them (#155, #153) fail CI on their own because each bumps only one side of a version pair the repo requires to move together. This PR applies all four bumps plus the companion changes that keep the cross-app invariants green.
Bumps
Why each failing PR needed companions
#155 (typescript-eslint, api) — failed
typecheck + lint + test.The
shared-tool-version-paritylint-meta rule requirestypescript-eslintpinned to the same version in every app that declares it. Bumping only api →ui@8.60.0, api@8.60.1drift → fail. (#152 bumps only ui and shows green only because the parity rule runs in api's CI, which #152 doesn't trigger.) Fix: bumptypescript-eslintto 8.60.1 in both apps, and the@typescript-eslint/utilsoverride alongside it (kept equal across api+ui perpackage-override-parity).#153 (react group, ui) — failed
validate+ Playwright.react/react-dom19.2.7 alone produced "mismatching versions of React and the renderer" / "Cannot read properties of null (reading 'useCallback')" in the consent-store tests. Root cause:zustand@5.0.13declaresreactas an exact-pinned optional peer (→ react 19.2.6), so bumping the top-level react to 19.2.7 leaves zustand on its own nested 19.2.6 copy → two React instances. Fix: addreact/react-dom19.2.7 tooverridesto collapse react to a single copy (rationale documented in//overrides), and mirror thereact/react-dom/@types/reactversions into apps/docs sopackage-override-parity's sibling-mirror check stays green.Verification
apps/apibun run check✅ (typecheck, lint, lint:meta incl. both parity rules, RULES.md, knip)apps/uibun run check✅ +bun run test:ci✅ (655/655 — the chore(deps)(deps): bump the react group across 1 directory with 3 updates #153 failures now pass with a single React)apps/docsbun run build:ci✅bun.lockfiles regenerated (frozen-install safe)Docker-backed smoke/Playwright + Redis/Postgres integration tests run in GitHub CI (no Docker locally).
Closes
Supersedes and closes #152, #153, #154, #155.