Skip to content

chore(deps): consolidate all dependabot updates - #202

Merged
guyghost merged 1 commit into
developfrom
guyghost-chore-merge-deps-updates
Jul 9, 2026
Merged

chore(deps): consolidate all dependabot updates#202
guyghost merged 1 commit into
developfrom
guyghost-chore-merge-deps-updates

Conversation

@guyghost

@guyghost guyghost commented Jul 9, 2026

Copy link
Copy Markdown
Owner

Contexte

Consolide sur develop les 9 PR Dependabot qui ciblaient main (46 commits derrière develop). Les fusionner individuellement aurait provoqué d'importants conflits de lockfile ; cette PR applique directement toutes les montées de version sur develop et régénère le lockfile.

Closes #167, #168, #169, #170, #171, #173, #174, #175, #176, #184.

GitHub Actions

Action Avant Après PR
softprops/action-gh-release v2 v3 #167
actions/github-script v7 v9 #168
actions/upload-artifact v4 v7 #169
mnao305/chrome-extension-upload v5.0.0 v6.0.0 #170
actions/download-artifact v4 v8 #171

npm

Package Avant Après PR
@crxjs/vite-plugin 2.0.0-beta.28 2.7.1 #184
@types/chrome 0.0.287 0.2.2 #184
eslint 9.0.0 10.6.0 #176
jsdom 28.1.0 29.1.1 #174
lint-staged 16.4.0 17.0.8 #175
prettier 3.4.0 3.9.4 #184
prettier-plugin-svelte 3.3.0 4.1.1 #173
svelte 5.55.9 5.56.4 #184
@sveltejs/kit 2.61.1 2.69.1 #184
@supabase/ssr 0.6.1 0.12.0 #184
@supabase/supabase-js 2.106.1 2.110.0 #184
tailwindcss / @tailwindcss/vite 4.0.0 4.3.2 #184
svelte-check 4.0.0 4.7.1 #184
@playwright/test 1.49.0 1.61.1 #184
typescript-eslint 8.58.1 8.62.1 #184
tsx 4.19.0 4.23.0 #184
globals 17.4.0 17.7.0 #184
@sveltejs/package 2.3.0 2.5.8 #184
svelte2tsx 0.7.54 0.7.57 #184
@vercel/microfrontends 2.3.3 2.3.6 #184
supabase 2.101.0 2.109.0 #184
turbo 2.10.0 2.10.3 #184

Régressions corrigées

  • @types/chrome 0.2.2 : chrome.storage.local.get() retourne un type plus strict. Ajout de casts typés (sans any) dans favorites.ts et seen-missions.ts.
  • prettier 3.9.4 + prettier-plugin-svelte 4.1.1 (deux bumps major) : reformatage de 11 fichiers préexistants via pnpm format (uniquement du formatage, aucune logique modifiée).

Vérification

pnpm ci:check (format:check && lint && typecheck && test && build) au vert sur l'ensemble du monorepo.

ℹ️ eslint-plugin-svelte@2.46.1 déclare un peer eslint ^9 ; avec eslint 10, pnpm émet un avertissement de peer dep non bloquant — le lint passe sans erreur.

Notes

Aucune décision d'état ni workflow métier modifié : cette PR est purement une mise à jour de dépendances. Les casts ajoutés restent dans la couche shell (I/O) et n'introduisent pas de any.

Consolide sur `develop` les 9 PR Dependabot qui ciblaient `main`
(46 commits derrière develop) afin d'éviter les conflits de lockfile.

GitHub Actions (PR #167, #168, #169, #170, #171):
- softprops/action-gh-release v2 -> v3
- actions/github-script v7 -> v9
- actions/upload-artifact v4 -> v7
- actions/download-artifact v4 -> v8
- mnao305/chrome-extension-upload v5.0.0 -> v6.0.0

npm (PR #173, #174, #175, #176, #184):
- @crxjs/vite-plugin 2.0.0-beta.28 -> 2.7.1
- @types/chrome 0.0.287 -> 0.2.2
- eslint 9.0.0 -> 10.6.0
- jsdom 28.1.0 -> 29.1.1
- lint-staged 16.4.0 -> 17.0.8
- prettier 3.4.0 -> 3.9.4
- prettier-plugin-svelte 3.3.0 -> 4.1.1
- svelte 5.55.9 -> 5.56.4
- @sveltejs/kit 2.61.1 -> 2.69.1
- @supabase/ssr 0.6.1 -> 0.12.0
- @supabase/supabase-js 2.106.1 -> 2.110.0
- tailwindcss / @tailwindcss/vite 4.0.0 -> 4.3.2
- svelte-check 4.0.0 -> 4.7.1
- @playwright/test 1.49.0 -> 1.61.1
- typescript-eslint 8.58.1 -> 8.62.1
- tsx 4.19.0 -> 4.23.0
- globals 17.4.0 -> 17.7.0
- @sveltejs/package 2.3.0 -> 2.5.8
- svelte2tsx 0.7.54 -> 0.7.57
- @vercel/microfrontends 2.3.3 -> 2.3.6
- supabase 2.101.0 -> 2.109.0
- turbo 2.10.0 -> 2.10.3

Régressions corrigées:
- @types/chrome 0.2.2: `chrome.storage.local.get()` retourne un type
  plus strict ; ajout de casts typés (sans `any`) dans `favorites.ts`
  et `seen-missions.ts`.
- prettier 3.9.4 + prettier-plugin-svelte 4.1.1: reformatage de 11
  fichiers préexistants (`pnpm format`).

Vérifié: `pnpm ci:check` (format:check && lint && typecheck && test && build)
au vert sur l'ensemble du monorepo.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings July 9, 2026 17:05
@vercel

vercel Bot commented Jul 9, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
pulse Ready Ready Preview, Comment Jul 9, 2026 5:06pm
pulse-dashboard Ready Ready Preview, Comment Jul 9, 2026 5:06pm

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR consolidates multiple Dependabot updates directly onto develop to avoid lockfile conflicts, updates GitHub Actions and npm dependencies across the monorepo, and includes small source adjustments needed to accommodate stricter typings and formatter changes.

Changes:

  • Bump various GitHub Actions used in CI/release workflows (e.g. artifact upload/download, github-script, gh-release, Chrome Web Store upload).
  • Update npm dependencies across apps/packages (Svelte/Kit, Tailwind, Prettier plugin, Playwright, Supabase, Turbo, ESLint, etc.).
  • Adjust a few TypeScript call sites / type declarations to satisfy updated typings/formatting (notably chrome.storage.local.get() result typing and Prettier formatting changes).

Reviewed changes

Copilot reviewed 21 out of 22 changed files in this pull request and generated 3 comments.

Show a summary per file
File Description
packages/ui/package.json Bumps Svelte, Tailwind, svelte-check, and related tooling versions for the UI package.
package.json Updates root dev tooling (lint-staged) and monorepo tools (supabase CLI, turbo).
apps/landing/package.json Updates Svelte/Kit + Supabase and related dependencies for the landing app.
apps/extension/src/ui/pages/FeedPage.svelte Prettier-driven formatting change to dynamic component type declarations.
apps/extension/src/lib/state/cv-experience.svelte.ts Prettier-driven union-type formatting change.
apps/extension/src/lib/shell/storage/seen-missions.ts Adds a typed cast for chrome.storage.local.get() return value (per updated @types/chrome).
apps/extension/src/lib/shell/storage/migration-types.ts Prettier-driven union-type formatting change.
apps/extension/src/lib/shell/storage/favorites.ts Adds typed casts for chrome.storage.local.get() return values (per updated @types/chrome).
apps/extension/src/lib/shell/messaging/error-boundary.ts Prettier-driven union-type formatting change.
apps/extension/src/lib/core/types/mission.ts Prettier-driven union-type formatting change.
apps/extension/src/lib/core/sync/connected-dashboard.ts Prettier-driven union-type formatting change.
apps/extension/src/lib/core/profile/profile-impact.ts Prettier-driven union-type formatting change.
apps/extension/src/lib/core/profile-extractors/types.ts Prettier-driven union-type formatting change.
apps/extension/src/lib/core/errors/app-error.ts Prettier-driven union-type formatting change.
apps/extension/src/lib/core/connectors/freework-parser.ts Prettier-driven formatting change to mapping logic (no functional intent indicated).
apps/extension/src/dev/chrome-stubs.ts Prettier-driven union-type formatting change.
apps/extension/package.json Updates extension dependencies/devDependencies (Svelte, Tailwind, Playwright, ESLint, Prettier plugin, @types/chrome, etc.).
apps/dashboard/package.json Updates dashboard dependencies/devDependencies (Svelte/Kit, Supabase, Tailwind, Playwright, etc.).
.github/workflows/release.yml Bumps release pipeline actions (gh-release, upload/download artifact, chrome upload).
.github/workflows/connector-health.yml Bumps upload-artifact and github-script used by scheduled connector health checks.
.github/workflows/ci.yml Bumps upload-artifact versions used for CI artifacts and Playwright reports.

Comment on lines 4 to 7
export async function getSeenIds(): Promise<string[]> {
const result = await chrome.storage.local.get([STORAGE_KEY]);
return result[STORAGE_KEY] ?? [];
return (result[STORAGE_KEY] as string[] | undefined) ?? [];
}
Comment on lines 4 to 7
export async function getFavorites(): Promise<Record<string, number>> {
const result = await chrome.storage.local.get([FAVORITES_KEY]);
return result[FAVORITES_KEY] ?? {};
return (result[FAVORITES_KEY] as Record<string, number> | undefined) ?? {};
}
Comment on lines 13 to 16
export async function getHidden(): Promise<Record<string, number>> {
const result = await chrome.storage.local.get([HIDDEN_KEY]);
return result[HIDDEN_KEY] ?? {};
return (result[HIDDEN_KEY] as Record<string, number> | undefined) ?? {};
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants