chore(deps): bump the npm group with 20 updates - #303
Conversation
Bumps the npm group with 20 updates: | Package | From | To | | --- | --- | --- | | [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.1` | `4.3.3` | | [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.4` | `3.14.6` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.21.0` | `1.25.0` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.11.2` | `4.12.2` | | [@tauri-apps/cli](https://github.com/tauri-apps/tauri) | `2.11.3` | `2.11.4` | | [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) | `4.1.9` | `4.1.10` | | [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `4.1.9` | `4.1.10` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.9` | `4.1.10` | | [dprint](https://github.com/dprint/dprint) | `0.54.0` | `0.55.2` | | [eslint](https://github.com/eslint/eslint) | `10.6.0` | `10.7.0` | | [lefthook](https://github.com/evilmartians/lefthook) | `2.1.9` | `2.1.10` | | [postcss](https://github.com/postcss/postcss) | `8.5.15` | `8.5.20` | | [prettier](https://github.com/prettier/prettier) | `3.8.5` | `3.9.5` | | [prettier-plugin-tailwindcss](https://github.com/tailwindlabs/prettier-plugin-tailwindcss) | `0.8.0` | `0.8.1` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.1` | `4.3.3` | | [terser](https://github.com/terser/terser) | `5.48.0` | `5.49.0` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.62.0` | `8.64.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.0` | `8.1.5` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` | Updates `@tailwindcss/postcss` from 4.3.1 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-postcss) Updates `@tanstack/react-virtual` from 3.14.4 to 3.14.6 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.6/packages/react-virtual) Updates `lucide-react` from 1.21.0 to 1.25.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.25.0/packages/lucide-react) Updates `react-resizable-panels` from 4.11.2 to 4.12.2 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.11.2...4.12.2) Updates `@tauri-apps/cli` from 2.11.3 to 2.11.4 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.11.3...@tauri-apps/cli-v2.11.4) Updates `@vitest/browser` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/browser) Updates `@vitest/browser-playwright` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/browser-playwright) Updates `@vitest/coverage-v8` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8) Updates `dprint` from 0.54.0 to 0.55.2 - [Release notes](https://github.com/dprint/dprint/releases) - [Commits](dprint/dprint@0.54.0...0.55.2) Updates `eslint` from 10.6.0 to 10.7.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.6.0...v10.7.0) Updates `lefthook` from 2.1.9 to 2.1.10 - [Release notes](https://github.com/evilmartians/lefthook/releases) - [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md) - [Commits](evilmartians/lefthook@v2.1.9...v2.1.10) Updates `postcss` from 8.5.15 to 8.5.20 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.15...8.5.20) Updates `prettier` from 3.8.5 to 3.9.5 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.5...3.9.5) Updates `prettier-plugin-tailwindcss` from 0.8.0 to 0.8.1 - [Release notes](https://github.com/tailwindlabs/prettier-plugin-tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/prettier-plugin-tailwindcss/blob/main/CHANGELOG.md) - [Commits](tailwindlabs/prettier-plugin-tailwindcss@v0.8.0...v0.8.1) Updates `tailwindcss` from 4.3.1 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss) Updates `terser` from 5.48.0 to 5.49.0 - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](terser/terser@v5.48.0...v5.49.0) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `typescript-eslint` from 8.62.0 to 8.64.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/typescript-eslint) Updates `vite` from 8.1.0 to 8.1.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite) Updates `vitest` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest) --- updated-dependencies: - dependency-name: "@tailwindcss/postcss" dependency-version: 4.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@tanstack/react-virtual" dependency-version: 3.14.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: lucide-react dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: react-resizable-panels dependency-version: 4.12.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@tauri-apps/cli" dependency-version: 2.11.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vitest/browser" dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vitest/browser-playwright" dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: dprint dependency-version: 0.55.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: eslint dependency-version: 10.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: lefthook dependency-version: 2.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: postcss dependency-version: 8.5.20 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: prettier dependency-version: 3.9.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: prettier-plugin-tailwindcss dependency-version: 0.8.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: tailwindcss dependency-version: 4.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: terser dependency-version: 5.49.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: typescript-eslint dependency-version: 8.64.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: vite dependency-version: 8.1.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm ... Signed-off-by: dependabot[bot] <support@github.com>
EVWorth
left a comment
There was a problem hiding this comment.
Requesting changes: this PR bundles 20 package updates including a TypeScript major version bump and is currently failing 4 CI checks.
Diff inspection shows:
typescript6.0.3 → 7.0.2 (major). TS7 contains breaking changes that the failingLint (TypeScript)andTest Frontendjobs likely reflect.dprint0.54.0 → 0.55.2 (minor) — likely the source of the failingFormat Check (dprint). Should be re-formatted in this PR.npm AuditFAILURE — needsnpm audit, output to determine which of the 20 packages introduced a known vuln.lucide-react1.21.0 → 1.25.0 (4 minor bumps) — verify no icons used insrc/components/**/*.tsxwere renamed/removed.grep -rh 'from "lucide-react"' src/ | tr ',' '\n' | sort -uafter install.
CI is failing 4 of 10 checks:
- npm Audit (FAILURE)
- Lint (TypeScript) (FAILURE)
- Test Frontend (FAILURE)
- Format Check (dprint) (FAILURE)
Recommend splitting this PR:
- Patch and minor toolchain bumps: tailwindcss, tanstack/react-virtual, vitest/browser, eslint, lefthook, prettier, prettier-plugin-tailwindcss, terser, typescript-eslint, vite. Run
npx dprint fmtto refresh formatting. Each of these is a separate dependabot PR in most configs. lucide-react1.21 → 1.25: separate PR, gated ongrepfor icon-name regressions.typescript6 → 7: separate PR. TS major bumps need a migration plan (test config, decorator changes, ESM-only behaviors). Should not be in a 'bump 20 things' bucket.dprint0.54 → 0.55: bundle with re-format in same PR.
Closing and re-grouping via dependabot auto-retry or manual close+reopen usually produces the cleaner split. Happy to do that here if you prefer.
|
Closing this in favor of narrower PRs per the change-request review. Will open:
Each will be smaller, CI-passable, and individually revertable. The bundled npm-audit/lint/format failures were caused by mixing these; isolating makes the actual breakage source cheap to identify. |
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
…, vitest 4.1.5→4.1.10, vite 8.1.0→8.1.5, prettier 3.8.5→3.9.5, etc.) (#468) Splits the bundled #303 into narrower bumps. This PR covers the toolchain safety set (patch and minor): - @tailwindcss/postcss 4.3.1 → 4.3.3 - @tanstack/react-virtual 3.14.4 → 3.14.6 - @vitest/browser 4.1.9 → 4.1.10 - @vitest/browser-playwright 4.1.7 → 4.1.10 - @vitest/coverage-v8 4.1.7 → 4.1.10 - dprint 0.54.0 → 0.55.2 - lefthook 2.1.9 → 2.1.10 - prettier-plugin-tailwindcss 0.8.0 → 0.8.1 - terser 5.48.0 → 5.49.0 - typescript-eslint 8.62.0 → 8.65.0 - vite 8.1.0 → 8.1.5 - vitest 4.1.5 → 4.1.10 Verified locally: - vitest: 1534/1534 pass - tsc --noEmit: clean - eslint: 0 errors (180 pre-existing warnings unrelated) Excludes from this PR (each gets its own): - typescript 6 → 7 (major; migration plan needed) - lucide-react 1.21 → 1.25 (need icon-name regression grep) - eslint 10.6 → 10.7 (may have rule changes; will verify before bumping) - react-resizable-panels 4.11 → 4.12 (minor with API touch surface) Refs #303
Splits #303. Four minor versions (1.21 → 1.25) covering icon additions, attribute cleanups, and tree-shake improvements. Lucide is conservative about icon renames — verified that all 57 icons currently imported from lucide-react still resolve cleanly with tsc --noEmit (zero errors). No source changes required. Refs #303
Splits #303. Four minor versions (1.21 → 1.25) covering icon additions, attribute cleanups, and tree-shake improvements. Lucide is conservative about icon renames — verified that all 57 icons currently imported from lucide-react still resolve cleanly with tsc --noEmit (zero errors). No source changes required. Refs #303
Bumps the npm group with 20 updates:
4.3.14.3.33.14.43.14.61.21.01.25.04.11.24.12.22.11.32.11.44.1.94.1.104.1.94.1.104.1.94.1.100.54.00.55.210.6.010.7.02.1.92.1.108.5.158.5.203.8.53.9.50.8.00.8.14.3.14.3.35.48.05.49.06.0.37.0.28.62.08.64.08.1.08.1.54.1.94.1.10Updates
@tailwindcss/postcssfrom 4.3.1 to 4.3.3Release notes
Sourced from @tailwindcss/postcss's releases.
Changelog
Sourced from @tailwindcss/postcss's changelog.
Commits
c2b24dd4.3.3 (#20334)e48c5e8Fix weird character rendering on Windows with Japanese locale (#20318)9b0e8afEnsure@tailwindcss/postcssrebuilds when the input CSS changes but its mti...b53fa09fix: exclude iframes from focus-visible auto outline in Preflight (#20292)056a1554.3.2 (#20281)Updates
@tanstack/react-virtualfrom 3.14.4 to 3.14.6Release notes
Sourced from @tanstack/react-virtual's releases.
Changelog
Sourced from @tanstack/react-virtual's changelog.
Commits
e2cb096ci: Version Packages (#1225)d49cc52fix(virtual-core): invalidate measurements when gap option changes (#1223)151e9f4ci: Version Packages (#1213)Updates
lucide-reactfrom 1.21.0 to 1.25.0Release notes
Sourced from lucide-react's releases.
... (truncated)
Commits
f229f83chore(depedencies): Update dependencies (#4553)Updates
react-resizable-panelsfrom 4.11.2 to 4.12.2Release notes
Sourced from react-resizable-panels's releases.
Changelog
Sourced from react-resizable-panels's changelog.
Commits
a1eeb7a4.12.1 -> 4.12.23e877a14.12.0 -> 4.12.1039d167fix #723: Ending a drag with a right-click results in panels incorrectly swal...554645aUpdate README8b0ffa94.11.2 -> 4.12.0c1d818ffeat(Group): pass isUserInteraction flag to onLayoutChanged (closes #716) (#721)335d7f2Remove temp did-mount state from e2e test harnessab519b7Add a more visible warning message to server-rendering persisted layouts7bf5dadAdded a warning to docsUpdates
@tauri-apps/clifrom 2.11.3 to 2.11.4Release notes
Sourced from @tauri-apps/cli's releases.
Commits
8909f22apply version updates (#15598)67ffa19fix(bundler): make .desktop and .DirIcon relative symlinks (#15596)c5c8b2bdocs(readme): desktop platforms -> operating systems, closes #1558980d437ffix(#15580): bump memmap2 (#15587)469ecc8test: regenerate stale macOS acl snapshot for has_app_acl (#15576)5be0cb8fix(ci): change strip to debuginfo for cloudflare worker (#15574)4bbd497chore(deps): bump cloudflare worker versions (#15573)5712549chore(deps): update dependency rollup to v4.62.0 (#15551)c8faedfci: test on node 20,22 instead of node 18,203641e26refactor: simplify menu code (#15559)Updates
@vitest/browserfrom 4.1.9 to 4.1.10Release notes
Sourced from @vitest/browser's releases.
Commits
db616d2chore: release v4.1.10 (#10718)5c18dd2fix(browser): check fs access in builtin commands [backport to v4] (#10680)Updates
@vitest/browser-playwrightfrom 4.1.9 to 4.1.10Release notes
Sourced from @vitest/browser-playwright's releases.
Commits
db616d2chore: release v4.1.10 (#10718)5c18dd2fix(browser): check fs access in builtin commands [backport to v4] (#10680)Updates
@vitest/coverage-v8from 4.1.9 to 4.1.10Release notes
Sourced from @vitest/coverage-v8's releases.
Commits
db616d2chore: release v4.1.10 (#10718)Updates
dprintfrom 0.54.0 to 0.55.2Release notes
Sourced from dprint's releases.
... (truncated)
Commits
89ff90b0.55.2e203454fix: build linux gnu binaries against glibc 2.17 (#1203)bd455f1docs: add plugins header link (#1195)b3637390.55.11784185fix(npm): resolve node_modules from config dir (#1194)a78f275chore(website): improve mobile layout for install section and playground head...cf90f10chore(website): rename sponsor-* classes so ad blockers don't hide the page (...8549f82feat(playground): full-screen layout with resizable panes (#1189)c69addbchore(website): content-hash CSS/JS filenames for cache busting (#1188)5e1ac6d0.55.0Updates
eslintfrom 10.6.0 to 10.7.0Release notes
Sourced from eslint's releases.
Commits
fabd99b10.7.037c5e75Build: changelog update for 10.7.09489379chore: update dependency@eslint/eslintrcto ^3.3.6 (#21076)81a4774chore: updates for v9.39.5 release3e7bf15fix: applyignoreClassesWithImplementsto class expressions (#21069)9835414chore: enable$ExpectTypeannotations in all TypeScript files (#21071)cf2a9bffeat: add errorClassNames option to preserve-caught-error rule (#21032)c30d808docs: Update READMEf8b873afeat: max-nested-callbacks option for constructor callbacks (#21063)72adf6bchore: restrictmarkdownlint-cli2updates in renovate (#21067)Updates
lefthookfrom 2.1.9 to 2.1.10Release notes
Sourced from lefthook's releases.
Changelog
Sourced from lefthook's changelog.