Bump the "all-dependencies" group with 2 updates across multiple ecosystems - #72
Merged
Merged
Conversation
Bumps the all-dependencies group with 8 updates: | Package | From | To | | --- | --- | --- | | [@emotion/styled](https://github.com/emotion-js/emotion) | `11.14.0` | `11.14.1` | | [@mui/icons-material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material) | `7.1.0` | `7.3.11` | | [@mui/material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-material) | `7.1.0` | `7.3.11` | | [serve](https://github.com/vercel/serve) | `14.2.5` | `14.2.6` | | [@rsbuild/core](https://github.com/web-infra-dev/rsbuild/tree/HEAD/packages/core) | `1.6.12` | `1.7.6` | | [@rsbuild/plugin-eslint](https://github.com/rstackjs/rsbuild-plugin-eslint) | `1.2.0` | `1.3.0` | | [@rsbuild/plugin-react](https://github.com/web-infra-dev/rsbuild/tree/HEAD/packages/plugin-react) | `1.4.2` | `1.4.6` | | [@rstest/core](https://github.com/web-infra-dev/rstest/tree/HEAD/packages/core) | `0.6.9` | `0.11.12` | Updates `@emotion/styled` from 11.14.0 to 11.14.1 - [Release notes](https://github.com/emotion-js/emotion/releases) - [Changelog](https://github.com/emotion-js/emotion/blob/main/CHANGELOG.md) - [Commits](https://github.com/emotion-js/emotion/compare/@emotion/styled@11.14.0...@emotion/styled@11.14.1) Updates `@mui/icons-material` from 7.1.0 to 7.3.11 - [Release notes](https://github.com/mui/material-ui/releases) - [Changelog](https://github.com/mui/material-ui/blob/v7.3.11/CHANGELOG.md) - [Commits](https://github.com/mui/material-ui/commits/v7.3.11/packages/mui-icons-material) Updates `@mui/material` from 7.1.0 to 7.3.11 - [Release notes](https://github.com/mui/material-ui/releases) - [Changelog](https://github.com/mui/material-ui/blob/v7.3.11/CHANGELOG.md) - [Commits](https://github.com/mui/material-ui/commits/v7.3.11/packages/mui-material) Updates `serve` from 14.2.5 to 14.2.6 - [Release notes](https://github.com/vercel/serve/releases) - [Changelog](https://github.com/vercel/serve/blob/main/CHANGELOG.md) - [Commits](vercel/serve@v14.2.5...v14.2.6) Updates `@rsbuild/core` from 1.6.12 to 1.7.6 - [Release notes](https://github.com/web-infra-dev/rsbuild/releases) - [Commits](https://github.com/web-infra-dev/rsbuild/commits/v1.7.6/packages/core) Updates `@rsbuild/plugin-eslint` from 1.2.0 to 1.3.0 - [Release notes](https://github.com/rstackjs/rsbuild-plugin-eslint/releases) - [Commits](rstackjs/rsbuild-plugin-eslint@v1.2.0...v1.3.0) Updates `@rsbuild/plugin-react` from 1.4.2 to 1.4.6 - [Release notes](https://github.com/web-infra-dev/rsbuild/releases) - [Changelog](https://github.com/web-infra-dev/rsbuild/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/web-infra-dev/rsbuild/commits/v1.4.6/packages/plugin-react) Updates `@rstest/core` from 0.6.9 to 0.11.12 - [Release notes](https://github.com/web-infra-dev/rstest/releases) - [Commits](https://github.com/web-infra-dev/rstest/commits/v0.11.12/packages/core) Bump node in the all-dependencies group Bumps the all-dependencies group with 1 update: node. Updates `node` from 20.11.1-bullseye-slim to 20.20.2-bullseye-slim --- updated-dependencies: - dependency-name: "@emotion/styled" dependency-version: 11.14.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: "@mui/icons-material" dependency-version: 7.3.11 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@mui/material" dependency-version: 7.3.11 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: serve dependency-version: 14.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: "@rsbuild/core" dependency-version: 1.7.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@rsbuild/plugin-eslint" dependency-version: 1.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@rsbuild/plugin-react" dependency-version: 1.4.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: "@rstest/core" dependency-version: 0.11.12 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: node dependency-version: 20.20.2-bullseye-slim dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
3uzbcqje
added a commit
that referenced
this pull request
Sep 13, 2026
CI hardcoded node-version: "20.11.1" while the Dockerfile base image moved to 20.20.2. Dependabot bumps the Dockerfile because that is a docker image tag it manages, but it cannot see a version string in workflow YAML, so the two drifted with nothing to catch it. That drift surfaced on #72: @rstest/core, @rsbuild/core and @rspack/core all require ^20.19.0 || >=22.12.0, which CI's 20.11.1 does not satisfy. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01XKNMLCKoVr8Xz1HePmDBXs
Collaborator
|
@dependabot recreate |
Collaborator
|
@dependabot recreate |
Regenerates package-lock.json. Dependabot's grouped update left the lockfile inconsistent -- @rstest/core vendors a newer @rspack/core whose @module-federation/* requirements were never added -- so npm ci failed with six packages missing from the lock. Two @dependabot recreate requests went unanswered. Resolved by keeping main's lockfile (which carries the security refresh from #74) and reconciling it against this branch's package.json. npm ci -> ok, 752 packages npm audit -> 0 vulnerabilities Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FpuRSSAYEkdSSgnaFaoBKK
Collaborator
|
Pushed a merge of Why this needed manual repair. The grouped update left the lockfile inconsistent: Resolution. Net effect vs main: the 7 declared minor/patch bumps, plus the Dockerfile moving to Note that pushing here means Dependabot will no longer manage this PR. That's deliberate: it stopped responding, and the config will produce fresh grouped PRs on the weekly schedule regardless. 🤖 Generated with Claude Code |
The previous commit regenerated the lockfile with npm 12.0.2, which resolves
the nested @rstest/core -> @rspack/core -> @module-federation/* tree
differently from the npm 10.2.4 that CI runs. npm 12 produced a lockfile it
considered complete; npm 10 rejected it with the same six packages missing:
@module-federation/{runtime-tools,runtime,webpack-bundler-runtime,
error-codes,runtime-core,sdk}@2.9.0
Regenerating under npm 10.2.4 adds them as nested entries beneath
@rstest/core, which is what npm ci was asking for.
Verified with npm 10.2.4:
npm ci -> ok, 764 packages
npm audit -> 0 vulnerabilities
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FpuRSSAYEkdSSgnaFaoBKK
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps the all-dependencies group with 8 updates:
11.14.011.14.17.1.07.3.117.1.07.3.1114.2.514.2.61.6.121.7.61.2.01.3.01.4.21.4.60.6.90.11.12Updates
@emotion/styledfrom 11.14.0 to 11.14.1Release notes
Sourced from @emotion/styled's releases.
Commits
4922955Version Packages (#3335)0facbe4Renamed default-exported variable in@emotion/styledto aid inferred import...cce67ecBump parcel (#3258)Updates
@mui/icons-materialfrom 7.1.0 to 7.3.11Release notes
Sourced from @mui/icons-material's releases.
... (truncated)
Changelog
Sourced from @mui/icons-material's changelog.
... (truncated)
Commits
6ddda37[release] v7.3.11 (#48478)2a8ad69[release] v7.3.10 (#48220)dbb5734[infra] Prepare for the v7 release (#48222)5430aaav7.3.9 (#47911)1ee94a2[release] v7.3.8 (#47754)a8be348Bump code-infra:devDependencies (#46873)023288bBump@types/reactto 19.2.9 (#47674)e7bf2f2Bump babel monorepo to ^7.28.6 (#47640)06b1418Bump@types/reactto 19.2.8 (#47639)86fd51ev7.3.7 (#47565)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@mui/icons-materialsince your current version.Updates
@mui/materialfrom 7.1.0 to 7.3.11Release notes
Sourced from @mui/material's releases.
... (truncated)
Changelog
Sourced from @mui/material's changelog.
... (truncated)
Commits
6ddda37[release] v7.3.11 (#48478)a2c7fa0[switch] Fix incorrectrolewithslotProps.input(@mj12albert) (#48472)c3628bd[input] Fix layout shift with display: flex (@oliviertassinari) (#48359)290c896[autocomplete] Fix highlight sync and scroll preservation (@mj12albert) (#48350)6e172b7[autocomplete] Fix popper rendering issues (@mj12albert) (#48343)3f2323c[drawer] Fix transition jump (@mj12albert) (#48340)1afbdfe[button] FixstartIconalignment (@mj12albert) (#48339)dcef241[dialog][drawer][focus trap] Fix initial focus target (@mj12albert) (#48324)4b0275e[autocomplete] Improve highlight tracking and selection state (@mj12albert) (...47e41de[internal] Update some host-reference entries (#48225)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@mui/materialsince your current version.Updates
servefrom 14.2.5 to 14.2.6Release notes
Sourced from serve's releases.
Changelog
Sourced from serve's changelog.
Commits
f3c702cVersion Packages (#846)7fcb924Add changeset for #842a2fecb3chore(deps): update ajv to v8.18.0 (#842)b3888f9Bumpserve-handlerto6.1.7(#845)Updates
@rsbuild/corefrom 1.6.12 to 1.7.6Release notes
Sourced from @rsbuild/core's releases.
... (truncated)
Commits
6db1f2frelease: v1.7.6 (#7989)c6322f5fix(deps): update ws to version 8.21.0 to address vulnerability (#7981)69acfa8release: v1.7.5 (#7407)036ad39fix(deps): update@swc/helpersto ^0.5.20 (#7406)b2099efrelease: v1.7.4 (#7391)dfed2d0fix(deps): update@rspack/coreto v1.7.10 (#7390)cdd0b6afix(core): upgrade webpack-bundle-analyzer to 5.3.0 (#7389)67c4f25fix: use dynamic padding for URL labels instead of fixed width (#7342)363e768release: v1.7.3 (#7130)8f3e992feat(deps): update@rspack/coreto ^1.7.5 (#7129)Updates
@rsbuild/plugin-eslintfrom 1.2.0 to 1.3.0Release notes
Sourced from @rsbuild/plugin-eslint's releases.
Commits
3944582chore: release v1.3.0558f15ffeat: add support for ESLint v10 (#48)28c8367chore(deps): update all non-major dependencies (#46)9da0ccfchore: release v1.2.174406ccfix: update peerDependencies to support Rsbuild v2 (#45)b5d87fddocs: update Rsbuild documentation link792c251chore: update repository URL in package.json63b4d0cchore(deps): update js-devtools/npm-publish action to v4 (#41)Updates
@rsbuild/plugin-reactfrom 1.4.2 to 1.4.6Changelog
Sourced from @rsbuild/plugin-react's changelog.
Commits
9508968release: 1.4.4 (#5553)bfb29f5fix: ensure that raw query of assets can be accurately matched (#5547)e77f5fechore(deps): update dependency@types/nodeto ^22.16.0 (#5535)f705cbbfix: ensure that raw query of scripts can be accurately matched (#5538)5024a80release:@rsbuild/plugin-reactv1.3.3 (#5526)d18c3cefix(plugin-react): profiling not work with React 19 (#5524)0746247chore(deps): update all patch dependencies (#5506)Updates
@rstest/corefrom 0.6.9 to 0.11.12Release notes
Sourced from @rstest/core's releases.
... (truncated)
Commits
8a563e5release: 0.11.12 (#1781)4ead8d7chore(deps): update Rslib to 1.0.0 (#1778)40887fefix(core): respect config env color vars when spawning workers (#1775)13e9a1fchore(deps): update all non-major dependencies (#1772)a6ba4d1chore(deps): update rsbuild and rspack to ~2.2.2 (#1773)e6788bffix(browser): align Browser Mode assertion timeouts (#1766)42cf6f2fix(core): decideeachrow spreading per table, not per row (#1769)01a6107chore(deps): update all non-major dependencies (#1761)36e008arelease: 0.11.11 (#1760)7cea4c9fix(core): restore defineConfig completions (#1759)Warning
Cooldown could not be applied because no publication date was available from the registry.
Bumps the all-dependencies group with 1 update: node.
Updates
nodefrom 20.11.1-bullseye-slim to 20.20.2-bullseye-slimDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific depe...Description has been truncated