deps: land five dependabot bumps as one release instead of five - #142
Conversation
Every merge to main cuts a tag and a three-platform build, so five open dependabot PRs meant five releases. This carries all of them: wails 2.14.0 to 2.16.0, modernc.org/sqlite 1.56.0 to 1.59.0, golang.org/x/sys 0.47.0 to 0.48.0, gopsutil 4.26.7 to 4.26.8, and vite 8.2.1 to 8.3.0 (dependabot's own package.json and lockfile). Checked locally as CI does: go build, vet and race tests, and the frontend typecheck, render checks and vite build.
|
Understand this PR’s impact Explore downstream dependencies and potential security impact with Blast Radius. No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Repository: GeiserX/CashPilot-Desktop/.coderabbit.yaml Review profile: CHILL Plan: Advanced Run ID: ⛔ Files ignored due to path filters (2)
📒 Files selected for processing (2)
Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review. 📝 WalkthroughWalkthroughThe pull request updates the Go version directive, Go dependencies, indirect Go dependencies, and the frontend Vite development dependency. ChangesDependency updates
Priority: ⬇️ Low Estimated code review effort: 2 (Simple) | ~10 minutes Change: Other 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Every merge to main here cuts a tag and a three-platform build, so the five open dependabot PRs (#133, #137, #138, #140, #141) meant five releases for five version bumps.
This lands all of them in one: wails 2.14.0 to 2.16.0, modernc.org/sqlite 1.56.0 to 1.59.0, golang.org/x/sys 0.47.0 to 0.48.0, gopsutil 4.26.7 to 4.26.8, and vite 8.2.1 to 8.3.0. The frontend files are dependabot's own package.json and lockfile from #138, not a fresh resolve. Checked locally the way CI does: go build, vet and race tests all green, and the frontend typecheck, render checks and vite build pass with
npm cion the lockfile. Dependabot should close its five PRs once this is on main.Summary by CodeRabbit