Skip to content

deps: land five dependabot bumps as one release instead of five - #142

Merged
GeiserX merged 1 commit into
mainfrom
deps/batch-2026-09-21
Sep 21, 2026
Merged

GeiserX merged 1 commit into
mainfrom
deps/batch-2026-09-21

Conversation

@GeiserX

@GeiserX GeiserX commented Sep 21, 2026

Copy link
Copy Markdown
Owner

Every merge to main here cuts a tag and a three-platform build, so the five open dependabot PRs (#133, #137, #138, #140, #141) meant five releases for five version bumps.

This lands all of them in one: wails 2.14.0 to 2.16.0, modernc.org/sqlite 1.56.0 to 1.59.0, golang.org/x/sys 0.47.0 to 0.48.0, gopsutil 4.26.7 to 4.26.8, and vite 8.2.1 to 8.3.0. The frontend files are dependabot's own package.json and lockfile from #138, not a fresh resolve. Checked locally the way CI does: go build, vet and race tests all green, and the frontend typecheck, render checks and vite build pass with npm ci on the lockfile. Dependabot should close its five PRs once this is on main.

Summary by CodeRabbit

  • Chores
    • Updated the application’s build tooling and supporting runtime components.
    • Refreshed system, database, desktop framework, and utility libraries.
    • Updated Go version metadata to support patch-level toolchain information.
    • These maintenance updates help keep development, packaging, and application infrastructure aligned with current supported versions.

Every merge to main cuts a tag and a three-platform build, so five open
dependabot PRs meant five releases. This carries all of them: wails 2.14.0 to
2.16.0, modernc.org/sqlite 1.56.0 to 1.59.0, golang.org/x/sys 0.47.0 to
0.48.0, gopsutil 4.26.7 to 4.26.8, and vite 8.2.1 to 8.3.0 (dependabot's own
package.json and lockfile). Checked locally as CI does: go build, vet and race
tests, and the frontend typecheck, render checks and vite build.
@coderabbitai

coderabbitai Bot commented Sep 21, 2026

Copy link
Copy Markdown

Review Change StackReview Change Stack

Understand this PR’s impact

Explore downstream dependencies and potential security impact with Blast Radius.

View blast radius →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository: GeiserX/CashPilot-Desktop/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: eba2713a-19b5-4b59-97e9-18403d228422

📥 Commits

Reviewing files that changed from the base of the PR and between 987b712 and cd951c7.

⛔ Files ignored due to path filters (2)
  • frontend/package-lock.json is excluded by !**/package-lock.json
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (2)
  • frontend/package.json
  • go.mod

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.


📝 Walkthrough

Walkthrough

The pull request updates the Go version directive, Go dependencies, indirect Go dependencies, and the frontend Vite development dependency.

Changes

Dependency updates

Layer / File(s) Summary
Go version and module dependency updates
go.mod
The Go directive changes from go 1.26 to go 1.26.0. Direct and indirect Go dependencies receive version upgrades.
Frontend build tool update
frontend/package.json
The Vite development dependency changes from ^8.2.1 to ^8.3.0.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly describes the main change: consolidating five dependency updates into one release.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@GeiserX
GeiserX merged commit d3e60e7 into main Sep 21, 2026
7 checks passed
@GeiserX
GeiserX deleted the deps/batch-2026-09-21 branch September 21, 2026 12:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant