From 56d3c3518d2eb3661ef5b52cb1b297f0d895a948 Mon Sep 17 00:00:00 2001 From: Gutierrez Soto Jhosepmyr Orlando Date: Thu, 8 Oct 2026 18:32:27 -0500 Subject: [PATCH] build(deps): let Dependabot update bun.lock; bump ng-icons and node types Dependabot ran the npm ecosystem, which edits package.json but not bun.lock, so CI's bun install --frozen-lockfile refused all its PRs. It now uses the bun ecosystem, groups @ng-icons/* and leaves TypeScript minor/major to Angular upgrades (Angular 22 requires >=6.0 <6.1). Applies the viable pending bumps with the lockfile: @ng-icons/core and lucide 34, @types/node 26. --- .github/dependabot.yml | 14 +++++++++++--- CHANGELOG.md | 10 ++++++++++ bun.lock | 14 +++++++------- package.json | 6 +++--- 4 files changed, 31 insertions(+), 13 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 175050d..04a484d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,13 +1,14 @@ # Dependabot opens its PRs from branches named: # dependabot/// -# e.g. dependabot/npm_and_yarn/develop/minor-and-patch +# e.g. dependabot/bun/develop/minor-and-patch # dependabot/github-actions/develop/actions # (the segment appears because we set target-branch: develop.) version: 2 updates: - # npm / bun dependencies - - package-ecosystem: "npm" + # Bun dependencies. The "bun" ecosystem updates bun.lock together with package.json; the + # "npm" one only touched package.json, so CI's `bun install --frozen-lockfile` refused its PRs. + - package-ecosystem: "bun" directory: "/" schedule: interval: "weekly" @@ -17,6 +18,10 @@ updates: - "dependencies" commit-message: prefix: "build(deps)" + ignore: + # The Angular toolchain pins TypeScript (Angular 22: >=6.0 <6.1); it moves with Angular. + - dependency-name: "typescript" + update-types: ["version-update:semver-major", "version-update:semver-minor"] groups: angular: patterns: @@ -26,6 +31,9 @@ updates: spartan: patterns: - "@spartan-ng/*" + ng-icons: + patterns: + - "@ng-icons/*" minor-and-patch: update-types: - "minor" diff --git a/CHANGELOG.md b/CHANGELOG.md index a0b23b4..ef617a5 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -11,6 +11,16 @@ follows [Semantic Versioning](https://semver.org/). _Feature module implementation (iam, billing, workspace, discovery) in progress._ +### Fixed (Dependabot PRs failed on the lockfile — `bugfix/dependabot-bun-lockfile`) + +- **Dependabot now uses the `bun` ecosystem.** It updates `bun.lock` together with `package.json`. With + `npm` it touched only `package.json`, so CI's `bun install --frozen-lockfile` refused every PR. +- **`@ng-icons/*` are grouped** so `core` and `lucide` move together. +- **TypeScript minor and major bumps are ignored.** Angular 22 requires `>=6.0 <6.1`, so TypeScript + moves with Angular. +- **Bumps applied here with the lockfile:** `@ng-icons/core` and `@ng-icons/lucide` 33 → 34, and + `@types/node` 25 → 26. These supersede Dependabot #37, #38 and #40. + ### Added (US28 — Demo project — `feature/workspace-demo-project`) - **Every new organization starts with a demo project** with sample data, "Demo · Restaurante La diff --git a/bun.lock b/bun.lock index 2956679..cc0d498 100644 --- a/bun.lock +++ b/bun.lock @@ -14,8 +14,8 @@ "@angular/router": "^22.0.0", "@jsverse/transloco": "^8.4.0", "@jsverse/transloco-locale": "^8.4.0", - "@ng-icons/core": "^33.3.0", - "@ng-icons/lucide": "^33.3.0", + "@ng-icons/core": "^34.0.0", + "@ng-icons/lucide": "^34.0.0", "@spartan-ng/brain": "^0.0.1-alpha.713", "@stomp/rx-stomp": "^2.4.0", "rxjs": "~7.8.0", @@ -33,7 +33,7 @@ "@playwright/test": "1.61.1", "@spartan-ng/cli": "^1.0.4", "@tailwindcss/postcss": "^4.1.12", - "@types/node": "^25.9.3", + "@types/node": "^26.1.1", "@vitest/browser-playwright": "^4.1.8", "angular-eslint": "22.0.0", "eslint": "^10.3.0", @@ -652,9 +652,9 @@ "@napi-rs/wasm-runtime": ["@napi-rs/wasm-runtime@0.2.4", "", { "dependencies": { "@emnapi/core": "^1.1.0", "@emnapi/runtime": "^1.1.0", "@tybys/wasm-util": "^0.9.0" } }, "sha512-9zESzOO5aDByvhIAsOy9TbpZ0Ur2AJbUI7UT73kcUTS2mxAMHOBaa1st/jAymNoCtvrit99kkzT1FZuXVcgfIQ=="], - "@ng-icons/core": ["@ng-icons/core@33.3.0", "", { "dependencies": { "tslib": "^2.3.0" }, "peerDependencies": { "@angular-devkit/schematics": ">=21.0.0", "@angular/common": ">=21.0.0", "@angular/core": ">=21.0.0", "@schematics/angular": ">=21.0.0", "rxjs": "^6.5.3 || ^7.4.0" } }, "sha512-rGfOR4bj07jhWEErabq9VX+PqoS0qiA/1FarLdX5qZ9h5MsbuNpwBKlSGe+W3+b0NSZ5tbqlqv83YMjUG2WAfg=="], + "@ng-icons/core": ["@ng-icons/core@34.0.0", "", { "dependencies": { "tslib": "^2.3.0" }, "peerDependencies": { "@angular-devkit/schematics": ">=21.0.0", "@angular/common": ">=21.0.0", "@angular/core": ">=21.0.0", "@schematics/angular": ">=21.0.0", "rxjs": "^6.5.3 || ^7.4.0" } }, "sha512-SrL8dBApSKzXhihEGmiJ/tAj+wSvt6XmZJOAzUTVcgkuV0YuL1WCHVfAwXgQHVG5Te27JkjyXd2n76pNFMuekw=="], - "@ng-icons/lucide": ["@ng-icons/lucide@33.3.0", "", { "dependencies": { "tslib": "^2.3.0" } }, "sha512-glSPyLcuD4UjzjsIVqZscimcNRayuybvS4t92UfdkTKS70t/hlly1qCgLCiTBVtFOsnWY8XkOuslgX9Fnjlzyw=="], + "@ng-icons/lucide": ["@ng-icons/lucide@34.0.0", "", { "dependencies": { "tslib": "^2.3.0" } }, "sha512-cojXLo23MA4l8qqwLkKs/Ym66/eXSzpJ8ZvaQOTOK1sRSEjZiQBc4emyGJpqZLr12FO9xssLMfdnqa2tag+yWw=="], "@nodelib/fs.scandir": ["@nodelib/fs.scandir@2.1.5", "", { "dependencies": { "@nodelib/fs.stat": "2.0.5", "run-parallel": "^1.1.9" } }, "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g=="], @@ -1000,7 +1000,7 @@ "@types/json-schema": ["@types/json-schema@7.0.15", "", {}, "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA=="], - "@types/node": ["@types/node@25.9.4", "", { "dependencies": { "undici-types": ">=7.24.0 <7.24.7" } }, "sha512-dszCsrKb5U7ZsVZBWiHFklTloVl0mSEnWH/iZXfZUlI4rzCUnsvGmgqfuVRHL54ugE7/wRuxEIXRa2iMZ+BG6g=="], + "@types/node": ["@types/node@26.6.4", "", { "dependencies": { "undici-types": "~8.9.0" } }, "sha512-ldVPDCzj7fsaGZrLB0NuHuTvJcsNasysBAqMolr/cgxrLd1xbqxIr3XJiPnHHJUCxj5sNF1vnRj9aWnrVh5Jcg=="], "@types/parse-json": ["@types/parse-json@4.0.2", "", {}, "sha512-dISoDXWWQwUquiKsyZ4Ng+HX2KsPL7LyHKHQwgGFEA3IaKac4Obd+h2a/a6waisAoepJlBcx9paWqjA8/HVjCw=="], @@ -2316,7 +2316,7 @@ "undici": ["undici@7.28.0", "", {}, "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA=="], - "undici-types": ["undici-types@7.24.6", "", {}, "sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg=="], + "undici-types": ["undici-types@8.9.0", "", {}, "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg=="], "unicode-canonical-property-names-ecmascript": ["unicode-canonical-property-names-ecmascript@2.0.1", "", {}, "sha512-dA8WbNeb2a6oQzAQ55YlT5vQAWGV9WXOsi3SskE3bcCdM0P4SDd+24zS/OCacdRq5BkdsRj9q3Pg6YyQoxIGqg=="], diff --git a/package.json b/package.json index a57d8a5..1ce9a5e 100644 --- a/package.json +++ b/package.json @@ -36,8 +36,8 @@ "@angular/router": "^22.0.0", "@jsverse/transloco": "^8.4.0", "@jsverse/transloco-locale": "^8.4.0", - "@ng-icons/core": "^33.3.0", - "@ng-icons/lucide": "^33.3.0", + "@ng-icons/core": "^34.0.0", + "@ng-icons/lucide": "^34.0.0", "@spartan-ng/brain": "^0.0.1-alpha.713", "@stomp/rx-stomp": "^2.4.0", "rxjs": "~7.8.0", @@ -55,7 +55,7 @@ "@playwright/test": "1.61.1", "@spartan-ng/cli": "^1.0.4", "@tailwindcss/postcss": "^4.1.12", - "@types/node": "^25.9.3", + "@types/node": "^26.1.1", "@vitest/browser-playwright": "^4.1.8", "angular-eslint": "22.0.0", "eslint": "^10.3.0",