Skip to content

chore(deps): nightly patch/minor dependency bump - #202

Draft
pat-lewczuk wants to merge 1 commit into
mainfrom
chore/deps-nightly-bump-20260916
Draft

pat-lewczuk wants to merge 1 commit into
mainfrom
chore/deps-nightly-bump-20260916

Conversation

@pat-lewczuk

Copy link
Copy Markdown
Member

Summary

  • Nightly automated dependency check (npm outdated / yarn equivalent) found patch and minor updates available across ~45 direct dependencies.
  • Bumped AI SDKs, Radix UI, Stripe JS, Tailwind, TanStack Query, testing libraries, Next.js, React, MikroORM, and several others to their latest non-breaking (patch/minor) versions.
  • Ran yarn dedupe afterwards to collapse a stale nested @mikro-orm/* copy under @open-mercato/* that the bump surfaced (it caused duplicate FilterQuery type identities and a typecheck OOM/failure).

Intentionally excluded

  • All @open-mercato/* packages — pinned exact at 0.6.7. The 0.7.0 release is a framework-level upgrade that this repo's own conventions (and prior upgrade skills for versions like 0.4.10 → 0.5.0) treat as a dedicated migration pass, not a blind bump.
  • Any package whose newest release is a major bump: lucide-react (0→1), @tanstack/react-table (8→9), eslint (9→10), @stripe/react-stripe-js/@stripe/stripe-js majors, awilix (12→13), typescript (5→7), @testing-library/jest-dom (6→7), newrelic (13→14), react-email (5→6), bullmq/ioredis/better-sqlite3 majors.

Test plan

  • yarn install completes cleanly
  • yarn generate regenerates without errors
  • yarn typecheck passes with no errors
  • yarn test — 554 tests / 48 suites, all passing

🤖 Generated with Claude Code

Nightly dependency check found several packages with newer patch/minor
releases available. Bumped ~45 direct dependencies (AI SDKs, Radix UI,
Stripe JS, Tailwind, TanStack Query, testing libs, Next.js, React,
MikroORM, etc.) to their latest non-breaking versions, then ran
`yarn dedupe` to collapse a stale nested @mikro-orm/* copy that the
bump left under @open-mercato/* packages (it was causing duplicate
FilterQuery type identities).

Intentionally left untouched:
- All @open-mercato/* packages: pinned exact at 0.6.7, and the 0.7.0
  release needs a dedicated migration pass (per this repo's own
  upgrade-skill precedent), not a blind bump.
- Any package where the newest release is a major version bump
  (lucide-react 0->1, @tanstack/react-table 8->9, eslint 9->10,
  @stripe/* majors, awilix 12->13, typescript 5->7, etc.) — out of
  scope for a patch/minor-only bump.

`yarn typecheck` and `yarn test` (554 tests, 48 suites) both pass
after the bump.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant