Skip to content

build(deps-dev): bump globals from 15.15.0 to 17.8.0 - #128

Merged
ribato22 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/globals-17.8.0
Jul 27, 2026
Merged

build(deps-dev): bump globals from 15.15.0 to 17.8.0#128
ribato22 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/globals-17.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps globals from 15.15.0 to 17.8.0.

Release notes

Sourced from globals's releases.

v17.8.0

  • Update globals (2026-07-01) (#347) 7394811

sindresorhus/globals@v17.7.0...v17.8.0

v17.7.0

  • Update globals (2026-06-22) (#345) 33b75f9

sindresorhus/globals@v17.6.0...v17.7.0

v17.6.0

  • Update globals (2026-05-01) (#343) 00a4dd9

sindresorhus/globals@v17.5.0...v17.6.0

v17.5.0

  • Update globals (2026-04-12) (#342) 5d84602

sindresorhus/globals@v17.4.0...v17.5.0

v17.4.0

  • Update globals (2026-03-01) (#338) d43a051

sindresorhus/globals@v17.3.0...v17.4.0

v17.3.0

  • Update globals (2026-02-01) (#336) 295fba9

sindresorhus/globals@v17.2.0...v17.3.0

v17.2.0

  • jasmine: Add throwUnless and throwUnlessAsync globals (#335) 97f23a7

sindresorhus/globals@v17.1.0...v17.2.0

v17.1.0

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@dependabot
dependabot Bot requested a review from ribato22 as a code owner July 27, 2026 07:40
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@ribato22

Copy link
Copy Markdown
Owner

@dependabot rebase

1 similar comment
@ribato22

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [globals](https://github.com/sindresorhus/globals) from 15.15.0 to 17.8.0.
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v15.15.0...v17.8.0)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.8.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/globals-17.8.0 branch from 09fc67c to 9dce97d Compare July 27, 2026 08:18
@ribato22
ribato22 merged commit c46bf70 into main Jul 27, 2026
5 checks passed
@ribato22

Copy link
Copy Markdown
Owner

@dependabot rebase

@ribato22
ribato22 deleted the dependabot/npm_and_yarn/globals-17.8.0 branch July 27, 2026 08:18
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has already been merged!

ribato22 added a commit that referenced this pull request Jul 27, 2026
… majors (#133)

Closes out the Dependabot triage.

## 1. Remove the dead `gulp` dependency
`gulp` sat in `packages/n8n-nodes-multiwa` devDependencies — a leftover
from the n8n community-node scaffold (whose template runs `gulp
build:icons`). This package instead builds with `tsc && cp -f …svg`, has
**no gulpfile**, and never imports it.

Dependabot kept proposing `gulp 4→5` (#129) for a dependency nothing
uses. Removing it instead:
- **−2,097 lines** of transitive tree from `pnpm-lock.yaml` (gulp 4
drags a large, aging sub-dependency graph)
- Verified surgical: the only `specifier`/`version` pair removed is
gulp's own `^4.0.2`; the rest of the diff is packages flipping to
`optional: true`.

## 2. Two more `ignore` rules for majors that can't be drop-in bumped
- **`tailwindcss`** — v4 is a full migration (new engine, CSS-first
config, no `tailwind.config.js`, changed class semantics). Pairs with
the existing `tailwind-merge` v3 hold. (#132 closed)
- **`@vitest/coverage-v8`** — must match the `vitest` major (pinned
`^2`), so it can only move as part of a deliberate vitest upgrade, never
on its own. (#131 closed)

## Verification
- `n8n-nodes-multiwa` build ✓ · `api` / `worker` `tsc --noEmit` ✓
- Lockfile still **air-gap safe** (0 `ssh://` refs — the
`pnpm.overrides` HTTPS pins hold)
- `dependabot.yml` parses as valid YAML

## Triage summary (this pass)
**Merged (10):** #114 setup-python · #116 production-group (19 deps) ·
#117 framer-motion 12 · #120 bcrypt 6 · #121 nodemailer 9 · #122 pino 10
· #126 lucide 0.577 · #127 dev-group (9) · #128 globals 17 · #130
@eslint/js
**Closed with reasons (8):** #115 dev-group (majors) · #118/#119 React
19 (needs Next 15) · #123 tailwind-merge 3 · #124 lucide 1.x · #129 gulp
(dead) · #131 coverage-v8 (vitest mismatch) · #132 tailwind v4
**Config (#125 + this):** dev group restricted to minor/patch;
migration-gated majors ignored.

Post-merge `main` verified: all workspace packages build,
api/worker/admin typecheck, **api 324/324** + **worker 34/34** tests
green.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant