Skip to content

chore(deps): bump zustand from 5.0.13 to 5.0.15 in /frontend in the frontend-minor-patch group - #5255

Closed
dependabot[bot] wants to merge 34 commits into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-minor-patch-8841ceebde
Closed

chore(deps): bump zustand from 5.0.13 to 5.0.15 in /frontend in the frontend-minor-patch group#5255
dependabot[bot] wants to merge 34 commits into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-minor-patch-8841ceebde

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the frontend-minor-patch group in /frontend with 1 update: zustand.

Updates zustand from 5.0.13 to 5.0.15

Release notes

Sourced from zustand's releases.

v5.0.15

Fix some issues in devtools and persist middleware.

What's Changed

Full Changelog: pmndrs/zustand@v5.0.14...v5.0.15

v5.0.14

This release fixes a type issue in devtools.

What's Changed

New Contributors

Full Changelog: pmndrs/zustand@v5.0.13...v5.0.14

Commits
  • 2115efb v5.0.15
  • 1f531ba chore(deps): update dev dependencies (#3560)
  • aa6d2a1 docs: add zustand-devtools-bridge (#3559)
  • 3febf8c fix(persist): clearStorage() should invalidate concurrent async rehydration (...
  • f44cecc fix(devtools): correct V8 stack regex when source path contains spaces (#3531)
  • beca84e fix: update broken README links from docs/guides/ to docs/learn/guides/ (#3542)
  • 038f496 docs(persist): clarify createJSONStorage behavior and warn about production u...
  • a1f685c docs: fix missing code highlights in tic-tac-toe tutorial (#3527)
  • 07cee61 docs: fix missing highlight on setXIsNext line in tic-tac-toe tutorial (#3524)
  • 566b5bf Fix dead link in README.md: update immer guide path (#3519)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the frontend-minor-patch group in /frontend with 1 update: [zustand](https://github.com/pmndrs/zustand).


Updates `zustand` from 5.0.13 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.13...v5.0.15)

---
updated-dependencies:
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 26, 2026
@dependabot
dependabot Bot requested a review from vivekchand as a code owner August 26, 2026 12:48
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 26, 2026

Copy link
Copy Markdown
Owner

blocked on author decision -- skipping (auto-mergeability sweep)

This PR is BLOCKED. Root cause: the drift-bot commit status is failure, which causes the E2E Gate (required) check to fast-fail. The gate aggregates drift-bot as one of its 12 required specs via scripts/e2e_gate.py. Clearing drift-bot requires updating the product blueprint in the 8090 Software Factory to align with the code changes in this PR -- that is an author/owner decision outside the scope of this automated sweep.


Generated by Claude Code

Copy link
Copy Markdown
Owner

✨ auto-fixed: merged latest main into branch (was BEHIND), CI re-running


Generated by Claude Code

Copy link
Copy Markdown
Owner

✨ auto-fixed: merged latest main into branch to bring it up to date


Generated by Claude Code

Copy link
Copy Markdown
Owner

✨ auto-fixed: merged latest main into branch (branch was BEHIND)


Generated by Claude Code

Copy link
Copy Markdown
Owner

Blocked on the drift-bot required status. The 8090 Software Factory bot has detected that code here diverges from its blueprint in the private factory system. Updating the blueprint at factory.8090.ai is required to get drift-bot to pass — that access is outside this sweep's scope.

No action taken by the pr-sweeper.


Generated by Claude Code

Copy link
Copy Markdown
Owner

·@·d·ependabot r·ebase


Generated by Claude Code

2 similar comments

Copy link
Copy Markdown
Owner

·@·d·ependabot r·ebase


Generated by Claude Code

Copy link
Copy Markdown
Owner

·@·d·ependabot r·ebase


Generated by Claude Code

Copy link
Copy Markdown
Owner

✨ auto-fixed: merged main into branch to bring it up to date (was BEHIND main)


Generated by Claude Code

Copy link
Copy Markdown
Owner

·@·d·ependabot r·ebase


Generated by Claude Code

Copy link
Copy Markdown
Owner

✨ auto-fixed: merged main into branch to bring PR up to date with base


Generated by Claude Code

@vivekchand vivekchand left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Test plan & review notes

Repo: vivekchand/clawmetry

What changed

  • zustand bumped 5.0.13 → 5.0.15 in /frontend — patch release, low breaking-change risk

Smoke commands

cd frontend
npm ci
npm run build

Likely failure modes from the diff

  • Patch bumps in zustand are typically safe; the main risk is if a peer-dep constraint elsewhere pins a different minor, but npm ci will surface that
  • Zustand 5.x middleware (devtools, persist) signatures are stable across 5.0.x; no API changes expected

Staleness check — still valid; zustand state is in active use in the frontend. 5.0.15 is the current stable patch.

Current blocker
Same as the rest of the dependabot queue: drift-bot required check needs a blueprint update at factory.8090.ai. This is the lowest-risk bump in the queue and worth clearing first once the gate is open.


Generated by Claude Code

Copy link
Copy Markdown
Owner

✨ auto-fixed: merged latest main into branch (was BEHIND; no conflicts)


Generated by Claude Code

@vivekchand vivekchand left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Test plan & review notes

Repo: vivekchand/clawmetry

What changed

  • zustand bumped 5.0.13 → 5.0.15 in /frontend — two patch releases, low breaking-change risk

Smoke commands

cd frontend
npm ci
npm run build

Likely failure modes from the diff

  • Very low risk for a patch bump. If zustand patched a subtle selector or subscription bug, the UI may behave slightly differently in edge cases (rapid state updates, concurrent mode transitions), but these would not surface at build time.
  • Confirm the dashboard's active session list, usage charts, and any panel that subscribes to shared state still reflect updates correctly.

Current blocker
drift-bot (8090 Software Factory) required check failing — needs a blueprint update at factory.8090.ai before the E2E Gate passes. This is the same blocker holding the whole dependabot queue.


Generated by Claude Code

Copy link
Copy Markdown
Owner

✨ auto-fixed: merged latest main into branch to bring it up to date


Generated by Claude Code

Copy link
Copy Markdown
Owner

✨ auto-fixed: merged main into branch (was BEHIND; no conflict)


Generated by Claude Code

Copy link
Copy Markdown
Owner

✨ auto-fixed: merged latest main into branch (BEHIND → up-to-date).


Generated by Claude Code

Copy link
Copy Markdown
Owner

·@·d·ependabot r·ebase


Generated by Claude Code

1 similar comment

Copy link
Copy Markdown
Owner

·@·d·ependabot r·ebase


Generated by Claude Code

Copy link
Copy Markdown
Owner

·@·d·ependabot r·ebase


Generated by Claude Code

1 similar comment

Copy link
Copy Markdown
Owner

·@·d·ependabot r·ebase


Generated by Claude Code

@dependabot @github

dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown
Contributor Author

Looks like zustand is updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 12, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/frontend/frontend-minor-patch-8841ceebde branch September 12, 2026 20:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants