Repository navigation
build(deps-dev): bump the npm-dependencies group across 1 directory with 13 updates - #148
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
d16ac38 to
78d1875
Compare
Superseded by re-review on the latest commit.
78d1875 to
42959bd
Compare
Superseded by re-review on the latest commit.
| "typescript": "6.0.3", | ||
| "typescript-eslint": "8.69.0" | ||
| "turbo": "2.11.10", | ||
| "typescript": "7.0.2", |
There was a problem hiding this comment.
🔴 Blocker — this bump (typescript 6.0.3 → 7.0.2, a major version) conflicts with the peer-dependency ranges baked into the lockfile for the typescript-eslint/@exadev/eslint-config toolchain, and npm ci fails as a result.
package-lock.json pins @typescript-eslint/* at 8.71.0/8.72.0 throughout (both the direct typescript-eslint devDependency and the copy nested under @exadev/eslint-config), and every one of those declares "peerDependencies": { "typescript": ">=4.8.4 <6.1.0" } (e.g. package-lock.json:878, :913, :955, :979, and :9879-9880 for the top-level typescript-eslint package, plus the eslint-plugin-jsdoc-nested copy around :3879). None of them yet support TypeScript 7.
This is why every CI job on this PR (Typecheck, Lint, Format, Commitlint) is failing — not because of a type error or lint violation, but because the "Run npm ci" step itself fails before any of those steps run (confirmed via the job logs: npm ci exits 1, the subsequent npx turbo run ... steps are all skipped). Required Checks is red as a consequence. This isn't a flake; it will fail for anyone who checks out this branch and runs npm ci or npm install.
Dependabot's own grouped PR appears to have picked up a typescript major release before the rest of the toolchain (typescript-eslint, @exadev/eslint-config) has published a release supporting it. The fix is to drop typescript from this update (keep it at 6.0.3, or whatever the latest 6.x is) until the @typescript-eslint family raises its peer range, or to hold the whole grouped PR until that happens.
[stack-default] — npm's peer-dependency resolution is why npm ci fails on a version outside a declared peer range; this isn't specific to this repo's own config.
42959bd to
59261b9
Compare
Superseded by re-review on the latest commit.
…ith 13 updates Bumps the npm-dependencies group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.2.2` | `21.2.4` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.2.2` | `21.2.4` | | [@eslint/json](https://github.com/eslint/json) | `2.1.0` | `2.1.1` | | [@exadev/eslint-config](https://github.com/ExaDev/eslint-config) | `2.12.3` | `3.1.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.1` | `26.6.6` | | [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.13.0` | | [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.6` | `5.5.7` | | [eslint-plugin-yml](https://github.com/ota-meshi/eslint-plugin-yml) | `3.8.1` | `3.9.0` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.4.1` | `17.6.0` | | [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.10` | | [turbo](https://github.com/vercel/turborepo) | `2.10.12` | `2.11.10` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.69.0` | `8.72.1` | Updates `@commitlint/cli` from 21.2.2 to 21.2.4 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.4/@commitlint/cli) Updates `@commitlint/config-conventional` from 21.2.2 to 21.2.4 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.4/@commitlint/config-conventional) Updates `@eslint/json` from 2.1.0 to 2.1.1 - [Release notes](https://github.com/eslint/json/releases) - [Changelog](https://github.com/eslint/json/blob/main/CHANGELOG.md) - [Commits](eslint/json@json-v2.1.0...json-v2.1.1) Updates `@exadev/eslint-config` from 2.12.3 to 3.1.0 - [Release notes](https://github.com/ExaDev/eslint-config/releases) - [Changelog](https://github.com/ExaDev/eslint-config/blob/main/CHANGELOG.md) - [Commits](ExaDev/eslint-config@v2.12.3...v3.1.0) Updates `@types/node` from 26.4.1 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 10.9.1 to 10.13.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.9.1...v10.13.0) Updates `eslint-plugin-prettier` from 5.5.6 to 5.5.7 - [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases) - [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md) - [Commits](prettier/eslint-plugin-prettier@v5.5.6...v5.5.7) Updates `eslint-plugin-yml` from 3.8.1 to 3.9.0 - [Release notes](https://github.com/ota-meshi/eslint-plugin-yml/releases) - [Changelog](https://github.com/ota-meshi/eslint-plugin-yml/blob/master/CHANGELOG.md) - [Commits](ota-meshi/eslint-plugin-yml@v3.8.1...v3.9.0) Updates `lint-staged` from 17.4.1 to 17.6.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.4.1...v17.6.0) Updates `prettier` from 3.9.6 to 3.9.10 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.6...3.9.10) Updates `turbo` from 2.10.12 to 2.11.10 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.10.12...v2.11.10) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2) Updates `typescript-eslint` from 8.69.0 to 8.72.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@commitlint/cli" dependency-version: 21.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@commitlint/config-conventional" dependency-version: 21.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@eslint/json" dependency-version: 2.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@exadev/eslint-config" dependency-version: 3.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 26.6.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 10.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: eslint-plugin-prettier dependency-version: 5.5.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: eslint-plugin-yml dependency-version: 3.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: lint-staged dependency-version: 17.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: prettier dependency-version: 3.9.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: turbo dependency-version: 2.11.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: typescript-eslint dependency-version: 8.71.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
59261b9 to
de5be34
Compare
Superseded by re-review on the latest commit.
There was a problem hiding this comment.
Changes requested, still unresolved — Dependabot has refreshed this branch again. The only devDependency changes in this refresh are @types/node 26.6.5→26.6.6 and typescript-eslint 8.72.0→8.72.1; typescript is still pinned at 7.0.2.
Blocker (still open, inline thread on package.json:40)
- I re-checked the updated lockfile directly:
typescript-eslint8.72.1 (package-lock.json:9859-9881) still declarespeerDependencies: { typescript: ">=4.8.4 <6.1.0" }, unchanged from the prior revision. The patch bump didn't touch the TypeScript peer range, so the conflict withtypescript: 7.0.2inpackage.jsonstill stands, andnpm ciwill still fail for the same reason flagged previously.
Leaving the existing inline thread open rather than reposting, since the finding and its anchor are both unchanged. I dismissed and cleared my prior CHANGES_REQUESTED review (commit 59261b9, now superseded) — note the clearing call needed a short placeholder body rather than an empty string this time, since the GitHub API rejected an empty body for a CHANGES_REQUESTED review on this call. Title/description are still Dependabot's own accurate summary and remain untouched.
Not checked: CI for this exact commit was still queued at review time (Commitlint had already failed), so I'm relying on the unchanged lockfile evidence rather than a fresh run's logs — the underlying peer-dependency range is what matters here, and that hasn't moved.
|
🗜️ Headroom context compression
|
Bumps the npm-dependencies group with 13 updates in the / directory:
21.2.221.2.421.2.221.2.42.1.02.1.12.12.33.1.026.4.126.6.610.9.110.13.05.5.65.5.73.8.13.9.017.4.117.6.03.9.63.9.102.10.122.11.106.0.37.0.28.69.08.72.1Updates
@commitlint/clifrom 21.2.2 to 21.2.4Release notes
Sourced from @commitlint/cli's releases.
... (truncated)
Changelog
Sourced from @commitlint/cli's changelog.
Commits
d8e3656v21.2.495d4056v21.2.3a6f279bfix(lint): trim trailing whitespace off the message handed to ignore matchers...Updates
@commitlint/config-conventionalfrom 21.2.2 to 21.2.4Release notes
Sourced from @commitlint/config-conventional's releases.
... (truncated)
Changelog
Sourced from @commitlint/config-conventional's changelog.
Commits
d8e3656v21.2.495d4056v21.2.39f5f7bcfix(rules): report the case that matched in case rule failure messages (#4962)Updates
@eslint/jsonfrom 2.1.0 to 2.1.1Release notes
Sourced from @eslint/json's releases.
Changelog
Sourced from @eslint/json's changelog.
Commits
412ad09chore: release 2.1.1 🚀 (#278)e7f8cbechore: update dependency prettier to v3.9.9 (#289)812d486docs: add missingOptionssection (#290)a2b9af9docs: Update README sponsorsc6af8f6chore: update dependency prettier to v3.9.8 (#288)35790d4fix: escape normalized keys inno-unnormalized-keysautofix (#283)7eb9cf3docs: clarify JSON5InfinityandNaNhandling inno-unsafe-values(#279)85ca99bfix: handle empty and whitespace-only JSON inputs (#259)2cf7eb9chore: update dependency prettier to v3.9.7 (#287)3285615docs: Update README sponsorsUpdates
@exadev/eslint-configfrom 2.12.3 to 3.1.0Release notes
Sourced from @exadev/eslint-config's releases.
... (truncated)
Changelog
Sourced from @exadev/eslint-config's changelog.
... (truncated)
Commits
485a8c7chore(release): 3.1.0 [skip ci]9301eb6fix(types): type plugin.configs.react and nextjs as the arrays they area68da9cfeat(barrel-policy): accept a package's declared entry files as barrelsbbc4317chore(release): 3.0.2 [skip ci]a22ddaabuild(deps): bump pnpm/action-setupfec3b54chore(release): 3.0.1 [skip ci]de15519docs: state that rules of other plugins need files in a block of your owna00a922test: pin that another plugin's rule in a block of your own needs files16b579cfix: resolve exadev rules set by a block with no files after the shared configfcb60b6chore(release): 3.0.0 [skip ci]Updates
@types/nodefrom 26.4.1 to 26.6.6Commits
Updates
eslintfrom 10.9.1 to 10.13.0Release notes
Sourced from eslint's releases.
... (truncated)
Commits
4637f9810.13.096df05cBuild: changelog update for 10.13.04783a68docs: Update READMEb59d889chore: update github/codeql-action action to v4.38.3 (#21412)95e51a0ci: re-enable@typescript-eslint/typescript-eslintin ecosystem tests (#21410)317fcb3chore: update ecosystem plugins (#21409)48d5cc4feat: report references inside IIFEs inno-use-before-define(#21238)43f0ac9docs: clarify parameter description ingetText(#21287)a39d9fbfeat: addglobalThistono-obj-calls(#21382)b92decfperf: skip no-redeclare scan for single-declaration variables (#21365)Updates
eslint-plugin-prettierfrom 5.5.6 to 5.5.7Release notes
Sourced from eslint-plugin-prettier's releases.
Changelog
Sourced from eslint-plugin-prettier's changelog.
Commits
e6dd27achore: keep packageManager when cleaning package.json for release (#808)7544956chore: release eslint-plugin-prettier (#799)e3e5238ci: enable npm publish provenance for changesets v3 (#807)7c923c4build(deps): Bump http-cache-semantics from 4.2.0 to 4.3.0 (#806)1b7c433fix: bump synckit to surface worker failures instead of hanging (#805)a6b3febdocs: explain line endings andendOfLinebehavior (#804)2f6ba1dci: exercise the getLocFromIndex ponyfill on ESLint 9 (#803)cf1d2c5chore(deps): update (#802)9f14a55chore(deps): update all dependencies (#788)7e53ecdfix: map fallback source locations to actual line starts (#796)Updates
eslint-plugin-ymlfrom 3.8.1 to 3.9.0Release notes
Sourced from eslint-plugin-yml's releases.
Changelog
Sourced from eslint-plugin-yml's changelog.
Commits
abfa046Version Packages (#679)dc9e467fix(types): support exactOptionalPropertyTypes for flat configs (#675)737e4dechore(deps): update dependency eslint-plugin-jsdoc to v65 (#674)32d6a58chore(deps): update typescript-eslint monorepo to ~8.71.0 (#673)21ef6f2chore(deps): update dependency monaco-editor to ^0.57.0 (#672)5eb6045chore(deps): update typescript-eslint monorepo to ~8.70.0 (#669)daa2f5fchore(deps): update changesets/action action to v2.1.2 (#668)bbca18bchore(deps): update dependency tsdown to ^0.23.0 (#666)264b4d5chore(deps): update dependency mocha to v12 (#662)b42d506chore(deps): update typescript-eslint monorepo to ~8.69.0 (#661)Updates
lint-stagedfrom 17.4.1 to 17.6.0Release notes
Sourced from lint-staged's releases.
... (truncated)
Changelog
Sourced from lint-staged's changelog.
... (truncated)
Commits
48f9f4eMerge pull request #1857 from lint-staged/changeset-release/main16b2e21chore(changeset): release195f156docs: improve changeset0ba6261fix: create hidden directory only when required66ac2dedocs: fixes to changesets80af8d7Merge pull request #1863 from lint-staged/fix-issuese433488fix: handle task editing a symlinked file to a regular file, and --fail-on-ch...e5019b3fix: handle trailing newlines when detecting changed files74efec8ci: run Cygwin and MSYS2 tests on Node.js 26655b7dcfix: use TypeScript types instead of JSDocUpdates
prettierfrom 3.9.6 to 3.9.10Release notes
Sourced from prettier's releases.