-
Notifications
You must be signed in to change notification settings - Fork 2
fix(deps): update all dependencies #31
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -12,10 +12,10 @@ jobs: | |
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v6 | ||
| - uses: pnpm/action-setup@v4 | ||
| - uses: pnpm/action-setup@v6 | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🧩 Analysis chain🌐 Web query:
💡 Result: pnpm/action-setup v6 release notes (from the repo’s official GitHub Releases pages) are available as a series of versioned release entries under the v6 tags. The most recent v6 entry visible in the official releases feed is v6.0.8 (published 2026-05-12), with the following changes: 1) v6.0.8 (2026-05-12) - docs(README): fix Citations:
🌐 Web query:
💡 Result: Node.js 24.15.0 (Krypton, LTS) release notes (published 2026-04-15) list these notable changes: - cli: add --max-heap-size option [1] - cli: add --require-module / --no-require-module [2] - crypto: add raw key formats support to the KeyObject APIs [1] - fs: add throwIfNoEntry option for fs.stat and fs.promises.stat [2] - http2: add http1Options for HTTP/1 fallback configuration [2] - module: mark require(esm) as stable [2] - module: mark module compile cache as stable [2] - net: add setTOS and getTOS to Socket [2] - sqlite: add limits property to DatabaseSync [2] - sqlite: mark as release candidate [2] - src: add C++ support for diagnostics channels [2] - stream: rename Duplex.toWeb type option to readableType [2] - test_runner: add exports option for module mocks [2] - test_runner: expose worker ID for concurrent test execution [2] - test_runner: show interrupted test on SIGINT [2] Primary sources for the above are the official Node.js blog release page and the Node.js v24 changelog section for 24.15.0 [1][2]. Citations:
🏁 Script executed: #!/bin/bash
# Check all workflow files for consistency in action versions
rg -n "pnpm/action-setup@" --type yaml
rg -n "node-version:" --type yamlRepository: ProverCoderAI/effect-template Length of output: 55 🏁 Script executed: #!/bin/bash
# Check if the workflow file exists
ls -la .github/workflows/ 2>/dev/null || echo "Directory not found"
# If it exists, read the file
if [ -f ".github/workflows/checking-dependencies.yml" ]; then
echo "=== File found, reading contents ==="
cat -n ".github/workflows/checking-dependencies.yml"
else
echo "File not found"
fi
# Also check with fd for any workflow files
echo "=== Searching for workflow files ==="
fd -e yml -e yaml ".github/workflows/" 2>/dev/null || fd -e yml -e yamlRepository: ProverCoderAI/effect-template Length of output: 1412 🏁 Script executed: #!/bin/bash
# Check pnpm version in lock file
head -20 pnpm-lock.yaml | grep -i "version\|lockfileVersion"
# Also check package.json for pnpm version requirement if any
if [ -f "package.json" ]; then
grep -i "pnpm" package.json
fi
# Check if there's a .npmrc or similar config
if [ -f ".npmrc" ]; then
cat .npmrc
fiRepository: ProverCoderAI/effect-template Length of output: 745 🌐 Web query:
💡 Result: No evidence found of a pnpm 11.1.2 release as of 2026-05-14. The latest releases are v11.1.1 (published around 2026-05-12 [1]) and v11.1.0 (published 2026-05-11 [2][3][4]). Official GitHub releases page lists recent tags up to May 12 but no 11.1.2 [3]. npm registry tracks these releases [4], and no sources mention 11.1.2. It is not yet released or available.[2][3][1] Citations:
🌐 Web query:
💡 Result: To configure pnpm/action-setup to install pnpm 11.1.2, use the action’s Citations: Configure pnpm version in pnpm/action-setup to match project requirement. The workflow uses 🤖 Prompt for AI Agents |
||
| - uses: actions/setup-node@v6 | ||
| with: | ||
| node-version: 24.13.1 | ||
| node-version: 24.15.0 | ||
| cache: pnpm | ||
|
|
||
| - run: pnpm install --frozen-lockfile | ||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -3,7 +3,7 @@ | |
| "version": "1.0.0", | ||
| "private": true, | ||
| "description": "Monorepo workspace for effect-template", | ||
| "packageManager": "pnpm@10.29.3", | ||
| "packageManager": "pnpm@11.1.2", | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🧩 Analysis chain🌐 Web query:
💡 Result: pnpm 11 introduces several breaking changes from v10, primarily documented in the official migration guide [1] and v11.0.0 release notes [2][3]. Key breaking changes include: Node.js requirement: Now requires Node.js 22 or newer; support for v18-21 dropped. pnpm is pure ESM, and standalone exe needs glibc 2.27+ [3][2][4]. Configuration changes [1]: - No longer reads config from package.json#pnpm; move to pnpm-workspace.yaml. -.npmrc limited to auth/registry; other settings (hoist-pattern, node-linker, etc.) to pnpm-workspace.yaml (camelCase keys). - npm_config_* env vars ignored; use pnpm_config_*. - Deprecated build settings (onlyBuiltDependencies, etc.) removed; use allowBuilds [3][2]. - Package manager settings consolidated to pmOnFail: 'download'|'ignore'|'warn'|'error'. - Renames: allowNonAppliedPatches -> allowUnusedPatches; auditConfig.ignoreCves -> auditConfig.ignoreGhsas. Store upgraded to v11: SQLite index.db replaces JSON files; incompatible with v10 stores (clear or migrate) [3][2][5]. Global installs: Isolated in {pnpmHomeDir}/global/v11/{hash}/ with own package.json/node_modules/pnpm-lock.yaml. pnpm install -g (no args) removed; use pnpm add -g [3][2]. pnpm link changes: No global store resolution; only relative/absolute paths. --global removed (use pnpm add -g.); no-arg pnpm link removed [1][6]. Removed commands: pnpm server; npm passthrough (publish, login, etc.) now native, some like access, edit removed [3][2]. Lockfile: patchedDependencies simplified to selector -> hash; auto-migrated [5]. Script shadowing: Scripts named clean/setup/deploy/rebuild run script, not built-in; use pnpm pm [1]. Security defaults: minimumReleaseAge=1440 (1 day), blockExoticSubdeps=true, strictDepBuilds=true [3][2]. A codemod assists migration: pnpx codemod run pnpm-v10-to-v11 [1]. Full details: https://pnpm.io/migration [1], https://github.com/pnpm/pnpm/releases/tag/v11.0.0 [2], https://pnpm.io/blog/releases/11.0 [3]. Citations:
🏁 Script executed: #!/bin/bash
# Check if pnpm-lock.yaml has been updated alongside this change
git diff HEAD -- pnpm-lock.yaml | head -50Repository: ProverCoderAI/effect-template Length of output: 55 🏁 Script executed: #!/bin/bash
# Check if pnpm-lock.yaml exists and what version it specifies
if [ -f "pnpm-lock.yaml" ]; then
echo "=== pnpm-lock.yaml lockfileVersion ==="
head -20 pnpm-lock.yaml | rg "lockfileVersion|name|version"
else
echo "pnpm-lock.yaml not found"
fi
# Check if package.json has pnpm config that needs migration
echo -e "\n=== package.json pnpm config ==="
jq '.pnpm' package.json 2>/dev/null || echo "No pnpm config in package.json"
# Check Node.js version requirement
echo -e "\n=== Node.js engines requirement ==="
jq '.engines' package.json 2>/dev/null || echo "No engines field"Repository: ProverCoderAI/effect-template Length of output: 586 🏁 Script executed: #!/bin/bash
# Check git log to see if pnpm-lock.yaml was modified in this change
echo "=== Recent git changes to pnpm-lock.yaml ==="
git log --oneline -n 10 -- pnpm-lock.yaml 2>/dev/null || echo "No pnpm-lock.yaml history"
# Check if .npmrc or pnpm-workspace.yaml exists
echo -e "\n=== pnpm configuration files ==="
ls -la .npmrc pnpm-workspace.yaml .pnpmfile.cjs 2>/dev/null || echo "Checking config files..."
fd -e "npmrc|pnpmfile|workspace.yaml" .Repository: ProverCoderAI/effect-template Length of output: 287 🏁 Script executed: #!/bin/bash
# Check CI workflows for Node.js version
echo "=== CI/CD Node.js version requirement ==="
find .github -name "*.yml" -o -name "*.yaml" 2>/dev/null | head -5 | xargs grep -l "node-version\|node_version\|setup-node" 2>/dev/null | head -1 | xargs cat 2>/dev/null | grep -A 2 "node-version\|setup-node" || echo "Checking workflows..."Repository: ProverCoderAI/effect-template Length of output: 370 Migrate deprecated pnpm configuration to pnpm 11 format. The pnpm-lock.yaml has been regenerated to v9.0 (pnpm 11 format), but package.json still contains deprecated configuration that is no longer supported in pnpm 11:
These deprecated options will cause failures when running pnpm commands. Use the pnpm v10→v11 migration codemod ( 🤖 Prompt for AI Agents |
||
| "workspaces": [ | ||
| "packages/*" | ||
| ], | ||
|
|
@@ -22,8 +22,8 @@ | |
| "start": "pnpm --filter @effect-template/app start" | ||
| }, | ||
| "devDependencies": { | ||
| "@changesets/changelog-github": "^0.5.2", | ||
| "@changesets/cli": "^2.29.8" | ||
| "@changesets/changelog-github": "^0.7.0", | ||
| "@changesets/cli": "^2.31.0" | ||
| }, | ||
| "repository": { | ||
| "type": "git", | ||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -35,53 +35,53 @@ | |
| "url": "https://github.com/ProverCoderAI/effect-template/issues" | ||
| }, | ||
| "homepage": "https://github.com/ProverCoderAI/effect-template#readme", | ||
| "packageManager": "pnpm@10.29.3", | ||
| "packageManager": "pnpm@11.1.2", | ||
| "dependencies": { | ||
| "@effect/cli": "^0.73.2", | ||
| "@effect/cluster": "^0.56.4", | ||
| "@effect/experimental": "^0.58.0", | ||
| "@effect/platform": "^0.94.5", | ||
| "@effect/platform-node": "^0.104.1", | ||
| "@effect/printer": "^0.47.0", | ||
| "@effect/printer-ansi": "^0.47.0", | ||
| "@effect/rpc": "^0.73.1", | ||
| "@effect/cli": "^0.75.1", | ||
| "@effect/cluster": "^0.58.2", | ||
| "@effect/experimental": "^0.60.0", | ||
| "@effect/platform": "^0.96.1", | ||
| "@effect/platform-node": "^0.106.0", | ||
| "@effect/printer": "^0.49.0", | ||
| "@effect/printer-ansi": "^0.49.0", | ||
| "@effect/rpc": "^0.75.1", | ||
| "@effect/schema": "^0.75.5", | ||
| "@effect/sql": "^0.49.0", | ||
| "@effect/typeclass": "^0.38.0", | ||
| "@effect/workflow": "^0.16.0", | ||
| "effect": "^3.19.17", | ||
| "ts-morph": "^27.0.2" | ||
| "@effect/sql": "^0.51.1", | ||
| "@effect/typeclass": "^0.40.0", | ||
| "@effect/workflow": "^0.18.1", | ||
| "effect": "^3.21.2", | ||
| "ts-morph": "^28.0.0" | ||
| }, | ||
| "devDependencies": { | ||
| "@biomejs/biome": "^2.4.0", | ||
| "@biomejs/biome": "^2.4.15", | ||
| "@effect/eslint-plugin": "^0.3.2", | ||
| "@effect/language-service": "latest", | ||
| "@effect/vitest": "^0.27.0", | ||
| "@eslint-community/eslint-plugin-eslint-comments": "^4.6.0", | ||
| "@eslint/compat": "2.0.2", | ||
| "@eslint/eslintrc": "3.3.3", | ||
| "@effect/vitest": "^0.29.0", | ||
| "@eslint-community/eslint-plugin-eslint-comments": "^4.7.1", | ||
| "@eslint/compat": "2.1.0", | ||
| "@eslint/eslintrc": "3.3.5", | ||
| "@eslint/js": "10.0.1", | ||
| "@prover-coder-ai/eslint-plugin-suggest-members": "^0.0.25", | ||
| "@prover-coder-ai/eslint-plugin-suggest-members": "^0.0.26", | ||
| "@ton-ai-core/vibecode-linter": "^1.0.11", | ||
| "@types/node": "^24.10.13", | ||
| "@typescript-eslint/eslint-plugin": "^8.55.0", | ||
| "@typescript-eslint/parser": "^8.55.0", | ||
| "typescript-eslint": "^8.55.0", | ||
| "@vitest/coverage-v8": "^4.0.18", | ||
| "eslint": "^10.0.0", | ||
| "@types/node": "^24.12.4", | ||
| "@typescript-eslint/eslint-plugin": "^8.59.3", | ||
| "@typescript-eslint/parser": "^8.59.3", | ||
| "typescript-eslint": "^8.59.3", | ||
| "@vitest/coverage-v8": "^4.1.6", | ||
| "eslint": "^10.3.0", | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🧩 Analysis chain🌐 Web query:
💡 Result: ESLint 10.0 release notes / breaking changes and the official migration guide are here: 1) Official migration guide (v9.x → v10.x) https://eslint.org/docs/latest/use/migrate-to-10.0.0 [1] 2) Official release notes for v10.0.0 https://eslint.org/blog/2026/02/eslint-v10.0.0-released/ [2] Key breaking changes called out in the migration guide (high-signal items) A) Node.js version support dropped ESLint v10.0.0 no longer supports Node.js versions < v20.19.0 (and also drops v21.x and v23.x); the migration guide says to upgrade to Node.js v20.19.0 or later [1][3]. B) “Old config format” no longer supported; flat config required The v10 migration guide states the legacy config system is removed (i.e., old eslintrc format is no longer supported) and points you to use flat config (eslint.config.) [1]. The migration guide summary also calls out removing the eslintrc format [1][3]. C) New configuration file lookup algorithm In ESLint v9 there was an alternate behavior guarded by a feature flag; in v10.0.0, the behavior is the default. The migration guide describes that config lookup now starts from the directory of each linted file and searches upward to the filesystem root (instead of starting from the current working directory) and that the v10_config_lookup_from_file flag was removed [1]. D) Removed feature for eslintrc config lookup behavior flag Attempting to use v10_config_lookup_from_file now results in an error (because the flag was removed) [1]. E) Rule/behavior & API breaking changes (examples listed in the migration guide) The migration guide lists multiple other breaking/API changes, including (among others) removal of the nodeType property in LintMessage objects [1], JSX references now being tracked [1], and changes around fixer APIs requiring string text arguments [1]. How to migrate (practical steps to follow) - Upgrade Node.js to a supported version (>= v20.19.0) before running ESLint 10 [1]. - Ensure you are using flat config (eslint.config.) and remove any legacy eslintrc configuration usage [1]. - If you previously relied on the v9 config lookup behavior / feature flag, update to the new lookup algorithm (start from each linted file’s directory) [1]. - Then run the official migration guide’s checklist/sections to address any remaining listed breaking changes in your specific setup [1]. Citations:
🏁 Script executed: #!/bin/bash
# Check ESLint configuration files for compatibility
fd eslint.config -e js -e mjs -e cjs --exec cat {}Repository: ProverCoderAI/effect-template Length of output: 55 🏁 Script executed: #!/bin/bash
# Check for ESLint configuration files
echo "=== Searching for ESLint config files ==="
fd -e json -e js -e cjs -e mjs '(eslintrc|eslint\.config)' --base-directory .
# Check package.json for Node.js version and ESLint config location
echo -e "\n=== Checking packages/app/package.json ==="
head -80 packages/app/package.json | tail -20
# Check root package.json for Node.js engines
echo -e "\n=== Checking root package.json for engines ==="
rg '"engines"' -A 5 package.jsonRepository: ProverCoderAI/effect-template Length of output: 1013 🏁 Script executed: #!/bin/bash
# More comprehensive search for all ESLint-related configs
echo "=== Searching for all ESLint configs ==="
find . -type f \( -name ".eslintrc*" -o -name "eslint.config.*" \) 2>/dev/null
# Check for ESLint in workspace packages
echo -e "\n=== Checking eslint references in all package.json files ==="
find . -name "package.json" -type f -exec grep -l "eslint" {} \; 2>/dev/nullRepository: ProverCoderAI/effect-template Length of output: 252 🏁 Script executed: #!/bin/bash
# Check the ESLint flat config file
echo "=== Content of eslint.config.mts ==="
cat packages/app/eslint.config.mts
# Search for Node.js version constraints
echo -e "\n=== Searching for Node.js version constraints ==="
find . -type f \( -name ".nvmrc" -o -name ".tool-versions" -o -name "nvmrc" \) 2>/dev/null | head -10
# Check GitHub workflows for Node.js version
echo -e "\n=== Checking for Node.js version in CI/workflows ==="
fd "\.ya?ml$" .github/workflows 2>/dev/null | xargs grep -h "node-version" 2>/dev/null | head -10Repository: ProverCoderAI/effect-template Length of output: 10380 🏁 Script executed: #!/bin/bash
# Check if engines field exists in root and app package.json
echo "=== Checking engines field in package.json files ==="
rg '"engines"' -B 1 -A 3 . --type json
# Check for `@eslint/compat` usage in eslint.config.mts
echo -e "\n=== Checking `@eslint/compat` usage ==="
grep -n "@eslint/compat\|compat" packages/app/eslint.config.mts || echo "No `@eslint/compat` found in config"Repository: ProverCoderAI/effect-template Length of output: 219 Add engines field to enforce Node.js >= v20.19.0 for ESLint 10.3.0 compatibility. The repository has already properly migrated to ESLint's flat config format (eslint.config.mts) and uses "engines": {
"node": ">=20.19.0"
}🤖 Prompt for AI Agents |
||
| "eslint-import-resolver-typescript": "^4.4.4", | ||
| "eslint-plugin-codegen": "0.34.1", | ||
| "eslint-plugin-import": "^2.32.0", | ||
| "eslint-plugin-simple-import-sort": "^12.1.1", | ||
| "eslint-plugin-sonarjs": "^3.0.7", | ||
| "eslint-plugin-sort-destructure-keys": "^2.0.0", | ||
| "eslint-plugin-unicorn": "^63.0.0", | ||
| "@vitest/eslint-plugin": "^1.6.9", | ||
| "globals": "^17.3.0", | ||
| "jscpd": "^4.0.8", | ||
| "typescript": "^5.9.3", | ||
| "vite": "^7.3.1", | ||
| "eslint-plugin-simple-import-sort": "^13.0.0", | ||
| "eslint-plugin-sonarjs": "^4.0.3", | ||
| "eslint-plugin-sort-destructure-keys": "^3.0.0", | ||
| "eslint-plugin-unicorn": "^64.0.0", | ||
| "@vitest/eslint-plugin": "^1.6.17", | ||
| "globals": "^17.6.0", | ||
| "jscpd": "^4.2.0", | ||
| "typescript": "^6.0.3", | ||
| "vite": "^8.0.13", | ||
| "vite-tsconfig-paths": "^6.1.1", | ||
| "vitest": "^4.0.18" | ||
| "vitest": "^4.1.6" | ||
| } | ||
| } | ||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🧩 Analysis chain
🌐 Web query:
pnpm/action-setup v6 v5 v4 changelog breaking changes💡 Result:
Key breaking changes when moving between major versions of pnpm/action-setup (v4 → v5 → v6): 1) GitHub Actions runtime Node.js version changed to Node 24 - The action’s “runs” environment changed from using Node 20 to using Node 24 between v4 and v5 (and therefore affects v5+). [1] - There are discussions/issues explicitly describing this as breaking for older/self-hosted runners and recommending using v5 (or pinning an older v4 tag) as a workaround. [2] - In the v4...v6 compare view, the “runs” section shows node20 → node24. [3] 2) pnpm v11 support and updated pnpm bootstrap behavior (v6 line) - v6 releases include updates to pnpm (for example, “update pnpm to 11.1.1”). [4] - The main releases page shows v6-era notes like “Added support for pnpm v11” and “Updated the action to use Node.js 24.” [5] 3) Input/README contract adjustments that can break workflows relying on older defaults - cache_dependency_path input type/default documentation changed (v4...v6 compare shows a doc/contract change from “string|string[]” to “string” and notes multiple paths are accepted delimited by newlines). [3] - v4...v6 compare also shows example workflow snippets updated to use actions/checkout@v6 and pnpm/action-setup@v6 (if you had workflow parsing or strict linting around these snippets, that would matter, though it’s more guidance than runtime behavior). [3] 4) v5 → v6 behavior regarding package.json packageManager pinning (reported as a bug) - There’s an open issue stating that “action-setup@v6 does not take the requested pnpm version into account” (i.e., it is not honoring the version specified in the packageManager field in package.json). [6] - This is not described as an intentional breaking change in the official release notes we found, but it is a workflow-relevant behavioral regression/issue when upgrading to v6. [6] Practical upgrade guidance (based on the above): - If you run on older/self-hosted GitHub Actions runners that can’t handle Node 24, expect breakage when moving from v4 → v5 or v6; pin to an earlier v4 sub-version as suggested in the issue thread, or test with a runner that supports Node 24. [2] - Re-validate pnpm version selection logic after upgrading to v6, especially if you rely on package.json “packageManager”: the v6 behavior is reported as not honoring that value. [6] - If you use pnpm/action-setup caching, re-check your cache_dependency_path formatting: it’s documented differently in the v4...v6 compare view (string with multiple paths via newline delimiting). [3] If you want, tell me your current pin (e.g., pnpm/action-setup@v4.x or
@v5.x) and how you set pnpm version (version input vs package.json packageManager) and whether you use caching; I can map the above into an exact “what to change” checklist.Citations:
🏁 Script executed:
Repository: ProverCoderAI/effect-template
Length of output: 154
🏁 Script executed:
Repository: ProverCoderAI/effect-template
Length of output: 410
🏁 Script executed:
Repository: ProverCoderAI/effect-template
Length of output: 780
🏁 Script executed:
Repository: ProverCoderAI/effect-template
Length of output: 175
🏁 Script executed:
Repository: ProverCoderAI/effect-template
Length of output: 2855
🏁 Script executed:
Repository: ProverCoderAI/effect-template
Length of output: 2290
🏁 Script executed:
Repository: ProverCoderAI/effect-template
Length of output: 131
Node.js 24 required for pnpm/action-setup@v6, but action defaults to Node 20.
The upgrade to v6 requires Node.js 24 (its runs environment uses node24), but the custom action defaults to
node-version: 20.16.0. This causes the action to fail on Node 20 runners. Thechecking-dependencies.ymlworkflow already uses Node 24.15.0 with v6; the custom action's default must match. Additionally, v6 has a reported bug where it does not honor thepackageManagerfield in package.json (currently set to pnpm@11.1.2), which may cause unexpected pnpm version selection. Update the default node-version to 24 or higher, and verify pnpm version behavior after upgrading.🤖 Prompt for AI Agents