Skip to content

sync: traer a develop los tres bumps de dependabot que entraron por main - #715

Merged
beyondnetPeru merged 12 commits into
developfrom
main
Sep 15, 2026
Merged

beyondnetPeru merged 12 commits into
developfrom
main

Conversation

@beyondnetPeru

Copy link
Copy Markdown
Contributor

Back-merge maindevelop. Dependabot abre sus PR contra la rama por defecto (main), así que #695 (globals 17.12.0), #697 (@opentelemetry/auto-instrumentations-node 0.80.0) y #698 (@hono/node-server 2.1.1) están en main y no en develop. Sin esto, develop prueba con versiones que ya no son las de producción y la siguiente promoción arrastra la divergencia.

git merge-tree develop main: sin conflictos (el lock de #704 y los de dependabot tocan entradas distintas).

Mismo mecanismo que #678. Se mergea con merge commit; main no cambia.

🤖 Generated with Claude Code

beyondnetPeru and others added 11 commits September 5, 2026 23:54
Bumps [globals](https://github.com/sindresorhus/globals) from 14.0.0 to 17.12.0.
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v14.0.0...v17.12.0)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.12.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…obals-17.12.0

chore(deps-dev): bump globals from 14.0.0 to 17.12.0
Bumps [@hono/node-server](https://github.com/honojs/node-server) from 1.19.15 to 2.1.1.
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](https://github.com/honojs/node-server/commits/v2.1.1)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) from 0.79.0 to 0.80.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.80.0/packages/auto-instrumentations-node)

---
updated-dependencies:
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…entelemetry/auto-instrumentations-node-0.80.0

chore(deps): bump @opentelemetry/auto-instrumentations-node from 0.79.0 to 0.80.0
…no/node-server-2.1.1

chore(deps): bump @hono/node-server from 1.19.15 to 2.1.1
@beyondnetPeru
beyondnetPeru requested a review from a team as a code owner September 15, 2026 13:51
@github-actions

Copy link
Copy Markdown

📊 Bilingual Coverage Impact

PR Changes

  • Paired EN/ES files modified: 0
  • New EN files needing ES translation: 0

Repository Coverage

Metric Value
Total EN files 527
Total ES files 497
Paired files 0
Coverage 0%

Good: All EN changes have ES counterparts.


Generated by GitHub Actions

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 23ee670978

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread src/sdk/cli/package.json
"@beyondnet/evolith-sdk": "2.0.0",
"@clack/prompts": "1.5.1",
"@hono/node-server": "1.19.15",
"@hono/node-server": "2.1.1",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Preserve the CLI's advertised Node 18 support

The published CLI still declares engines.node: >=18.0.0 (and its architecture guide states the same), but the newly pinned @hono/node-server@2.1.1 declares node >=20 in the lockfile. Consumers on Node 18 that enforce package engines cannot install the CLI; retain a Node-18-compatible Hono server version or raise the CLI engine requirement and update its release documentation together.

Useful? React with 👍 / 👎.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Verificado: @hono/node-server es dependencia directa del CLI (src/sdk/cli/package.json:78), 2.1.1 exige Node ≥ 20 y el CLI declara >=18.0.0 (y lo promete en portada). Se revierte #698 en #716 (vuelve a 1.19.15, sin advisories; dependabot ignora 2.x). Este back-merge lo recoge al ser su cabeza main. Subir el suelo a Node 20 queda como decisión del owner con su rastro de docs.

@beyondnetPeru
beyondnetPeru merged commit f1beeef into develop Sep 15, 2026
97 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant