Skip to content

build(deps): combine green Dependabot bumps - #9135

Open
russellwheatley wants to merge 8 commits into
mainfrom
chore/combine-green-dependabot
Open

build(deps): combine green Dependabot bumps#9135
russellwheatley wants to merge 8 commits into
mainfrom
chore/combine-green-dependabot

Conversation

@russellwheatley

@russellwheatley russellwheatley commented Jul 31, 2026

Copy link
Copy Markdown
Member

Summary

Notes

dependabot Bot added 6 commits July 31, 2026 10:18
Bumps [web-streams-polyfill](https://github.com/MattiasBuelens/web-streams-polyfill) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/MattiasBuelens/web-streams-polyfill/releases)
- [Changelog](https://github.com/MattiasBuelens/web-streams-polyfill/blob/master/CHANGELOG.md)
- [Commits](MattiasBuelens/web-streams-polyfill@v4.2.0...v4.3.0)

---
updated-dependencies:
- dependency-name: web-streams-polyfill
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [react-native-url-polyfill](https://github.com/charpeni/react-native-url-polyfill) from 3.0.0 to 4.0.0.
- [Release notes](https://github.com/charpeni/react-native-url-polyfill/releases)
- [Commits](charpeni/react-native-url-polyfill@v3.0.0...v4.0.0)

---
updated-dependencies:
- dependency-name: react-native-url-polyfill
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@react-native-community/cli](https://github.com/react-native-community/cli/tree/HEAD/packages/cli) from 15.1.3 to 20.2.0.
- [Release notes](https://github.com/react-native-community/cli/releases)
- [Changelog](https://github.com/react-native-community/cli/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/react-native-community/cli/commits/v20.2.0/packages/cli)

---
updated-dependencies:
- dependency-name: "@react-native-community/cli"
  dependency-version: 20.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/cache/save](https://github.com/actions/cache) from 5.0.5 to 6.1.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@27d5ce7...55cc834)

---
updated-dependencies:
- dependency-name: actions/cache/save
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.3.0 to 5.6.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@ad2b381...03ad4de)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/stale](https://github.com/actions/stale) from 10.3.0 to 10.4.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@eb5cf3a...1e223db)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@gemini-code-assist

Copy link
Copy Markdown
Contributor

Caution

The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased.

@codecov

codecov Bot commented Jul 31, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 64.08%. Comparing base (a1e9ffe) to head (af67dc5).
⚠️ Report is 7 commits behind head on main.

Additional details and impacted files
@@             Coverage Diff              @@
##               main    #9135      +/-   ##
============================================
- Coverage     66.13%   64.08%   -2.04%     
============================================
  Files           497      389     -108     
  Lines         39249    30810    -8439     
  Branches       5905     4915     -990     
============================================
- Hits          25953    19742    -6211     
+ Misses        11861    10371    -1490     
+ Partials       1435      697     -738     
Flag Coverage Δ
android-native ?
e2e-ts-android ?
e2e-ts-ios 58.73% <ø> (-4.27%) ⬇️
e2e-ts-macos 49.71% <ø> (-0.06%) ⬇️
ios-native 58.73% <ø> (-4.27%) ⬇️
jest 50.04% <ø> (-0.33%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@just1and0
just1and0 self-requested a review July 31, 2026 10:05
@just1and0
just1and0 requested a review from mikehardy July 31, 2026 10:06
@russellwheatley

Copy link
Copy Markdown
Member Author

Blocked - RNCLI version is locked for the time being due to dependency on react-native-macos.

@russellwheatley russellwheatley added the blocked: do-not-merge Do not merge this issue without approval by the person who labelled this issue as Do Not Merge label Jul 31, 2026
Revert the Dependabot CLI 20.x bump; the test app RN/CLI line is locked by react-native-macos. Document the intentional pins in okf-bundle.
Dependabot only bumped cache/save; pin restore to the same v6.1.0 SHA so save/restore stay paired.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocked: do-not-merge Do not merge this issue without approval by the person who labelled this issue as Do Not Merge Needs Attention

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants