Skip to content

chore(deps): agrupa 7 bumps de Dependabot y alinea Expo con el SDK 57 - #362

Open
cienfuegos-agentes[bot] wants to merge 9 commits into
developfrom
chore/dependabot-batch-oct
Open

cienfuegos-agentes[bot] wants to merge 9 commits into
developfrom
chore/dependabot-batch-oct

Conversation

@cienfuegos-agentes

Copy link
Copy Markdown

Agrupa los siete PR de Dependabot del 28 de septiembre que encajan con el SDK 57 y alinea los parches de Expo que pide npx expo install --check. Los PR originales son del 28-09: su CI corrió antes de #358 y nunca pasó el gate de auditoría actual; aquí corre sobre develop de hoy y con un solo merge.

Bumps

Paquete Antes Ahora PR original
dotenv 17.4.2 18.0.4 #345
@formatjs/intl-displaynames 7.3.13 7.3.15 #346
@base-ui/react 1.7.0 1.8.0 #348
react-native-web 0.21.2 0.21.3 #349
better-sqlite3 13.0.2 13.0.3 #350
@testing-library/react 16.3.2 16.3.3 #352
react-hook-form 7.84.0 7.88.0 #354

Changelogs revisados, sin avisos de seguridad ni breaking changes que nos afecten. dotenv 18 es mayor, pero solo añade un CLI y un parser rápido opcional; import "dotenv/config" (en apps/web/prisma.config.ts) sigue silencioso desde 18.0.4. @base-ui/react 1.8 y react-hook-form 7.88 son correcciones y añadidos.

El lockfile de #349 dejaba ^0.21.3 en la raíz con ~0.21.3 en apps/android/package.json; va resincronizado en un commit aparte.

Parches de Expo

expo install --check en develop pedía expo ~57.0.28, expo-constants, expo-crypto, expo-linking, expo-router, expo-splash-screen y expo-sqlite. expo install --fix vuelve a dejar dos copias de expo y de expo-modules-core en el monorepo (lo de #304), así que va con npm update dentro de los rangos ~57.0.x que ya declara apps/android/package.json: una sola copia de expo, expo-modules-core, react (19.2.3) y react-native (0.86.3). expo-router 57.0.26 arrastra de paso @radix-ui/react-dialog 1.3.1 y sus dependencias.

Fuera de este PR

Se salen de lo que fija expo/bundledNativeModules.json del SDK 57 (confirmado con expo install --check sobre cada rama):

Verificación

Sobre develop a496bed, con npm ci --include=dev --ignore-scripts:

  • npx expo install --check en apps/android: "Dependencies are up to date" (en develop, 7 paquetes pendientes)
  • node scripts/npm-audit.mjs: exit 0, 0 critical y 25 high, todas exceptuadas (en develop, 26: se va @expo/metro-file-map)
  • npx tsc --noEmit en apps/web y en apps/android, exit 0
  • NODE_ENV=test npx vitest run en apps/web: 371 tests en 29 ficheros, todos en verde
  • npm run build --workspace=apps/web: exit 0
  • npx expo export --platform android: bundle Hermes de 6,3 MB, exit 0
  • Sin console.log en el diff; todos los resolved nuevos del lockfile apuntan a registry.npmjs.org

No probado en dispositivo ni en emulador.

🤖 Generated with Claude Code

dependabot Bot and others added 9 commits October 13, 2026 13:17
Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.4.2 to 18.0.4.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.4.2...v18.0.4)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@formatjs/intl-displaynames](https://github.com/formatjs/formatjs) from 7.3.13 to 7.3.15.
- [Release notes](https://github.com/formatjs/formatjs/releases)
- [Commits](https://github.com/formatjs/formatjs/compare/@formatjs/intl-displaynames@7.3.13...@formatjs/intl-displaynames@7.3.15)

---
updated-dependencies:
- dependency-name: "@formatjs/intl-displaynames"
  dependency-version: 7.3.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.8.0/packages/react)

---
updated-dependencies:
- dependency-name: "@base-ui/react"
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [react-native-web](https://github.com/necolas/react-native-web) from 0.21.2 to 0.21.3.
- [Release notes](https://github.com/necolas/react-native-web/releases)
- [Commits](necolas/react-native-web@0.21.2...0.21.3)

---
updated-dependencies:
- dependency-name: react-native-web
  dependency-version: 0.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) from 13.0.2 to 13.0.3.
- [Release notes](https://github.com/WiseLibs/better-sqlite3/releases)
- [Commits](WiseLibs/better-sqlite3@v13.0.2...v13.0.3)

---
updated-dependencies:
- dependency-name: better-sqlite3
  dependency-version: 13.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@testing-library/react](https://github.com/testing-library/react-testing-library) from 16.3.2 to 16.3.3.
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

---
updated-dependencies:
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [react-hook-form](https://github.com/react-hook-form/react-hook-form) from 7.84.0 to 7.88.0.
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.84.0...v7.88.0)

---
updated-dependencies:
- dependency-name: react-hook-form
  dependency-version: 7.88.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
El lockfile de Dependabot (#349) dejaba ^0.21.3 en la raíz mientras
apps/android/package.json declara ~0.21.3; npm install lo corrige.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Paperclip <noreply@paperclip.ing>
expo install --check pedía expo ~57.0.28 y seis expo-* más. Con
expo install --fix el monorepo acaba con dos copias de expo y de
expo-modules-core (lo de #304): npm update dentro de los rangos ~57.0.x
que ya declara apps/android deja una sola de cada uno.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Paperclip <noreply@paperclip.ing>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants