Skip to content

chore(deps): batch dev-dependency updates (supersede #164/#165/#166) - #171

Merged
allxsmith merged 1 commit into
mainfrom
chore/deps-batch-164-166
Jun 26, 2026
Merged

allxsmith merged 1 commit into
mainfrom
chore/deps-batch-164-166

Conversation

@allxsmith

Copy link
Copy Markdown
Owner

Pull Request

Description

Batches the 3 direct-dependency Dependabot PRs into one verified branch. All are dev/toolchain — nothing consumer-facing, so no package release.

  • bulma-ui [x] create-bestax (@types/node) [ ] docs [x] Other: root tooling

Supersedes #164, #165, #166 (all assigned to allxsmith):

PR Update Manifest or lockfile
#164 commitlint 21.1.0, @eslint-react 5.9.3, globals 17.7.0, turbo 2.10.0, typescript-eslint 8.62.0, @playwright/test 1.61.1 within existing ranges → lockfile
#165 material-symbols 0.45.4 within range → lockfile
#166 @types/node 25 → ^26.0.1 create-bestax floor bump (only manifest edit)

#170 (transitive, docs-only) intentionally left open for Dependabot — docs is private/unpublished, the advisories are build-time/dev-server-only on a static site, and merging wouldn't clear the docs audit (needs an upstream Docusaurus fix).

Type of Change

  • Build tooling (dependency updates)

Checklist

  • Self-review done
  • All new and existing tests passed (3315 + 173)
  • Dependencies updated

Verification

  • npm run all green (build, typecheck, tests, coverage, bundle:stats, lint, format:check, storybook) on turbo 2.10 / typescript-eslint 8.62 / @types/node 26.
  • Clean npm ci (lockfile in sync).
  • npm audit unchanged from main — the 2 highs (serialize-javascript in docs/webpack; undici vendored inside @semantic-release/npm's npm) are pre-existing release/build-tooling transitives, never shipped to consumers.
  • CI: Build and Test + React 18/19 matrix; Visual Regression also runs (create-bestax change) — validates the Playwright 1.61.1 / @types/node 26 against the scaffolder e2e on the fresh baselines.

Additional Context

chore(deps): commits → no release cut. After merge I'll close #164/#165/#166 as superseded.

Direct/toolchain updates, all dev-only (no published-artifact change):
- #164: commitlint 21.1.0, @eslint-react 5.9.3, globals 17.7.0, turbo 2.10.0,
  typescript-eslint 8.62.0, @playwright/test 1.61.1 (within existing ranges).
- #165: material-symbols 0.45.4 (within range).
- #166: @types/node 25 -> ^26.0.1 (create-bestax; the one manifest floor bump).

Lockfile regenerated from scratch (keeps npm ci in sync). Verified by
npm run all (3315+173 tests, lint, typecheck on @types/node 26 + turbo 2.10).
Audit unchanged from main (2 pre-existing release/build-tooling highs:
serialize-javascript in docs/webpack, undici vendored in @semantic-release/npm).
@allxsmith allxsmith self-assigned this Jun 26, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Preview Deployment

Preview URL: https://fccae315.bestax.pages.dev

@github-actions

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 5.0.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

@github-actions

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 3.0.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

@github-actions

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 1.0.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

@allxsmith
allxsmith deleted the chore/deps-batch-164-166 branch July 31, 2026 04:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant