Skip to content

fix(deps): update all non-major dependencies - #1241

Merged
shunkakinoki merged 1 commit into
mainfrom
fix/deps-update-20260321
Mar 21, 2026
Merged

fix(deps): update all non-major dependencies#1241
shunkakinoki merged 1 commit into
mainfrom
fix/deps-update-20260321

Conversation

@shunkakinoki

@shunkakinoki shunkakinoki commented Mar 21, 2026

Copy link
Copy Markdown
Owner

Updated via bun update to resolve all stale Renovate PRs (#1193, #1200, #1205)


Summary by cubic

Update all non‑major dependencies and refresh the lockfile to pick up the latest minor/patch fixes. This consolidates outstanding updates and keeps tooling and CLIs current without code changes.

  • Dependencies
    • Tooling: turbo → 2.8.20, vite-plus → 0.1.13 (updates @voidzero-dev/*, OXC 0.120), @typescript/native-preview → 7.0.0-dev.20260321.1.
    • Observability: @pulumi/pulumi → 3.227.0; OpenTelemetry exporters/instrumentation bumped to 0.57.2 and core/libs to 1.30.1.
    • CLIs and agents: @anthropic-ai/claude-code → 2.1.81, @github/copilot → 1.0.10, @nanocollective/nanocoder → 1.24.1, @oh-my-pi/* → 13.14.2, agent-browser → 0.21.4, agentcash → 0.12.1, cline → 2.9.0, get-shit-done-cc → 1.27.0, portless → 0.7.2.

Written for commit 962d9e5. Summary will update on new commits.

Copilot AI review requested due to automatic review settings March 21, 2026 23:47
@shunkakinoki
shunkakinoki merged commit 8b40478 into main Mar 21, 2026
25 checks passed
@mesa-dot-dev

mesa-dot-dev Bot commented Mar 21, 2026

Copy link
Copy Markdown

You do not have enough credits to review this pull request. Please purchase more credits to continue.

@shunkakinoki
shunkakinoki deleted the fix/deps-update-20260321 branch March 21, 2026 23:47
@coderabbitai

coderabbitai Bot commented Mar 21, 2026

Copy link
Copy Markdown

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 18e54dcd-be21-4e69-9661-82944dac7fc3

📥 Commits

Reviewing files that changed from the base of the PR and between e36aa46 and 962d9e5.

⛔ Files ignored due to path filters (1)
  • bun.lock is excluded by !**/*.lock
📒 Files selected for processing (1)
  • package.json

Disabled knowledge base sources:

  • Linear integration is disabled

You can enable these sources in your CodeRabbit configuration.


📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Updated multiple development dependencies to their latest compatible versions for improved stability and tooling compatibility.

Walkthrough

This pull request updates version ranges for fifteen dependencies in package.json, including tools like Claude Code, Copilot, Pulumi, and Turbo. No new dependencies are introduced or removed; only existing package versions are incremented.

Changes

Cohort / File(s) Summary
Dependency Version Updates
package.json
Bumped minor/patch versions for 15 packages: @anthropic-ai/claude-code, @augmentcode/auggie, @github/copilot, @nanocollective/nanocoder, @oh-my-pi/pi-coding-agent, @oh-my-pi/swarm-extension, @pulumi/pulumi, @typescript/native-preview, agent-browser, agentcash, cline, get-shit-done-cc, portless, turbo, and vite-plus.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

Suggested labels

dependencies

Poem

🐰 Hop along with versions bright,
Fifteen packages set alight,
Patches bumped and minors too,
Dependencies fresh and new! ✨

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/deps-update-20260321

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Tip

You can validate your CodeRabbit configuration file in your editor.

If your editor has YAML language server, you can enable auto-completion and validation by adding # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json at the top of your CodeRabbit configuration file.

@mesa-dot-dev

mesa-dot-dev Bot commented Mar 21, 2026

Copy link
Copy Markdown

Mesa Description

TL;DR

Updated all non-major dependencies using bun update to resolve stale Renovate PRs.

What changed?

All non-major dependencies across the project were updated. Specific file changes are not available in the provided summaries.

Description generated by Mesa. Update settings

@gemini-code-assist

Copy link
Copy Markdown
Contributor

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request focuses on a routine maintenance task: updating all non-major dependencies using 'bun update'. This ensures the project's dependencies are current, addressing any accumulated technical debt from stale Renovate PRs and incorporating the latest improvements from upstream packages. The updates span various categories, from AI-related tools to build systems and core utilities, aiming to keep the project robust and performant.

Highlights

  • Dependency Updates: Numerous non-major dependencies across various packages have been updated to their latest versions, ensuring the project benefits from the latest features, bug fixes, and security patches.
  • New Dependency Added: The @traces-sh/traces package was introduced as a new dependency.
  • Major Version Bump for 'cac': The cac dependency received a major version update from 6.x to 7.x, which might include breaking changes or significant new features.
  • Ecosystem-wide Updates: Key ecosystems such as @oh-my-pi/* and @opentelemetry/* have seen comprehensive updates across their related packages, reflecting ongoing development and improvements.
  • Tooling and Build System Enhancements: Updates to @oxc-project/*, @typescript/native-preview, and vite-plus indicate continuous improvement in development tooling and build processes, including a refactoring of linting/formatting dependencies within vite-plus.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates several non-major dependencies. While most changes are patch and minor bumps, the update to vite-plus introduces a major version bump for its transitive dependency cac. This carries a risk of breaking changes, which I've highlighted in a specific comment.

Comment thread package.json
"typescript": "^5.9.3",
"vite": "^8.0.1",
"vite-plus": "^0.1.12"
"vite-plus": "^0.1.13"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

This patch update to vite-plus (from ^0.1.12 to ^0.1.13) introduces a major version bump for its transitive dependency cac (from ^6.7.14 to ^7.0.0). This major update in a transitive dependency might introduce breaking changes, posing a risk of regressions for functionality that relies on vite-plus.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates project dependencies (via bun update) to clear stale Renovate PRs and bring lockfile/package manifest in sync.

Changes:

  • Bumped multiple direct dependencies in package.json (patch/minor updates across various CLIs/tools).
  • Refreshed bun.lock with updated resolved versions, including updated transitive dependencies.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Updates declared dependency versions to newer releases.
bun.lock Regenerates lockfile to reflect the updated dependency graph and resolved versions.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants