Skip to content

chore: bump dependencies - #1284

Merged
shunkakinoki merged 1 commit into
mainfrom
chore/bump-deps
Mar 27, 2026
Merged

chore: bump dependencies#1284
shunkakinoki merged 1 commit into
mainfrom
chore/bump-deps

Conversation

@shunkakinoki

@shunkakinoki shunkakinoki commented Mar 27, 2026

Copy link
Copy Markdown
Owner

Summary

  • Bump multiple package dependencies to latest versions (claude-code, auggie, biome, copilot, gemini-cli, gws-cli, ccs, etc.)

Test plan

  • bun install succeeds

Summary by cubic

Update dependencies to the latest patch/minor versions to pick up recent fixes and tooling improvements. Only package.json and bun.lock changed; no app code touched.

  • Dependencies

    • Build: vite -> ^8.0.3, vite-plus -> ^0.1.14
    • Infra: @pulumi/pulumi -> ^3.228.0
    • AI SDKs: @openai/codex -> ^0.117.0; @anthropic-ai/claude-code -> ^2.1.85; @augmentcode/auggie -> ^0.21.0
    • CLIs: @github/copilot -> ^1.0.12; @google/gemini-cli -> ^0.35.2
    • Lint/format: oxlint -> ^1.57.0; oxfmt -> ^0.42.0
  • Migration

    • Run bun install.

Written for commit df5064d. Summary will update on new commits.

Entire-Checkpoint: 6cd53ae141f5
Copilot AI review requested due to automatic review settings March 27, 2026 01:27
@mesa-dot-dev

mesa-dot-dev Bot commented Mar 27, 2026

Copy link
Copy Markdown

You do not have enough credits to review this pull request. Please purchase more credits to continue.

@shunkakinoki
shunkakinoki merged commit 67e7181 into main Mar 27, 2026
27 of 28 checks passed
@coderabbitai

coderabbitai Bot commented Mar 27, 2026

Copy link
Copy Markdown

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: b7d4aa96-6e27-4fb8-b131-6a28f6aa9f2e

📥 Commits

Reviewing files that changed from the base of the PR and between e4c634b and df5064d.

⛔ Files ignored due to path filters (1)
  • bun.lock is excluded by !**/*.lock
📒 Files selected for processing (1)
  • package.json

Disabled knowledge base sources:

  • Linear integration is disabled

You can enable these sources in your CodeRabbit configuration.


📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Updated dependencies to latest compatible versions across the project.

Walkthrough

This pull request updates version ranges for approximately 23 packages in the dependencies section of package.json, including packages from scopes like @anthropic-ai, @google, @openai, @pulumi, and others. No changes were made to scripts, metadata, or other configuration sections.

Changes

Cohort / File(s) Summary
Dependency Version Bumps
package.json
Updated version ranges for 23 packages across multiple scopes including @anthropic-ai/claude-code, @augmentcode/auggie, @biomejs/biome, @github/copilot, @google/gemini-cli, @googleworkspace/cli, @kaitranntt/ccs, @oh-my-pi/*, @openai/codex, @pulumi/pulumi, @sourcegraph/amp, @traces-sh/traces, @typescript/native-preview, agent-browser, agentcash, cline, get-shit-done-cc, openclaw, oxfmt, oxlint, vite, and vite-plus.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

Suggested labels

dependencies

Poem

🐰 Version bounds we hop and bound,
Twenty-three new deps are found!
Claude and Gemini take a leap,
While Vite keeps the bundler deep,
Dependencies dance, our projects sound! 📦

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/bump-deps

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@shunkakinoki
shunkakinoki deleted the chore/bump-deps branch March 27, 2026 01:27
@mesa-dot-dev

mesa-dot-dev Bot commented Mar 27, 2026

Copy link
Copy Markdown

Mesa Description

TL;DR

Bumped multiple package dependencies to their latest versions.

What changed?

Multiple package dependencies were updated, including claude-code, auggie, biome, copilot, gemini-cli, gws-cli, and ccs.

Description generated by Mesa. Update settings

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates numerous dependencies in package.json to their latest versions. The review feedback suggests pinning specific dependencies—such as those using commit hashes, development previews, or date-based versioning—to exact versions instead of using carets to ensure better build stability and predictability.

Comment thread package.json
"@pulumi/pulumi": "^3.228.0",
"@schpet/linear-cli": "^1.11.1",
"@sourcegraph/amp": "^0.0.1774310664-gcb98ac",
"@sourcegraph/amp": "^0.0.1774569934-g39e3ec",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

For better stability with dependencies that use commit hashes or pre-release identifiers, it's recommended to pin the version instead of using a caret (^). This prevents accidentally pulling in newer, potentially unstable builds during a fresh install, ensuring more predictable builds.

Suggested change
"@sourcegraph/amp": "^0.0.1774569934-g39e3ec",
"@sourcegraph/amp": "0.0.1774569934-g39e3ec",

Comment thread package.json
"@traces-sh/traces": "^0.4.5",
"@typescript/native-preview": "^7.0.0-dev.20260323.1",
"@traces-sh/traces": "^0.4.9",
"@typescript/native-preview": "^7.0.0-dev.20260326.1",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

This development preview of TypeScript should be pinned to an exact version to ensure build stability. Using a caret (^) could introduce unexpected breaking changes from newer development builds.

Suggested change
"@typescript/native-preview": "^7.0.0-dev.20260326.1",
"@typescript/native-preview": "7.0.0-dev.20260326.1",

Comment thread package.json
"openclaw": "^2026.3.23-2",
"oxfmt": "^0.41.0",
"oxlint": "^1.56.0",
"openclaw": "^2026.3.24",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

Since this dependency appears to use date-based versioning, it's safer to pin it to an exact version. Using a caret (^) could lead to unpredictable updates and potential instability.

Suggested change
"openclaw": "^2026.3.24",
"openclaw": "2026.3.24",

Comment thread package.json
Comment on lines 61 to +63
"turbo": "^2.8.20",
"typescript": "^6.0.2",
"vite": "^8.0.2",
"vite-plus": "^0.1.13",
"vite": "^8.0.3",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

These dependencies appear to be using pre-release or future versions. To ensure predictable and stable builds, it's best practice to pin them to their exact versions by removing the caret (^). This prevents newer, potentially breaking, pre-release versions from being installed automatically.

Suggested change
"turbo": "^2.8.20",
"typescript": "^6.0.2",
"vite": "^8.0.2",
"vite-plus": "^0.1.13",
"vite": "^8.0.3",
"turbo": "2.8.20",
"typescript": "6.0.2",
"vite": "8.0.3",

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR bumps a set of JavaScript/Bun dependencies to newer versions and updates the Bun lockfile accordingly.

Changes:

  • Updated multiple dependency versions in package.json (e.g., @biomejs/biome, @github/copilot, @google/gemini-cli, vite, oxlint).
  • Regenerated bun.lock to reflect the updated dependency graph and resolved versions.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Bumps direct dependency version ranges to newer releases.
bun.lock Updates resolved/pinned versions and transitive dependencies after the bumps.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants