chore(deps): lock file maintenance - #1876
Conversation
|
|
You do not have enough credits to review this pull request. Please purchase more credits to continue. |
📝 WalkthroughSummary by CodeRabbit
WalkthroughThis PR updates dependency versions across both Rust and Node.js ecosystems. The Rust ChangesDependency Updates
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes Possibly related PRs
Suggested labels
Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates various project dependencies and lock files. In the Rust configuration, 'worktrunk' is upgraded from 0.53.0 to 0.55.0, 'env_logger' is removed, and 'tracing' libraries are added. The 'flake.lock' file has been significantly cleaned up by removing duplicate inputs and updating locked revisions for several Nix packages. Additionally, numerous Node.js dependencies in 'package.json' have been bumped to their latest versions. There are no review comments, so I have no feedback to provide.
Mesa DescriptionTL;DRMaintenance update of dependency lock files across Nix, Rust, and JavaScript/TypeScript environments. What changed?
Test plan
Description generated by Mesa. Update settings |
![indent-zero[bot]](https://avatars.githubusercontent.com/in/1426746?s=60&v=4){kind=small}
| "paperclipai": "^2026.529.0", | ||
| "playwright-chromium": "^1.60.0", | ||
| "portless": "^0.13.0", | ||
| "portless": "^0.13.1", |
There was a problem hiding this comment.
Major version bump under a 'lock file maintenance' label: tokscale moves from ^2.1.3 to ^3.0.0, which is a SemVer-breaking jump rather than a transitive lockfile refresh. With renovate.json set to rangeStrategy: bump + platformAutomerge: true, this will land without an extra review pass — worth a quick glance at the tokscale 3.0 release notes (CLI flags / output format) before merging.
Also of note in the same vein (0.x caret-floor crossings, nominally breaking under SemVer): @traces-sh/traces 0.5→0.6, oxfmt 0.51→0.52, oxlint 1.66→1.67, droid 0.132→0.137. No code in this repo imports them (CLI installs only), so blast radius is limited to shell workflows.
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
🧹 Nitpick comments (1)
package.json (1)
72-72: ⚡ Quick winReduce risk note for
tokscalev3 bump (only dependency, no in-repo usage found).In
package.json, the only repo reference totokscaleis the dependency entry ("tokscale": "^3.0.0", line 72) plus the correspondingbun.lockentries—there are no othertokscalereferences in this repo. Major-breaking CLI/API changes are therefore only a concern if your personal/CI workflows actually invoke thetokscalebinary; if so, ensure those commands/configs are compatible with v3 release notes.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@package.json` at line 72, The package.json dependency upgrade to "tokscale": "^3.0.0" is a major bump but the repo shows no in-repo usage; search the repo and CI configs for any invocations of the tokscale binary (e.g. in package.json scripts, GitHub Actions, Makefile, or npm/bun scripts) and either (A) if you do use the CLI, update those invocations to match tokscale v3 CLI/API per the v3 release notes and run CI/tests to validate, or (B) if you do not use it, reduce risk by pinning the dependency to the previous major (e.g. "^2.x") in package.json and update bun.lock accordingly before merging.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In `@package.json`:
- Line 72: The package.json dependency upgrade to "tokscale": "^3.0.0" is a
major bump but the repo shows no in-repo usage; search the repo and CI configs
for any invocations of the tokscale binary (e.g. in package.json scripts, GitHub
Actions, Makefile, or npm/bun scripts) and either (A) if you do use the CLI,
update those invocations to match tokscale v3 CLI/API per the v3 release notes
and run CI/tests to validate, or (B) if you do not use it, reduce risk by
pinning the dependency to the previous major (e.g. "^2.x") in package.json and
update bun.lock accordingly before merging.
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
Run ID: 39c5ae9a-6afb-48a7-891a-9e1f30618e59
⛔ Files ignored due to path filters (3)
Cargo.lockis excluded by!**/*.lockbun.lockis excluded by!**/*.lockflake.lockis excluded by!**/*.lock
📒 Files selected for processing (2)
Cargo.tomlpackage.json
There was a problem hiding this comment.
Pull request overview
This PR refreshes dependency pins across the dotfiles toolchain, covering Nix flake inputs, Rust/Cargo dependencies, and Bun/npm CLI dependencies.
Changes:
- Updated many Nix flake inputs and simplified several transitive flake lock nodes.
- Bumped
worktrunkfrom0.53.0to0.55.0in Cargo metadata and lockfile. - Updated Bun/npm dependency ranges and corresponding lockfile entries.
Reviewed changes
Copilot reviewed 2 out of 5 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
package.json |
Updates npm/Bun dependency version ranges for CLI tools. |
bun.lock |
Locks the resolved npm/Bun dependency graph for the updated package ranges. |
flake.lock |
Refreshes Nix flake input revisions and transitive dependency structure. |
Cargo.toml |
Updates the requested worktrunk crate version. |
Cargo.lock |
Locks worktrunk 0.55.0 and its updated dependency set. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Summary
Test plan
Summary by cubic
Updated lock files for Rust, Bun/Node, and Nix.
worktrunkis now 0.55.0 andflake.lockis refreshed to newernixpkgsand tooling.worktrunk0.53.0 → 0.55.0; replaceenv_loggerwithtracing,tracing-log,tracing-subscriber.@openai/codex,@github/copilot,@biomejs/biome,tokscale3.x,turbo2.9.16,openclaw2026.5.28);bun.lockregenerated.flake.lock(newernixpkgs,home-manager,nix-darwin,neovim-nightly-overlay,rust-overlay) and simplify inputs.uv.lockdue to existingaider-chat/huggingface-hubconflict.Written for commit 89dbb36. Summary will update on new commits.