chore(deps): update all non-major dependencies (patch) - #1916
Conversation
Signed-off-by:
|
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (2)
📝 WalkthroughSummary by CodeRabbit
WalkthroughTwo dependency manifest files are updated: ChangesDependency Manifest Updates
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates dependency configurations in package.json, bun.lock, and pyproject.toml, including an upgrade of mistral-vibe. A critical issue was identified in package.json where platform-specific suffixes were incorrectly stripped from the @openai/codex aliased packages, which would lead to circular dependencies and installation failures of native binaries. A suggestion was provided to revert these alias changes.
Important
The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.
| "@openai/codex-darwin-arm64": "npm:@openai/codex@0.138.0", | ||
| "@openai/codex-darwin-x64": "npm:@openai/codex@0.138.0", | ||
| "@openai/codex-linux-arm64": "npm:@openai/codex@0.138.0", | ||
| "@openai/codex-linux-x64": "npm:@openai/codex@0.138.0", | ||
| "@openai/codex-win32-arm64": "npm:@openai/codex@0.138.0", | ||
| "@openai/codex-win32-x64": "npm:@openai/codex@0.138.0" |
There was a problem hiding this comment.
The automated dependency update has incorrectly stripped the platform-specific suffixes (e.g., -darwin-arm64, -linux-x64) from the @openai/codex aliased packages.
By changing npm:@openai/codex@0.138.0-darwin-arm64 to npm:@openai/codex@0.138.0, these platform-specific packages now point to the generic wrapper package instead of their respective platform-specific binaries. This creates a circular dependency loop during package resolution (since the generic package optionally depends on these platform-specific packages) and will prevent the correct native binaries from being installed on each platform.
These updates should be reverted or ignored by Renovate.
| "@openai/codex-darwin-arm64": "npm:@openai/codex@0.138.0", | |
| "@openai/codex-darwin-x64": "npm:@openai/codex@0.138.0", | |
| "@openai/codex-linux-arm64": "npm:@openai/codex@0.138.0", | |
| "@openai/codex-linux-x64": "npm:@openai/codex@0.138.0", | |
| "@openai/codex-win32-arm64": "npm:@openai/codex@0.138.0", | |
| "@openai/codex-win32-x64": "npm:@openai/codex@0.138.0" | |
| "@openai/codex-darwin-arm64": "npm:@openai/codex@0.138.0-darwin-arm64", | |
| "@openai/codex-darwin-x64": "npm:@openai/codex@0.138.0-darwin-x64", | |
| "@openai/codex-linux-arm64": "npm:@openai/codex@0.138.0-linux-arm64", | |
| "@openai/codex-linux-x64": "npm:@openai/codex@0.138.0-linux-x64", | |
| "@openai/codex-win32-arm64": "npm:@openai/codex@0.138.0-win32-arm64", | |
| "@openai/codex-win32-x64": "npm:@openai/codex@0.138.0-win32-x64" |
![indent-zero[bot]](https://avatars.githubusercontent.com/in/1426746?s=60&v=4){kind=small}
| "@openai/codex-linux-x64": "npm:@openai/codex@0.138.0-linux-x64", | ||
| "@openai/codex-win32-arm64": "npm:@openai/codex@0.138.0-win32-arm64", | ||
| "@openai/codex-win32-x64": "npm:@openai/codex@0.138.0-win32-x64" | ||
| "@openai/codex-darwin-arm64": "npm:@openai/codex@0.138.0", |
There was a problem hiding this comment.
Platform suffix dropped — regresses #1890.
Each of these six aliases used to target a platform-specific publication of @openai/codex (e.g. npm:@openai/codex@0.138.0-darwin-arm64). Those versions exist on npm — 0.138.0-darwin-arm64, 0.138.0-darwin-x64, 0.138.0-linux-arm64, 0.138.0-linux-x64, 0.138.0-win32-arm64, 0.138.0-win32-x64 are all published — but Renovate read them as prereleases of 0.138.0 and "upgraded" everything to the bare meta package.
Downstream consequences:
home-manager/modules/npm-globals/install-npm-globals.sh:255-285filters these by the-${PLATFORM_OS}-${PLATFORM_CPU}suffix on the dep name (still matches) and then runsbun add --global "${dep}@${val}". On linux-x64 that now executesbun add --global @openai/codex-linux-x64@npm:@openai/codex@0.138.0— installing the meta wrapper, which has to re-resolve the platform binary through its ownoptionalDependencies. PR fix(npm-globals): install platform-native binaries for claude-code and codex #1890's commit message explicitly called out that this transitive-optional path is silently dropped underignoreScripts, which is why each alias was repointed at the platform tarball directly.bun.lockconfirms the shape change: every top-level@openai/codex-*entry has lost its{ "os": ..., "cpu": ... }constraint, and the lock gains ~80 new cartesian-product entries (@openai/codex-darwin-arm64/@openai/codex-darwin-x64, etc.) as bun materializes the meta package six times.
Suggested fix: restore the platform-suffixed alias targets (see git show 1614fa2 -- package.json for the prior shape) and add a packageRules entry in renovate.json that disables (or otherwise pins) updates for @openai/codex-{darwin,linux,win32}-{arm64,x64} so this doesn't recur next bump.
| "@openai/codex-darwin-arm64": "npm:@openai/codex@0.138.0", | |
| "@openai/codex-darwin-arm64": "npm:@openai/codex@0.138.0-darwin-arm64", | |
| "@openai/codex-darwin-x64": "npm:@openai/codex@0.138.0-darwin-x64", | |
| "@openai/codex-linux-arm64": "npm:@openai/codex@0.138.0-linux-arm64", | |
| "@openai/codex-linux-x64": "npm:@openai/codex@0.138.0-linux-x64", | |
| "@openai/codex-win32-arm64": "npm:@openai/codex@0.138.0-win32-arm64", | |
| "@openai/codex-win32-x64": "npm:@openai/codex@0.138.0-win32-x64" |
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
There was a problem hiding this comment.
1 issue found across 3 files
Prompt for AI agents (unresolved issues)
Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.
<file name="package.json">
<violation number="1" location="package.json:88">
P0: Platform-specific version suffixes have been incorrectly stripped from all six `@openai/codex` aliases. Each alias (e.g. `@openai/codex-darwin-arm64`) should resolve to the platform-specific publication (`npm:@openai/codex@0.138.0-darwin-arm64`), not the bare meta wrapper (`npm:@openai/codex@0.138.0`). The meta wrapper relies on `optionalDependencies` to pull the correct platform binary, but that transitive-optional path is silently dropped under `ignoreScripts` / global installs, meaning the correct native binaries will not be installed. The lockfile confirms the regression: each alias now resolves to the full meta package with all six `optionalDependencies` instead of the single platform tarball.
Restore the platform-suffixed targets and add a Renovate `packageRules` entry to prevent this pattern from recurring on future bumps.</violation>
</file>
Reply with feedback, questions, or to request a fix.
Re-trigger cubic
| "@openai/codex-linux-x64": "npm:@openai/codex@0.138.0-linux-x64", | ||
| "@openai/codex-win32-arm64": "npm:@openai/codex@0.138.0-win32-arm64", | ||
| "@openai/codex-win32-x64": "npm:@openai/codex@0.138.0-win32-x64" | ||
| "@openai/codex-darwin-arm64": "npm:@openai/codex@0.138.0", |
There was a problem hiding this comment.
P0: Platform-specific version suffixes have been incorrectly stripped from all six @openai/codex aliases. Each alias (e.g. @openai/codex-darwin-arm64) should resolve to the platform-specific publication (npm:@openai/codex@0.138.0-darwin-arm64), not the bare meta wrapper (npm:@openai/codex@0.138.0). The meta wrapper relies on optionalDependencies to pull the correct platform binary, but that transitive-optional path is silently dropped under ignoreScripts / global installs, meaning the correct native binaries will not be installed. The lockfile confirms the regression: each alias now resolves to the full meta package with all six optionalDependencies instead of the single platform tarball.
Restore the platform-suffixed targets and add a Renovate packageRules entry to prevent this pattern from recurring on future bumps.
Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At package.json, line 88:
<comment>Platform-specific version suffixes have been incorrectly stripped from all six `@openai/codex` aliases. Each alias (e.g. `@openai/codex-darwin-arm64`) should resolve to the platform-specific publication (`npm:@openai/codex@0.138.0-darwin-arm64`), not the bare meta wrapper (`npm:@openai/codex@0.138.0`). The meta wrapper relies on `optionalDependencies` to pull the correct platform binary, but that transitive-optional path is silently dropped under `ignoreScripts` / global installs, meaning the correct native binaries will not be installed. The lockfile confirms the regression: each alias now resolves to the full meta package with all six `optionalDependencies` instead of the single platform tarball.
Restore the platform-suffixed targets and add a Renovate `packageRules` entry to prevent this pattern from recurring on future bumps.</comment>
<file context>
@@ -85,12 +85,12 @@
- "@openai/codex-linux-x64": "npm:@openai/codex@0.138.0-linux-x64",
- "@openai/codex-win32-arm64": "npm:@openai/codex@0.138.0-win32-arm64",
- "@openai/codex-win32-x64": "npm:@openai/codex@0.138.0-win32-x64"
+ "@openai/codex-darwin-arm64": "npm:@openai/codex@0.138.0",
+ "@openai/codex-darwin-x64": "npm:@openai/codex@0.138.0",
+ "@openai/codex-linux-arm64": "npm:@openai/codex@0.138.0",
</file context>
2 participants
This PR contains the following updates:
0.138.0-darwin-arm64→0.138.00.138.0-darwin-x64→0.138.00.138.0-linux-arm64→0.138.00.138.0-linux-x64→0.138.00.138.0-win32-arm64→0.138.00.138.0-win32-x64→0.138.0>=2.14.0→>=2.14.1Release Notes
mistralai/mistral-vibe (mistral-vibe)
v2.14.1Compare Source
Added
/teleportslash command exposed over ACP, mirroring the TUI command for IDE integrationsFixed
/helpinstead of rejecting themsearch_replacename and now point toeditConfiguration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.
Summary by cubic
Consolidates all platform-specific
@openai/codex-*deps to@openai/codex@0.138.0for consistent installs across OSes, and bumpsmistral-vibeto>=2.14.1with ACP fixes and the new/teleportcommand.@openai/codex-*to@openai/codex@0.138.0inpackage.json; updated lockfile.mistral-vibe>=2.14.1(adds/teleport; fixes IDE auth prompt and command registration).Written for commit ab76436. Summary will update on new commits.