chore: update dependencies and lock files - #564
Conversation
📝 WalkthroughWalkthroughThis PR adds a Homebrew package ("kimi-cli") to the nix-darwin configuration and introduces two new npm dependencies ("@augmentcode/auggie" and "ralph-tui") to the project with corresponding trust declarations. Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing touches
🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
shunkakinoki
added
the
automerge
Summary of ChangesHello @shunkakinoki, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request primarily focuses on maintaining and updating the project's dependencies. It incorporates several new packages, refreshes the 'bun.lock' file to ensure consistency, and updates the 'nix-darwin' Homebrew configuration. These changes aim to improve the project's overall stability, security, and leverage the latest features from updated libraries. Highlights
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates dependencies by adding @augmentcode/auggie and ralph-tui to package.json, and kimi-cli to the Homebrew configuration in nix-darwin/config/homebrew.nix. The bun.lock file has been correctly regenerated to reflect these changes. All additions maintain the alphabetical sorting convention of the respective files. The changes are clear and well-executed. I have no further suggestions.
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 2
🤖 Fix all issues with AI agents
In @package.json:
- Line 36: The package "ralph-tui" listed under trustedDependencies is very new
and may pose maturity/stability risk; review whether it should remain there and
either (a) remove it from trustedDependencies and move to a less-trusted section
(dependencies/devDependencies/optionalDependencies) or (b) pin to an exact
vetted version and add a documented justification/approval note in the repo (or
add it to an explicit allowlist with the maintainer/review date), plus add an
entry to the security/audit checklist and lockfile updates to ensure
reproducible installs; update package.json (the trustedDependencies entry for
"ralph-tui") and accompanying docs to reflect the chosen mitigation.
📜 Review details
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
Disabled knowledge base sources:
- Linear integration is disabled by default for public repositories
You can enable these sources in your CodeRabbit configuration.
⛔ Files ignored due to path filters (1)
bun.lockis excluded by!**/*.lock
📒 Files selected for processing (2)
nix-darwin/config/homebrew.nixpackage.json
🧰 Additional context used
📓 Path-based instructions (6)
**/*.{js,ts,jsx,tsx,json}
📄 CodeRabbit inference engine (CLAUDE.md)
Use Biome with 2-space indentation, 80-character line width, double quotes, and trailing commas (ES5) for JSON/JavaScript/TypeScript files
Files:
package.json
**/*.{json,yaml,yml,toml}
📄 CodeRabbit inference engine (.cursor/rules/formatting.mdc)
**/*.{json,yaml,yml,toml}: Use consistent indentation (2 spaces) in configuration files
Sort keys alphabetically when possible in configuration files
Use clear, descriptive names in configuration files
Files:
package.json
**/*.{js,jsx,ts,tsx,json}
📄 CodeRabbit inference engine (.cursor/rules/formatting.mdc)
**/*.{js,jsx,ts,tsx,json}: Format JavaScript/TypeScript/JSON files using Biome with 2-space indentation and 80 character line width
Enable Biome linter with recommended rules for JavaScript/TypeScript/JSON files
Files:
package.json
**/*.{js,jsx,ts,tsx,json,jsonc,md}
📄 CodeRabbit inference engine (.cursor/rules/general.mdc)
Use Biome for code formatting as configured in biome.json
Files:
package.json
**/*.nix
📄 CodeRabbit inference engine (CLAUDE.md)
**/*.nix: Use nixfmt for formatting all Nix files
Document complex configurations with comments in Nix files
**/*.nix: Use 2 spaces for indentation in Nix files
Keep line length under 100 characters in Nix files
Sort attribute sets alphabetically in Nix files
Use consistent spacing around operators in Nix files
Format lists and sets consistently in Nix filesUse treefmt.toml for formatting Nix files
**/*.nix: UsemkOptionfor configurable options in Nix modules
Implement proper typing for all options in Nix modules
Follow the Nix expression language style guide
Files:
nix-darwin/config/homebrew.nix
nix-darwin/**/*.nix
📄 CodeRabbit inference engine (CLAUDE.md)
Use Homebrew only for macOS-specific applications
Files:
nix-darwin/config/homebrew.nix
🧠 Learnings (3)
📓 Common learnings
Learnt from: CR
Repo: shunkakinoki/dotfiles PR: 0
File: CLAUDE.md:0-0
Timestamp: 2025-11-25T09:34:23.224Z
Learning: Applies to nix-darwin/**/*.nix : Use Homebrew only for macOS-specific applications
📚 Learning: 2025-11-25T09:34:23.224Z
Learnt from: CR
Repo: shunkakinoki/dotfiles PR: 0
File: CLAUDE.md:0-0
Timestamp: 2025-11-25T09:34:23.224Z
Learning: Applies to nix-darwin/**/*.nix : Use Homebrew only for macOS-specific applications
Applied to files:
nix-darwin/config/homebrew.nix
📚 Learning: 2025-11-25T09:34:40.062Z
Learnt from: CR
Repo: shunkakinoki/dotfiles PR: 0
File: .cursor/rules/general.mdc:0-0
Timestamp: 2025-11-25T09:34:40.062Z
Learning: Document all major changes in Nix configurations
Applied to files:
nix-darwin/config/homebrew.nix
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (15)
- GitHub Check: Agent
- GitHub Check: cubic · AI code reviewer
- GitHub Check: shell-test
- GitHub Check: shell-lint
- GitHub Check: nix-nixos
- GitHub Check: lua-neovim
- GitHub Check: lua-hammerspoon
- GitHub Check: lua-neovim-test
- GitHub Check: nix-darwin
- GitHub Check: docker-build-push (linux/arm64, arm64, ubuntu-24.04-arm)
- GitHub Check: nix-linux
- GitHub Check: e2e-run (NixOS, ubuntu-latest)
- GitHub Check: docker-build-push (linux/amd64, amd64, ubuntu-latest)
- GitHub Check: e2e-run (MacOS, macos-latest)
- GitHub Check: e2e-run (Ubuntu, ubuntu-latest)
🔇 Additional comments (1)
package.json (1)
14-14: Remove@augmentcode/auggiefromtrustedDependencies.This package does not define any lifecycle scripts, so it should not be granted special permissions to execute code during installation. Packages should only be added to
trustedDependenciesif they genuinely require lifecycle scripts (likeralph-tui, which has aprepublishOnlyscript).Also applies to: 42-42
| "graphviz" | ||
| "helm" | ||
| "jjui" | ||
| "kimi-cli" |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
find . -name "homebrew.nix" -path "*/nix-darwin/*" -type fRepository: shunkakinoki/dotfiles
Length of output: 97
🏁 Script executed:
cat -n nix-darwin/config/homebrew.nix | head -50Repository: shunkakinoki/dotfiles
Length of output: 1373
🌐 Web query:
kimi-cli homebrew formula macOS package
💡 Result:
Yes — kimi-cli is available as a Homebrew formula. Install with:
brew install kimi-cli
Details / formula page: https://formulae.brew.sh/formula/kimi-cli [1]
Project / source: MoonshotAI/kimi-cli on GitHub. [2]
References:
[1] Homebrew formula page for kimi-cli.
[2] kimi-cli repository and official docs.
🏁 Script executed:
rg "kimi" --type nixRepository: shunkakinoki/dotfiles
Length of output: 112
🌐 Web query:
kimi-cli nixpkgs nix package
💡 Result:
Short answer: kimi-cli is not available in nixpkgs (no nixpkgs package found). The project is distributed on GitHub and PyPI, and Homebrew provides a formula — so install via pip/uv or Homebrew instead.
Evidence and install options:
- Source repo: MoonshotAI/kimi-cli on GitHub. [1]
- PyPI release (kimi-cli, v0.76 uploaded Jan 12, 2026) — install with pip or uv. Example: pip install kimi-cli or uv tool install --python 3.13 kimi-cli. [2]
- Homebrew formula (brew install kimi-cli) is available for macOS/Linux. [3]
- For confirming package presence in nixpkgs, use nix search / search.nixos.org (no matching attribute was found in my checks). See Nix search docs. [4]
If you want, I can:
- show the exact nix search command to run on your machine and interpret the result, or
- create a minimal Nix expression (flake or pythonPackages.override) that installs kimi-cli from PyPI. Which do you prefer?
Sources:
[1] GitHub: MoonshotAI/kimi-cli.
[2] PyPI: kimi-cli.
[3] Homebrew formula: kimi-cli.
[4] Nix search documentation / searching packages.
kimi-cli is cross-platform; consider installing via PyPI instead.
Alphabetical ordering is correct. However, kimi-cli is not macOS-specific—it's a cross-platform tool available on PyPI and distributed via GitHub and Homebrew. The guideline states "Use Homebrew only for macOS-specific applications." Consider installing it via uv tool install kimi-cli or another package manager instead.
Note: Several other non-macOS-specific packages are also in the brews list, so this guideline may benefit from clarification.
| "open-composer": "^0.8.23", | ||
| "oxfmt": "^0.24.0", | ||
| "oxlint": "^1.39.0", | ||
| "ralph-tui": "^0.1.1", |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Check if ralph-tui exists on npm and get package info
curl -s "https://registry.npmjs.org/ralph-tui" | jq '{name: .name, description: .description, latest: .["dist-tags"].latest, maintainers: [.maintainers[].name], created: .time.created, modified: .time.modified, homepage: .homepage, repository: .repository}'Repository: shunkakinoki/dotfiles
Length of output: 446
Consider the maturity risk of ralph-tui in trustedDependencies.
The package is legitimate with an active GitHub repository, but it's extremely new (created 2026-01-12, modified 2026-01-13) at version 0.1.1 with a single maintainer. Adding such an early-stage dependency to trustedDependencies carries stability risk. Ensure this aligns with your project's dependency maturity requirements.
🤖 Prompt for AI Agents
In @package.json at line 36, The package "ralph-tui" listed under
trustedDependencies is very new and may pose maturity/stability risk; review
whether it should remain there and either (a) remove it from trustedDependencies
and move to a less-trusted section
(dependencies/devDependencies/optionalDependencies) or (b) pin to an exact
vetted version and add a documented justification/approval note in the repo (or
add it to an explicit allowlist with the maintainer/review date), plus add an
entry to the security/audit checklist and lockfile updates to ensure
reproducible installs; update package.json (the trustedDependencies entry for
"ralph-tui") and accompanying docs to reflect the chosen mitigation.
There was a problem hiding this comment.
Pull request overview
This PR adds two new npm packages and one Homebrew formula to the dotfiles configuration. The changes aim to enhance the development environment with new AI-powered coding tools.
Changes:
- Added
@augmentcode/auggie(v0.13.0) andralph-tui(v0.1.1) as new npm dependencies - Added
kimi-clito the Homebrew packages list - Updated bun.lock with new package entries and transitive dependencies
Reviewed changes
Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| package.json | Added two new dependencies (@augmentcode/auggie and ralph-tui) to both dependencies and trustedDependencies arrays |
| nix-darwin/config/homebrew.nix | Added kimi-cli to the Homebrew brews list in alphabetical order |
| bun.lock | Updated lock file with new package entries and their transitive dependencies, but missing ralph-tui in trustedDependencies array |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
Changes
Technical Details
Testing
Generated with Claude Code by Claude 3.5
Summary by cubic
Updates dependencies and regenerates lock files to keep the toolchain current and stable. Adds Auggie and ralph-tui to the workspace, and includes kimi-cli in nix-darwin Homebrew apps.
Written for commit a792672. Summary will update on new commits.