Skip to content

fix(deps): update all non-major dependencies (minor) - #811

Closed
shunkakinoki wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Closed

fix(deps): update all non-major dependencies (minor)#811
shunkakinoki wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@shunkakinoki

@shunkakinoki shunkakinoki commented Feb 15, 2026

Copy link
Copy Markdown
Owner

This PR contains the following updates:

Package Change Age Confidence
@kaitranntt/ccs ^7.43.0^7.45.0 age confidence
ralph-tui ^0.7.1^0.8.0 age confidence

Release Notes

kaitranntt/ccs (@​kaitranntt/ccs)

v7.45.0

Compare Source

Features
  • cursor-ui: restore Cursor dashboard UX and icon assets (7ab7a15), closes #​555
  • cursor: sync model mapping across config and raw settings (7b73658), closes #​555
Bug Fixes
  • cursor-settings: remove sync fs calls in settings sync (4f086aa)
  • cursor-ui: label cursor dashboard as beta (b40fe86)
  • cursor-ui: restore info card order and list scrolling (decdffe)

v7.44.0

Compare Source

Features
  • cliproxy: add CLI edit command for composite variants (43e73f3)
  • cliproxy: add composite variant CLI wizard (4926c20), closes #​506
  • cliproxy: add composite variant runtime execution (44b30b8), closes #​506
  • cliproxy: add composite variant type definitions (3d207fa), closes #​506
  • cliproxy: add dashboard CRUD for composite variants (1ebd9f4)
  • cliproxy: add explicit start and restart commands (8395364)
  • cliproxy: add per-tier thinking config for composite variants (ed22c1a)
  • cliproxy: add provider error detection for composite fallback (478e9e8)
  • cliproxy: clarify codex effort mapping and preset UX (945db1d)
  • cliproxy: extend composite schema with fallback and thinking fields (20d6079), closes #​506
  • cliproxy: implement composite variant CRUD and settings (c58fdc9), closes #​506
  • cliproxy: wire composite variant into main execution flow (07bef9f), closes #​506
  • codex: add gpt-5.3 preset defaults (7fddb63)
  • codex: keep gpt-5.2 catalog entry (d6aa1d9)
  • cursor: add auth module with SQLite auto-detect and types (56270d9), closes #​519 #​517
  • cursor: add config integration and dashboard routes (93dafa0)
  • cursor: add core protobuf encoder/decoder and executor (9daf943)
  • cursor: add daemon lifecycle, models catalog, and CLI commands (aaa31c6), closes #​520 #​521 #​522
  • cursor: complete daemon wiring and add dedicated dashboard page (be9d7cf)
  • cursor: namespace FIELD constants and implement true streaming SSE (#​531, #​535) (4e5b502)
Bug Fixes
  • analytics: stabilize responsive row alignment (0cc1f11)
  • cli: add kiro auth-method flag wiring and help (e425f47), closes #​552 #​233
  • cliproxy: add circular fallback and empty model validation in API (ef77607)
  • cliproxy: add defensive null checks for composite tier config (0c7dc39)
  • cliproxy: add session check on delete and atomic settings writes (7486897)
  • cliproxy: address 3 code review issues in composite variants (399d7e1)
  • cliproxy: address 3 functional regressions in composite variants (61f46e7)
  • cliproxy: address 4 functional regressions in composite variants (27d22e8)
  • cliproxy: address code review feedback (attempt 1/5) (854b198)
  • cliproxy: address code review feedback (attempt 2/5) (ac574e0)
  • cliproxy: address code review feedback (attempt 3/5) (6cfbdd6)
  • cliproxy: address code review feedback (attempt 4/5) (4c002ca)
  • cliproxy: address lifecycle port and thinking regressions (f02e7dc)
  • cliproxy: align kiro auth methods with upstream contracts (fd46ad0), closes #​552 #​233
  • cliproxy: fix edit dialog empty model and composite guidance (8e6b67b)
  • cliproxy: fix thinking off regression and composite error handling (e914fe9)
  • cliproxy: harden composite validation and runtime safeguards (1a23f91)
  • cliproxy: harden composite variant routing and validation (0a8adb2)
  • cliproxy: harden kiro device-code auth flow consistency (826a42d)
  • cliproxy: improve multi-provider auth with continue-on-error pattern (6ff17d8)
  • cliproxy: keep daemon running after parent exit (3136f24)
  • cliproxy: keep variant updates atomic and persisted (7bb9ceb)
  • cliproxy: mark Kiro as device_code flow for dashboard auth (6c20839), closes #​552
  • cliproxy: resolve merge-duplicate lifecycle handlers (9268c05)
  • cliproxy: restore POST tier validation and guard null payloads (a99180f)
  • cliproxy: strip thinking suffix in detectFailedTier matching (efd3f21)
  • cliproxy: unify codex reasoning flags and thinking flow (f9df3cf)
  • codex: align quota display to 5h and weekly windows (f8af5a8)
  • codex: infer code review cadence from reset window (1d2ee82)
  • codex: preserve sonnet high alias on variant model updates (3410c52)
  • codex: preserve xhigh default effort for gpt-5.3 (164d195)
  • codex: reduce quota timeout flakes in dashboard (b3d9dce)
  • codex: stabilize code review window labeling (40512fe)
  • codex: type cast provider in model update path (41d9978)
  • commands: await async command validation (b98335c)
  • config: serialize cursor section in generateYamlWithComments (4b7de69)
  • cursor: add enabled field to tests, simplify cursor routing (f9834c8)
  • cursor: add input validation on dashboard settings routes (1bebf16)
  • cursor: add resolve guard, port validation, and daemon tests (7d4e6d6)
  • cursor: add response body handling and size limit (36f0308)
  • cursor: add subcommand parity comment and raw settings TODO (4ca4a9d)
  • cursor: address CI gate and review regressions (0e55db8)
  • cursor: address code review edge cases in protobuf and executor (cc5a903)
  • cursor: address code review feedback (attempt 1/5) (31f5741)
  • cursor: address code review feedback on auth module (7e4f080)
  • cursor: address fourth-round review feedback for protobuf module (c5e8241)
  • cursor: address PR #​527 review feedback (9f0ea25)
  • cursor: address PR #​528 review feedback (d58e988)
  • cursor: address remaining LOW review items in protobuf module (f3d532a)
  • cursor: address remaining PR #​527 review feedback (afb5e74)
  • cursor: address remaining PR #​528 review feedback (b8aaa58)
  • cursor: address remaining review items in auth module (b412ba2), closes #​526
  • cursor: address second-round review feedback for auth module (84a256d)
  • cursor: address second-round review feedback for protobuf module (e177a4b), closes #​531 #​531
  • cursor: address third-round review feedback for auth module (a8a68c9)
  • cursor: address third-round review feedback for protobuf module (66a93ee), closes #​535
  • cursor: align daemon routes, add enabled field, handle bare command (6af7186)
  • cursor: clean up PID file on startDaemon failure and improve daemon robustness (cda037e)
  • cursor: clean up settings validation and route consistency (1e4cae3)
  • cursor: close ReadableStream controller on abort to prevent consumer hangs (36a67c4)
  • cursor: export missing symbols, eliminate subcommand sync risk, improve tests (9342387)
  • cursor: fix router fall-through, add daemon marker, use random test port (bfc9361)
  • cursor: fix test isolation and daemon exit handling (fe97d72)
  • cursor: guard raw-settings save race and enforce daemon preconditions (9a76f86)
  • cursor: harden auth security and add token expiry warning (aeb5802)
  • cursor: harden stopDaemon PID validation, tighten regex, add lifecycle test (760a5c3)
  • cursor: kill orphaned daemon on timeout and fix exit codes (88ad13e)
  • cursor: pass all args to handler, use getCursorConfig in routes (d7e0d1c)
  • cursor: save credentials after auto-detect and fix signal hang (9f9db7d)
  • cursor: show auto-detect error message, add subcommand sync comment (887efa4)
  • cursor: split daemon helpers to satisfy maintainability gate (08a3e0b)
  • cursor: tighten rate limit detection string matching (79ba1de)
  • cursor: use getCursorConfig(), fix help text and stub messages (2ba826b)
  • cursor: use process.execPath and add safeResolve to model fetcher (9478967)
  • cursor: use stdio ignore, sequential polling, move CursorConfig to types (ce19153)
  • cursor: validate fetch status before streaming fallback and register abort early (27badb2)
  • cursor: validate request body on settings endpoints (f5a912b)
  • format: align image analysis check with pinned prettier (ae83be1)
  • hardening: count executable sync fs call sites (d21b5c4)
  • hardening: handle regex literals after else/do (65a1d8a)
  • hardening: handle regex literals in sync-call scanner (bb9d846)
  • hardening: ignore literal text in sync-call metrics (8193e9d)
  • maintainability: enforce gate and correct loc metric (2610971)
  • maintainability: harden tracked scan and baseline checks (33e9a88)
  • maintainability: require git-tracked scan for gate (b7481cf)
  • maintainability: scan tracked src files for stable gate (8f0ba48)
  • test: avoid global ui mock leakage in shell completion tests (851f870)
  • ui: add method-aware kiro auth flow parity (6a21f39), closes #​552 #​233
  • ui: add trim validation for composite tier model fields (b6e1d0c)
  • ui: fix TypeScript error in composite edit dialog tier mapping (240dfe2)
  • ui: use default tier provider instead of hardcoded 'gemini' (f3618c5)
  • ui: use type-only import for KiroAuthMethod (e3f0860)
  • web-server: make kiro auth routes method-aware (577991c), closes #​552 #​233
Documentation
Code Refactoring
  • cliproxy: centralize provider capability registry (924e368)
  • commands: add command contract and migrate shell completion (fc4b77b)
Tests
  • cliproxy: add composite variant v2 unit tests (e0ae5f2)
  • cliproxy: add regression coverage for update consistency (7dd4ce5)
  • cliproxy: add thinking suffix test and document exit 0 behavior (c35de7e)
  • cliproxy: stabilize path-sensitive CI test assertions (c9faf6c)
  • cliproxy: stabilize thinking override assertion (d28fb2c)
  • use getCcsDir() instead of os.homedir() for test isolation (ca7bb23)
subsy/ralph-tui (ralph-tui)

v0.8.0

Compare Source

What's Changed

New Contributors

Full Changelog: subsy/ralph-tui@v0.7.1...v0.8.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.


Summary by cubic

Update dependencies to improve stability and add new capabilities: @kaitranntt/ccs to ^7.45.0 and ralph-tui to ^0.8.0.

  • Dependencies
    • @kaitranntt/ccs ^7.45.0: Cursor dashboard fixes, model mapping sync, SSE streaming improvements, and auth hardening.
    • ralph-tui ^0.8.0: AI conflict resolution for parallel runs, image attachments in create-prd, and OOM safeguards.

Written for commit f7bbaa9. Summary will update on new commits.

Copilot AI review requested due to automatic review settings February 15, 2026 03:54
@shunkakinoki
shunkakinoki enabled auto-merge (squash) February 15, 2026 03:54
@mesa-dot-dev

mesa-dot-dev Bot commented Feb 15, 2026

Copy link
Copy Markdown

You do not have enough credits to review this pull request. Please purchase more credits to continue.

@gemini-code-assist

Copy link
Copy Markdown
Contributor

Summary of Changes

Hello @shunkakinoki, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request focuses on keeping the project's dependencies up-to-date by updating @kaitranntt/ccs and ralph-tui to their latest minor versions. These updates bring a significant number of new features, performance improvements, and bug fixes from the upstream projects, ensuring the application benefits from the most recent advancements and maintains stability.

Highlights

  • Dependency Updates: Updated @kaitranntt/ccs from ^7.43.0 to ^7.45.0, incorporating new features related to composite variants, cursor daemon, and numerous bug fixes.
  • Dependency Updates: Upgraded ralph-tui from ^0.7.1 to ^0.8.0, introducing AI conflict resolution, image attachment support, and a GitHub Copilot agent plugin, along with several critical bug fixes.
Changelog
  • @kaitranntt/ccs
    • Introduced comprehensive support for composite variants, including CLI commands, dashboard management (CRUD), and enhanced runtime execution.
    • Developed a new cursor daemon with robust lifecycle management, an authentication module, and efficient protobuf encoding/decoding.
    • Restored and improved Cursor dashboard user experience, icons, and settings synchronization.
    • Implemented numerous bug fixes across various modules, addressing issues in CLI, proxy, codex, and cursor functionalities, improving stability and error handling.
    • Enhanced maintainability through code refactoring and updated documentation, particularly for authentication methods.
  • ralph-tui
    • Added AI conflict resolution for parallel execution and image attachment support for create-prd.
    • Integrated a GitHub Copilot agent plugin.
    • Resolved several issues including out-of-memory errors by capping output buffers, filtering tombstoned issues, and improving agent detection and error handling.
Activity
  • This pull request was automatically generated by Renovate Bot to update non-major dependencies.
  • Automerge is enabled, and the PR is configured to automatically rebase and retry if it falls behind the base branch.
  • The PR is set to be recreated if closed unmerged, ensuring continuous dependency updates.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@mesa-dot-dev

mesa-dot-dev Bot commented Feb 15, 2026

Copy link
Copy Markdown

Mesa Description

TL;DR

Updated @kaitranntt/ccs from ^7.43.0 to ^7.45.0 and ralph-tui from ^0.7.1 to ^0.8.0.

What changed?

@kaitranntt/ccs (from ^7.43.0 to ^7.45.0)

  • Features:
    • Restored Cursor dashboard UX and icon assets.
    • Synced model mapping across config and raw settings for Cursor.
    • Added CLI edit command, wizard, and runtime execution for composite variants in cliproxy.
    • Implemented composite variant CRUD and settings in cliproxy.
    • Added gpt-5.3 preset defaults for Codex.
    • Introduced auth module with SQLite auto-detect and types for Cursor.
    • Added daemon lifecycle, models catalog, and CLI commands for Cursor.
    • Completed daemon wiring and added a dedicated dashboard page for Cursor.
  • Bug Fixes:
    • Removed sync fs calls in Cursor settings sync.
    • Restored info card order and list scrolling in Cursor UI.
    • Addressed various functional regressions and code review feedback related to composite variants and daemon lifecycle in cliproxy and cursor.
    • Fixed quota display alignment and code review window labeling in Codex.
    • Hardened auth security and added token expiry warning in Cursor.
    • Stabilized responsive row alignment for analytics.
    • Multiple fixes related to daemon robustness, error handling, and test isolation.
  • Refactoring:
    • Centralized provider capability registry in cliproxy.
    • Migrated shell completion and added command contracts.
  • Tests:
    • Added composite variant v2 unit tests and regression coverage.
    • Stabilized path-sensitive CI test assertions.
    • Used getCcsDir() for better test isolation.

ralph-tui (from ^0.7.1 to ^0.8.0)

  • Features:
    • Wired up AI conflict resolution for parallel execution.
    • Added image attachment support for create-prd.
    • Added GitHub Copilot agent plugin.
  • Bug Fixes:
    • Capped output buffers to prevent out-of-memory issues.
    • Filtered tombstoned issues from beads-rust tracker.
    • Resolved explicit command paths during agent detection.
    • Handled parallel disk space fallback and exposed startup failures.
    • Fixed custom agents missing in settings.

Description generated by Mesa. Update settings

@coderabbitai

coderabbitai Bot commented Feb 15, 2026

Copy link
Copy Markdown
📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Updated dependencies to their latest stable versions for improved stability and performance.

Walkthrough

Two package dependencies were updated in package.json: @kaitranntt/ccs from ^7.43.0 to ^7.45.0 and ralph-tui from ^0.7.1 to ^0.8.0. No public API changes or functional modifications detected.

Changes

Cohort / File(s) Summary
Dependency Updates
package.json
Updated @kaitranntt/ccs to ^7.45.0 and ralph-tui to ^0.8.0 for minor version increments.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

Suggested labels

dependencies, automerge

Poem

🐰 Hop, hop, dependencies grow,
Ralph and Ccs steal the show,
Versions bumped with gentle care,
Fresh packages in the air!

🚥 Pre-merge checks | ✅ 4
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and specifically describes the main change: updating non-major dependencies to minor versions.
Description check ✅ Passed The description is well-detailed and directly related to the changeset, providing release notes, changelog information, and dependency update details.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Merge Conflict Detection ✅ Passed ✅ No merge conflicts detected when merging into main

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch renovate/all-minor-patch

No actionable comments were generated in the recent review. 🎉


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This PR updates two non-major dependencies. The update for @kaitranntt/ccs seems safe. However, the update for ralph-tui is from 0.7.1 to 0.8.0. Since this package is pre-1.0.0, minor versions can contain breaking changes according to SemVer. Given your automerge strategy for minor updates, I've suggested pinning this dependency to the specific version to avoid potential future breakages. Please see the detailed comment.

Comment thread package.json
"oxfmt": "^0.32.0",
"oxlint": "^1.47.0",
"ralph-tui": "^0.7.1",
"ralph-tui": "^0.8.0",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

While this is a minor version bump, ralph-tui is still in 0.x versioning. According to SemVer, versions below 1.0.0 can introduce breaking changes even in minor releases. Given that minor updates are automerged in this repository, it might be safer to handle 0.x dependencies with more caution. Consider pinning the version to avoid unexpected breaking changes from future minor releases within the 0.8.x range.

Suggested change
"ralph-tui": "^0.8.0",
"ralph-tui": "0.8.0",
References
  1. Semantic Versioning (SemVer) specification states that for major version zero (0.y.z), the public API is not considered stable and breaking changes can be introduced in minor releases. It is a good practice to pin such dependencies to a specific version or use tilde (~) to only allow patch updates, especially when automerging.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates two npm dependencies to their latest minor versions as part of automated dependency maintenance by Renovate Bot.

Changes:

  • Updated @kaitranntt/ccs from ^7.43.0 to ^7.45.0 (includes cursor integration improvements, composite variant features, and numerous bug fixes)
  • Updated ralph-tui from ^0.7.1 to ^0.8.0 (adds AI conflict resolution, image attachment support, and fixes OOM issues)

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Updates version constraints for @kaitranntt/ccs (^7.45.0) and ralph-tui (^0.8.0)
bun.lock Updates lockfile entries with new versions and checksums for both dependencies

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

auto-merge was automatically disabled February 15, 2026 12:52

Pull request was closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants