Skip to content

chore: refresh bun dependencies - #1109

Merged
hdkshingala merged 3 commits into
mainfrom
chore/update-dependencies-2026-08-11
Aug 11, 2026
Merged

hdkshingala merged 3 commits into
mainfrom
chore/update-dependencies-2026-08-11

Conversation

@hdkshingala

Copy link
Copy Markdown
Member

Summary

  • refresh compatible Bun catalog dependencies and regenerate the lockfile
  • update protocol runtime dependencies to @noble/curves 2.3 and yjs 13.6.32
  • adapt router load detection to the current TanStack Router state shape

Still held

  • Electron 43, Nx 23, ESLint 10, TypeScript 7, jsdom 30, motion 13, and undici 8 remain deliberate major-version holds
  • exact Sentry, Radix, Pierre, Legend, and related compatibility pins remain unchanged

Verification

  • bun install
  • bun outdated --recursive --no-progress (remaining deltas reviewed as deliberate holds)
  • pre-commit affected build, compile, lint, and format pipeline
  • bun run react-doctor (existing repository-wide diagnostics remain; the changed provider was not flagged)

Signed-off-by: Hardik Shingala <hardik@traycer.ai>
@coderabbitai

coderabbitai Bot commented Aug 11, 2026 •

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository UI (base), Organization UI (inherited)

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: f83b2703-9fbf-4a71-96ec-b1627dfc7fc4

📥 Commits

Reviewing files that changed from the base of the PR and between 06f90ac and c88aaed.

⛔ Files ignored due to path filters (1)
  • bun.lock is excluded by !**/*.lock
📒 Files selected for processing (1)
  • package.json

Summary by CodeRabbit

  • Bug Fixes

    • Improved navigation loading detection so the interface more accurately reflects pending route changes.
    • Reduced the chance of stale or inconsistent loading states during navigation.
  • Chores

    • Updated underlying application, protocol, and development tooling packages for improved compatibility, stability, and maintenance.

Walkthrough

The change updates router load detection in the history prune provider and refreshes dependency versions in the root and protocol manifests.

Changes

Router load detection

Layer / File(s) Summary
Router load state detection
clients/gui-app/src/providers/history-prune-provider.tsx
The helper now checks state.isLoading or pending status and no longer checks state.isTransitioning.

Dependency version refresh

Layer / File(s) Summary
Manifest dependency versions
package.json, protocol/package.json
The manifests update catalog and runtime dependency version ranges, including TanStack, Electron, Vite, Yjs, and @noble/curves.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

Suggested reviewers: anur4ag

Poem

A rabbit checks the router’s state,
Pending paths now guide the gate.
Fresh packages hop in line,
Yjs and curves now update fine.
The history trail stays neat.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly summarizes the primary dependency refresh and is concise.
Description check ✅ Passed The description accurately covers the dependency updates, router change, held versions, and verification steps.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/update-dependencies-2026-08-11

Comment @coderabbitai help to get the list of available commands.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 06f90ac37f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread clients/gui-app/src/providers/history-prune-provider.tsx
Comment thread package.json
coderabbitai[bot]
coderabbitai Bot previously approved these changes Aug 11, 2026
Signed-off-by: Hardik Shingala <hardik@traycer.ai>
…cies-2026-08-11

Signed-off-by: Hardik Shingala <hardik@traycer.ai>
@hdkshingala
hdkshingala merged commit 7a839b4 into main Aug 11, 2026
30 of 31 checks passed
@hdkshingala
hdkshingala deleted the chore/update-dependencies-2026-08-11 branch August 11, 2026 08:05
hdkshingala added a commit that referenced this pull request Aug 11, 2026
…ackend

Signed-off-by: Hardik Shingala <hardik@traycer.ai>
pranshugupta54 added a commit that referenced this pull request Aug 12, 2026
… hold TanStack router at pre-refresh pins (#1136)

## What

Two commits, one failure mode: fresh mobile installs of the Capacitor
app booted to a permanently blank screen.

1. **Guard (`bindAuthInvalidation`)** — on cold launch, the auth status
flips (stored tokens validating) while the router's initial load is
still uncommitted. On router-core ≥1.171.16, `invalidate()` in that
window retires the in-flight load and nothing reschedules it: `status:
"pending"`, zero committed matches, forever — no error anywhere. The
binding now detects the uncommitted window via `resolvedLocation`
(`matches` is not a commit signal — slow loads publish provisional
pending matches after `defaultPendingMs`) and routes the auth change
through `router.load()` first, invalidating once it settles; recoveries
are coalesced to one per window since `load()` aborts its predecessor
transaction. Behavior on the held router version is unchanged (recheck
lands a few ms later).
2. **Version hold** — the bump that exposed this (#1109: react-router
1.170.18→.25, router-core 1.171.15→.21) crosses router-core's
lane-scheduler rewrite, which is still churning upstream (1.171.22
shipped another ~1600-line pass over the same area yesterday). Held back
to the last field-proven set: `react-router@1.170.18` (exact; pins core
1.171.15 exactly) + `router-plugin@1.168.23` (exact; newer plugin
requires `^1.170.25` and splits the resolution into two router-core
copies). The `history-prune-provider` adaptation from #1109 is restored
to match. The guard stays regardless — it makes the pattern safe on any
version, including future re-bumps.

## Verification

- 10 unit tests + 1 integration test mounting a real `RouterProvider`
against the pinned library (slow uncommitted first load past `pendingMs`
→ real auth flip → converges; fails without the guard).
- iOS simulator, Release staging build, cold launches: pre-fix mostly
blank; post-fix **12/12 render** across three install modes —
upgrade-in-place, reinstall with surviving Keychain tokens (the exact
reported death mode: auto-sign-in mid-boot), and never-signed-in.
- Adversarial review by a GPT-5.6-Sol agent: two findings in the first
pass (false commit signal via `matches`; un-coalesced recovery fan-out)
— both fixed and re-verified; final pass clean on auth flows, redirect
loops, deep links, desktop multi-window, and hydration paths.

## Notes

- Root-caused end-to-end in the simulator (fiber-probe of the stuck
router; manual `load()` revived it).
- The mobile-app branch carries the same guard commit; it will converge
on sync after this merges.

Cc @hdkshingala

---------

Signed-off-by: Pranshu Gupta <76090263+pranshugupta54@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant