Skip to content

chore(deps): refresh 8 safe minor/patch deps#250

Merged
theagenticguy merged 1 commit into
mainfrom
chore/deps-refresh-2026-06-23
Jun 24, 2026
Merged

chore(deps): refresh 8 safe minor/patch deps#250
theagenticguy merged 1 commit into
mainfrom
chore/deps-refresh-2026-06-23

Conversation

@theagenticguy

Copy link
Copy Markdown
Owner

Summary

Nightly maintenance dependency refresh. Bumps the 8 minor/patch updates that are independent of the held-back astro 6→7 major. All version-range styles preserved (exact stays exact, caret stays caret).

Dep From → To Bump Packages
@aws-sdk/client-bedrock-runtime 3.1073.0 → 3.1075.0 minor cli, ingestion, summarizer, wiki
@aws-sdk/client-sagemaker-runtime 3.1073.0 → 3.1075.0 minor cli, embedder
@commitlint/cli 21.0.2 → 21.1.0 minor root
@commitlint/config-conventional 21.0.2 → 21.1.0 minor root
@chonkiejs/core 0.0.10 → 0.0.11 patch cli, pack
@biomejs/biome 2.5.0 → 2.5.1 patch root (+ biome.json $schema synced)
playwright 1.61.0 → 1.61.1 patch docs
sharp 0.35.1 → 0.35.2 patch docs

Held back (deliberately)

  • @astrojs/starlight 0.40 → 0.41 — declares peerDependencies: astro@^7.0.2 and pulls @astrojs/mdx@^7.0.0, which crashes the @opencodehub/docs build against astro@6.4.8 (rollup findVariable error in mdx's dist/server.js). starlight is coupled to the astro major. The astro 6→7 upgrade is itself gated by the devalue (GHSA-77vg-94rm-hx3p) and esbuild (GHSA-g7r4-m6w7-qqqr) override pins in pnpm-workspace.yaml. Bump these together when astro 7 is unblocked.
  • @types/node 25 → 26 — major; deferred.

Verification

Ran locally on the branch — all green:

  • pnpm -r build (including @opencodehub/docs astro build)
  • tsc --noEmit via the CI lane (--filter '!@opencodehub/docs', matching ci.yml and the pre-push hook)
  • biome check . (clean, no info after $schema sync)
  • scripts/check-banned-strings.sh
  • pnpm -r test — 17 packages, 0 failures (~1,721 tests; platform-lane tests skipped as designed)

Pre-commit (pnpm-lock-sync, biome, banned-strings, commitlint) and pre-push (verdict, typecheck, test) hooks passed.

🤖 Generated during OpenCodeHub nightly maintenance.

Nightly maintenance dep refresh. Bumps the minor/patch updates that are
independent of the held-back astro 6->7 major:

- @aws-sdk/client-bedrock-runtime 3.1073.0 -> 3.1075.0 (cli, ingestion, summarizer, wiki)
- @aws-sdk/client-sagemaker-runtime 3.1073.0 -> 3.1075.0 (cli, embedder)
- @commitlint/cli 21.0.2 -> 21.1.0
- @commitlint/config-conventional 21.0.2 -> 21.1.0
- @chonkiejs/core 0.0.10 -> 0.0.11 (cli, pack)
- @biomejs/biome 2.5.0 -> 2.5.1 (+ biome.json $schema sync)
- playwright 1.61.0 -> 1.61.1 (docs)
- sharp 0.35.1 -> 0.35.2 (docs)

Held back (coupled to the astro 6->7 major, itself pinned by the
devalue/esbuild security overrides):
- @astrojs/starlight 0.40 -> 0.41 (peerDeps astro@^7, pulls @astrojs/mdx@7
  which crashes the docs build against astro 6)
- @types/node 25 -> 26 (major)

Verified: build (incl. docs), typecheck (docs-excluded CI lane), biome
lint, banned-strings, and full test suite (17 packages, 0 failures) all pass.
@theagenticguy theagenticguy enabled auto-merge (squash) June 24, 2026 03:40
@theagenticguy theagenticguy merged commit 56eacef into main Jun 24, 2026
38 checks passed
@theagenticguy theagenticguy deleted the chore/deps-refresh-2026-06-23 branch June 24, 2026 03:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant