Skip to content

chore(deps-dev): combined dependabot bumps (#67-#69, #71-#73) - #76

Merged
marknolan merged 1 commit into
mainfrom
dependabot-combined-2026-07-29
Jul 29, 2026
Merged

chore(deps-dev): combined dependabot bumps (#67-#69, #71-#73)#76
marknolan merged 1 commit into
mainfrom
dependabot-combined-2026-07-29

Conversation

@marknolan

Copy link
Copy Markdown
Member

Combines the open dependabot dev-dependency PRs into one verified update, same approach as #55:

Excluded: typescript 6.0.3 -> 7.0.2 (#62) — hard peer-dependency conflict: @typescript-eslint 8.65.0 requires typescript >=4.8.4 <6.1.0. Revisit when typescript-eslint supports TS 7.

Why the individual dependabot PRs are red: they are based on a main commit that predates the lint fix in 186b8b4 (generateInfoMem unused-import). The bumps themselves are fine; this branch is off current main.

Verified locally: npm run build clean, npm run lint clean, 541/541 tests pass.

🤖 Generated with Claude Code

- globals 17.7.0 -> 17.8.0
- rollup 4.62.2 -> 4.62.3
- eslint 10.6.0 -> 10.8.0
- prettier 3.9.4 -> 3.9.6
- @typescript-eslint/parser 8.63.0 -> 8.65.0
- @typescript-eslint/eslint-plugin 8.63.0 -> 8.65.0

typescript 6 -> 7 (#62) excluded: @typescript-eslint 8.65.0 peer range
is typescript >=4.8.4 <6.1.0, so TS 7 cannot be adopted yet.

Verified locally: build clean, lint clean, 541/541 tests pass.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR consolidates several pending Dependabot dev-dependency updates into a single branch, keeping the toolchain current while avoiding the known TypeScript 7 peer-dependency conflict with @typescript-eslint.

Changes:

  • Bump dev toolchain packages: eslint 10.6.0→10.8.0, prettier 3.9.4→3.9.6, rollup 4.62.2→4.62.3, globals 17.7.0→17.8.0, @typescript-eslint/* 8.63.0→8.65.0.
  • Regenerate package-lock.json to reflect the updated resolved versions (including transitive updates pulled in by ESLint/Rollup).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Updates the declared devDependency version ranges for the combined Dependabot bumps.
package-lock.json Updates resolved versions and integrity hashes to match the new devDependency set.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@marknolan
marknolan merged commit bd72c83 into main Jul 29, 2026
3 checks passed
@marknolan
marknolan deleted the dependabot-combined-2026-07-29 branch July 29, 2026 18:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants