Skip to content

repo: transitive dependency update skill#10132

Open
jaskfla wants to merge 1 commit into
mainfrom
dep-bump-skill
Open

repo: transitive dependency update skill#10132
jaskfla wants to merge 1 commit into
mainfrom
dep-bump-skill

Conversation

@jaskfla

@jaskfla jaskfla commented Jun 24, 2026

Copy link
Copy Markdown
Contributor

Changes

Add a brief description of the changes in this PR to help give the reviewer context.

Auto-Deploy

  • Deploy
Options
  • Artillery load test
  • Seed from closest snapshot
  • Generate fake data
  • More data (20Gi)
  • No facility servers (central-only)
  • No sync (facility tasks scaled to zero)
  • AMD64 architecture (default is arm64)
  • Skip mobile build
  • Always build mobile
  • Stay up for 8 hours
  • Stay up for 24 hours
  • Stay up (no TTL)
  • Build images only (don't deploy)
  • Pause this deploy

Tests

  • Run E2E tests
  • Run DAST scan

Review Hero

  • Run Review Hero
  • Auto-fix review suggestions Wait for Review Hero to finish, resolve any comments you disagree with or want to fix manually, then check this to auto-fix the rest.
  • Auto-fix CI failures Check this to auto-fix lint errors, test failures, and other CI issues.
  • Auto-merge upstream Check this to merge the base branch into this PR, with AI conflict resolution if needed.
  • Save suppressions Check this to capture 👎 reactions on Review Hero comments as suppression rules in .github/review-hero/suppressions.yml. Also runs automatically at the end of any auto-fix run.

Remember to...

  • ...write or update tests
  • ...add UI screenshots and testing notes to the Linear issue
  • ...add any manual upgrade steps to the Linear issue
  • ...update the config reference, settings reference, or any relevant runbook(s)
  • ...call out additions or changes to config files for the deployment team to take note of

@review-hero

review-hero Bot commented Jun 24, 2026

Copy link
Copy Markdown

🦸 Review Hero Summary
3 agents reviewed this PR | 0 critical | 0 suggestions | 0 nitpicks | Filtering: consensus 3 voters

No issues found. Looks good!

Comment on lines +135 to +150
### Tamanu (this repo)

Root manifest uses **npm workspaces** and `package-lock.json`. Common commands:

| Scope | Example |
| --------------- | ------------------------------------------------------------------------------ |
| Full build | `npm run build` |
| Full test suite | `npm run test` |
| Lint | `npm run lint-all` |
| Single package | `npm run facility-test`, `npm run central-test`, `npm run web-unit-test`, etc. |
| Turbo filter | `turbo build --filter=@tamanu/facility-server...` |

Existing root `overrides` pin shared versions (React, MUI, axios, etc.). Prefer manifest bumps that
make an override unnecessary; do not add new overrides without the security exception above.

PR/commits: use `deps` scope if the repo allows, otherwise try `chore(deps)`, then fall back to asking the user. For example, ‘deps: bump `concurrently` 9.2.3 → 10.0.3’.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Flagging for myself to amend this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants