Skip to content

deps: upgrade all dependencies to latest#298

Merged
jongio merged 1 commit into
mainfrom
deps/upgrade-all
Jul 19, 2026
Merged

deps: upgrade all dependencies to latest#298
jongio merged 1 commit into
mainfrom
deps/upgrade-all

Conversation

@jongio

@jongio jongio commented Jul 19, 2026

Copy link
Copy Markdown
Owner

Summary

Autonomous dependency-upgrade pass across every ecosystem in the repo.

npm / pnpm: no actionable upgrades this cycle

Every direct dependency across the workspace (root plus sdk, cli, mcp, web, vscode) is already at its latest stable release. This repo runs a daily deps upgrade and #292 merged yesterday, so the tree was already current.

  • ncu --deep --registry https://registry.npmjs.org/ reports all 5 packages match latest.
  • pnpm 11.15.0 was published inside the 7-day release cooldown, so packageManager intentionally stays at 11.14.0.
  • Workspace overrides (form-data, hono, esbuild) already cover latest via their caret ranges.

GitHub Actions: Pages deploy actions bumped to newest generation

checkout, setup-node, upload-artifact, and pnpm/action-setup were already pinned to their latest SHAs. The Pages deploy actions were a few generations behind, so this PR moves them forward (SHA-pinned, verified against each release tag):

  • actions/configure-pages v5 -> v6.0.0
  • actions/upload-pages-artifact v3 -> v5.0.0
  • actions/deploy-pages v4.0.5 -> v5.0.0

Breaking-change review

The only breaking change in this set is that upload-pages-artifact v4+ excludes dotfiles from the uploaded artifact. Verified non-impacting for this deploy: the web public/ folder has no dotfiles (no .nojekyll), and vite's base: "./" emits assets/ paths, so no _* or .* files are dropped from the published site.

Validation

  • pnpm -r build green (all 5 packages)
  • pnpm -r typecheck green
  • pnpm lint (biome) clean, 425 files
  • pnpm -r test green: sdk 548, mcp 78, vscode 407, web 952 (web re-run with --no-file-parallelism to clear machine-load worker-startup flakiness)

Only .github/workflows/pages.yml changed; no package.json or lockfile changes.

npm/pnpm: no actionable upgrades this cycle. Every direct dependency
across the workspace (root + sdk, cli, mcp, web, vscode) is already at
its latest stable. pnpm 11.15.0 was published within the 7-day release
cooldown, so packageManager stays at 11.14.0.

GitHub Actions: upgrade the GitHub Pages deploy actions to their newest
generation (checkout/setup-node/upload-artifact/pnpm were already at
latest SHA pins):
- actions/configure-pages v5 -> v6.0.0
- actions/upload-pages-artifact v3 -> v5.0.0
- actions/deploy-pages v4.0.5 -> v5.0.0

The only breaking change in this set (upload-pages-artifact v4+ excludes
dotfiles from the uploaded artifact) does not affect this deploy: the web
public/ folder has no dotfiles and vite emits assets/ paths, so no _*
or .* files are dropped.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 38a45b86-1cd2-4bcd-bbaf-54bfa386fb05
@jongio jongio self-assigned this Jul 19, 2026
@jongio jongio added the deps Dependency updates label Jul 19, 2026
@jongio
jongio merged commit 17f30bd into main Jul 19, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

deps Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant