Skip to content

sync: traer a develop el triaje de Dependabot (#719, #722, #723) - #736

Merged
beyondnetPeru merged 9 commits into
developfrom
main
Sep 19, 2026
Merged

beyondnetPeru merged 9 commits into
developfrom
main

Conversation

@beyondnetPeru

Copy link
Copy Markdown
Contributor

Back-merge maindevelop tras el triaje de los 5 PRs de Dependabot del 2026-09-19. Sin esto, la próxima promoción developmain reviviría uuid en mcp-server, devolvería el exporter OTel a 0.219 (con sus ~1100 líneas de duplicados en el lock) y, sobre todo, volvería a llevar a main la evidencia de madurez caducada que tenía Validate documentation en rojo.

Qué trae:

git merge-tree develop main: sin conflictos.

🤖 Generated with Claude Code

dependabot Bot and others added 8 commits September 16, 2026 17:04
Bumps [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) from 0.219.0 to 0.222.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.219.0...experimental/v0.222.0)

---
updated-dependencies:
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.222.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…entelemetry/exporter-trace-otlp-http-0.222.0

chore(deps): bump @opentelemetry/exporter-trace-otlp-http from 0.219.0 to 0.222.0
… @nestjs/*

Triaje de PRs abiertos (2026-09-19):

- `uuid` y `@types/uuid` estaban declarados en `src/packages/mcp-server`
  sin un solo import en todo `src/`. Dependabot proponía subirlos tres
  majors (#718); lo correcto es quitarlos.
- NestJS 12 es ESM-only y hay que migrarlo en bloque; los bumps por
  paquete (#720 core, #721 platform-express) rompían jest en los 5
  workspaces. Se ignoran los majors de `@nestjs/*` hasta que la
  migración se haga a mano.
- De paso npm normaliza en el lock el rango de
  `@opentelemetry/exporter-trace-otlp-http` de mcp-server y cli a la
  versión fija que declaran sus package.json (Dependabot escribió `^`).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
…ged out again

The four entries were taken together on 2026-08-18 and all four crossed the 0..30 day
window of `09-reconcile-maturity.mjs` on 2026-09-18, so `Validate documentation` went
red on #722 and #723 -- two Dependabot-adjacent PRs whose content has nothing to do with
it. As last time, the window is the point: each entry is a fresh observation of the same
claim against a real green run, not a date bump.

- cli-baseline: run 35435224907 on main (99b5325), all THIRTEEN CLI CI jobs green, CI
  Gate included.
- coverage: same run, Unit Tests -- 107 suites / 1492 tests, Statements 87.22%, Lines
  87.54%, Functions 84.79%, Branches 75.73% (2382/3145) against the unchanged jest
  thresholds (80/80/75/75) and the workflow statement gate (80). All three totals grew
  since 2026-08-18 (106 / 1486 / 2376/3139).
- documentation: run 35125943994 on 3d0662c (head of #719, merged into main as
  99b5325 with no other change), both jobs green. It cites a run from 2026-09-16 on
  purpose: after the window closed, every later run of this workflow is red AT the
  reconcile step because of the window itself, so the last green run before it closed
  is the only honest observation of this claim until this refresh lands.
- release: run 35435224976 on main (99b5325), green through package-binaries and
  smoke-test on all three platforms plus smoke-test-functional; publish/upload skipped
  because it is not a `cli-v*` tag.

`maturity-reconciliation.json` is regenerated from the evidence (it embeds `readiness`);
`asOf` stays at 2026-09-05 because the gap board did not move, so the executive summary
is unchanged (`generate-executive-summary.mjs --check` passes).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
…nest-major-ignore

chore(deps): quitar uuid muerto, no proponer majors de @nestjs/* y re-observar la evidencia de madurez
Bumps [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) from 1.5.1 to 1.8.1.
- [Release notes](https://github.com/bombshell-dev/clack/releases)
- [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md)
- [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.8.1/packages/prompts)

---
updated-dependencies:
- dependency-name: "@clack/prompts"
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
main moved under the promotion: #723 (uuid pruned from mcp-server, @nestjs/* majors
ignored in dependabot.yml) landed on main directly and carried a THIRD refresh of the
same aged-out maturity evidence (20706cd). Conflict on the two evidence files only;
develop's refresh (2ee3f9a, already on this branch) is kept — every commit it cites is
reachable once main is merged in — and 09-reconcile-maturity --check plus guard 46 pass
on the result. #723's own changes come through untouched.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
…ack/prompts-1.8.1

chore(deps): bump @clack/prompts from 1.5.1 to 1.8.1
@beyondnetPeru
beyondnetPeru requested a review from a team as a code owner September 19, 2026 11:15
@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@github-actions

Copy link
Copy Markdown
Contributor

📊 Bilingual Coverage Impact

PR Changes

  • Paired EN/ES files modified: 0
  • New EN files needing ES translation: 0

Repository Coverage

Metric Value
Total EN files 527
Total ES files 497
Paired files 0
Coverage 0%

Good: All EN changes have ES counterparts.


Generated by GitHub Actions

@beyondnetPeru
beyondnetPeru merged commit bda7091 into develop Sep 19, 2026
106 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant