Skip to content

chore(deps): update compatible stable dependencies and security fixes - #272

Merged
Pepps233 merged 5 commits into
mainfrom
chore/deps-stable-minor
Oct 25, 2026
Merged

Pepps233 merged 5 commits into
mainfrom
chore/deps-stable-minor

Conversation

@Pepps233

@Pepps233 Pepps233 commented Oct 25, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Update compatible stable dependencies and patch the Vitest 4.x toolchain while retaining Node 22.19.0 support.

Reasoning

Latest Vitest 5 conflicts with vitest-evals (>=4 <5), so use patched Vitest/coverage 4.1.12. Keep hosted-git-info 9.0.3 because its latest major raises the Node minimum. Dependency relocation exposed distribution code that assumed every external dependency was hoisted.

Changes

  • Update AWS/Smithy, OpenTelemetry, TypeBox, terminal/Markdown utilities, WebSocket packages, and other compatible minor/patch pins.
  • Refresh vulnerable Vite/source-map-js transitives and synchronize generated distribution locks.
  • Resolve distribution dependencies from originating workspaces, relocate them to published node_modules paths, and validate exact versions and nested graphs.
  • Read vendored Marked's tracked license instead of an unrelated installed copy.
  • Update Mermaid tests for grok-mermaid's newly supported class annotations; retain malformed-source fallback coverage.
  • Document compatibility exceptions, Undici 8.12.3 behavior review, install tooling, and isolated test commands.
  • Run standard CI for all pull-request base branches so stacked PRs receive full build/test coverage; add workflow regression tests.

Testing

  • npm run check passed.
  • ./test.sh passed (isolated non-E2E suite).
  • node --test scripts/distribution-lock-resolution.test.mjs scripts/prepare-distribution.test.mjs passed (8 tests).
  • Targeted Mermaid tests passed.
  • node --test scripts/ci-workflow.test.mjs passed (2 tests).
  • Clean external-only distribution-lock npm ci --ignore-scripts in a temporary directory passed.

@Pepps233 Pepps233 added the dependencies Pull requests that update a dependency file label Oct 25, 2026
@Pepps233 Pepps233 self-assigned this Oct 25, 2026
Comment thread scripts/distribution-lock-resolution.test.mjs Fixed
@Pepps233
Pepps233 added this pull request to stack #277 October 25, 2026 18:55
@Pepps233
Pepps233 merged commit fdd7413 into main Oct 25, 2026
21 checks passed
Pepps233 added a commit that referenced this pull request Oct 25, 2026
* chore(ai): migrate provider SDKs to latest stable versions

* chore(docs): document provider SDK migration behavior

* chore(deps): update compatible stable dependencies and security fixes (#272)

* chore(packaging): resolve workspace-local distribution dependencies

* chore(deps): update compatible stable dependencies and security fixes

* chore(ci): run standard checks for stacked pull requests

* chore(ci): keep distribution test fixtures out of generated code

* chore(ci): make lifecycle registry fault checks connection-safe
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants