chore(deps): consolidate pending dependency updates - #2984
Open
fahreddinozcan wants to merge 9 commits into
Open
chore(deps): consolidate pending dependency updates#2984fahreddinozcan wants to merge 9 commits into
fahreddinozcan wants to merge 9 commits into
Conversation
…pes/node, pi-coding-agent)
This repo has no bun lockfile and installs with pnpm. The bun ecosystem updated package.json without touching pnpm-lock.yaml, so every PR it opened failed CI on `pnpm install --frozen-lockfile`. The npm ecosystem already covers the pnpm workspace and updates both files.
This was referenced Aug 2, 2026
…orkarounds Review follow-ups on the TypeScript 6 migration: - Extract tsconfig.bundler.json for the profile sdk, tools-ai-sdk and pi each duplicated. Hoisting "types": ["node"] into it also fixes a latent break: only sdk had it, so tools-ai-sdk would have failed its dts build the first time it referenced console in src/. - Document why "ignoreDeprecations" is needed. tsup hardcodes `baseUrl: compilerOptions.baseUrl || "."` into its dts worker after spreading user options, so no config can override it. The flag is a blanket suppression, so the base config deliberately omits it and pi (which has no build) keeps typechecking it undeceived. - Centralize the shared dev toolchain in a pnpm catalog. @types/node had drifted to three different floors across six manifests.
…dts worker The deprecated baseUrl only exists inside tsup's dts build, so pass ignoreDeprecations through dts.compilerOptions there instead of blanket- suppressing deprecations in the tsconfigs the honest typecheck uses. Verified: dist output byte-identical, and removing the suppression still reproduces TS5101. Claude-Session: https://claude.ai/code/session_01J52VdzVuzuU9KXaeNb1viD
enesgules
approved these changes
Aug 7, 2026
enesgules
changed the title
This was referenced Sep 9, 2026
This was referenced Sep 9, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Combine the pending Dependabot updates in this pull request. The branch includes current
masteratec97797and preserves the earlier August dependency work.orajosetypescript-eslint, parser, and plugin^8.68.0, locked to 8.69.0figletopen@inquirer/corechangesets/actioneslint@changesets/cli@earendil-works/pi-coding-agentThe earlier updates remain included: TypeScript 6.0.3, the shared development dependency catalog, shared bundler configuration,
@types/node,@inquirer/type, Vitest, TypeBox, andactions/setup-nodev7. TypeScript stays at 6.0.3 because the installed lint toolchain supports versions below 6.1.0.Changesets v2 needs new workflow inputs and outputs. The release workflow now uses
publish-script,commit-message,pr-title, andpublished-packages. It uses the action's default GitHub token. Test and release jobs use Node 22 to support Changesets CLI v3. The existing npm authentication step remains in place. See the action v2 release notes and CLI v3 release notes.The Bun Dependabot entry is removed. This repository uses pnpm and has no Bun lockfile. pnpm regenerated the lockfile and kept the repository's seven-day release delay. Patch changesets cover the CLI and MCP runtime dependencies.
Validation on Node 22.23.2 and pnpm 10.34.5:
ctx7and@upstash/context7-mcp.catalog:references.git diff --checkpasses.CI passes on commit
1649f95: Test run. The existing approval is for the previous commitca94042.The following 11 pull requests are closed, each with a link to this combined pull request: #3126, #3125, #3124, #3123, #3122, #3121, #3120, #3119, #3118, #3117, #3116.
Earlier combined pull requests: #2981, #2980, #2979, #2978, #2977, #2976, #2975, #2974, #2973, #2972.