Skip to content

Conversation

@yonatangross
Copy link
Owner

Summary

Dependency Updates

Package From To
@types/node 22.19.3 25.0.3
vitest 2.1.9 4.0.16
@vitest/coverage-v8 2.1.9 4.0.16
eslint-config-prettier 9.1.2 10.1.8
lint-staged 15.5.2 16.2.7

Resolution

Kept the best (newest) versions from both branches:

  • Dev branch had newer: eslint, typescript, prettier, tsx
  • Main branch had newer: vitest 4.x, lint-staged 16.x, @types/node 25.x
  • Preserved @types/nunjucks from dev (not in main)

Test Plan

  • pnpm check passes (format, lint, typecheck)
  • CI passes

🤖 Generated with Claude Code

dependabot bot and others added 7 commits December 29, 2025 18:15
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 2 to 4.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@v2...v4)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the development-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.3` | `25.0.3` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `2.1.9` | `4.0.16` |
| [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) | `9.1.2` | `10.1.8` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `15.5.2` | `16.2.7` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `2.1.9` | `4.0.16` |


Updates `@types/node` from 22.19.3 to 25.0.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 2.1.9 to 4.0.16
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.16/packages/coverage-v8)

Updates `eslint-config-prettier` from 9.1.2 to 10.1.8
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-config-prettier/commits/v10.1.8)

Updates `lint-staged` from 15.5.2 to 16.2.7
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v15.5.2...v16.2.7)

Updates `vitest` from 2.1.9 to 4.0.16
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.16/packages/vitest)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 25.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.0.16
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: eslint-config-prettier
  dependency-version: 10.1.8
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: lint-staged
  dependency-version: 16.2.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 4.0.16
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Resolved merge conflicts, taking the best of both branches:
- @types/node: 22→25 (from main/dependabot)
- vitest: 2→4 (from main/dependabot)
- @vitest/coverage-v8: 2→4 (from main/dependabot)
- eslint-config-prettier: 9→10 (from main/dependabot)
- lint-staged: 15→16 (from main/dependabot)
- Keep @types/nunjucks from dev
- Keep newer eslint/typescript versions from dev
The SSE stream tests were failing because the response wasn't being
consumed. With Hono's streamSSE, the handler only executes when the
response is actually read. Fixed by adding 'await res.text()' before
asserting mock calls.

Fixes 3 failing tests:
- 'should use query parameters for stream'
- 'should use query parameters including maxSources'
- 'should coerce maxSources to number'
pnpm/action-setup@v4 now reads from packageManager field in package.json.
Specifying both 'version' in CI and 'packageManager' in package.json causes
a conflict error. Also updated Node.js to v22 to match engines requirement.
@yonatangross
Copy link
Owner Author

📋 PR Review Summary

Overview

This PR syncs dependency updates from main into dev. Review conducted with 4 parallel specialized agents.

Changes

Category Changes Status
Dependencies vitest 2→4, lint-staged 15→16, @types/node 22→25, eslint-config-prettier 9→10
CI Workflow GitHub Actions v4→v6, Node.js 20→22, pnpm version handling fixed
Test Fixes 3 SSE stream tests now consume response before assertions

Key Findings

Code Quality: Test fixes correctly address the root cause - Hono's streamSSE requires response consumption.

Security: No critical vulnerabilities. 1 moderate indirect vulnerability in esbuild (dev-only, tracked).

Tests: All 141 tests pass. No regressions.

CI Status

  • Code Quality: ✅ Pass (32s)
  • Tests: ✅ Pass (24s)
  • Build: ✅ Pass (26s)

Recommendation

Ready to merge

🤖 Reviewed with Claude Code

@yonatangross yonatangross merged commit 653cfb1 into dev Dec 29, 2025
3 checks passed
@yonatangross yonatangross deleted the feature/sync-main-deps branch December 29, 2025 16:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant