chore(deps): bump the all-dependencies group across 1 directory with 8 updates - #382
Open
dependabot[bot] wants to merge 1 commit into
Open
chore(deps): bump the all-dependencies group across 1 directory with 8 updates#382dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
✅ Deploy Preview for openworkflow-editor canceled.
|
Copilot started reviewing on behalf of
open-workflow-specification
September 3, 2026 07:22
View session
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
The lockfile is inconsistent (missing lint-staged in catalogs and not using catalog: in the root importer) and the lint-staged bump introduces a stricter Node engine requirement than the repo’s declared Node engine range.
Once you've addressed the issues Copilot identified, you can request another Copilot review.
Pull request overview
This PR updates the workspace dependency catalog (and corresponding pnpm lockfile) to newer patch/minor versions across testing, tooling, and UI libraries.
Changes:
- Bump 8 dependencies in
pnpm-workspace.yamlcatalog (e.g.,@testing-library/react,@types/node,js-yaml,lint-staged,oxlint/oxfmt,lucide-react,@xyflow/react). - Regenerate
pnpm-lock.yamlto reflect the updated resolutions and transitive changes.
File summaries
| File | Description |
|---|---|
| pnpm-workspace.yaml | Updates the workspace catalog versions for the dependency group bump. |
| pnpm-lock.yaml | Updates resolved versions/metadata to match the bumped catalog dependencies. |
Review details
Files not reviewed (1)
- pnpm-lock.yaml: Generated file
Suppressed comments (1)
pnpm-lock.yaml:169
- The root importer entry for
lint-stageduses a concrete version specifier (17.4.1) instead ofcatalog:. Sincepackage.jsondeclareslint-staged: "catalog:", this should stay asspecifier: 'catalog:'to keep the lock consistent with the workspace catalog and avoid dropping the catalog entry.
- Files reviewed: 1/2 changed files
- Comments generated: 2
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| lint-staged: | ||
| specifier: ^17.3.0 | ||
| version: 17.3.0 | ||
| lucide-react: |
Comment on lines
+3360
to
3363
| lint-staged@17.4.1: | ||
| resolution: {integrity: sha512-FmJeudcalbSfg1du+JCfvi5vS6Qt08KgbfLWiHinbef+2JJwUZwAWVoaO1AcJVUTWPfk0t30PMQNwPAeCzYQ+Q==} | ||
| engines: {node: '>=22.22.1'} | ||
| hasBin: true |
…8 updates Bumps the all-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.4.0` | | [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.3` | `12.11.5` | | [js-yaml](https://github.com/nodeca/js-yaml) | `5.3.0` | `5.4.1` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.3.0` | `17.4.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.33.0` | `1.38.0` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.64.0` | `0.65.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.77.0` | `1.80.0` | Updates `@testing-library/react` from 16.3.2 to 16.3.3 - [Release notes](https://github.com/testing-library/react-testing-library/releases) - [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md) - [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3) Updates `@types/node` from 26.2.0 to 26.4.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@xyflow/react` from 12.11.3 to 12.11.5 - [Release notes](https://github.com/xyflow/xyflow/releases) - [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.11.5/packages/react) Updates `js-yaml` from 5.3.0 to 5.4.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@5.3.0...5.4.1) Updates `lint-staged` from 17.3.0 to 17.4.1 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.3.0...v17.4.1) Updates `lucide-react` from 1.33.0 to 1.38.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.38.0/packages/lucide-react) Updates `oxfmt` from 0.64.0 to 0.65.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.65.0/npm/oxfmt) Updates `oxlint` from 1.77.0 to 1.80.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.80.0/npm/oxlint) --- updated-dependencies: - dependency-name: "@testing-library/react" dependency-version: 16.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: "@types/node" dependency-version: 26.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@xyflow/react" dependency-version: 12.11.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: js-yaml dependency-version: 5.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: lint-staged dependency-version: 17.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: lucide-react dependency-version: 1.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: oxfmt dependency-version: 0.65.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: oxlint dependency-version: 1.80.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/all-dependencies-41ba2036ea
branch
from
September 3, 2026 10:59
fd8fe5a to
fdfc7c3
Compare
Copilot started reviewing on behalf of
open-workflow-specification
September 3, 2026 11:10
View session
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
The lockfile has a catalog/specifier inconsistency (missing lint-staged catalog entry and non-catalog: specifier) that is likely to break frozen-lockfile installs/CI.
Once you've addressed the issues Copilot identified, you can request another Copilot review.
Review details
Files not reviewed (1)
- pnpm-lock.yaml: Generated file
Suppressed comments (2)
pnpm-lock.yaml:107
lint-stagedis missing from thecatalogs.defaultsection even though it is referenced elsewhere in the lockfile; this can cause pnpm catalog resolution / frozen-lockfile checks to fail. Add thelint-stagedcatalog entry back (or regenerate the lockfile viapnpm install) so the catalog matchespnpm-workspace.yaml.
pnpm-lock.yaml:172- In
importers["."].devDependencies,lint-stagedhasspecifier: 17.4.1, but the rootpackage.jsonuses"lint-staged": "catalog:"(and the rest of the lockfile usesspecifier: 'catalog:'for catalog-managed deps). This mismatch is likely to breakpnpm install --frozen-lockfilein CI; update the specifier to'catalog:'(or regenerate the lockfile).
- Files reviewed: 1/2 changed files
- Comments generated: 1
- Review effort level: Lite
| oxfmt: ^0.64.0 | ||
| oxlint: ^1.77.0 | ||
| lucide-react: ^1.38.0 | ||
| lint-staged: ^17.4.1 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the all-dependencies group with 8 updates in the / directory:
16.3.216.3.326.2.026.4.012.11.312.11.55.3.05.4.117.3.017.4.11.33.01.38.00.64.00.65.01.77.01.80.0Updates
@testing-library/reactfrom 16.3.2 to 16.3.3Release notes
Sourced from @testing-library/react's releases.
Commits
20ce75ffix: Avoid act() re-entrant when dispatching events (#1468)be9d81ddocs: fix typos in comments and types (#1446)Updates
@types/nodefrom 26.2.0 to 26.4.0Commits
Updates
@xyflow/reactfrom 12.11.3 to 12.11.5Release notes
Sourced from @xyflow/react's releases.
Changelog
Sourced from @xyflow/react's changelog.
Commits
8f0a5d6chore(packages): bump286816cchore(packages): bump3319ef4fix(react): keep minimap bounds at the viewport when all nodes are hiddenb7186f3fix(react): minimap still works after reactflow remounts #5971d8edc77Merge pull request #5955 from Jian-Zhang08/fix/minimap-onnodeclick-conditiona...59b1a60Simplify node click handling in MiniMap component25869f2chore(system): add attr warning handlerb04e9d1chore(system): rename utils isDomNodeVisible31535efchore(system): add isDomNodeVisiblebce7475chore(proOptions): add commentsUpdates
js-yamlfrom 5.3.0 to 5.4.1Changelog
Sourced from js-yaml's changelog.
Commits
e5a3ba05.4.1 releasede54dea3Hard-limit merge sequence size to 100dfd3a29Cleanup 6a8e05f, #7976a8e05ffix: count empty merge sources against maxTotalMergeKeys (#797)6b4ff5e5.4.0 released3b3625eUpdate changelog4f25a74Fix file name3bd003bExpose new scalar styling APIfbb3e9dRemove regex lookbehind for ES2015 compatibilityd43c185FixflowSkipColonSpaceby forcingquoteFlowKeysUpdates
lint-stagedfrom 17.3.0 to 17.4.1Release notes
Sourced from lint-staged's releases.
Changelog
Sourced from lint-staged's changelog.
Commits
d0c1517Merge pull request #1841 from lint-staged/changeset-release/mainf061335chore(changeset): released2721afMerge pull request #1840 from lint-staged/updatesefe5b63ci: update Changesets action because it failed to publishcd76ce3build: update dependenciesea195e1Merge pull request #1837 from lint-staged/changeset-release/maina6a0d61chore(changeset): release0a09098Merge pull request #1832 from lint-staged/add-all-flag7fd685bfix: further fix parsing options logic510a27cfeat: add--allflag for including all files tracked by Git instead of just...Updates
lucide-reactfrom 1.33.0 to 1.38.0Release notes
Sourced from lucide-react's releases.
... (truncated)
Commits
Updates
oxfmtfrom 0.64.0 to 0.65.0Changelog
Sourced from oxfmt's changelog.
Commits
97e99b8release(apps): oxlint v1.80.0 && oxfmt v0.65.0 (#26045)Updates
oxlintfrom 1.77.0 to 1.80.0Release notes
Sourced from oxlint's releases.
... (truncated)
Changelog
Sourced from oxlint's changelog.
Commits
97e99b8release(apps): oxlint v1.80.0 && oxfmt v0.65.0 (#26045)0db127crelease(apps): oxlint v1.79.0 && oxfmt v0.64.0 (#25866)228e8e0fix(linter): resolve inactive React compiler rules (#25830)aa49d86fix(linter): allow spread rule options in config types (#25675)8922381refactor(linter): remove inactive react config rule (#25740)8c4552dfeat(linter)!: split react/react-compiler into per-category rules (#25500)36f8451fix(linter/eslint/no-eval): align indirect default with ESLint (#25656)beb724dfix(linter/eslint/no-unused-vars): report bare underscore parameters (#25663)4004c10fix(linter/eslint/no-irregular-whitespace): check comments by default (#25660)285820efix(linter/no-large-snapshots): precompile and document allowed snapshot matc...