Skip to content

deps: upgrade all dependencies to latest - #127

Merged
jongio merged 1 commit into
mainfrom
deps/upgrade-all
Jul 20, 2026
Merged

deps: upgrade all dependencies to latest#127
jongio merged 1 commit into
mainfrom
deps/upgrade-all

Conversation

@jongio

@jongio jongio commented Jul 20, 2026

Copy link
Copy Markdown
Owner

Summary

Aggregate dependency upgrade for jongio/azd-web-core.

  • Bump pnpm 11.9.0 to 11.11.0 (packageManager field; CI pnpm/action-setup reads this to select the pnpm version).

The lockfile is unchanged: every other direct dependency is already at its newest installable version.

Why 11.11.0 and not newer

pnpm 11.12.0 and 11.13.0 are marked broken on npm ("This release is broken. Please upgrade to v11.13.1 or newer") and their self-installer crashes in pnpm/action-setup during CI. 11.11.0 (published 2026-07-09) is the newest non-broken release that also clears the 7-day release-age cooldown. 11.13.1+ and 11.14.0 are still inside the cooldown window.

Held by the 7-day release-age cooldown

These newer releases were published within the last 7 days, so they were intentionally skipped:

Package Installed Newer (held) Published
astro 7.0.7 7.1.x 2026-07-16 and later
tailwindcss 4.3.2 4.3.3 2026-07-16
typescript-eslint 8.63.0 8.64.0 2026-07-13
eslint-plugin-astro 3.0.0 3.0.1 2026-07-15

TypeScript stays at 6.0.x: typescript-eslint caps its typescript peer at <6.1.0, so 7.0.2 is not installable.

Validation (local, pnpm 11.11.0)

  • pnpm install --frozen-lockfile: pass
  • pnpm lint (eslint): pass
  • pnpm check (astro check): pass, 0 errors, 0 warnings
  • pnpm typecheck (tsc --noEmit): pass
  • pnpm test (vitest): pass, 16 tests

Please do not merge from here: the dependency orchestrator monitors CI and merges centrally.

@jongio jongio added the deps Dependency updates label Jul 20, 2026
@jongio jongio self-assigned this Jul 20, 2026
Bump pnpm 11.9.0 to 11.11.0 (packageManager). Avoided 11.12.0 and
11.13.0, which npm marks as broken releases whose self-installer
crashes in CI ("Cannot use 'in' operator to search for 'integrity'").
11.11.0 is the newest non-broken release older than the 7-day cooldown
window. All other direct dependencies are already at their newest
installable versions; newer releases (astro 7.1.x, tailwindcss 4.3.3,
typescript-eslint 8.64.0, eslint-plugin-astro 3.0.1) fall within the
7-day release-age cooldown and were held. TypeScript held at 6.0.x
because typescript-eslint caps its typescript peer at <6.1.0.

Local validation green: install --frozen-lockfile, eslint, astro check,
tsc --noEmit, and vitest (16 tests) all pass on pnpm 11.11.0.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 432a6b03-48c5-46a1-9299-cf6938877d5b
@jongio
jongio force-pushed the deps/upgrade-all branch from 4d1e43f to d92ff49 Compare July 20, 2026 19:50
@jongio
jongio merged commit 4f13942 into main Jul 20, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

deps Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant