Skip to content

build(deps): bump every pinned dependency to its latest release - #52

Merged
robfeldmann merged 4 commits into
mainfrom
deps-bump
Oct 23, 2026
Merged

robfeldmann merged 4 commits into
mainfrom
deps-bump

Conversation

@robfeldmann

Copy link
Copy Markdown
Owner

Supersedes #16, #17, and #26 in one pass before the Phase 4 plan starts.

Dependency From To
swift-snapshot-testing (root + Examples) 1.18.9 1.19.3
resolved graph custom-dump 1.6.0, displaywidth 0.1.0, swift-syntax 602, swift-system 1.6.4, xctest-dynamic-overlay 1.9.0 1.7.3, 0.2.0, 604, 1.8.1, 1.13.1
prettier 3.9.5 3.9.10
actions/cache 4.3.0 6.1.0
actions/checkout 6 7.0.1
actions/deploy-pages 4 5.0.1
actions/upload-artifact 4 7.0.2
softprops/action-gh-release 2.6.2 3.0.3
SwiftyLab/setup-swift 1.14.0 1.14.2

The action majors are Node 24 runtime moves (hosted runners already have it). checkout 7 blocks fork-PR checkouts under pull_request_target; vouch-check-pr checks out the default branch, so it is unaffected. mise tools (SwiftLint, rumdl, hk, zig, tart, ...) were already at their latest releases.

Local: 663 tests on macOS (Xcode 26.6), 656 on Linux (Lima, Swift 6.3.3), Examples build, quality:lint and docs:lint clean. The spikes under spikes/ are frozen evidence and keep their resolved files.

swift-snapshot-testing 1.18.9 -> 1.19.3 (root and Examples; the resolved graph moves to swift-custom-dump 1.7.3, swift-displaywidth 0.2.0, swift-syntax 604.0.0, swift-system 1.8.1, xctest-dynamic-overlay 1.13.1), Prettier 3.9.5 -> 3.9.10, and the GitHub Actions pins: actions/cache 4.3.0 -> 6.1.0, actions/checkout 6 -> 7.0.1, actions/deploy-pages 4 -> 5.0.1, actions/upload-artifact 4 -> 7.0.2, softprops/action-gh-release 2.6.2 -> 3.0.3, SwiftyLab/setup-swift 1.14.0 -> 1.14.2. The majors are Node 24 runtime moves; checkout 7's pull_request_target restriction does not apply because vouch-check-pr checks out the default branch. Supersedes #16, #17, and #26.

663 tests pass on macOS (Xcode 26.6), 656 on Linux (Lima, 6.3.3); Examples build; lint and docs lint pass.
One grouped pull request per ecosystem (Swift, GitHub Actions, npm) instead of one per dependency, so bumps no longer queue behind the one-open-PR limit for a month at a time.
…ws wait parks

The cancelled-run test let its first consumer go before the reader thread
parked, so the cancellation could reach the thread before its next wait and
the run exited without parking, timing out waitUntilHeld on slow runners.
@robfeldmann
robfeldmann merged commit 8d59a15 into main Oct 23, 2026
11 checks passed
@robfeldmann
robfeldmann deleted the deps-bump branch October 23, 2026 02:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant