chore(deps): weekly CLI dependency update (2026-06-23)#1359
Merged
Conversation
Bump direct dependencies to the latest versions compatible with the supported Node floor (20.19.0): - @oclif/core 4.11.4 -> 4.11.7 - @oclif/plugin-help 6.2.50 -> 6.2.52 - axios 1.17.0 -> 1.18.0 - semver 7.8.4 -> 7.8.5 - uuid 14.0.0 -> 14.0.1 - @typescript-eslint/typescript-estree 8.61.0 -> 8.61.1 - typescript-eslint 8.61.0 -> 8.61.1 - @types/luxon 3.7.1 -> 3.7.2 - nanoid 5.1.11 -> 5.1.15 - oclif 4.23.14 -> 4.23.16 - @playwright/test 1.60.0 -> 1.61.0 Held back (newer major raises the Node floor above 20.19.0): - @commitlint/cli / @commitlint/config-conventional 20.5.3 (v21 needs Node >=22.12.0) - lint-staged 16.4.0 (v17 needs Node >=22.22.1) Intentionally excluded: - @types/node (kept aligned with minimum supported Node, not latest) - vitest (v4 blocked by known incompatibilities) Applied via lockfile-preserving install so the repo trustPolicy (no-downgrade) keeps transitive nanoid pinned at the trusted 3.3.12 rather than the untrusted 3.3.14. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…y e2e The @oclif/core 4.11.7 bump surfaces the same per-command PowerShell spawn in the create-checkly e2e harness that PR #1357 fixed for the checkly package. @oclif/core 4.11.5+ resolves the shell during Config.load() via getShell(), which on Windows runs determineWindowsShell() — an execSync of `powershell.exe -Command Get-CimInstance` on every command. getShell() short-circuits when SHELL is set. run-create-cli.ts spawns with extendEnv: false, so the child never inherits SHELL unless we pass it explicitly. Set it in the e2e env, mirroring the fix in packages/cli/e2e/run-checkly.ts. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Weekly dependency update. All direct deps bumped to the latest versions that remain compatible with our Node floor (
20.19.0); nothing raises the minimum supported Node version.Updated
@oclif/core@oclif/plugin-helpaxiossemveruuid@typescript-eslint/typescript-estreetypescript-eslint@types/luxonnanoidoclif@playwright/testHeld back (newer major drops our Node floor)
@commitlint/cli/@commitlint/config-conventional— stay at 20.5.3; v21 requires Node>=22.12.0.lint-staged— stays at 16.4.0; v17 requires Node>=22.22.1.Intentional exclusions
@types/node— kept aligned with our minimum supported Node, not latest.vitest— kept on 3.x; v4 blocked by known incompatibilities.Note on the lockfile
Applied via a lockfile-preserving install rather than
pnpm update --latest. The repo'strustPolicy: no-downgradecorrectly blocks a transitivenanoid@3.3.14(viavitest→vite→postcss) that lost trust evidence; the preserving install keeps it pinned at the trusted3.3.12.Other changes
@oclif/core4.11.7 bump surfaces the same per-command PowerShell spawn that test(e2e): fix slow Windows e2e (oclif PowerShell spawn) and add per-OS CI gates #1357 fixed for thechecklypackage (getShell() → determineWindowsShell() on Windows).run-create-cli.tsspawns withextendEnv: false, so it never inheritsSHELL; setSHELLexplicitly in its e2e env to short-circuit the spawn, mirroring the fix inpackages/cli/e2e/run-checkly.ts.Verification
engines.nodesatisfy the floor; no engine warnings on install🤖 Generated with Claude Code