chore(deps): batch 7 safe dependabot bumps#45
Merged
Conversation
Land minor/patch updates from open Dependabot PRs (#37, #39, #40, #41, #42, #43, #44); regenerate the lockfile in one pass to avoid the per-PR lockfile conflicts a sequential cherry-pick would cause. Bumps: - @commitlint/cli + config-conventional 21.0.1 -> 21.0.2 - lint-staged 17.0.5 -> 17.0.7 - lucide-react 1.16.0 -> 1.17.0 - react-router-dom 7.15.1 -> 7.16.0 - @vitest/coverage-v8 + vitest 4.1.7 -> 4.1.8 Hold back incompatible majors for separate evaluation: - electron 42 (MSVC/better-sqlite3 ABI break, pinned to 41) - vite 8 + @vitejs/plugin-react 6 (electron-vite on Vite 7) - eslint 10 (flat-config migration risk) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Batches the safe minor/patch updates from the open Dependabot PRs into one branch, regenerating
package-lock.jsonin a single pass. This avoids the lockfile conflicts that sequential per-PR cherry-picks would cause. Same approach as #34.Dependabot auto-closes the superseded PRs once this merges.
Bumped (7 safe)
Held back — incompatible majors (NOT in this PR)
__builtin_frame_address(node 22 cppgc/heap.h); no better-sqlite3 Electron-42 prebuild. Pinned to 41 per CLAUDE.md.Verification
Full local gate green (mirrors the CI matrix):
lint --max-warnings 0✅typecheck(node + web) ✅test— 95 passed ✅build✅test:e2e— 6 passed ✅🤖 Generated with Claude Code