Skip to content

chore(deps): consolidate Dependabot dependency upgrades#354

Merged
jonaslagoni merged 2 commits intomainfrom
chore/upgrade-all-dependencies-2026-04-07
Apr 7, 2026
Merged

chore(deps): consolidate Dependabot dependency upgrades#354
jonaslagoni merged 2 commits intomainfrom
chore/upgrade-all-dependencies-2026-04-07

Conversation

@jonaslagoni
Copy link
Copy Markdown
Contributor

@jonaslagoni jonaslagoni commented Apr 7, 2026

Summary

Consolidates 5 open Dependabot PRs into a single upgrade with all compatibility fixes applied.

Upgraded Dependencies

Package From To Type
@oclif/plugin-autocomplete 3.0.16 3.2.45 minor
@typescript-eslint/eslint-plugin 6.7.5 8.58.0 major
@typescript-eslint/parser 6.7.5 8.58.0 major
eslint-plugin-jest 27.2.1 29.15.1 major
eslint-plugin-unused-imports 3.0.0 4.4.1 major
eslint-plugin-security 1.7.1 4.0.0 major
zod-to-json-schema 3.23.0 3.25.2 minor

Skipped Upgrades

Package From To Reason
zod 3.25.76 4.3.6 Public API exports zod schemas that consumers depend on - upgrading would require a major version bump of this CLI

Code Fixes Applied

  • Updated ESLint config to use security/recommended-legacy for ESLint 8 compatibility
  • Updated eslint-disable comments for @typescript-eslint v8 rule renames:
    • @typescript-eslint/ban-types@typescript-eslint/no-unsafe-function-type
    • @typescript-eslint/no-var-requires@typescript-eslint/no-require-imports

Validation

  • Build passes
  • Lint passes
  • All 443 tests pass
  • Runtime TypeScript generation works

Test plan

  • Verify CI passes
  • Review dependency changes for any concerns
  • Manual testing of CLI commands

Closes #349
Closes #350
Closes #351
Closes #352

🤖 Generated with Claude Code


Note

Medium Risk
Primarily dependency/tooling upgrades (not runtime logic), but several major-version ESLint ecosystem bumps could change lint/test behavior and require Node/peer-version alignment.

Overview
Consolidates several dependency upgrades, notably major bumps to @typescript-eslint/*, eslint-plugin-jest, eslint-plugin-security, and eslint-plugin-unused-imports, plus minor updates like @oclif/plugin-autocomplete and zod-to-json-schema (with corresponding package-lock.json churn).

Updates lint configuration for compatibility by switching plugin:security/recommended to plugin:security/recommended-legacy, and adjusts inline eslint-disable directives to new @typescript-eslint rule names (e.g., ban-typesno-unsafe-function-type, no-var-requiresno-require-imports) in code and tests.

Reviewed by Cursor Bugbot for commit b3a2cce. Bugbot is set up for automated code reviews on this repo. Configure here.

jonaslagoni and others added 2 commits April 7, 2026 16:20
Upgrade the following dependencies:
- @oclif/plugin-autocomplete: 3.0.16 → 3.2.45 (minor)
- @typescript-eslint/eslint-plugin: 6.7.5 → 8.58.0 (major)
- @typescript-eslint/parser: 6.7.5 → 8.58.0 (major)
- eslint-plugin-jest: 27.2.1 → 29.15.1 (major)
- eslint-plugin-unused-imports: 3.0.0 → 4.4.1 (major)
- eslint-plugin-security: 1.7.1 → 4.0.0 (major)
- zod-to-json-schema: 3.23.0 → 3.25.2 (minor)

Skipped:
- zod: 3.25.76 → 4.3.6 (public API exports zod schemas that consumers depend on)

ESLint config updated:
- Use security/recommended-legacy for ESLint 8 compatibility

Ref #349
Ref #350
Ref #351
Ref #352

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@typescript-eslint v8 renamed/removed several rules:
- @typescript-eslint/ban-types → @typescript-eslint/no-unsafe-function-type
- @typescript-eslint/no-var-requires → @typescript-eslint/no-require-imports

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@jonaslagoni jonaslagoni requested a review from ALagoni97 as a code owner April 7, 2026 14:21
@netlify
Copy link
Copy Markdown

netlify bot commented Apr 7, 2026

Deploy Preview for the-codegen-project canceled.

Name Link
🔨 Latest commit b3a2cce
🔍 Latest deploy log https://app.netlify.com/projects/the-codegen-project/deploys/69d5130323fed8000814e9dc

@vercel
Copy link
Copy Markdown

vercel bot commented Apr 7, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
the-codegen-project Ready Ready Preview, Comment Apr 7, 2026 2:23pm
the-codegen-project-mcp Ready Ready Preview, Comment Apr 7, 2026 2:23pm

@jonaslagoni jonaslagoni merged commit ccb31e5 into main Apr 7, 2026
23 checks passed
@jonaslagoni jonaslagoni deleted the chore/upgrade-all-dependencies-2026-04-07 branch April 7, 2026 14:33
@jonaslagoni
Copy link
Copy Markdown
Contributor Author

🎉 This PR is included in version 0.70.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant