chore(deps): big-bang bump (consolidates dependabot PRs)#1083
Merged
Conversation
Single consolidated bump replacing many open dependabot PRs. Only patch/minor bumps included — every major (next, vite, storybook, react, typescript, glob, nextra, react chromatic, streamdown, inquirer) is deferred to its own review. Validated with pnpm typecheck + lint + build (all green) and a UI dev-server smoke (vite 7.3.2, HTTP 200, title="Agor"). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- sqlite/postgres: add `--build` to start so first-boot rebuilds the image
- sqlite: switch app URL to use {{host.ip_address}} (reachable off-host, matches docs variant)
- collapse multi-line docker compose commands to single-line form
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
mistercrunch
added a commit
that referenced
this pull request
May 6, 2026
Earlier dependabot attempt (#977) bumped vite alone to 8.x but kept @vitejs/plugin-react at v5, which broke the JSX automatic runtime in some test files (TaskListItem, EditRenderer, EditFilesRenderer all threw "ReferenceError: React is not defined"). plugin-react v6 is the release built for vite 8 and resolves it without code changes. Also lifts the pnpm override `vite: ">=7.3.2 <8"` to `">=8.0.10 <9"` so transitive consumers (storybook, vitest, etc.) resolve onto v8. #1083 ("big-bang dep bumps") explicitly excluded vite to avoid this cascade — this PR addresses it as a focused follow-up. Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
dhavli
pushed a commit
to Code-Fixxers/agor
that referenced
this pull request
May 12, 2026
) * chore(deps): big-bang bump (consolidates dependabot PRs) Single consolidated bump replacing many open dependabot PRs. Only patch/minor bumps included — every major (next, vite, storybook, react, typescript, glob, nextra, react chromatic, streamdown, inquirer) is deferred to its own review. Validated with pnpm typecheck + lint + build (all green) and a UI dev-server smoke (vite 7.3.2, HTTP 200, title="Agor"). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * chore: tweak .agor.yml variants - sqlite/postgres: add `--build` to start so first-boot rebuilds the image - sqlite: switch app URL to use {{host.ip_address}} (reachable off-host, matches docs variant) - collapse multi-line docker compose commands to single-line form Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
dhavli
pushed a commit
to Code-Fixxers/agor
that referenced
this pull request
May 12, 2026
…t-io#1105) Earlier dependabot attempt (preset-io#977) bumped vite alone to 8.x but kept @vitejs/plugin-react at v5, which broke the JSX automatic runtime in some test files (TaskListItem, EditRenderer, EditFilesRenderer all threw "ReferenceError: React is not defined"). plugin-react v6 is the release built for vite 8 and resolves it without code changes. Also lifts the pnpm override `vite: ">=7.3.2 <8"` to `">=8.0.10 <9"` so transitive consumers (storybook, vitest, etc.) resolve onto v8. preset-io#1083 ("big-bang dep bumps") explicitly excluded vite to avoid this cascade — this PR addresses it as a focused follow-up. Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Single consolidated dependency bump replacing many open dependabot PRs. Only patches and minors — every genuine major is deferred to a follow-up so this PR stays low-risk.
Bumps included
@biomejs/biome^2.4.42.4.4(pinned)lint-staged^16.3.1^16.4.0prettier^3.8.1^3.8.3turbo^2.9.6^2.9.7oclif^4.22.81^4.23.0vitest^4.0.18^4.1.5@vitest/coverage-v8^4.0.18^4.1.5@oclif/core^4.8.2^4.8.3swagger-ui-dist^5.32.0^5.32.1katex^0.16.33^0.16.39@types/multer^1.4.12^2.1.0@types/node^22.10.2/^20.0.0^24.6.0@opencode-ai/sdk^1.2.15^1.2.20docker/build-push-action@v5@v7actions/cache@v4@v5Notes on the biome pin
Dependabot PR #1079 wanted to bump
@biomejs/biometo^2.4.13. Newer 2.4.x versions promotednoArrayIndexKeyandassist/source/organizeImportsfrom warn → error, which surfaces 6 errors in unchanged code (InputRequestBlock.tsx,MessageBlock.tsx,packages/client/src/index.ts,packages/core/src/config/agor-yml.ts). Fixing those is a code refactor outside the scope of a dep-bump PR, so this PR pins biome at exactly2.4.4to keep^2.4.4from silently resolving forward. A separate PR can take the biome bump together with the rule fixes.Major bumps deep-dive
None. Every major was deferred (see below) so no migration code was needed in this PR.
Deferred dependabot PRs
Each one needs its own focused PR with a migration; bundling any of them would have ballooned this consolidation.
next14 → 16 (root)next14 → 15 (root)next14 → 16 (apps/agor-docs)nextra3 → 4 (apps/agor-docs)vite7 → 8pnpm.overridesexplicitly pinsvite: ">=7.3.2 <8". Lifting that pin and validating Vite 8 (esbuild/rollup peer chain, vite-plugin-compression compat) is its own task.@storybook/react-vite9 → 10pnpm.overrides(storybook: ">=9.1.19 <10").@storybook/react9 → 10storybook9 → 10 (apps/agor-ui)@storybook/react9 → 10 (apps/agor-ui)@chromatic-com/storybook4 → 5typescript5.9.3 → 6.0.2glob11 → 13 (apps/agor-daemon)pnpm.overridespinsglob: "^11.1.0".glob11 → 13 (apps/agor-cli)react-dom18 → 19 (apps/agor-ui)react18 → 19 (root)react18 → 19 (apps/agor-docs)streamdown1 → 2 (apps/agor-ui)inquirer12 → 13 (apps/agor-cli)@opencode-ai/sdk1.2.15 → 1.4.3 (packages/executor)Already-satisfied dependabot PRs (safe to close manually)
These were obsoleted before this PR; the listed version is already present on
mainor via this PR's range:@github/copilot-sdk0.2.0 → 0.2.2 — executor was already^0.2.2.@feathersjs/rest-client5.0.41 → 5.0.42 — workspace already on^5.0.44.@feathersjs/typebox5.0.41 → 5.0.42 — same.@libsql/client0.15.15 → 0.17.0 — already^0.17.2.oclifin agor-cli — covered by the dev-tooling group bump in this PR.vitestin agor-daemon — covered (4.1.5 ≥ 4.1.2).vitestin executor — covered (4.1.5 ≥ 4.1.4).Validation
pnpm install(fresh resolution) — clean, no new peer-dep warnings vs. main.pnpm typecheck— 9/9 tasks green.pnpm lint— 5 pre-existing warnings, no errors.pnpm check(typecheck + lint + build) — all 6 build tasks green.pnpm test— 8/8 task groups green; 2028 tests passing in@agor/corealone.apps/agor-uidev server (vite 7.3.2), bound to localhost, fetched/→ HTTP 200,<title>Agor</title>. Did not boot the daemon end-to-end in this run (sandbox-limited), but daemontsupbuild is green via thecheckstep.Lockfile churn
pnpm-lock.yamlshows ~2.5k lines of churn — that'spnpm installre-resolving the transitive trees behind vitest 4.0→4.1,@types/node20/22→24, and@opencode-ai/sdk1.2.15→1.2.20. No silent transitive bumps to anything still version-pinned viapnpm.overrides(those overrides were left untouched on purpose).Closes
Closes #1079
Closes #1019
Closes #1017
Closes #831
Closes #800
Closes #745
Closes #738
Closes #743
Closes #741
Closes #690
Closes #949
Closes #834
Closes #950
Closes #948
Closes #776
Closes #775
Closes #736
Closes #742
Closes #777
Closes #733
🤖 Generated with Claude Code