Skip to content

fix(deps): update all dependencies - #12

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

Conversation

@renovate

@renovate renovate Bot commented Feb 19, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@biomejs/biome (source) ^2.4.0^2.5.14 age confidence devDependencies minor
@changesets/changelog-github (source) ^0.5.2^1.0.1 age confidence devDependencies major
@changesets/cli (source) ^2.29.8^3.0.3 age confidence devDependencies major
@effect/cli (source) ^0.73.2^0.77.2 age confidence dependencies minor
@effect/cluster (source) ^0.56.4^0.60.2 age confidence dependencies minor
@effect/experimental (source) ^0.58.0^0.61.1 age confidence dependencies minor
@effect/platform (source) ^0.94.5^0.97.2 age confidence dependencies minor
@effect/platform-node (source) ^0.104.1^0.108.2 age confidence dependencies minor
@effect/printer (source) ^0.47.0^0.51.0 age confidence dependencies minor
@effect/printer-ansi (source) ^0.47.0^0.51.0 age confidence dependencies minor
@effect/rpc (source) ^0.73.1^0.76.2 age confidence dependencies minor
@effect/sql (source) ^0.49.0^0.52.1 age confidence dependencies minor
@effect/typeclass (source) ^0.38.0^0.41.0 age confidence dependencies minor
@effect/vitest (source) ^0.27.0^0.30.0 age confidence devDependencies minor
@effect/workflow (source) ^0.16.0^0.19.1 age confidence dependencies minor
@eslint-community/eslint-plugin-eslint-comments ^4.6.0^4.8.1 age confidence devDependencies minor
@eslint/compat (source) 2.0.22.1.1 age confidence devDependencies minor
@eslint/eslintrc 3.3.33.3.7 age confidence devDependencies patch
@​prover-coder-ai/eslint-plugin-suggest-members ^0.0.25^0.0.26 age confidence devDependencies patch
@types/node (source) ^24.10.13^24.13.5 age confidence devDependencies minor
@typescript-eslint/eslint-plugin (source) ^8.55.0^8.70.0 age confidence devDependencies minor
@typescript-eslint/parser (source) ^8.55.0^8.70.0 age confidence devDependencies minor
@vitest/coverage-v8 (source) ^4.0.18^5.0.1 age confidence devDependencies major
@vitest/eslint-plugin ^1.6.9^1.6.27 age confidence devDependencies patch
actions/checkout v6v7 age confidence action major
actions/setup-node v6v7 age confidence action major
actions/upload-artifact v6v7 age confidence action major
effect (source) ^3.19.17^3.22.2 age confidence dependencies minor
eslint (source) ^10.0.0^10.10.0 age confidence devDependencies minor
eslint-import-resolver-typescript ^4.4.4^4.4.5 age confidence devDependencies patch
eslint-plugin-simple-import-sort ^12.1.1^14.0.0 age confidence devDependencies major
eslint-plugin-sonarjs (source) ^3.0.7^4.2.1 age confidence devDependencies major
eslint-plugin-sort-destructure-keys ^2.0.0^3.0.0 age confidence devDependencies major
eslint-plugin-unicorn ^63.0.0^75.0.0 age confidence devDependencies major
globals ^17.3.0^17.12.0 age confidence devDependencies minor
jscpd (source) ^4.0.8^5.2.1 age confidence devDependencies major
pnpm (source) 10.29.312.4.2 age confidence packageManager major
pnpm/action-setup v3v6 age confidence action major
softprops/action-gh-release v2v3 age confidence action major
ts-morph ^27.0.2^28.0.0 age confidence dependencies major
typescript (source) ^5.9.3^7.0.2 age confidence dependencies major
typescript-eslint (source) ^8.55.0^8.70.0 age confidence devDependencies minor
vite (source) ^7.3.1^8.3.0 age confidence devDependencies major
vitest (source) ^4.0.18^5.0.1 age confidence devDependencies major

cc @skulidropek


Release Notes

biomejs/biome (@​biomejs/biome)

v2.5.14

Compare Source

Patch Changes
  • #​9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.

    // Invalid: return in finally callback
    Promise.resolve(1).finally(() => { return 2 })
    
    // Valid: no return in finally callback
    Promise.resolve(1).finally(() => { console.log(2) })

    Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.

  • #​11754 71eaa0d Thanks @​griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

    <!-- Invalid: leftover debugging tag -->
    {@debug user}

    The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.

  • #​11725 5eb5f09 Thanks @​m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

  • #​11735 9bd70c7 Thanks @​ematipico! - Fixed #​8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

  • #​11715 f05a3c3 Thanks @​ematipico! - Fixed #​7771: Grit plugins that use sequential no longer panic when Biome processes files.

  • #​11766 c2542c6 Thanks @​dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.

  • #​11461 22e9966 Thanks @​FoundDream! - Fixed #​11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.

     const value = `
          ${
            condition
              ? "yes"
              : "no"
    -}
    +     }
     `;
  • #​11766 c2542c6 Thanks @​dyc3! - Fixed #​11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

  • #​11790 17d0ff0 Thanks @​ematipico! - Fixed #​10248: noUselessFragments now allows fragments with props in Astro files, such as <Fragment slot="name">{text}</Fragment> inside template expressions.

  • #​11777 7ee3a6c Thanks @​ematipico! - Fixed #​7573: added the requireExplicitCase option to useExhaustiveSwitchCases. When set to true, the rule reports missing cases even when the switch has a default clause, so you can keep a runtime fallback while checking that every value in the union has its own case. The option defaults to false.

  • #​11751 d37f24b Thanks @​ematipico! - Fixed #​8347: the fix from useConsistentArrowReturn now parenthesizes returned expressions that begin with object literals before removing the arrow function body braces, preventing invalid output for expressions such as object property access.

  • #​11784 46e8912 Thanks @​dyc3! - Fixed #​11782: noUndeclaredCustomProperties could hang while checking stylesheets imported by JavaScript modules with many shared dependencies.

  • #​11731 1534885 Thanks @​ematipico! - Fixed #​7984: The fix from useSimplifiedLogicExpression now preserves line breaks in multiline conditions with line comments, preventing the right-hand side condition from being commented out.

  • #​11735 9bd70c7 Thanks @​ematipico! - Fixed #​7304: the HTML formatter now preserves authored segment breaks between CJK characters, and next to CJK punctuation, instead of replacing them with spaces.

     <div lang="zh-Hant-TW">
    -  這個段落是那麼長, 在一行寫不行。
    +  這個段落是那麼長,
    +  在一行寫不行。
     </div>
  • #​11749 ff992a1 Thanks @​ematipico! - Fixed #​11747: formatting and checking large parenthesized object expressions no longer exhibit quadratic slowdowns.

  • #​11736 1dd1fc4 Thanks @​dyc3! - Fixed #​8177: code actions no longer modify the wrong part of Vue, Svelte, or Astro files when experimental full HTML support is disabled.

  • #​11743 3835945 Thanks @​santichausis! - Fixed #​10247: biome check --write/biome lint --write now correctly writes fixes for code inside an HTML attribute expression (for example a Svelte onclick={...} handler, or a mustache expression like {count}), instead of silently reporting the diagnostic as fixable and applying nothing.

    For example, running biome lint --write --unsafe for useBlockStatements (an unsafe fix) on this Svelte component used to leave the file unchanged:

    <button onclick={() => { if (open) close(); }}>Close</button>
  • #​11740 8ea8b4a Thanks @​dyc3! - Fixed #​11453: useConsistentTestIt now updates imports alongside calls, preserving the original export through an alias. The rule ignores locally declared functions and withholds fixes when the preferred name would conflict with another binding or global reference.

  • #​11355 27177ca Thanks @​dyc3! - Fixed the HTML formatter incorrectly applying native HTML element formatting to PascalCase component names such as <Ul> and <Body> in Vue, Svelte, and Astro files.

    -<Body>
    -  <div>content</div>
    -</Body>
    +<Body><div>content</div></Body>
  • #​11355 27177ca Thanks @​dyc3! - Fixed the HTML formatter incorrectly applying SVG block formatting to unknown elements whose names matched SVG element names.

    -<foreignobject>
    -  <div>content</div>
    -</foreignobject>
    +<foreignobject><div>content</div></foreignobject>
  • #​11741 fc69047 Thanks @​dyc3! - Fixed #​8893: useImportExtensions no longer suggests adding .ts to .jsx imports when a colocated .d.ts file provides type declarations.

  • #​11642 c87341c Thanks @​dyc3! - Added the nursery rule useConsistentFunctionStyle, which requires a consistent style for defining functions.

    By default, the rule reports the following declaration because it requires a function expression assigned to a variable:

    function greet() {
        return "Hello";
    }
  • #​11770 ddfd622 Thanks @​dyc3! - Fixed #​8980: suppression comments targeting the entire assist category are now respected, including biome-ignore-all assist when running check.

  • #​11792 7a4b895 Thanks @​dyc3! - Fixed dashed utility base names in the Tailwind parser, including border-bs, font-features, and scrollbar-thumb. Classes such as min-inline-[12rem] now preserve the complete base name and parse the arbitrary value separately.

  • #​11739 1fc17e3 Thanks @​Netail! - The rule useIncludes now also reports lastIndexOf() comparisons and some() calls with a strict-equality callback.

    arr.lastIndexOf(x) !== -1
    
    arr.some(item => item === x)
  • #​11735 9bd70c7 Thanks @​ematipico! - Fixed #​6888. GritQL plugins can now use contains on import-clause metavariables such as $clause in import $clause from "module" patterns.

  • #​11790 17d0ff0 Thanks @​ematipico! - Fixed #​11786: useAnchorContent now reports anchors without accessible content in HTML, Astro, Vue, and Svelte even when they have an aria-label, aria-labelledby, or title attribute, matching JSX behavior.

  • #​11651 a9c4aa0 Thanks @​saberoueslati! - Added the new nursery rule noVueUndeclaredDirectives, which reports custom Vue directives that are not declared by a <script setup> binding, the component's directives option, or the rule's globals option. Closes #​11478.

    <template>
      <!-- v-highlight is not declared anywhere -->
      <div v-highlight></div>
    </template>

    Aliased named imports in single-file components are now tracked under their local name, so noUndeclaredVariables recognizes vHighlight in import { highlight as vHighlight } from "./directives".

  • #​11715 f05a3c3 Thanks @​ematipico! - Fixed #​7795. The noJsxLiterals rule now ignores surrounding whitespace when matching literals against allowedStrings.

  • #​11780 99c7049 Thanks @​ematipico! - Fixed false positives in useExhaustiveSwitchCases when numeric cases use different spellings of the same value. For example, case 0x1 now covers the numeric literal type 1.

  • #​11720 c7c4e2b Thanks @​ematipico! - Fixed #​7880: noUselessStringConcat no longer reports literal concatenations split across multiple lines when a numeric literal ends the chain.

  • #​11355 27177ca Thanks @​dyc3! - Improved performance of the HTML formatter for documents that contain many HTML-native or SVG-native tags.

  • #​11720 c7c4e2b Thanks @​ematipico! - Fixed #​7949: useReadonlyClassProperties now reports static class properties that are never reassigned.

  • #​11751 d37f24b Thanks @​ematipico! - Fixed #​7644: useImportExtensions now resolves path aliases declared by referenced TypeScript project configurations.

  • #​11791 f88793c Thanks @​dyc3! - Fixed a false positive in useTailwindShorthandClasses for strings in conditional tests, such as cn(m === "w-2 h-2" ? "bg-red-800" : "bg-red-400").

  • #​11720 c7c4e2b Thanks @​ematipico! - Fixed #​7783: noNoninteractiveElementInteractions no longer reports event handlers on native <dialog> elements.

  • #​11733 7030068 Thanks @​dyc3! - Fixed #​11730: useExhaustiveSwitchCases reports missing cases when iterating over a class property with for...of.

  • #​11717 2107dae Thanks @​ternaus! - Fixed #​11716: the noUnknownAttribute rule now accepts fullscreen event handlers, the credentialless iframe property, and the SVG maskType property when the React dependency range allows React 19.3 or later. The credentialless and maskType properties are restricted to <iframe> and <mask> elements, respectively.

  • #​11737 b7e3559 Thanks @​dyc3! - Fixed #​11692: noFloatingPromises now detects unhandled promises returned through generic method signatures, including Playwright fixtures.

  • #​11780 99c7049 Thanks @​ematipico! - Fixed #​7747: useExhaustiveSwitchCases now reports missing cases for literal unions derived from const tuples with (typeof values)[number] and objects with keyof typeof object.

    Other type-aware rules, including noFloatingPromises and noUselessTypeConversion, also recognize supported indexed-access results.

  • #​11724 a9a5e9a Thanks @​dyc3! - Fixed redundant parentheses around binary and logical unary operands with leading line comments.

     !(
       // leading
    -  (a || b)
    +  a || b
     );
  • #​11715 f05a3c3 Thanks @​ematipico! - Fixed #​7722: noUnusedImports no longer reports type-only imports used in computed names of declared class properties.

  • #​11731 1534885 Thanks @​ematipico! - Fixed #​6390: Biome now offers suppression actions for noDynamicNamespaceImportAccess in editors.

  • #​11751 d37f24b Thanks @​ematipico! - Fixed #​7533: noDescendingSpecificity no longer compares selector specificity across separate cascade layer blocks.

  • #​11735 9bd70c7 Thanks @​ematipico! - Fixed #​6206: useUniqueElementIds no longer reports static IDs on elements in SVG contexts.

    <svg>
        <defs>
            <pattern id="dots" width="10" height="10" />
        </defs>
        <rect fill="url(#dots)" width="100%" height="100%" />
    </svg>
  • #​11715 f05a3c3 Thanks @​ematipico! - Fixed #​5447, so the GitHub reporter now associates annotations with the correct files when Biome runs from a nested directory.

  • #​11720 c7c4e2b Thanks @​ematipico! - Fixed #​7816: useHookAtTopLevel no longer reports methods named like hooks when called on another function's result, such as Reactotron.configure(...).useReactNative(...).

  • #​11355 27177ca Thanks @​dyc3! - Removed special HTML formatter handling for the obsolete <listing> element.

  • #​11731 1534885 Thanks @​ematipico! - Fixed an issue where Grit plugin code fixes weren't available as editor code actions.

  • #​11726 dea163f Thanks @​dyc3! - Fixed #​11722: the JavaScript formatter inserts a newline before the closing angle bracket when a leading comment forces type arguments onto multiple lines.

     type Foo = Record<
       // comment
       string,
    -  number>;
    +  number
    +>;
  • #​9758 02ea438 Thanks @​Netail! - Added the nursery rule noJsonUnsafeValues, which disallows JSON values that are unsafe to use between different tools or languages.

    Invalid:

    [
      2e308, // Number evaluating to Infinity
      -2e308, // Number evaluating to -Infinity
      "\ud83d", // String with lone surrogate
      1e-400, // Unsafe zero (too small, will evaluate to 0)
      9007199254740992, // Unsafe integer (outside safe integer range)
      2.2250738585072009e-308, // Subnormal number
    ]
  • #​11790 17d0ff0 Thanks @​ematipico! - Fixed #​8574: the JavaScript formatter sometimes added extra parentheses and moved comments when formatting multiline expressions after operators such as !. Comments now stay beside the values they describe, without an extra pair of parentheses.

     !(
    -  (
    -    cond1 || // force this to be multi line
    -    cond3
    -  ) // comment
    +  cond1 || // force this to be multi line
    +  cond3 // comment
     );
  • #​11715 f05a3c3 Thanks @​ematipico! - Fixed #​7711: biome lint --suppress no longer fails with conflicting rule fixes when multiple diagnostics target a declaration preceded by a multiline comment.

  • #​11700 0e9fe53 Thanks @​dyc3! - Added the nursery rule noObsoleteTags, which reports obsolete HTML elements in HTML and JSX, such as <font color="red">Text</font>.

  • #​11735 9bd70c7 Thanks @​ematipico! - Fixed #​7363: Biome GritQL plugins now match TypeScript interface snippets such as interface $name { $body }.

  • #​11729 f047985 Thanks @​m1handr! - Added support for suite() as an alias of describe() across test analysis rules and formatter. Rules now recognize suite, fsuite, xsuite, and test.suite blocks. The formatter recognises them as test declarations.

  • #​11778 4b7aa1f Thanks @​ematipico! - Fixed #​7727: GritQL snippets such as import $what from $where now match namespace imports, including type-only imports. Explicit import type $what from $where patterns also match type-only named and namespace imports.

  • #​11715 f05a3c3 Thanks @​ematipico! - Fixed #​7603: useSingleJsDocAsterisk no longer reports asterisks that are part of JSDoc comment content, such as italic text, as extra line markers.

  • #​11706 e19512a Thanks @​dyc3! - Fixed #​11704: files re-included by negation patterns in a nested .gitignore are processed when vcs.useIgnoreFile is enabled, even when the ignore file contains *.

  • #​11718 76a302a Thanks @​dyc3! - Fixed #​8573: own-line comments before binary operators stay above the operator when javascript.formatter.operatorLinebreak is "before".

     foo
    -  || // comment
    -  bar;
    +  // comment
    +  || bar;
  • #​9797 64fd314 Thanks @​Netail! - Added the nursery rule useConsistentObjectKeys, which requires JSON object keys to follow a consistent Unicode representation.

v2.5.13

Compare Source

Patch Changes

Important

✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from skulidropek February 19, 2026 07:13
@renovate
renovate Bot force-pushed the renovate/all branch 11 times, most recently from b7d1898 to 02647d6 Compare February 26, 2026 20:35
@renovate
renovate Bot force-pushed the renovate/all branch 10 times, most recently from 5dfb201 to 64c345b Compare March 7, 2026 00:53
@renovate
renovate Bot force-pushed the renovate/all branch 7 times, most recently from 65a86e5 to c5086bd Compare March 13, 2026 20:50
@renovate
renovate Bot force-pushed the renovate/all branch 6 times, most recently from 6f2313f to aad509b Compare April 3, 2026 13:30
@renovate
renovate Bot force-pushed the renovate/all branch 13 times, most recently from 45b75da to c03993e Compare April 10, 2026 13:46
@renovate
renovate Bot force-pushed the renovate/all branch 7 times, most recently from c2ab5ac to 1542a02 Compare April 17, 2026 02:17
@coderabbitai

coderabbitai Bot commented May 14, 2026

Copy link
Copy Markdown

Review Change Stack

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 1aef5455-2dcf-4729-86e4-273aaf35b0eb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review
📝 Walkthrough

Walkthrough

This PR updates CI action pins (pnpm setup, softprops release, artifact upload) and bumps pnpm plus multiple dependency/devDependency versions in the root and packages/app package.json files.

Changes

Dependency and Tool Version Upgrades

Layer / File(s) Summary
GitHub Actions version updates
.github/actions/setup/action.yml, .github/workflows/release.yml, .github/workflows/snapshot.yml
pnpm/action-setup upgraded from @v3@v6; softprops/action-gh-release @v2@v3; actions/upload-artifact @v6@v7.
Root package.json: pnpm and Changesets updates
package.json
packageManager set to pnpm@11.1.2. Changesets dev dependencies bumped: @changesets/changelog-github, @changesets/cli.
App package.json: dependencies and devDependencies updates
packages/app/package.json
packageManager set to pnpm@11.1.2. Multiple dependencies (@effect/*, effect, ts-morph, typescript) and devDependencies (Biome, @effect/vitest, ESLint ecosystem, globals, jscpd, vite, vitest) had version bumps.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related issues

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed The title clearly summarizes the primary change: broad dependency, package manager, and GitHub Actions updates.
Description check ✅ Passed The description is directly related to the dependency and GitHub Actions updates in the pull request.
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/all

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

🐰 A tiny hop, a tidy patch,
Pins refreshed and versions matched.
pnpm steps up, the actions sing,
Manifests hum a brighter ring.
The rabbit cheers: new builds take wing.

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/workflows/release.yml:
- Line 159: The workflow now uses softprops/action-gh-release@v3 which requires
the Actions Node 24 runtime; verify our GitHub-hosted or self‑hosted runners
support Node 24 before merging, and if they do not, change the reference in the
release job from softprops/action-gh-release@v3 to the last Node‑20 compatible
tag softprops/action-gh-release@v2.6.2 (or update/self‑provision runners to Node
24), ensuring the uses entry is updated accordingly in the
.github/workflows/release.yml release job.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 5eafae47-4c8c-433f-ac59-694a68b130b3

📥 Commits

Reviewing files that changed from the base of the PR and between b434f0e and ba8d10c.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (5)
  • .github/actions/setup/action.yml
  • .github/workflows/release.yml
  • .github/workflows/snapshot.yml
  • package.json
  • packages/app/package.json
✅ Files skipped from review due to trivial changes (1)
  • .github/actions/setup/action.yml
🚧 Files skipped from review as they are similar to previous changes (3)
  • package.json
  • .github/workflows/snapshot.yml
  • packages/app/package.json

- name: Create GitHub Release
if: steps.auto_changeset.outputs.has_changeset == 'true' && github.actor != 'github-actions[bot]'
uses: softprops/action-gh-release@v2
uses: softprops/action-gh-release@v3

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Description: Verify softprops/action-gh-release@v3 exists and check for breaking changes

# Check if v3 tag/release exists
echo "=== Checking if v3 exists ==="
gh api repos/softprops/action-gh-release/git/refs/tags/v3 --jq '.ref' 2>/dev/null || echo "v3 tag not found"

# Get latest releases to compare
echo -e "\n=== Latest releases ==="
gh api repos/softprops/action-gh-release/releases --jq '.[:5] | .[] | "Tag: \(.tag_name), Published: \(.published_at)"'

# Check for v3 release notes
echo -e "\n=== v3 Release notes ==="
gh api repos/softprops/action-gh-release/releases --jq '.[] | select(.tag_name | startswith("v3")) | {tag_name, body} | .tag_name + "\n" + .body' | head -100

Repository: ProverCoderAI/dist-deps-prune

Length of output: 932


Verify GitHub-hosted runner supports Node 24 before merging.

The upgrade from softprops/action-gh-release@v2 to v3 is confirmed to exist, but introduces a breaking change: the action runtime migrates from Node 20 to Node 24. Ensure that all runner environments (GitHub-hosted or self-hosted) support the Node 24 Actions runtime. If Node 24 support is not available, the action will fail. The last Node 20-compatible version is v2.6.2.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/workflows/release.yml at line 159, The workflow now uses
softprops/action-gh-release@v3 which requires the Actions Node 24 runtime;
verify our GitHub-hosted or self‑hosted runners support Node 24 before merging,
and if they do not, change the reference in the release job from
softprops/action-gh-release@v3 to the last Node‑20 compatible tag
softprops/action-gh-release@v2.6.2 (or update/self‑provision runners to Node
24), ensuring the uses entry is updated accordingly in the
.github/workflows/release.yml release job.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant