fix(deps): update npm dependencies (minor) - #1962
renovate[bot] wants to merge 1 commit into
Conversation
|
There was a problem hiding this comment.
🔵 Needs a closer look
The updates span multiple tooling stacks and lockfile resolutions, warranting final human verification.
Pull request overview
This PR updates minor development dependencies across the monorepo and refreshes the pnpm lockfile.
Changes:
- Upgrades Storybook packages to 10.6.0.
- Upgrades ESLint to 10.10.0.
- Upgrades GraphQL Codegen CLI to 7.4.0.
- Refreshes transitive dependency resolutions.
File summaries
| File | Description |
|---|---|
pnpm-lock.yaml |
Resolves updated and transitive dependencies. |
packages/ui-components/package.json |
Updates Storybook tooling. |
packages/config/package.json |
Updates ESLint. |
apps/template/package.json |
Updates ESLint. |
apps/heureka/package.json |
Updates GraphQL Codegen and ESLint. |
apps/carbon/package.json |
Updates ESLint. |
Review details
Files not reviewed (1)
- pnpm-lock.yaml: Generated file
- Files reviewed: 5/6 changed files
- Comments generated: 0
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
|
6fdaaac to
fe7f7e5
Compare
renovate
Bot
changed the title
81da91d to
53f2db7
Compare
53f2db7 to
17601fc
Compare
This PR contains the following updates:
7.3.1→7.4.110.5.10→10.6.010.5.10→10.6.010.5.10→10.6.019.2.18→19.3.019.2.5→19.3.08.69.0→8.70.08.69.0→8.70.010.9.1→10.10.010.5.10→10.6.019.2.8→19.3.019.2.8→19.3.010.5.10→10.6.08.69.0→8.70.08.2.2→8.3.04.5.4→4.6.2Release Notes
dotansimha/graphql-code-generator (@graphql-codegen/cli)
v7.4.1Compare Source
Patch Changes
#10935
fb1a7c4Thanks @eddeee888! - dependencies updates:
@graphql-tools/code-file-loader@^8.1.39↗︎(from
^8.1.28, independencies)#10942
57c3e7bThanks @eddeee888! - dependencies updates:
@graphql-tools/merge@^9.2.4↗︎(from
^9.0.6, independencies)#10942
57c3e7bThanks @eddeee888! - Bump
@graphql-tools/mergefrom^9.0.6to^9.2.4.#10935
fb1a7c4Thanks @eddeee888! - Fix a Windows-specific
import()failure onabsolute paths when loading a schema/document from a
.js/.cjs/.mjsfile (via@graphql-tools/code-file-loader), and when loading modules passed to that loader's ownrequireoption. Node's dynamic
import()rejects raw absolute Windows paths (the drive letter is parsedas a URL scheme). Fixed by bumping
@graphql-tools/code-file-loaderto8.1.39, which containsthe upstream fix
(ardatan/graphql-tools#8421).
#10936
9521c0cThanks @eddeee888! - Fix watch mode's generated
ignoreglobpatterns using the platform path separator (
\on Windows), which@parcel/watchernevermatched, so generated output files were watched (and could re-trigger builds) instead of being
ignored. Ignore patterns are now always forward-slash, as
@parcel/watcherexpects.Also fixes the test suite's
TempDir.clean()helper on Windows, whererimraf.sync()rejectedits own glob-style cleanup pattern as containing illegal path characters; now passes
{ glob: true }. This is a test-only change (tests/utils.tsis not part of the publishedpackage) included here since it was needed to get the suite green on Windows alongside the
watch-mode fix.
v7.4.0Compare Source
Minor Changes
#10928
90229a5Thanks @eddeee888! - Add
contentComparison?: 'cache-first' | 'disk'to control disk-vs-cache write comparison in watchmode.
In watch mode the CLI caches the hash of the content it last wrote per file and compares new
output against that cached hash to skip redundant writes. This assumes generated output is a pure
function of the codegen inputs. An output whose content depends on the file's existing content
(e.g. a preset that reads the file and rewrites part of it) breaks that assumption: if the file is
changed on disk and codegen regenerates content identical to a previous run, the cached hash still
matches and the write is skipped, so the on-disk change is never corrected.
contentComparison: 'disk'opts an output into comparing the generated content against the fileon disk instead of the in-memory record of what codegen last wrote, so the file is rewritten when
it was changed externally. It can be set:
GenerateOptionsit returns frombuildGeneratesSection, orgenerates[output].contentComparison) for any output, including plainplugin outputs without a preset.
When both are present, the preset's value takes precedence. The default,
'cache-first', keepsthe existing in-memory-cache behaviour for outputs that are a pure function of their inputs.
Patch Changes
#10930
448431aThanks @eddeee888! - Fix
overwritebeing ignored forpreset-based
generatesoutputs.A
generatesentry that used a preset and setoverwrite(e.g.overwrite: { removeStaleFiles: false }) had that setting silently ignored, so in watch mode itsgenerated files could still be deleted as stale.
The CLI resolved
overwriteper generated file by looking the file's path up inconfig.generates. That fails for a preset: itsgeneratesentry is keyed by the preset'sbaseOutputDir, not by any generated file's path (and a preset can emit files outside thatdirectory), and the lookup additionally required a
pluginskey that preset entries don't have.Both cases fell through to the global
config.overwrite(defaulttrue).Updated dependencies
[
90229a5,448431a]:storybookjs/storybook (@storybook/addon-docs)
v10.6.0Compare Source
Storybook 10.6 contains hundreds of fixes and improvements:
List of all updates
@storybook/angular-vitepeers that nothing else brings in - #36002, thanks @valentinpalkovic!@angular/corethrough the package manager, not the raw specifier - #35999, thanks @valentinpalkovic!stylesthe way the Angular builders do - #35998, thanks @valentinpalkovic!storybook skills/storybook toolsand align the evals - #35957, thanks @kasperpeulen!storybook skillscommand - #35757, thanks @ghengeveld!storybook skillswithstorybook toolsshape - #36121, thanks @ghengeveld!skills get/skills list, addskills --all- #36127, thanks @kasperpeulen!storybook tools --jsonstdout parseable - #36023, thanks @kasperpeulen!Outputblock as the--jsonshape - #36089, thanks @kasperpeulen!storybook skills get setupand remove duplicate sandbox addon - #36024, thanks @kasperpeulen!storybook toolscommand derived at runtime from the OSA toolsets - #35850, thanks @JReinhold!docs show-storyas an alternative to componentId + storyName - #36104, thanks @kasperpeulen!storybook/internal/tools- #35983, thanks @JReinhold!typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)
v8.70.0Compare Source
🚀 Features
🩹 Fixes
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v8.70.0Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
eslint/eslint (eslint)
v10.10.0Compare Source
react/react (react)
v19.3.0Compare Source
react/react (react-dom)
v19.3.0Compare Source
typescript-eslint/typescript-eslint (typescript-eslint)
v8.70.0Compare Source
🩹 Fixes
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
vitejs/vite (vite)
v8.3.0Compare Source
Features
Bug Fixes
node_modulespath segments as dependencies (fix #17467) (#23437) (ef0dc17)Performance Improvements
colinhacks/zod (zod)
v4.6.2Compare Source
Commits:
a00c3f3docs: use Trigger.dev's brand-kit lockups for the platinum card0c483c5docs: Zod 4.6 announcement post (#6546)9446b5cfix: preserve undefined prefault outputs and object keys (#6587)e359f734.6.2v4.6.1Compare Source
A patch on top of 4.6.0.
b12aa523fix: preserve unique tags with defaulted discriminators (#6582) — closes #6577dd9c36fafix(v4): defer recursive object index inference (#6580)3b154992feat(lang): add Tajik (tg) locale (#6581) by @ismoil772efa8b80ci: give the npm wait a real budget and drop the back-publish path (#6583)v4.6.0Compare Source
Commits:
908c9e1fix(docs): retry the GitHub stars fetch and log the real status93186cadocs(wiki): drop the zod-compiler benchmark (#6505)8ce9e8dfeat(mini): publish Zod Mini as the standalone @zod/mini package (#6491)2956c4cchore(mini): sync [@&Configuration
📅 Schedule: (in timezone Europe/Berlin)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.