Skip to content

chore: upgrade npm dependencies - #119

Merged
dotjoshrc merged 3 commits into
mainfrom
chore/npm-upgrades
Aug 6, 2026
Merged

chore: upgrade npm dependencies#119
dotjoshrc merged 3 commits into
mainfrom
chore/npm-upgrades

Conversation

@dotjoshrc

@dotjoshrc dotjoshrc commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps all npm dependencies to their latest compatible versions and fixes the build and test pipeline to work cleanly after the upgrades.

Dependency changes:

  • @actions/core 1.x → 3.x
  • jest / @jest/globals / @types/jest 29.x → 30.x
  • @rollup/plugin-commonjs 28.x → 29.x
  • uuid 11.x → 14.x
  • @eslint/compat 1.x → 2.x
  • @github/local-action 3.x → 7.x
  • prettier-eslint 16.x → 17.x
  • Remaining in-range packages bumped to latest minor/patch

Fixes included:

  • Adds a global undici override to resolve transitive security advisories
  • Fixes eslint.config.mjs to use an absolute path for tsconfigRootDir (breaking change in @typescript-eslint/parser)
  • Pins TypeScript to 5.x (ts-jest peer dep excludes ≥7)
  • Suppresses THIS_IS_UNDEFINED and CIRCULAR_DEPENDENCY rollup warnings that originate from bundled @actions/core code (not our source)

- Bump @actions/core 1.x → 3.x
- Bump jest/\@jest/globals/\@types/jest 29.x → 30.x
- Bump @rollup/plugin-commonjs 28.x → 29.x
- Bump uuid 11.x → 14.x
- Bump @eslint/compat 1.x → 2.x
- Bump @github/local-action 3.x → 7.x
- Bump prettier-eslint 16.x → 17.x
- Bump remaining in-range packages to latest minor/patch
- Add global undici override to fix transitive security advisories
- Fix eslint.config.mjs: use absolute __dirname for tsconfigRootDir
  (breaking change in @typescript-eslint/parser)
- Hold TypeScript at 5.x (ts-jest peer dep excludes >=7)
@dotjoshrc
dotjoshrc requested a review from a team as a code owner August 4, 2026 21:27
dotjoshrc and others added 2 commits August 4, 2026 15:44
Adds an onwarn handler to rollup.config.ts that suppresses two known
warnings from @actions/core (a bundled dependency):
- THIS_IS_UNDEFINED: from __awaiter CJS wrappers using 'this'
- CIRCULAR_DEPENDENCY: from core.js ↔ oidc-utils.js cycle

Only warnings where all involved files are in node_modules are
suppressed, so any warnings from project source still surface.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@dotjoshrc
dotjoshrc merged commit a5efa8d into main Aug 6, 2026
26 checks passed
@dotjoshrc
dotjoshrc deleted the chore/npm-upgrades branch August 6, 2026 01:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants