Skip to content

chore(deps): update transitive dependencies - #288

Merged
angeloashmore merged 1 commit into
masterfrom
claude/dependencies
Oct 15, 2026
Merged

angeloashmore merged 1 commit into
masterfrom
claude/dependencies

Conversation

@angeloashmore

@angeloashmore angeloashmore commented Oct 15, 2026 •

Copy link
Copy Markdown
Member

This PR updates dependencies to the latest versions published before the 3-day cutoff (2026-10-12).

Updated direct dependencies

None. Every newer direct dependency version came out after the cutoff.

npm update refreshed transitive dependencies in package-lock.json:

  • @yuku-core/* 0.18.1 → 0.19.0 (tsdown build toolchain)
  • rolldown-plugin-dts 0.28.7 → 0.28.8
  • cac 7.0.1 → 7.1.0

The build output in dist/ is identical to the output on master. No source, test, CI, or peerDependencies changes. Lint, type-check, and build pass locally.

Not updated

  • @playwright/test and playwright 1.64.1, dotenv 18.0.8, oxlint 1.88.0, oxfmt 0.73.0, react/react-dom 19.3.1, and next 16.4.1 (e2e-projects/nextjs) came out after the cutoff. A later run will pick them up.
  • @prismicio/types-internal (3.17.2, latest 4.8.0) is skipped by policy.

Held back

None.

🤖 Generated with Claude Code

https://claude.ai/code/session_01DcFHkf2csgYjfkZNS9veb1


Generated by Claude Code


Note

Low Risk
Lockfile-only transitive dev dependency bumps for the build toolchain; no runtime or published API changes, with identical build output reported.

Overview
Refreshes only package-lock.json with newer transitive dev/build packages—no package.json, source, tests, or CI edits.

The lockfile moves the tsdown stack from 0.18.1 → 0.19.0 (yuku-ast, yuku-codegen, yuku-parser, yuku-core, and all @yuku-core/binding-* platform binaries, plus @yuku-toolchain/types). rolldown-plugin-dts goes 0.28.7 → 0.28.8 and picks up those yuku versions. cac goes 7.0.1 → 7.1.0 (its engines now require Node ≥20.19.0; the repo already targets Node ≥22).

Per the PR notes, dist/ is unchanged vs master and lint/type-check/build still pass—this is a routine lockfile refresh ahead of direct dependency bumps that were held past the cutoff date.

Reviewed by Cursor Bugbot for commit 8bd38b4. Bugbot is set up for automated code reviews on this repo. Configure here.

Refresh the lockfile with npm update. No direct dependency changes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DcFHkf2csgYjfkZNS9veb1
@angeloashmore
angeloashmore merged commit 0edd940 into master Oct 15, 2026
14 checks passed
@angeloashmore
angeloashmore deleted the claude/dependencies branch October 15, 2026 17:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants