chore(deps): update dependencies to latest patch and minor versions - #2817
Open
jcosta33 wants to merge 4 commits into
Open
chore(deps): update dependencies to latest patch and minor versions#2817jcosta33 wants to merge 4 commits into
jcosta33 wants to merge 4 commits into
Conversation
🦋 Changeset detectedLatest commit: c7f9947 The changes in this PR will be included in the next version bump. This PR includes changesets to release 3 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
✅ Deploy Preview for fondue-components ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
jcosta33
force-pushed
the
chore/dependency-updates-patch-minor
branch
from
August 4, 2026 12:33
307d502 to
8fe77e6
Compare
Bumps every patch and minor across the workspace. Holds back four groups that need their own PRs: @playwright/* (1.62 bundles Vite 8 in the CT core and shifts all screenshot baselines), the Storybook stack (not covered by PR CI), oxlint (1.73 raises the oxlint-tsgolint peer floor to >=0.24.0 and 1.75 raises it to >=7.0.2001, against the ^0.23.0 declared here) and the pnpm packageManager pin. @testing-library/user-event stays on 14.6.1 because 14.6.3 is younger than the minimumReleaseAge cutoff and no 14.6.2 exists.
jcosta33
force-pushed
the
chore/dependency-updates-patch-minor
branch
from
August 4, 2026 12:48
8fe77e6 to
8f13c30
Compare
…y range Re-resolving the lockfile collapses @react-types/shared onto 3.36.1. The committed lockfile had the @react-aria internals stale on 3.34.0 while the direct dependency was already 3.36.1, and that split made the inferred type of useOverlayPositionWithBottomMargin unnameable, emitting a new TS2742 in the rte and fondue builds. esbuild is pinned to exactly 0.27.2 in rte. GHSA-g7r4-m6w7-qqqr covers >=0.27.3 <0.28.1, so the bump to 0.27.7 moved into the vulnerable range; a caret cannot hold it out and the patched 0.28.1 is a major.
esbuild moves to ^0.28.1 in rte, the patched version for GHSA-g7r4-m6w7-qqqr, which replaces the exact 0.27.2 pin. Its only breaking change is embedded integrity hashes for the platform binaries; no rte script calls esbuild directly. @types/sinon goes to ^22 to match the sinon 22.1 runtime it describes. jest-dom ^7 keeps its @testing-library/dom peer satisfied by the existing ^10.4.1. chalk ^6 and concurrently ^10 both require node >=22, against the ^24 this repo pins. Leaves knip on 5: 6.x wants knip.json migrated.
Both were held back only by minimumReleaseAge and have now aged past the 24h cutoff. user-event has no 14.6.2, so 14.6.3 is the first installable release above 14.6.1. Storybook was additionally held back because no CI job builds it. All seven storybooks (components, fondue, rte, charts, tokens, icons and the docs site) were built locally against 10.5.6 and each exited 0, so that gap is covered.
joseazevedo88
approved these changes
Aug 5, 2026
syeo66
approved these changes
Aug 6, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Three groups stay behind. Playwright 1.62 moves the CT core to Vite 8 against our Vite 5 and shifts all 39 screenshot baselines. oxlint 1.75+ forces
oxlint-tsgolintfrom 0.23 to 7.0.2001 across six packages. Thepnpmpin is left out to keep this dependency-only.