Skip to content

ci: add dry-aged-deps for dependency freshness checks#45

Merged
tompahoward merged 5 commits into
mainfrom
claude/add-dry-aged-deps-POccP
Mar 14, 2026
Merged

ci: add dry-aged-deps for dependency freshness checks#45
tompahoward merged 5 commits into
mainfrom
claude/add-dry-aged-deps-POccP

Conversation

@tompahoward
Copy link
Copy Markdown
Contributor

Summary

  • Install dry-aged-deps as a dev dependency for supply-chain-safe dependency freshness monitoring
  • Add .dry-aged-deps.json config with exclusions (with reasons) for all 20 currently outdated packages
  • Add dry-aged-deps --check as a post-build step in the GitHub Actions build workflow
  • Add dry-aged-deps --check to the pre-push husky hook
  • Add .yarnrc with --ignore-engines for Node 20+ compatibility with eslint-plugin-jsdoc

Test plan

  • dry-aged-deps --check exits 0 with all current outdated deps excluded
  • All existing tests pass (5/5, 100% coverage)
  • Pre-push hook runs successfully with the new check
  • Spellcheck passes with the new config file excluded
  • Projen regeneration preserves all changes

https://claude.ai/code/session_01HNvBcQzT1SviRqkUpP5Xce

Install dry-aged-deps and configure it via projenrc:
- Add as dev dependency with exclusions for all 20 currently outdated
  packages that cannot be updated due to version constraints
- Add --check to build workflow as a post-build step
- Add --check to pre-push husky hook
- Add .dry-aged-deps.json to cspell ignore paths
- Add .yarnrc with --ignore-engines for Node 20+ compatibility

https://claude.ai/code/session_01HNvBcQzT1SviRqkUpP5Xce
@tompahoward tompahoward mentioned this pull request Mar 14, 2026
5 tasks
@mergify
Copy link
Copy Markdown

mergify Bot commented Mar 14, 2026

❌ The current Mergify configuration is invalid

Details
  • Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → method → squash
  • Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → commit_message_template → {{ title }} (#{{ number }})

{{ body }}

Use projen file overrides to upgrade checkout, upload-artifact,
download-artifact, and setup-node from v2/v3 to v4 across all
workflows. Required because GitHub has deprecated v1/v2 artifacts.

https://claude.ai/code/session_01HNvBcQzT1SviRqkUpP5Xce
@mergify
Copy link
Copy Markdown

mergify Bot commented Mar 14, 2026

❌ The current Mergify configuration is invalid

Details
  • Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → method → squash
  • Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → commit_message_template → {{ title }} (#{{ number }})

{{ body }}

Newer npm versions output notice lines before the filename, breaking
the shell subshell expansion in `mv $(npm pack) dist/js/`. Using
`npm pack --pack-destination dist/js` avoids this entirely.

https://claude.ai/code/session_01HNvBcQzT1SviRqkUpP5Xce
@mergify
Copy link
Copy Markdown

mergify Bot commented Mar 14, 2026

❌ The current Mergify configuration is invalid

Details
  • Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → method → squash
  • Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → commit_message_template → {{ title }} (#{{ number }})

{{ body }}

@mergify
Copy link
Copy Markdown

mergify Bot commented Mar 14, 2026

❌ The current Mergify configuration is invalid

Details
  • Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → method → squash
  • Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → commit_message_template → {{ title }} (#{{ number }})

{{ body }}

1 similar comment
@mergify
Copy link
Copy Markdown

mergify Bot commented Mar 14, 2026

❌ The current Mergify configuration is invalid

Details
  • Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → method → squash
  • Extra inputs are not permitted @ root → pull_request_rules → item 0 → actions → queue → commit_message_template → {{ title }} (#{{ number }})

{{ body }}

@tompahoward tompahoward merged commit 126f829 into main Mar 14, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants