Repository navigation
chore(deps): promote dependency maintenance stream - #5649
Merged
Merged
Conversation
🦋 Changeset detectedLatest commit: 666a9d1 The changes in this PR will be included in the next version bump. This PR includes changesets to release 15 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
odinr
force-pushed
the
maintenance/dependencies
branch
from
September 28, 2026 21:29
7f5daa0 to
da7fa12
Compare
Bumps [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) from 5.103.1 to 5.103.2. - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.103.2/packages/react-query) --- updated-dependencies: - dependency-name: "@tanstack/react-query" dependency-version: 5.103.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…dates (#5646) Bumps the vuepress group with 2 updates in the / directory: [@vuepress/plugin-register-components](https://github.com/vuejs/vuepress/tree/HEAD/packages/@vuepress/plugin-register-components) and [vue](https://github.com/vuejs/core). Updates `@vuepress/plugin-register-components` from 2.0.0-rc.134 to 2.0.0-rc.135 - [Release notes](https://github.com/vuejs/vuepress/releases) - [Changelog](https://github.com/vuejs/vuepress/blob/master/CHANGELOG.md) - [Commits](https://github.com/vuejs/vuepress/commits/HEAD/packages/@vuepress/plugin-register-components) Updates `vue` from 3.5.42 to 3.5.43 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](vuejs/core@v3.5.42...v3.5.43) --- updated-dependencies: - dependency-name: "@vuepress/plugin-register-components" dependency-version: 2.0.0-rc.135 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: vuepress - dependency-name: vue dependency-version: 3.5.43 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: vuepress ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [sass-embedded](https://github.com/sass/embedded-host-node) from 1.103.1 to 1.105.0. - [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md) - [Commits](sass/embedded-host-node@1.103.1...1.105.0) --- updated-dependencies: - dependency-name: sass-embedded dependency-version: 1.105.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…#5578) * chore(deps): bump the ag-grid group across 1 directory with 3 updates Bumps the ag-grid group with 3 updates in the / directory: [ag-grid-community](https://github.com/ag-grid/ag-grid), [ag-grid-enterprise](https://github.com/ag-grid/ag-grid) and [ag-grid-react](https://github.com/ag-grid/ag-grid). Updates `ag-grid-community` from 36.1.0 to 36.2.0 - [Release notes](https://github.com/ag-grid/ag-grid/releases) - [Commits](ag-grid/ag-grid@release-36.1.0...release-36.2.0) Updates `ag-grid-enterprise` from 36.1.0 to 36.2.0 - [Release notes](https://github.com/ag-grid/ag-grid/releases) - [Commits](ag-grid/ag-grid@release-36.1.0...release-36.2.0) Updates `ag-grid-react` from 36.1.0 to 36.2.0 - [Release notes](https://github.com/ag-grid/ag-grid/releases) - [Commits](ag-grid/ag-grid@release-36.1.0...release-36.2.0) --- updated-dependencies: - dependency-name: ag-grid-community dependency-version: 36.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ag-grid - dependency-name: ag-grid-enterprise dependency-version: 36.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ag-grid - dependency-name: ag-grid-react dependency-version: 36.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ag-grid ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): add AG Grid changesets Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Odin Thomas Rochmann <odin.rochmann@gmail.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bumps [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode) from 1.134.0 to 1.138.0. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/vscode) --- updated-dependencies: - dependency-name: "@types/vscode" dependency-version: 1.138.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…he opentelemetry group across 1 directory (#5537) * chore(deps): bump @opentelemetry/resources Bumps the opentelemetry group with 1 update in the / directory: [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js). Updates `@opentelemetry/resources` from 2.10.0 to 2.11.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.10.0...v2.11.0) --- updated-dependencies: - dependency-name: "@opentelemetry/resources" dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: opentelemetry ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): add OpenTelemetry changeset Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Odin Thomas Rochmann <odin.rochmann@gmail.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) from 8.4.0 to 8.4.2. - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v8.4.0...v8.4.2) --- updated-dependencies: - dependency-name: path-to-regexp dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [rollup](https://github.com/rollup/rollup) from 4.63.2 to 4.63.5. - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.63.2...v4.63.5) --- updated-dependencies: - dependency-name: rollup dependency-version: 4.63.5 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore(deps): bump agent-browser from 0.37.1 to 0.38.1 Bumps [agent-browser](https://github.com/vercel-labs/agent-browser) from 0.37.1 to 0.38.1. - [Release notes](https://github.com/vercel-labs/agent-browser/releases) - [Changelog](https://github.com/vercel-labs/agent-browser/blob/main/CHANGELOG.md) - [Commits](vercel-labs/agent-browser@v0.37.1...v0.38.1) --- updated-dependencies: - dependency-name: agent-browser dependency-version: 0.38.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): add required changesets --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Odin Thomas Rochmann <odin.rochmann@gmail.com>
Bumps [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) from 5.102.8 to 5.103.2. - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.103.2/packages/react-query-devtools) --- updated-dependencies: - dependency-name: "@tanstack/react-query-devtools" dependency-version: 5.103.2 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@azure/identity](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/identity/identity) from 4.13.2 to 4.13.3. - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/@azure/identity_4.13.3/sdk/identity/identity/CHANGELOG.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/identity_4.13.3/sdk/identity/identity) --- updated-dependencies: - dependency-name: "@azure/identity" dependency-version: 4.13.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@assistant-ui/react-markdown](https://github.com/assistant-ui/assistant-ui/tree/HEAD/packages/react-markdown) from 0.14.13 to 0.14.17. - [Release notes](https://github.com/assistant-ui/assistant-ui/releases) - [Changelog](https://github.com/assistant-ui/assistant-ui/blob/main/packages/react-markdown/CHANGELOG.md) - [Commits](https://github.com/assistant-ui/assistant-ui/commits/@assistant-ui/react-markdown@0.14.17/packages/react-markdown) --- updated-dependencies: - dependency-name: "@assistant-ui/react-markdown" dependency-version: 0.14.17 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [adm-zip](https://github.com/cthackers/adm-zip) from 0.6.0 to 0.6.1. - [Release notes](https://github.com/cthackers/adm-zip/releases) - [Changelog](https://github.com/cthackers/adm-zip/blob/master/history.md) - [Commits](cthackers/adm-zip@v0.6.0...v0.6.1) --- updated-dependencies: - dependency-name: adm-zip dependency-version: 0.6.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [open](https://github.com/sindresorhus/open) from 11.0.2 to 11.0.4. - [Release notes](https://github.com/sindresorhus/open/releases) - [Commits](sindresorhus/open@v11.0.2...v11.0.4) --- updated-dependencies: - dependency-name: open dependency-version: 11.0.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pretty-bytes](https://github.com/sindresorhus/pretty-bytes) from 7.1.2 to 7.1.3. - [Release notes](https://github.com/sindresorhus/pretty-bytes/releases) - [Commits](sindresorhus/pretty-bytes@v7.1.2...v7.1.3) --- updated-dependencies: - dependency-name: pretty-bytes dependency-version: 7.1.3 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore(deps): bump zod from 4.5.4 to 4.6.5 Bumps [zod](https://github.com/colinhacks/zod) from 4.5.4 to 4.6.5. - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.5.4...v4.6.5) --- updated-dependencies: - dependency-name: zod dependency-version: 4.6.4 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): resolve zod 4.6.5 Correct the Dependabot branch so the workspace override and lockfile actually resolve Zod 4.6.5. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Odin Thomas Rochmann <odin.rochmann@gmail.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* chore(deps-dev): bump memfs from 4.68.2 to 4.79.0 Bumps [memfs](https://github.com/streamich/memfs) from 4.68.2 to 4.79.0. - [Release notes](https://github.com/streamich/memfs/releases) - [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md) - [Commits](streamich/memfs@v4.68.2...v4.79.0) --- updated-dependencies: - dependency-name: memfs dependency-version: 4.79.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * fix(imports): support memfs 4.79 paths Resolve JSON paths at the filesystem boundary and align virtual test fixtures with the mocked project directory. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Odin Thomas Rochmann <odin.rochmann@gmail.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bumps [@azure/msal-node](https://github.com/AzureAD/microsoft-authentication-library-for-js) from 6.0.0 to 7.0.0. - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases) - [Commits](AzureAD/microsoft-authentication-library-for-js@msal-node-v6.0.0...msal-node-v7.0.0) --- updated-dependencies: - dependency-name: "@azure/msal-node" dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) from 3.36.0 to 4.0.1. - [Release notes](https://github.com/steveukx/git-js/releases) - [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md) - [Commits](https://github.com/steveukx/git-js/commits/simple-git@4.0.1/simple-git) --- updated-dependencies: - dependency-name: simple-git dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.4.2 to 18.0.4. - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.4.2...v18.0.4) --- updated-dependencies: - dependency-name: dotenv dependency-version: 18.0.4 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Rebased onto maintenance/dependencies and validated by fresh dependency research, build, unit, visual, and quality checks.
odinr
force-pushed
the
maintenance/dependencies
branch
from
September 29, 2026 10:06
177bb41 to
666a9d1
Compare
odinr
marked this pull request as ready for review
September 29, 2026 10:06
odinr
marked this pull request as ready for review
September 29, 2026 10:06
odinr
approved these changes
Sep 29, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why is this change needed?
Promote the Dependabot maintenance stream through the normal protected-branch review gate.
What is the current behavior?
Routine dependency updates accumulate on
maintenance/dependencieswithout triggeringmainrelease and cache workflows.What is the new behavior?
The accumulated dependency updates are promoted to
mainas one reviewed change.What is the intended behavior or invariant?
Only updates already accepted into the maintenance stream are included. The combined stream must pass the full dependency validation suite before it is ready for review.
Does this PR introduce a breaking change?
No known breaking change. Individual dependency research remains linked from the included commits and pull requests.
Impact assessment:
Review guidance:
Review the accumulated dependency updates, changesets, and the latest aggregate validation result. Pay particular attention to any manually accepted update in the stream.
Additional context
Included maintenance commits:
666a9d170)624b95aee)fae369224)7ac8d140b)16a821832)b69074482)8f5b0ca56)41f68e394)1270c1e2e)2f2cb06a9)79c8e557e)acd625e3d)07652e24a)6c795a700)a0b79cde7)3ef06f4b7)ba3dd6c32)b04020975)6a8f67afc)6ec401390)a5744f912)Aggregate validation completed before this pull request was created or updated:
pnpm buildpnpm testpnpm -w checkChecklist