Skip to content

chore(deps): promote dependency maintenance stream - #5649

Merged
odinr merged 21 commits into
mainfrom
maintenance/dependencies
Sep 29, 2026
Merged

odinr merged 21 commits into
mainfrom
maintenance/dependencies

Conversation

@github-actions

@github-actions github-actions Bot commented Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Why is this change needed?

Promote the Dependabot maintenance stream through the normal protected-branch review gate.

What is the current behavior?

Routine dependency updates accumulate on maintenance/dependencies without triggering main release and cache workflows.

What is the new behavior?

The accumulated dependency updates are promoted to main as one reviewed change.

What is the intended behavior or invariant?

Only updates already accepted into the maintenance stream are included. The combined stream must pass the full dependency validation suite before it is ready for review.

Does this PR introduce a breaking change?

No known breaking change. Individual dependency research remains linked from the included commits and pull requests.

Impact assessment:

  • Breaking changes: No known breaking changes
  • Version bump: Determined by the included changesets
  • Consumer impact: Dependency updates described by the included changesets
  • Downstream impact: Package builds and tests are validated together by the scheduled or manually dispatched promotion run

Review guidance:

Review the accumulated dependency updates, changesets, and the latest aggregate validation result. Pay particular attention to any manually accepted update in the stream.

Additional context

Included maintenance commits:

Aggregate validation completed before this pull request was created or updated:

  • pnpm build
  • pnpm test
  • pnpm -w check

Checklist

  • Confirm completion of the self-review checklist
  • Confirm TSDoc captures intent when applicable
  • Confirm complex decisions explain why they exist when applicable
  • Confirm React logic is resolved before markup when applicable
  • Confirm documentation is updated when applicable
  • Confirm the promotion pull request reflects the current maintenance stream
  • Confirm adherence to the code of conduct

@changeset-bot

changeset-bot Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 666a9d1

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 15 packages
Name Type
@equinor/fusion-framework-cli-plugin-copilot Patch
@equinor/fusion-framework-module-ag-grid Patch
@equinor/fusion-framework-module-analytics Patch
@equinor/fusion-framework-react-ag-grid Patch
@equinor/fusion-imports Patch
@equinor/fusion-framework-dev-portal Patch
portal-analytics Patch
@equinor/fusion-framework-cookbook-app-react-ag-grid Patch
@equinor/fusion-framework-cli-plugin-ai-base Patch
@equinor/fusion-framework-cli-plugin-ai-index Patch
@equinor/fusion-framework-cli Patch
@equinor/fusion-framework-vitest-plugin-react-app Patch
@equinor/fusion-framework-cli-plugin-ai-chat Patch
poc-portal Patch
portal Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@odinr
odinr force-pushed the maintenance/dependencies branch from 7f5daa0 to da7fa12 Compare September 28, 2026 21:29
@github-actions github-actions Bot added 👾 React 🚧 chore maintaines work, (update deps, workflos ...) 🧬 Modules labels Sep 28, 2026
@github-actions github-actions Bot added 🛠️ utils packages related to utils 💾 CLI fusion framework CLI labels Sep 29, 2026
dependabot Bot and others added 21 commits September 29, 2026 12:06
Bumps [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) from 5.103.1 to 5.103.2.
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.103.2/packages/react-query)

---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.103.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…dates (#5646)

Bumps the vuepress group with 2 updates in the / directory: [@vuepress/plugin-register-components](https://github.com/vuejs/vuepress/tree/HEAD/packages/@vuepress/plugin-register-components) and [vue](https://github.com/vuejs/core).


Updates `@vuepress/plugin-register-components` from 2.0.0-rc.134 to 2.0.0-rc.135
- [Release notes](https://github.com/vuejs/vuepress/releases)
- [Changelog](https://github.com/vuejs/vuepress/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vuepress/commits/HEAD/packages/@vuepress/plugin-register-components)

Updates `vue` from 3.5.42 to 3.5.43
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.42...v3.5.43)

---
updated-dependencies:
- dependency-name: "@vuepress/plugin-register-components"
  dependency-version: 2.0.0-rc.135
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vuepress
- dependency-name: vue
  dependency-version: 3.5.43
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vuepress
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [sass-embedded](https://github.com/sass/embedded-host-node) from 1.103.1 to 1.105.0.
- [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md)
- [Commits](sass/embedded-host-node@1.103.1...1.105.0)

---
updated-dependencies:
- dependency-name: sass-embedded
  dependency-version: 1.105.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…#5578)

* chore(deps): bump the ag-grid group across 1 directory with 3 updates

Bumps the ag-grid group with 3 updates in the / directory: [ag-grid-community](https://github.com/ag-grid/ag-grid), [ag-grid-enterprise](https://github.com/ag-grid/ag-grid) and [ag-grid-react](https://github.com/ag-grid/ag-grid).


Updates `ag-grid-community` from 36.1.0 to 36.2.0
- [Release notes](https://github.com/ag-grid/ag-grid/releases)
- [Commits](ag-grid/ag-grid@release-36.1.0...release-36.2.0)

Updates `ag-grid-enterprise` from 36.1.0 to 36.2.0
- [Release notes](https://github.com/ag-grid/ag-grid/releases)
- [Commits](ag-grid/ag-grid@release-36.1.0...release-36.2.0)

Updates `ag-grid-react` from 36.1.0 to 36.2.0
- [Release notes](https://github.com/ag-grid/ag-grid/releases)
- [Commits](ag-grid/ag-grid@release-36.1.0...release-36.2.0)

---
updated-dependencies:
- dependency-name: ag-grid-community
  dependency-version: 36.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ag-grid
- dependency-name: ag-grid-enterprise
  dependency-version: 36.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ag-grid
- dependency-name: ag-grid-react
  dependency-version: 36.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ag-grid
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): add AG Grid changesets

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Odin Thomas Rochmann <odin.rochmann@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bumps [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode) from 1.134.0 to 1.138.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/vscode)

---
updated-dependencies:
- dependency-name: "@types/vscode"
  dependency-version: 1.138.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…he opentelemetry group across 1 directory (#5537)

* chore(deps): bump @opentelemetry/resources

Bumps the opentelemetry group with 1 update in the / directory: [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js).


Updates `@opentelemetry/resources` from 2.10.0 to 2.11.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.10.0...v2.11.0)

---
updated-dependencies:
- dependency-name: "@opentelemetry/resources"
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: opentelemetry
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): add OpenTelemetry changeset

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Odin Thomas Rochmann <odin.rochmann@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) from 8.4.0 to 8.4.2.
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v8.4.0...v8.4.2)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [rollup](https://github.com/rollup/rollup) from 4.63.2 to 4.63.5.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.63.2...v4.63.5)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.63.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore(deps): bump agent-browser from 0.37.1 to 0.38.1

Bumps [agent-browser](https://github.com/vercel-labs/agent-browser) from 0.37.1 to 0.38.1.
- [Release notes](https://github.com/vercel-labs/agent-browser/releases)
- [Changelog](https://github.com/vercel-labs/agent-browser/blob/main/CHANGELOG.md)
- [Commits](vercel-labs/agent-browser@v0.37.1...v0.38.1)

---
updated-dependencies:
- dependency-name: agent-browser
  dependency-version: 0.38.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): add required changesets

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Odin Thomas Rochmann <odin.rochmann@gmail.com>
Bumps [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) from 5.102.8 to 5.103.2.
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.103.2/packages/react-query-devtools)

---
updated-dependencies:
- dependency-name: "@tanstack/react-query-devtools"
  dependency-version: 5.103.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@azure/identity](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/identity/identity) from 4.13.2 to 4.13.3.
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/@azure/identity_4.13.3/sdk/identity/identity/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/identity_4.13.3/sdk/identity/identity)

---
updated-dependencies:
- dependency-name: "@azure/identity"
  dependency-version: 4.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@assistant-ui/react-markdown](https://github.com/assistant-ui/assistant-ui/tree/HEAD/packages/react-markdown) from 0.14.13 to 0.14.17.
- [Release notes](https://github.com/assistant-ui/assistant-ui/releases)
- [Changelog](https://github.com/assistant-ui/assistant-ui/blob/main/packages/react-markdown/CHANGELOG.md)
- [Commits](https://github.com/assistant-ui/assistant-ui/commits/@assistant-ui/react-markdown@0.14.17/packages/react-markdown)

---
updated-dependencies:
- dependency-name: "@assistant-ui/react-markdown"
  dependency-version: 0.14.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [adm-zip](https://github.com/cthackers/adm-zip) from 0.6.0 to 0.6.1.
- [Release notes](https://github.com/cthackers/adm-zip/releases)
- [Changelog](https://github.com/cthackers/adm-zip/blob/master/history.md)
- [Commits](cthackers/adm-zip@v0.6.0...v0.6.1)

---
updated-dependencies:
- dependency-name: adm-zip
  dependency-version: 0.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [open](https://github.com/sindresorhus/open) from 11.0.2 to 11.0.4.
- [Release notes](https://github.com/sindresorhus/open/releases)
- [Commits](sindresorhus/open@v11.0.2...v11.0.4)

---
updated-dependencies:
- dependency-name: open
  dependency-version: 11.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pretty-bytes](https://github.com/sindresorhus/pretty-bytes) from 7.1.2 to 7.1.3.
- [Release notes](https://github.com/sindresorhus/pretty-bytes/releases)
- [Commits](sindresorhus/pretty-bytes@v7.1.2...v7.1.3)

---
updated-dependencies:
- dependency-name: pretty-bytes
  dependency-version: 7.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore(deps): bump zod from 4.5.4 to 4.6.5

Bumps [zod](https://github.com/colinhacks/zod) from 4.5.4 to 4.6.5.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.5.4...v4.6.5)

---
updated-dependencies:
- dependency-name: zod
  dependency-version: 4.6.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): resolve zod 4.6.5

Correct the Dependabot branch so the workspace override and lockfile actually resolve Zod 4.6.5.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Odin Thomas Rochmann <odin.rochmann@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* chore(deps-dev): bump memfs from 4.68.2 to 4.79.0

Bumps [memfs](https://github.com/streamich/memfs) from 4.68.2 to 4.79.0.
- [Release notes](https://github.com/streamich/memfs/releases)
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md)
- [Commits](streamich/memfs@v4.68.2...v4.79.0)

---
updated-dependencies:
- dependency-name: memfs
  dependency-version: 4.79.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(imports): support memfs 4.79 paths

Resolve JSON paths at the filesystem boundary and align virtual test fixtures with the mocked project directory.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Odin Thomas Rochmann <odin.rochmann@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bumps [@azure/msal-node](https://github.com/AzureAD/microsoft-authentication-library-for-js) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-node-v6.0.0...msal-node-v7.0.0)

---
updated-dependencies:
- dependency-name: "@azure/msal-node"
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) from 3.36.0 to 4.0.1.
- [Release notes](https://github.com/steveukx/git-js/releases)
- [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md)
- [Commits](https://github.com/steveukx/git-js/commits/simple-git@4.0.1/simple-git)

---
updated-dependencies:
- dependency-name: simple-git
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.4.2 to 18.0.4.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.4.2...v18.0.4)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Rebased onto maintenance/dependencies and validated by fresh dependency research, build, unit, visual, and quality checks.
@odinr
odinr force-pushed the maintenance/dependencies branch from 177bb41 to 666a9d1 Compare September 29, 2026 10:06
@odinr
odinr marked this pull request as ready for review September 29, 2026 10:06
@odinr
odinr requested a review from a team as a code owner September 29, 2026 10:06
@github-actions
github-actions Bot marked this pull request as draft September 29, 2026 10:06
@odinr
odinr marked this pull request as ready for review September 29, 2026 10:06
@github-actions
github-actions Bot marked this pull request as draft September 29, 2026 10:21
@odinr
odinr marked this pull request as ready for review September 29, 2026 10:39
@odinr
odinr merged commit d906127 into main Sep 29, 2026
62 of 69 checks passed
@odinr
odinr deleted the maintenance/dependencies branch September 29, 2026 10:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🚧 chore maintaines work, (update deps, workflos ...) 💾 CLI fusion framework CLI 🧬 Modules 👾 React 🛠️ utils packages related to utils

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant