镜像站点 · 本页由第三方 GitHub 只读镜像提供，非 GitHub 官方站点，不接受任何登录或凭据输入。前往 github.com
Skip to content

chore(deps): bump the major-updates group across 1 directory with 8 updates - #191

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-updates-f45fb43cfb
Closed

chore(deps): bump the major-updates group across 1 directory with 8 updates#191
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-updates-f45fb43cfb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the major-updates group with 8 updates in the / directory:

Package From To
@changesets/cli 2.31.1 3.0.3
@rtorcato/repo-tooling 3.12.1 4.4.0
@vitest/coverage-v8 4.1.10 5.0.2
esbuild-node-externals 1.23.1 2.0.0
jsdom 26.1.0 30.1.1
vitest 4.1.10 5.0.2
@tanstack/react-table 8.21.3 9.2.4
postcss-cli 11.0.1 12.0.0

Updates @changesets/cli from 2.31.1 to 3.0.3

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​3.0.3

Patch Changes

  • #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

  • #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

  • Updated dependencies [3f163da, bfe9050, e522996]:

    • @​changesets/apply-release-plan@​8.1.1
    • @​changesets/config@​4.0.1

@​changesets/cli@​3.0.2

Patch Changes

@​changesets/cli@​3.0.1

Patch Changes

@​changesets/cli@​3.0.0

Major Changes

  • #2128 7113c01 Thanks @​Andarist! - Renamed the changeset tag command to changeset git-tag.

  • #2074 3599e47 Thanks @​bluwy! - Set supported package manager versions in "engines" field, including npm >=10.9.0, pnpm >=10.0.0, and yarn >=4.5.2.

  • #1860 92b1c1b Thanks @​mixelburg! - changeset version now exits with code 1 when there are no unreleased changesets, instead of silently exiting with code 0.

    This makes it easier to detect when a version step is a no-op — for example, to prevent accidentally publishing packages with incorrect version tags when using --snapshot mode.

  • #1482 df424a4 Thanks @​Andarist! - Bumped supported Node versions to ^22.11 || ^24 || >=26

  • #1994 062530b Thanks @​bluwy! - The prettier option in .changeset/config.json has been removed in favor of format. format supports "auto", "prettier", "oxfmt", "deno", and "dprint", and false disables formatting. If you previously used prettier: false, migrate to format: false or remove the option to use automatic formatter detection.

  • #2190 96b65ee Thanks @​bluwy! - Move versioned prerelease changesets to .changeset/pre/ folder instead of accumulating in the root and tracking the versioned changeset ids in the .changeset/pre.json file. Existing pre.json will auto-migrate to this new structure on the next run of changeset version or when calling changeset status.

    This change allows easier management of versioned prerelease changesets (for the final stable release) and current queued changesets (for the next prerelease). Changesets in .changeset/pre/ can be edited or deleted depending if it's still relevant for the final stable release of a package. There's no need to synchronize the changeset ids in pre.json if certain changesets are deleted.

  • #2145 f5887ff Thanks @​Andarist! - Removed Yarn Classic support

  • #2097 8c88f6a Thanks @​Andarist! - Packages with only prerelease versions published will now be published with the prerelease tag in the prerelease mode if the target registry doesn't auto-assign latest tag. npm registry itself does that and such packages will continue to be released with latest tag (and not with the configured prerelease tag).

  • #1879 c76b232 Thanks @​beeequeue! - Removed warning messages about using v1 configs. They will now be silently ignored.

... (truncated)

Changelog

Sourced from @​changesets/cli's changelog.

3.0.3

Patch Changes

  • #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

  • #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

  • Updated dependencies [3f163da, bfe9050, e522996]:

    • @​changesets/apply-release-plan@​8.1.1
    • @​changesets/config@​4.0.1

3.0.2

Patch Changes

3.0.1

Patch Changes

3.0.0

Major Changes

  • #2128 7113c01 Thanks @​Andarist! - Renamed the changeset tag command to changeset git-tag.

  • #2074 3599e47 Thanks @​bluwy! - Set supported package manager versions in "engines" field, including npm >=10.9.0, pnpm >=10.0.0, and yarn >=4.5.2.

  • #1860 92b1c1b Thanks @​mixelburg! - changeset version now exits with code 1 when there are no unreleased changesets, instead of silently exiting with code 0.

    This makes it easier to detect when a version step is a no-op — for example, to prevent accidentally publishing packages with incorrect version tags when using --snapshot mode.

  • #1482 df424a4 Thanks @​Andarist! - Bumped supported Node versions to ^22.11 || ^24 || >=26

  • #1994 062530b Thanks @​bluwy! - The prettier option in .changeset/config.json has been removed in favor of format. format supports "auto", "prettier", "oxfmt", "deno", and "dprint", and false disables formatting. If you previously used prettier: false, migrate to format: false or remove the option to use automatic formatter detection.

  • #2190 96b65ee Thanks @​bluwy! - Move versioned prerelease changesets to .changeset/pre/ folder instead of accumulating in the root and tracking the versioned changeset ids in the .changeset/pre.json file. Existing pre.json will auto-migrate to this new structure on the next run of changeset version or when calling changeset status.

    This change allows easier management of versioned prerelease changesets (for the final stable release) and current queued changesets (for the next prerelease). Changesets in .changeset/pre/ can be edited or deleted depending if it's still relevant for the final stable release of a package. There's no need to synchronize the changeset ids in pre.json if certain changesets are deleted.

  • #2145 f5887ff Thanks @​Andarist! - Removed Yarn Classic support

... (truncated)

Commits

Updates @rtorcato/repo-tooling from 3.12.1 to 4.4.0

Release notes

Sourced from @​rtorcato/repo-tooling's releases.

v4.4.0

4.4.0 (2026-09-29)

Bug Fixes

  • doctor: report missing security automation when the lock records it (#704) (621c1e2), closes #692 #692

Features

  • brand: scaffold a favicon and render the PNGs in fix brand (#705) (03544e9), closes #678

v4.3.1

4.3.1 (2026-09-29)

Bug Fixes

  • docs-site: align scaffold dependency ranges with the family (#707) (ab698a5), closes #674

v4.3.0

4.3.0 (2026-09-29)

Bug Fixes

  • dependabot: assign the owner and comment when a PR falls through to manual review (#703) (1aa5c68), closes #694

Features

  • setup: offer brand assets in the wizard and record the choice (#702) (ccebaeb), closes #677

v4.2.0

4.2.0 (2026-09-24)

Bug Fixes

  • docs-site: emit the scaffold in Biome preset style and drop the smoke spec (#681) (5527582), closes #662

Features

  • fix: let selfSafe fixers run on this repo under REPO_TOOLING_ALLOW_SELF (#682) (95c8e39), closes #673

v4.1.0

4.1.0 (2026-09-24)

... (truncated)

Commits
  • 03544e9 feat(brand): scaffold a favicon and render the PNGs in fix brand (#705)
  • 621c1e2 fix(doctor): report missing security automation when the lock records it (#704)
  • ab698a5 fix(docs-site): align scaffold dependency ranges with the family (#707)
  • 1aa5c68 fix(dependabot): assign the owner and comment when a PR falls through to manu...
  • ccebaeb feat(setup): offer brand assets in the wizard and record the choice (#702)
  • bdf160d chore(deps): bump @​rtorcato/repo-ai to 3.1.1 and fill .repo-ai.json defaults ...
  • 9c5d524 chore: spell out the loop's tuning keys in .repo-ai.json (#699)
  • 5eac732 chore: hand rules.aiLoop and rules.requiredSkills over to .repo-ai.json (#698)
  • 210fedb chore(deps): bump @​rtorcato/repo-ai to 3.0.1 (#697)
  • eb4c9eb docs: name repo-ai's ai-loop in comments that still say ai-issue-loop (#695)
  • Additional commits viewable in compare view

Updates @vitest/coverage-v8 from 4.1.10 to 5.0.2

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.2

   🐞 Bug Fixes

    View changes on GitHub

v5.0.1

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates esbuild-node-externals from 1.23.1 to 2.0.0

Release notes

Sourced from esbuild-node-externals's releases.

esbuild-node-externals: v2.0.0

2.0.0 (2026-08-04)

⚠ BREAKING CHANGES

  • migrate package to esm-only (#92)

Features

Commits

Updates jsdom from 26.1.0 to 30.1.1

Release notes

Sourced from jsdom's releases.

v30.1.1

  • Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@​asamuzaK)
  • Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@​asamuzaK)
  • Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@​asamuzaK)
  • Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@​scttcper)
  • Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@​FedgeNo)
  • Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@​FedgeNo)
  • Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.
  • Fixed the storageQuota option being ignored by frames.
  • Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.
  • Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@​FedgeNo)
  • Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.
  • Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.
  • Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@​asamuzaK)

v30.1.0

jsdom is feeling the AGI!

This release is dedicated to @​scttcper, who unleashed @​codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @​scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

  • Added named access to elements on document, such as document.myForm for <form name="myForm">. (@​vojtisprime11)
  • Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.
  • Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.
  • Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@​scttcper, @​erezrokah)
  • Improved performance of getComputedStyle(), style changes, and CSS serialization. (@​scttcper, @​jhult)
  • Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@​scttcper)
  • Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@​scttcper)
  • Changed window.close() to preserve access to the document and its DOM through retained references.
  • Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@​asamuzaK)
  • Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@​asamuzaK)
  • Fixed document.querySelector() failing to find a matching element when an earlier element has the same ID but does not match the rest of the selector. (@​vojtisprime11)
  • Fixed :focus matching in shadow trees. (@​asamuzaK)
  • Fixed DOM insertion and replacement, including valid document.replaceChildren() calls, invalid document element and doctype placements, and mutations during element.replaceWith().
  • Fixed the ordering of script execution, custom element callbacks, iframe loading, and mutation observer notifications during DOM insertion, including in shadow trees.
  • Fixed queued events and navigation continuing after window.close() or iframe removal, and prevented new scripts, resource loads, timers, and animation frames from starting in destroyed documents. (@​scttcper)
  • Fixed parent documents waiting indefinitely for loading to finish when a child iframe removes itself during loading.
  • Fixed request cancellation across redirects, during pending requestInterceptor() callbacks, and when reusing an XMLHttpRequest after aborting it.
  • Fixed resource loading and JSDOM.fromURL() potentially hanging when response handling throws and response stream cleanup does not finish.
  • Fixed successful cached resource loads being treated as aborted.
  • Fixed getComputedStyle() and document.styleSheets using the wrong stylesheet order after inserting or updating <style> elements.
  • Fixed getComputedStyle() ignoring nested @import and @media rules in imported stylesheets, and returning stale results after imports finish loading.
  • Fixed style invalidation, stylesheet removal, and frame source updates in shadow trees.
  • Fixed repeated getComputedStyle() calls changing case-sensitive background URLs, and inconsistent resolution of border shorthands containing system colors. (@​scttcper)
  • Fixed computed border widths, including borderless elements incorrectly reporting 16px, which regressed in v30.0.0. (@​Alberto-BaseNet)
  • Fixed getComputedStyle() to resolve 'font-weight' keywords to numeric values. (@​tianrking)
  • Fixed getComputedStyle() to convert lengths to pixels inside CSS math functions containing percentages, and to resolve percentages in 'font-size' math functions. (@​soroushm)

... (truncated)

Commits
  • 0a117f4 30.1.1
  • 103f67d Remove unnecessary window cleanup from API tests
  • cdda00a Test HTTP/2 document and subresource loading
  • 7ab92ce Update @​asamuzakjp/dom-selector to v9.2.1
  • d940c20 Share jsdom settings across descendant windows
  • 6ba40cb Fix and simplify option propagation
  • 3b3be70 Preserve CSS priorities across declaration updates
  • 97b2758 Align focusing and unfocusing with HTML
  • b7b460b Update w3c-xmlserializer to v6
  • 71d562f Update html-encoding-sniffer to v7
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jsdom since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates vitest from 4.1.10 to 5.0.2

Release notes

Sourced from vitest's releases.

v5.0.2

   🐞 Bug Fixes

    View changes on GitHub

v5.0.1

   🚀 Features

   🐞 Bug Fixes

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 6, 2026
@rtorcato-bot

rtorcato-bot commented Oct 6, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

🤖 Automated security review — @Warden 🐝 (Buzz agent) via ai-loop. Daily sweep: this PR is red, so it is being recreated against main and skipped today. No security verdict posted.

@rtorcato-bot

rtorcato-bot commented Oct 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

@dependabot recreate
🤖 Automated review — @Stinger 🐝 (Buzz agent) via ai-loop.

rtorcato-bot
rtorcato-bot reviewed Oct 6, 2026
View reviewed changes

@rtorcato-bot rtorcato-bot left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 Automated review — @Stinger 🐝 (Buzz agent) via ai-loop.

Changes. Three majors in this group break the repo, and main is green:

  • @tanstack/react-table 9: getCoreRowModel/useReactTable/VisibilityState are gone and ColumnDef now takes 2-3 type params. This breaks shadcn-ui data-table.tsx, its stories and tests (build + test).
  • vitest 5: jest-dom matchers drop out of the Assertion type in theme-provider.test.tsx (typecheck, docs-build).
  • @rtorcato/repo-tooling 4: doctor fails on new drift checks.
    A recreate will not fix this.

Before merging

  • Split @tanstack/react-table, vitest/@vitest/coverage-v8 and @rtorcato/repo-tooling into their own migration PRs (or ignore them in this group). The others look safe: esbuild-node-externals 2 and postcss-cli 12 ran clean in the build step. For @changesets/cli 3, confirm changesets/action@v1 works with it, since it needs Node ^22.11.

@rtorcato-bot rtorcato-bot added the ai-changes Reviewer requested changes label Oct 6, 2026
@dependabot
chore(deps): bump the major-updates group across 1 directory with 8 u…
31957ff 
…pdates

Bumps the major-updates group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `2.31.1` | `3.0.3` |
| [@rtorcato/repo-tooling](https://github.com/rtorcato/repo-tooling) | `3.12.1` | `4.4.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `5.0.2` |
| [esbuild-node-externals](https://github.com/pradel/esbuild-node-externals) | `1.23.1` | `2.0.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `26.1.0` | `30.1.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `5.0.2` |
| [@tanstack/react-table](https://github.com/TanStack/table/tree/HEAD/packages/react-table) | `8.21.3` | `9.2.4` |
| [postcss-cli](https://github.com/postcss/postcss-cli) | `11.0.1` | `12.0.0` |



Updates `@changesets/cli` from 2.31.1 to 3.0.3
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.3/packages/cli)

Updates `@rtorcato/repo-tooling` from 3.12.1 to 4.4.0
- [Release notes](https://github.com/rtorcato/repo-tooling/releases)
- [Changelog](https://github.com/rtorcato/repo-tooling/blob/main/CHANGELOG.md)
- [Commits](rtorcato/repo-tooling@v3.12.1...v4.4.0)

Updates `@vitest/coverage-v8` from 4.1.10 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/coverage-v8)

Updates `esbuild-node-externals` from 1.23.1 to 2.0.0
- [Release notes](https://github.com/pradel/esbuild-node-externals/releases)
- [Commits](pradel/esbuild-node-externals@esbuild-node-externals-v1.23.1...esbuild-node-externals-v2.0.0)

Updates `jsdom` from 26.1.0 to 30.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v26.1.0...v30.1.1)

Updates `vitest` from 4.1.10 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest)

Updates `@tanstack/react-table` from 8.21.3 to 9.2.4
- [Release notes](https://github.com/TanStack/table/releases)
- [Changelog](https://github.com/TanStack/table/blob/main/packages/react-table/CHANGELOG.md)
- [Commits](https://github.com/TanStack/table/commits/@tanstack/react-table@9.2.4/packages/react-table)

Updates `postcss-cli` from 11.0.1 to 12.0.0
- [Release notes](https://github.com/postcss/postcss-cli/releases)
- [Changelog](https://github.com/postcss/postcss-cli/blob/master/CHANGELOG.md)
- [Commits](postcss/postcss-cli@11.0.1...12.0.0)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: "@rtorcato/repo-tooling"
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: "@tanstack/react-table"
  dependency-version: 9.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: esbuild-node-externals
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: jsdom
  dependency-version: 30.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: postcss-cli
  dependency-version: 12.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: vitest
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/major-updates-f45fb43cfb branch from 315236e to 31957ff Compare October 6, 2026 18:24
This was referenced Oct 6, 2026
Closed
Merged
@rtorcato-bot

rtorcato-bot commented Oct 6, 2026

Copy link
Copy Markdown
Collaborator

🤖 Automated — @Megatron 🐝 (Buzz agent) via ai-loop.

Split and replaced. The vitest/jsdom/changesets/esbuild-node-externals/postcss-cli majors, plus the jest-dom /vitest fix, are in #196. @tanstack/react-table 9 breaks the public ColumnDef re-export and is tracked in #195. @rtorcato/repo-tooling is handled by #192. This one can be closed once #196 merges.

rtorcato-bot added a commit that referenced this pull request Oct 6, 2026
@rtorcato-bot
chore(deps): bump vitest 5, jsdom 30 and other dev majors (#196)
5d29318 
🤖 *Automated — `@Megatron` 🐝 (Buzz agent) via ai-loop.*

This does the upgrades from Dependabot #191 (major-updates group, 8
majors) that are safe to land now, plus the code fix they need. #191 is
red on typecheck, test, build, docs-build and doctor. Once this merges,
#191 can be closed (left to Fizz).

## In this PR
| Package | From | To |
| --- | --- | --- |
| `vitest` | 4.1.10 | ^5.0.2 |
| `@vitest/coverage-v8` | 4.1.10 | ^5.0.2 |
| `jsdom` | 26 | ^30.1.1 |
| `esbuild-node-externals` | 1.23.1 | 2.0.0 (exact pin kept) |
| `postcss-cli` | 11 | ^12.0.0 |

**Fix:** with Vitest 5, the bare `import '@testing-library/jest-dom'` no
longer augments Vitest's `Assertion`, so `toBeInTheDocument` /
`toHaveTextContent` fail to typecheck (TS2339). Both `src/test/setup.ts`
files now import `@testing-library/jest-dom/vitest`, jest-dom's Vitest
entry, which augments `declare module 'vitest'`.

All of these are devDependencies, so there's no changeset: nothing a
consumer installs changes.

## Split out
- **`@changesets/cli` 2 → 3**: moved to #197 (removed here in 948066f).
`changesets/action@v2` requires CLI v3, and action v1 can't detect what
CLI v3 published, so the two land together.
- **`@tanstack/react-table` 8 → 9**: #195. v9 rewrites the API, and
`@rtorcato/shadcn-ui` re-exports `ColumnDef` publicly, so v9 is a
breaking change for consumers that needs an owner decision and a major
changeset.
- **`@rtorcato/repo-tooling` 3 → 4.4**: #192 already moves it to
`^5.5.2`. Whichever of this PR and #192 lands second needs its lockfile
refreshed.

## Verification (local)
Every command from `ci.yml` passes: `pnpm install --frozen-lockfile`,
`lint`, `typecheck`, `coverage` (49 + 178 tests on Vitest 5.0.2),
`build`, `bundle-size` and the docs build. `doctor` shows only Node and
Milestones drift, which `main` shows locally too (environment-specific).
CI on `main` reports 0 drift.

---------

Co-authored-by: Megatron (rtorcato-bot) <319595688+rtorcato-bot@users.noreply.github.com>
@rtorcato-bot

rtorcato-bot commented Oct 6, 2026

Copy link
Copy Markdown
Collaborator

🤖 Automated — @Fizz 🐝 (Buzz agent) via ai-loop.

Superseded: the safe majors landed in #196, TanStack Table 9 is split out to #195, @changesets/cli 3 goes with #197, and repo-tooling goes with #192.

@dependabot @github

dependabot Bot commented on behalf of github Oct 6, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/major-updates-f45fb43cfb branch October 6, 2026 19:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rtorcato-bot rtorcato-bot rtorcato-bot left review comments

Assignees

No one assigned

Labels

ai-changes Reviewer requested changes dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rtorcato-bot