Skip to content

build(deps): pin dependencies#65

Closed
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/pin-dependencies
Closed

build(deps): pin dependencies#65
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/pin-dependencies

Conversation

@renovate

@renovate renovate Bot commented Jul 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
@alwaysmeticulous/recorder-plugin (source) devDependencies pin ^2.293.0 → 2.293.0
@babel/core (source) devDependencies pin ^8.0.1 → 8.0.1
@babel/preset-react (source) devDependencies pin ^8.0.1 → 8.0.1
@cloudflare/vite-plugin (source) devDependencies pin ^1.43.0 → 1.43.0
@cloudflare/vitest-pool-workers (source) devDependencies pin ^0.18.0 → 0.18.0
@​codecov/vite-plugin devDependencies pin ^2.0.1 → 2.0.1
@commitlint/cli (source) devDependencies pin ^21.2.0 → 21.2.0
@commitlint/config-conventional (source) devDependencies pin ^21.2.0 → 21.2.0
@commitlint/types (source) devDependencies pin ^21.2.0 → 21.2.0
@eslint/js (source) devDependencies pin ^10.0.0 → 10.0.1
@nx/eslint (source) devDependencies pin ^23.0.0 → 23.0.1
@nx/playwright (source) devDependencies pin ^23.0.1 → 23.0.1
@nx/react (source) devDependencies pin ^23.0.1 → 23.0.1
@nx/vite (source) devDependencies pin ^23.0.1 → 23.0.1
@nx/vitest (source) devDependencies pin ^23.0.1 → 23.0.1
@playwright/test (source) devDependencies pin ^1.61.1 → 1.61.1
@swc-node/register devDependencies pin ^1.11.1 → 1.11.1
@swc/cli devDependencies pin ~0.8.0 → 0.8.1
@swc/core (source) devDependencies pin ~1.15.43 → 1.15.43
@swc/helpers (source) devDependencies pin ~0.5.18 → 0.5.23
@types/node (source) devDependencies pin ^26.0.0 → 26.1.0
@types/pg (source) devDependencies pin ^8.20.0 → 8.20.0
@typescript-eslint/eslint-plugin (source) devDependencies pin ^8.62.1 → 8.62.1
@typescript-eslint/parser (source) devDependencies pin ^8.62.1 → 8.62.1
@vitejs/plugin-react (source) devDependencies pin ^6.0.3 → 6.0.3
@vitest/coverage-v8 (source) devDependencies pin ~4.1.9 → 4.1.9
@vitest/ui (source) devDependencies pin ~4.1.0 → 4.1.9
docker/dockerfile syntax pinDigest → a57df69
drizzle-kit (source) devDependencies pin ^0.31.10 → 0.31.10
eslint (source) devDependencies pin ^10.6.0 → 10.6.0
eslint-config-prettier devDependencies pin ^10.1.8 → 10.1.8
eslint-plugin-drizzle (source) devDependencies pin ^0.2.3 → 0.2.3
eslint-plugin-import devDependencies pin ^2.32.0 → 2.32.0
eslint-plugin-jsx-a11y devDependencies pin ^6.10.2 → 6.10.2
eslint-plugin-playwright devDependencies pin ^2.10.4 → 2.10.4
eslint-plugin-react devDependencies pin ^7.37.5 → 7.37.5
eslint-plugin-react-hooks (source) devDependencies pin ^7.1.1 → 7.1.1
globals devDependencies pin ^17.6.0 → 17.6.0
husky devDependencies pin ^9.1.7 → 9.1.7
jsdom devDependencies pin ^29.1.1 → 29.1.1
jsonc-eslint-parser devDependencies pin ^3.1.0 → 3.1.0
lint-staged devDependencies pin ^17.0.8 → 17.0.8
nginxinc/nginx-unprivileged final pinDigest → 592b23a
node final pinDigest → 2cf067c
node stage pinDigest → 2cf067c
node stage pinDigest → bdf2cca
nx-cloud devDependencies pin ^19.1.3 → 19.1.3
prettier (source) devDependencies pin ^3.9.4 → 3.9.4
prettier-plugin-tailwindcss devDependencies pin ^0.8.0 → 0.8.0
rimraf devDependencies pin ^6.1.3 → 6.1.3
tailwindcss (source) devDependencies pin ^4.3.2 → 4.3.2
tslib (source) devDependencies pin ^2.3.0 → 2.8.1
tsx (source) devDependencies pin ^4.22.5 → 4.22.5
typescript (source) devDependencies pin ^6.0.3 → 6.0.3
typescript-eslint (source) devDependencies pin ^8.62.1 → 8.62.1
vite (source) devDependencies pin ^8.1.3 → 8.1.3
vite-plugin-dts (source) devDependencies pin ~5.0.2 → 5.0.3
vite-plugin-static-copy devDependencies pin ^4.1.1 → 4.1.1
vitest (source) devDependencies pin ^4.1.9 → 4.1.9
wrangler (source) devDependencies pin ^4.107.0 → 4.107.0

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

Configuration

📅 Schedule: (in timezone America/Boise)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 4, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs		 aerealith 631f033 Commit Preview URL

Branch Preview URL		 Jul 06 2026, 06:07 AM

@github-actions github-actions Bot added type: build Build tooling, packaging, bundling, or release pipeline work. type: ci GitHub Actions, continuous integration, or workflow automation. area: frontend Frontend application, routes, pages, client behavior, or Vite configuration. area: infrastructure Infrastructure, deployment architecture, environment configuration, or operations. automated Created or updated by automation, bots, or repository workflows. dependencies Dependency update, package maintenance, or lockfile change. area: tooling Nx, pnpm, TypeScript, ESLint, Prettier, testing, or local development tooling. labels Jul 4, 2026
@github-actions

github-actions Bot commented Jul 4, 2026 •
edited
Loading

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

@github-code-quality

github-code-quality Bot commented Jul 4, 2026 •
edited
Loading

Copy link
Copy Markdown

Code Coverage Overview

Languages: TypeScript

TypeScript / code-coverage/vitest

The overall coverage remains at 92%, unchanged from the branch.

Updated July 06, 2026 06:03 UTC
Code Coverage is in Public Preview. Learn more and provide us with your feedback.

@github-actions

github-actions Bot commented Jul 4, 2026 •
edited
Loading

Copy link
Copy Markdown

Coverage Report for Aerealith Vitest Coverage (.)

Status Category Percentage Covered / Total
🔵 Lines 91.78% 893 / 973
🔵 Statements 91.79% 895 / 975
🔵 Functions 86.41% 267 / 309
🔵 Branches 87.2% 402 / 461
File CoverageNo changed files found.
Generated in workflow #279 for commit 631f033 by the Vitest Coverage Report Action

@codecov

codecov Bot commented Jul 4, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

@codecov

codecov Bot commented Jul 4, 2026

Copy link
Copy Markdown

Bundle Report

Bundle size has no change ✅

@github-actions

github-actions Bot commented Jul 4, 2026 •
edited
Loading

Copy link
Copy Markdown

Aerealith CI

Overall result: ✅ Passed
Run: #279

Check Result
Dependency install ✅ Passed
Nx installation ✅ Passed
Nx workspace reset ✅ Passed
Git comparison range ✅ Passed
Nx affected validation ✅ Passed
MegaLinter ✅ Passed

Cache

  • pnpm store: hit
  • Nx task cache: managed by Nx Cloud when configured for this workspace.
Run details
  • Base SHA: 80aefb1c59f0cb26d43ea411b77ed2f6ef7aa324
  • Head SHA: 631f033a7a820c4e6f99342f6fac76d1759eb09e
  • Validation targets: lint, typecheck, test, build
  • Logs: download the ci-logs artifact from the workflow run.

@renovate renovate Bot force-pushed the renovate/pin-dependencies branch from 1aa81aa to bc31340 Compare July 5, 2026 03:16
@alwaysmeticulous

alwaysmeticulous Bot commented Jul 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Test suite: Aerealith

✅ Meticulous spotted 0 visual differences across 2 screens tested: view results.

Expected differences? Click here. Last updated for commit c3b82eb build(deps): pin dependencies. This comment will update as new commits are pushed.

@renovate renovate Bot force-pushed the renovate/pin-dependencies branch 4 times, most recently from 6f934dd to b34e787 Compare July 5, 2026 08:03
@Sinless777 Sinless777 moved this to Inbox in Aerealith Delivery Jul 5, 2026
@Sinless777 Sinless777 moved this from Inbox to In Review in Aerealith Delivery Jul 5, 2026
@renovate renovate Bot force-pushed the renovate/pin-dependencies branch 2 times, most recently from b93a35a to 992f93f Compare July 5, 2026 23:09
@Sinless777

Sinless777 commented Jul 5, 2026

Copy link
Copy Markdown
Contributor

@renovate-bot rebase

@renovate renovate Bot force-pushed the renovate/pin-dependencies branch 2 times, most recently from e94f9ab to 635e1c2 Compare July 6, 2026 03:07
@Sinless777 Sinless777 force-pushed the renovate/pin-dependencies branch from 635e1c2 to 70ed508 Compare July 6, 2026 05:55
@renovate renovate Bot force-pushed the renovate/pin-dependencies branch from 70ed508 to da284b8 Compare July 6, 2026 05:59
@renovate renovate Bot changed the title chore(deps): pin dependencies build(deps): pin dependencies Jul 6, 2026
@Sinless777 Sinless777 force-pushed the renovate/pin-dependencies branch from da284b8 to c3b82eb Compare July 6, 2026 06:01
@renovate renovate Bot force-pushed the renovate/pin-dependencies branch from c3b82eb to 631f033 Compare July 6, 2026 06:05
@Sinless777

Sinless777 commented Jul 6, 2026

Copy link
Copy Markdown
Contributor

Closing because this Renovate pinning branch cannot satisfy the repository quality gate: Renovate repeatedly restores Docker image references in tag@digest form, while Sonar rule docker:S8431 requires either a tag or a digest, not both. The Sonar-compliant digest-only amendment was validated locally but automatically overwritten twice by Renovate. No failing change will be merged.

@Sinless777 Sinless777 closed this Jul 6, 2026
@Sinless777 Sinless777 deleted the renovate/pin-dependencies branch July 6, 2026 06:05
@sonarqubecloud

sonarqubecloud Bot commented Jul 6, 2026

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
C Maintainability Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area: frontend Frontend application, routes, pages, client behavior, or Vite configuration. area: infrastructure Infrastructure, deployment architecture, environment configuration, or operations. area: tooling Nx, pnpm, TypeScript, ESLint, Prettier, testing, or local development tooling. automated Created or updated by automation, bots, or repository workflows. dependencies Dependency update, package maintenance, or lockfile change. type: build Build tooling, packaging, bundling, or release pipeline work. type: ci GitHub Actions, continuous integration, or workflow automation.

Projects

Aerealith Delivery
Archived in project

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Sinless777