Skip to content

chore(deps)(deps-dev): bump lint-staged from 17.0.5 to 17.0.7 in /apps/ui#147

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/apps/ui/lint-staged-17.0.7
Closed

chore(deps)(deps-dev): bump lint-staged from 17.0.5 to 17.0.7 in /apps/ui#147
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/apps/ui/lint-staged-17.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps lint-staged from 17.0.5 to 17.0.7.

Release notes

Sourced from lint-staged's releases.

v17.0.7

Patch Changes

v17.0.6

Patch Changes

  • #1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

  • #1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

  • #1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

  • #1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

Changelog

Sourced from lint-staged's changelog.

17.0.7

Patch Changes

17.0.6

Patch Changes

  • #1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

  • #1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

  • #1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

  • #1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

Commits
  • cd11fec Merge pull request #1807 from lint-staged/changeset-release/main
  • 15a8ee0 chore(changeset): release
  • 797bbd9 Merge pull request #1808 from lint-staged/add-stashing-faq
  • 504e307 docs: add FAQ entry on how stashing works
  • eff5cd1 Merge pull request #1806 from lint-staged/update-tinyexec
  • e692e58 build(deps): update tinyexec@^1.2.4
  • a2dd4ea Merge pull request #1805 from lint-staged/update-github-templates
  • c928519 docs: update GitHub templates
  • 094ba56 Merge pull request #1798 from lint-staged/changeset-release/main
  • 88e19fe chore(changeset): release
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [lint-staged](https://github.com/lint-staged/lint-staged) from 17.0.5 to 17.0.7.
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.0.5...v17.0.7)

---
updated-dependencies:
- dependency-name: lint-staged
  dependency-version: 17.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 8, 2026
@dependabot dependabot Bot requested a review from agjs as a code owner June 8, 2026 07:15
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 8, 2026
agjs added a commit that referenced this pull request Jun 9, 2026
* chore(deps): bump GitHub Actions pins (checkout, codecov, changesets)

- actions/checkout 6.0.2 -> 6.0.3 (23 workflows)
- codecov/codecov-action 6.0.1 -> 7.0.0 (api-ci, ui-validate)
- changesets/action 1.8.0 -> 1.9.0 (release workflows)

Consolidates dependabot PRs #128, #129, #140.

* chore(deps): bump apps/api dependencies

- @anthropic-ai/sdk 0.98.0 -> 0.100.1, openai 6.39.0 -> 6.39.1 (#148)
- @sentry/bun 10.53.1 -> 10.55.0 (#144)
- bullmq 5.77.3 -> 5.77.6 (#134, ioredis held back below)
- nodemailer 8.0.8 -> 8.0.10 (#138)
- stripe 22.1.1 -> 22.2.0 (#136)
- eslint 10.4.0 -> 10.4.1, eslint-plugin-prettier 5.5.5 -> 5.5.6 (#141)
- @boring-stack-pkg/eslint-plugin-jwt-cookies 0.1.1 -> 0.1.2 (#150)
- @boring-stack-pkg/eslint-plugin-module-boundaries 0.1.1 -> 0.1.2 (#149)

ioredis intentionally kept at 5.10.1 (not bumped to 5.11.0 from #134's
group): bullmq@5.77.6 pins ioredis to an exact 5.10.1, so a top-level
5.11.0 cannot dedupe and the two copies' connector types are structurally
incompatible (TS2769). Defer ioredis until bullmq updates its pin.

* chore(deps): bump apps/ui dependencies

- @sentry/react 10.53.1 -> 10.55.0 (#142)
- react-hook-form 7.75.0 -> 7.77.0 (#145)
- react-router-dom 7.15.1 -> 7.16.0 (#130)
- lucide-react 1.16.0 -> 1.17.0 (#133)
- lint-staged 17.0.5 -> 17.0.7 (#147)
- tsx 4.22.3 -> 4.22.4 (#146)
- @eslint/json 1.2.0 -> 2.0.0, eslint 10.4.0 -> 10.4.1, eslint-import-resolver-typescript 4.4.4 -> 4.4.5 (#139)
- @boring-stack-pkg/eslint-plugin-module-boundaries 0.1.1 -> 0.1.2 (#143)

Consolidates dependabot PRs #130, #133, #139, #142, #143, #145, #146, #147.

* chore(deps): bump apps/docs dependencies + pin @astrojs/markdown-remark

- astro 6.3.7 -> 6.4.2 (#132)
- @astrojs/react 5.0.5 -> 5.0.6 (#135)
- @astrojs/sitemap 3.7.2 -> 3.7.3 (#131)
- wrangler 4.94.0 -> 4.95.0 (#137)

Adds an @astrojs/markdown-remark@7.2.0 override: astro 6.4.2 pins that
exact version (only it exposes the `unified` subpath export the prerender
runtime imports), but Starlight pulls 7.1.x transitively; without the pin
the hoisted 7.1.x copy shadows astro's nested 7.2.0 and `astro build`
fails. Rationale documented in the //overrides block.

Consolidates dependabot PRs #131, #132, #135, #137.
@agjs

agjs commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Superseded by #151, which consolidated all open Dependabot bumps and landed in main. Closing.

@dependabot close

@agjs agjs closed this Jun 9, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@agjs agjs deleted the dependabot/bun/apps/ui/lint-staged-17.0.7 branch June 9, 2026 12:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant