chore: bump all (dev)Dependencies #17
Conversation
🦋 Changeset detectedLatest commit: 69bee6a The changes in this PR will be included in the next version bump. This PR includes changesets to release 1 package
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
WalkthroughThis update revises several GitHub Actions workflow files to use more specific version tags for actions, particularly Changes
Poem
📜 Recent review detailsConfiguration used: CodeRabbit UI 📒 Files selected for processing (1)
✅ Files skipped from review due to trivial changes (1)
⏰ Context from checks skipped due to timeout of 90000ms (14)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Create a ticket on our support page for assistance with any issues or questions. Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
|
This pull request is automatically built and testable in CodeSandbox. To see build info of the built libraries, click here or the icon next to each commit SHA. |
commit: |
size-limit report 📦
|
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #17 +/- ##
=========================================
Coverage 100.00% 100.00%
=========================================
Files 3 3
Lines 53 53
Branches 16 16
=========================================
Hits 53 53 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
📊 Package size report No changes
Unchanged files
🤖 This report was automatically generated by pkg-size-action |
There was a problem hiding this comment.
Important
Looks good to me! 👍
Reviewed everything up to 09e1a5b in 1 minute and 16 seconds. Click for details.
- Reviewed
180lines of code in8files - Skipped
1files when reviewing. - Skipped posting
8draft comments. View those below. - Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.
1. .github/workflows/autofix.yml:19
- Draft comment:
Updated checkout action reference to v4.2.2 for consistency. Confirm this intentional update. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%The comment is asking the PR author to confirm their intention regarding a version update, which violates the rule against asking for confirmation of intention. It does not provide a specific code suggestion or highlight a potential issue with the change.
2. .github/workflows/ci.yml:29
- Draft comment:
Checkout action updated to v4.2.2. Ensure uniform versioning across workflows. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%The comment is related to a dependency version change, which is not allowed according to the rules. It suggests ensuring uniform versioning, which is a general suggestion and not a specific code suggestion.
3. .github/workflows/pkg-pr-new.yml:17
- Draft comment:
Checkout action is updated to v4.2.2. Confirm consistency with other workflows. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%The comment is asking the PR author to confirm consistency with other workflows, which is similar to asking them to double-check something. This violates the rule against asking the author to confirm or ensure things. The comment does not provide a specific suggestion or point out a specific issue with the code.
4. .github/workflows/pkg-size.yml:20
- Draft comment:
Bumped pkg-size/action to v1.1.1; review its changelog to check for any breaking changes. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is about a dependency change and suggests reviewing the changelog for breaking changes. It violates the rule against commenting on dependency changes or asking the author to double-check things.
5. .github/workflows/release.yml:23
- Draft comment:
Checkout action updated to v4.2.2; version alignment appears correct. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is purely informative and does not provide any actionable feedback or suggestions. It simply states that the version alignment appears correct, which is not necessary for the PR author to know.
6. .github/workflows/size-limit.yml:28
- Draft comment:
Updated size-limit-action to v1.8.0. Verify that the new version remains compatible with the current setup. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is asking the PR author to verify compatibility of a dependency update, which is against the rules. It doesn't provide a specific suggestion or point out a specific issue.
7. .github/workflows/vercel.yml:17
- Draft comment:
Updated checkout action to v4.2.2 in the Vercel deployment workflow. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is purely informative, as it only states that a version update was made in the workflow. It doesn't provide any actionable feedback or suggestions.
8. package.json:55
- Draft comment:
Multiple dependency version bumps (e.g. stable-hash, @1stG packages, eslint, etc.). Ensure that the updated versions are compatible and the lockfile is updated accordingly. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is asking the PR author to ensure compatibility and update the lockfile, which falls under the rule of not asking the author to double-check or ensure things. It also relates to dependency changes, which should not be commented on unless there's a specific issue identified.
Workflow ID: wflow_48IfCD0hmCazZy5y
You can customize 
|
Deploy preview for eslint-import-context ready! ✅ Preview Built with commit 69bee6a. |
There was a problem hiding this comment.
Pull Request Overview
This PR updates various dependency versions in package.json and refreshes GitHub Action references across CI/workflow files.
- Bump
stable-hashand multiple devDependencies to their latest minor/patch versions - Update
actions/checkout,size-limit-action, andpkg-size/actionreferences in workflow YAMLs - Align comments with updated action versions where applicable
Reviewed Changes
Copilot reviewed 9 out of 9 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| package.json | Upgraded dependency and devDependency versions |
| .github/workflows/vercel.yml | Updated actions/checkout comment to v4.2.2 |
| .github/workflows/size-limit.yml | Updated actions/checkout and size-limit-action versions |
| .github/workflows/release.yml | Updated actions/checkout comment to v4.2.2 |
| .github/workflows/pkg-size.yml | Updated actions/checkout and pkg-size/action versions |
| .github/workflows/pkg-pr-new.yml | Updated actions/checkout comment to v4.2.2 |
| .github/workflows/ci.yml | Updated actions/checkout comment to v4.2.2 |
| .github/workflows/autofix.yml | Updated actions/checkout comment to v4.2.2 |
Comments suppressed due to low confidence (2)
.github/workflows/vercel.yml:17
- The SHA for
actions/checkoutremains unchanged from v4; the comment indicates v4.2.2 but still points to the original commit. Consider updating the action reference to the correct commit SHA for v4.2.2 or revert the comment to match the pinned version.
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
There was a problem hiding this comment.
Actionable comments posted: 0
🧹 Nitpick comments (1)
package.json (1)
57-101: Bulk bump of devDependencies
All devDependencies have been upgraded to newer minor/patch versions. Ensure there are no breaking changes, run the full test suite, and regenerate the lockfile (yarn install) to lock in these updates.
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
⛔ Files ignored due to path filters (1)
yarn.lockis excluded by!**/yarn.lock,!**/*.lock
📒 Files selected for processing (8)
.github/workflows/autofix.yml(1 hunks).github/workflows/ci.yml(1 hunks).github/workflows/pkg-pr-new.yml(2 hunks).github/workflows/pkg-size.yml(1 hunks).github/workflows/release.yml(1 hunks).github/workflows/size-limit.yml(2 hunks).github/workflows/vercel.yml(1 hunks)package.json(2 hunks)
🔇 Additional comments (10)
.github/workflows/release.yml (1)
23-23: Pin checkout action to specific version
Using a commit SHA foractions/checkoutwith a clearv4.2.2comment enhances workflow stability by freezing the exact action version..github/workflows/pkg-pr-new.yml (1)
17-17: Pin checkout action to specific version
Consistent with other workflows,actions/checkoutis now pinned to the same SHA and version comment (v4.2.2), improving reproducibility..github/workflows/autofix.yml (1)
19-19: Pin checkout action to specific version
Bumpingactions/checkoutto the precise commit SHA (withv4.2.2comment) aligns with the repository’s reproducibility guidelines..github/workflows/vercel.yml (1)
17-17: Pin checkout action to specific version
Updatingactions/checkouthere ensures all workflows reference the same SHA and version tag (v4.2.2) for consistency..github/workflows/ci.yml (1)
29-29: Pin checkout action to specific version
The CI workflow now uses the exactactions/checkoutSHA with av4.2.2comment, matching other workflows for consistency..github/workflows/size-limit.yml (2)
16-16: Pinactions/checkoutto a specific patch release
Updating fromv4tov4.2.2improves reproducibility and guards against unexpected breaking changes in minor updates.
28-28: Bumpandresz1/size-limit-actionto v1.8.0
Aligns with other workflows and ensures you’re using the latest features and fixes..github/workflows/pkg-size.yml (2)
17-17: Pinactions/checkoutto v4.2.2
Consistent with other workflows for stability and traceability.
20-20: Upgradepkg-size/actionto v1.1.1
Keeps package size reporting action up-to-date without altering workflow logic.package.json (1)
53-56: Patch bumpstable-hash→^0.0.6
A non-breaking patch bump—looks good.
Signed-off-by: JounQin <admin@1stg.me>
Important
Bump various dependencies and GitHub Actions versions to ensure the latest updates are used.
stable-hashto^0.0.6independencies.devDependenciesinpackage.json, including@1stg/common-config,@eslint-react/eslint-plugin,@shikijs/rehype,@types/node,@vitejs/plugin-react-swc,@vitest/coverage-v8,eslint,react-router-dom,stylelint,unrs-resolver, andvitest.actions/checkouttov4.2.2in all workflows.pkg-size/actiontov1.1.1inpkg-size.yml.andresz1/size-limit-actiontov1.8.0insize-limit.yml.This description was created by
for 09e1a5b. You can customize this summary. It will automatically update as commits are pushed.
Summary by CodeRabbit