chore(release): merge dev → main by perasperaactual · Pull Request #419 · Per-Aspera-LLC/stackwright

perasperaactual · 2026-05-15T15:14:59Z

Release: `dev` → `main`

This PR promotes the current dev integration branch to main for a formal stable release.

What happens on merge

CI (release.yml) will automatically:

Exit alpha prerelease mode (changeset pre exit)
Version all packages (consume pending changesets → stable semver)
Build all packages
Publish stable versions to npm (no alpha tag)
Commit version bumps back to main ([skip ci])
Rebase dev onto main and re-enter prerelease mode (alpha)

Changesets included (9)

Changeset	Packages affected	Bump
`collection-provider-interfaces-to-types`	`@stackwright/types`, `@stackwright/collections`, `@stackwright/core`	minor / patch / patch
`fix-cli-bundle-workspace-deps`	`@stackwright/cli`	patch
`fix-core-dts-zod-compat`	`@stackwright/core`	patch
`fix-scaffold-template-versions`	`@stackwright/cli`	patch
`fix-types-prebuild-plugin-zod-compat`	`@stackwright/types`	patch
`remove-workspace-prepublish-guard`	all publishable packages	patch
`scaffold-hook-interfaces-to-types`	`@stackwright/types`, `@stackwright/hooks-registry`	patch
`workspace-publish-guards`	all publishable packages	patch
`zodlike-export-path-fix`	`@stackwright/types`	patch

Net version bumps:

@stackwright/types: 1.3.0-alpha.x → 1.4.0 (minor — new CollectionProvider / ZodLike exports)
All other packages: patch bump to stable

Commits on `dev` not yet on `main` (32)

9e1a0a6 fix(security): tighten pnpm overrides to close dependabot alerts
882fa9e chore(deps): bump react 19.2.5 → 19.2.6 + fix local E2E mobile matrix (#418)
3ea9f53 chore(deps-dev): bump turbo from 2.9.6 to 2.9.14
ed9e6ec chore(deps-dev): bump @typescript-eslint/parser from 8.58.1 to 8.59.3
c227ebe docs(contributing): add lockfile sync rule to pre-push checklist
1c8bb2b chore(deps): bump tailwind-merge from 3.5.0 to 3.6.0
ceb8580 chore(deps-dev): bump @vitest/coverage-v8 from 4.1.4 to 4.1.6
43185e9 chore: hoist typescript to workspace root and bump to ^6 (#417)
5fae1f4 chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 in /packages/cli (#374)
b5cc122 chore(deps-dev): bump typescript in /packages/build-scripts (#369)
9733e49 chore: bump prerelease versions [skip ci]
adb13ae fix(publish): remove prepublishOnly workspace: guard that conflicted with pnpm publish (#411)
6d90e4f chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 in /packages/types (#375)
569c913 chore(deps): bump @inquirer/prompts from 8.4.1 to 8.4.3 (#379)
c0be05a docs(claude): always use date CLI command for current date (#409)
f8766ff chore(deps-dev): bump eslint-config-next from 16.2.3 to 16.2.6 (#380)
3c0ce6b chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 in /packages/nextjs (#370)
5085652 chore(deps): bump maplibre-gl from 4.7.1 to 5.24.0 (#393)
792a581 chore(deps-dev): bump @vitest/ui from 4.1.4 to 4.1.6 (#394)
b673520 chore(deps-dev): bump @types/node from 24.12.2 to 25.6.2 (#395)
ebaa4b2 chore: bump prerelease versions [skip ci]
b9a482b fix(types): move scaffold hook interfaces from hooks-registry to types (#408)
ee8b8b6 chore: bump prerelease versions [skip ci]
496aebb fix(types): move CollectionProvider interfaces from collections to types (#407)
24ff421 chore: bump prerelease versions [skip ci]
c18b6a1 fix: add workspace:* publish guards to all packages (#405)
bdf4555 chore: bump prerelease versions [skip ci]
b51c27c fix(types): export ZodLike and widen issues[].path to PropertyKey[] (#404)
26942dd chore: bump prerelease versions [skip ci]
aa973e5 fix: remove zod internals from .d.ts; update stale scaffold versions (#403)
dbe4bbf chore: add changeset for cli workspace dep bundling fix
64f56d4 chore: re-enter prerelease mode [skip ci]

Post-merge checklist (automated by CI)

release.yml exits prerelease mode, versions, builds, and publishes to npm
Version bump commit pushed to main
dev back-merged and re-entered prerelease mode

Bumps [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) from 8.4.1 to 8.4.3. - [Release notes](https://github.com/SBoudrias/Inquirer.js/releases) - [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@8.4.1...@inquirer/prompts@8.4.3) --- updated-dependencies: - dependency-name: "@inquirer/prompts" dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…es (#375) Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.3. - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) --- updated-dependencies: - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…with pnpm publish (#411) Co-authored-by: Stackwright Bot <bot@per-aspera.dev>

Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.3. - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) --- updated-dependencies: - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#374) Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.3. - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) --- updated-dependencies: - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- Add typescript ^6 to root devDependencies - Update pnpm.overrides.typescript from ^5.8.3 to ^6 - Remove per-package typescript devDependencies from all 15 packages - Migrate moduleResolution from 'node' to 'bundler' across all tsconfigs - Remove stale baseUrl workarounds no longer needed with bundler resolution - Update module: commonjs -> esnext in standalone tsconfigs (tsup owns output format) - Add ignoreDeprecations: '6.0' where tsup injects its own baseUrl internally Closes #371, #372, #373 Co-authored-by: Stackwright Bot <bot@per-aspera.dev>

Bumps [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) from 4.1.4 to 4.1.6. - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8) --- updated-dependencies: - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [tailwind-merge](https://github.com/dcastil/tailwind-merge) from 3.5.0 to 3.6.0. - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](dcastil/tailwind-merge@v3.5.0...v3.6.0) --- updated-dependencies: - dependency-name: tailwind-merge dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 8.58.1 to 8.59.3. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.3/packages/parser) --- updated-dependencies: - dependency-name: "@typescript-eslint/parser" dependency-version: 8.59.3 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [turbo](https://github.com/vercel/turborepo) from 2.9.6 to 2.9.14. - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.9.6...v2.9.14) --- updated-dependencies: - dependency-name: turbo dependency-version: 2.9.12 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

…#418) * chore(deps): bump react and react-dom from 19.2.5 to 19.2.6 Updates pnpm.overrides pins for react and react-dom. Refreshes E2E visual regression baselines for React 19.2.6. Closes #414 * test(e2e): use mobile-firefox locally, full matrix in CI Locally: single mobile-firefox project (avoids extra browser installs, catches the most cross-browser edge cases). CI: retains mobile-chrome + mobile-safari for full coverage. Mirrors the existing reuseExistingServer: !process.env.CI pattern. --------- Co-authored-by: Stackwright Bot <bot@per-aspera.dev>

- hono: >=4.12.14 -> >=4.12.18 (GHSA-qp7p-654g-cw7p, GHSA-hm8q-7f3q-5f36, GHSA-p77w-8qqv-26rm, GHSA-9vqf-7f2p-gf9v, GHSA-69xw-7hcm-h432 + others) - undici: ^7.0.0 -> >=7.24.0 (CVE-2026-1526, CVE-2026-2229, CVE-2026-1528, CVE-2026-2581 + others) - @hono/node-server: >=1.19.10 -> >=1.19.13 (GHSA-92pp-h63x-v22m) - js-yaml: add >=4.1.1 override (CVE-2025-64718 / GHSA-mh29-5h37-fv8m) - postcss: add >=8.5.10 override (CVE-2026-41305 / GHSA-qx2v-qp2m-jg93) Resolves ~90 of 98 open Dependabot alerts via pnpm override floor bumps. Existing overrides for next, basic-ftp, minimatch, lodash, picomatch, path-to-regexp, brace-expansion, glob, flatted, tmp, express-rate-limit, fast-uri, rollup, and diff already cover the remaining alerts.

github-actions · 2026-05-15T15:25:54Z

🧪 Coverage Report\n\n### Overall Coverage\n\n| Metric | Coverage |\n|--------|----------|\n| Lines | ⚠️ 74.83% |\n| Statements | ⚠️ 73.78% |\n| Functions | ⚠️ 75.19% |\n| Branches | ⚠️ 64.71% |\n\n### Coverage by Package\n\n| Package | Lines | Statements | Functions | Branches |\n|---------|-------|-----------|-----------|----------|\n| @stackwright/build-scripts | 82.83% | 81.53% | 83.75% | 74.93% |\n| @stackwright/cli | 56.35% | 56.03% | 53.14% | 55.01% |\n| @stackwright/collections | 100.00% | 92.85% | 100.00% | 85.71% |\n| @stackwright/core | 79.76% | 78.50% | 78.10% | 62.29% |\n| @stackwright/icons | 100.00% | 100.00% | 100.00% | 100.00% |\n| @stackwright/mcp | 86.89% | 84.71% | 78.43% | 66.07% |\n| @stackwright/nextjs | 84.52% | 83.52% | 77.27% | 83.16% |\n| @stackwright/themes | 98.85% | 93.68% | 96.15% | 82.35% |\n| @stackwright/types | 82.63% | 81.99% | 84.21% | 64.45% |\n\n---\n📊 Full HTML report available in workflow artifacts\n

github-actions · 2026-05-15T15:26:33Z

✅ Visual Regression Test Results

Status: ✅ All visual tests passed!

All screenshots match the baseline. No visual regressions detected! 🎉

github-actions · 2026-05-15T15:27:11Z

⚡ Performance Benchmark Results

✅ Build Time Benchmarks: PASSED

✅ Bundle Size Benchmarks: PASSED

❌ Runtime Vitals Benchmarks: FAILED

📝 Note: Detailed results are available in the job logs.

🎯 Performance Budgets:

Build time: <70s total
First-load JS: <100KB gzipped
FCP: <1.5s, LCP: <2.5s, TTI: <3s

Updated: 2026-05-15T15:27:11.074Z

github-actions · 2026-05-15T15:35:04Z

♿ Accessibility Test Results

Overall Status: ✅ 0/0 tests passed

🦮 WCAG 2.1 AA Compliance

No WCAG test results available

⌨️ Keyboard Navigation

No keyboard navigation test results available

⚠️ No accessibility tests were executed. Check the workflow logs for setup issues.

📊 Detailed Report

Download the full HTML accessibility report from the workflow artifacts for:

Detailed WCAG violation descriptions
Specific element selectors and fixes
Color contrast issues
Keyboard navigation flow analysis

🔍 Testing Checklist

Our accessibility tests verify:

✅ WCAG 2.1 Level AA compliance
✅ Color contrast in light and dark modes
✅ Tab key navigation through all interactive elements
✅ Focus indicators are visible
✅ No keyboard traps
✅ Skip links and ARIA landmarks
✅ Screen reader compatibility

Powered by @axe-core/playwright and Playwright

Automated commits on dev (prerelease version bumps, back-merge re-entry) used [skip ci] in their messages to suppress CI reruns. However, GitHub's [skip ci] check scans the ENTIRE commit message including the body — and standard merge commits to main auto-populate their body with the list of individual PR commits. This caused [skip ci] to appear in the main merge commit body, suppressing ALL workflow triggers on every dev→main merge. Remove [skip ci] from all automated commit messages in prerelease.yml and release.yml. Loop prevention is handled entirely by the existing job-level if conditions, which is the correct mechanism. Update the startsWith guard in release.yml to match the new commit message string (without [skip ci]). Root cause confirmed: PRs #410 and #419 both show zero workflow runs on main because their merge commit bodies contained [skip ci] lines from automated dev commits.

Automated commits on dev (prerelease version bumps, back-merge re-entry) used the GitHub skip-ci flag in their messages to suppress CI reruns. However, GitHub scans the ENTIRE commit message body, not just the subject line — and standard merge commits to main auto-populate their body with the list of individual PR commits. This caused the skip flag to appear in the main merge commit body, suppressing ALL workflow triggers on every dev-to-main merge. Remove skip-ci flags from all automated commit messages in prerelease.yml and release.yml. Loop prevention is handled entirely by the existing job-level if conditions, which is the correct mechanism. Update the startsWith guard in release.yml to match the new commit message string. Root cause confirmed: PRs #410 and #419 both show zero workflow runs on main because their merge commit bodies contained skip-ci lines from automated dev commits.

Automated commits on dev (prerelease version bumps, back-merge re-entry) used the GitHub skip-ci flag in their messages to suppress CI reruns. However, GitHub scans the ENTIRE commit message body, not just the subject line — and standard merge commits to main auto-populate their body with the list of individual PR commits. This caused the skip flag to appear in the main merge commit body, suppressing ALL workflow triggers on every dev-to-main merge. Remove skip-ci flags from all automated commit messages in prerelease.yml and release.yml. Loop prevention is handled entirely by the existing job-level if conditions, which is the correct mechanism. Update the startsWith guard in release.yml to match the new commit message string. Root cause confirmed: PRs #410 and #419 both show zero workflow runs on main because their merge commit bodies contained skip-ci lines from automated dev commits. Co-authored-by: Stackwright Bot <bot@per-aspera.dev>

dependabot Bot and others added 14 commits May 15, 2026 11:20

fix(publish): remove prepublishOnly workspace: guard that conflicted …

9eedd97

…with pnpm publish (#411) Co-authored-by: Stackwright Bot <bot@per-aspera.dev>

chore: bump prerelease versions [skip ci]

bef7245

docs(contributing): add lockfile sync rule to pre-push checklist

26d4e16

perasperaactual force-pushed the dev branch from 9e1a0a6 to bbf46a4 Compare May 15, 2026 15:24

perasperaactual had a problem deploying to development May 15, 2026 15:24 — with GitHub Actions Failure

perasperaactual merged commit f1637a6 into main May 15, 2026
24 of 26 checks passed

perasperaactual mentioned this pull request May 15, 2026

fix(ci): remove [skip ci] from automated commit messages #421

Merged

perasperaactual mentioned this pull request May 15, 2026

chore(release): promote dev to main #422

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(release): merge dev → main#419

chore(release): merge dev → main#419
perasperaactual merged 14 commits into
mainfrom
dev

perasperaactual commented May 15, 2026

Uh oh!

github-actions Bot commented May 15, 2026

Uh oh!

github-actions Bot commented May 15, 2026

Uh oh!

github-actions Bot commented May 15, 2026

Uh oh!

github-actions Bot commented May 15, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

perasperaactual commented May 15, 2026

Release: dev → main

What happens on merge

Changesets included (9)

Commits on dev not yet on main (32)

Post-merge checklist (automated by CI)

Uh oh!

github-actions Bot commented May 15, 2026

Uh oh!

github-actions Bot commented May 15, 2026

✅ Visual Regression Test Results

Uh oh!

github-actions Bot commented May 15, 2026

⚡ Performance Benchmark Results

✅ Build Time Benchmarks: PASSED

✅ Bundle Size Benchmarks: PASSED

❌ Runtime Vitals Benchmarks: FAILED

Uh oh!

github-actions Bot commented May 15, 2026

♿ Accessibility Test Results

🦮 WCAG 2.1 AA Compliance

⌨️ Keyboard Navigation

📊 Detailed Report

🔍 Testing Checklist

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Release: `dev` → `main`

Commits on `dev` not yet on `main` (32)