Repository navigation
chore(deps): second dependabot round (oclif 5, dev tooling) - #71
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Update the CLI's oclif runtime and test helper to version 5, and bring the compatible development dependencies from the latest Dependabot round forward. Keep TypeScript on version 5 until the lint toolchain supports version 7.
What changed
@oclif/core@oclif/test@types/node@typescript-eslint/eslint-plugin@typescript-eslint/parserchaieslintgenerate-license-fileprettierThe lockfile includes the corresponding transitive updates. No overrides were added; the existing
axiosandmulteroverrides are unchanged. The@not3/sdkdependency range remains^2.3.0.Why
These are the compatible updates from the open Dependabot pull requests. The oclif 5 release requires Node 22 or newer, which matches this package's existing engine requirement. No command behavior or output changes were needed for the upgrade.
How it was verified
pnpm install --frozen-lockfile: passed.pnpm peers check: no peer dependency issues.pnpm lint: passed.pnpm test: 130 passing, 2 pending real-server smoke tests.pnpm build: passed.pnpm audit --prodandpnpm audit: zero advisories in each.Risks and follow-ups
TypeScript 7.0.2 was skipped.
@typescript-eslint/parser@8.71.0declares TypeScript support only for>=4.8.4 <6.1.0, and installing TypeScript 7 produced unmet peer dependencies..github/dependabot.ymlnow ignorestypescriptversions>=7; remove that rule when the lint toolchain supports TypeScript 7 and the repository gates pass with it. The existing two real-server smoke tests remain pending.Supersedes #70 and #62.
🤖 Generated with Claude Code