Skip to content

chore(deps): update dependencies and shared workflow pins - #32

Merged
jan-kubica merged 8 commits into
mainfrom
chore/dependency-batch-1019
Oct 19, 2026
Merged

jan-kubica merged 8 commits into
mainfrom
chore/dependency-batch-1019

Conversation

@jan-kubica

Copy link
Copy Markdown
Contributor

One update instead of six: the shared workflow pins for CLA, changeset release and npm independent release (stella/.github caa3ee1), actions/dependency-review-action 5.0.0, @types/node 26.6.5 and the dependencies group (11 updates), with a patch changeset for the runtime dependency changes. Supersedes #20, #21, #23, #24, #25 and #26; the lockfile combines their generated entries and passes a frozen install.

dependabot Bot and others added 7 commits October 19, 2026 11:08
Bumps [stella/.github/.github/workflows/cla.yml](https://github.com/stella/.github) from 8f19eb7220047e5b06f6e75f0b9f908bfd01f5f6 to caa3ee1c2d02ef807994fdd3907c55ba104aff00.
- [Release notes](https://github.com/stella/.github/releases)
- [Commits](stella/.github@8f19eb7...caa3ee1)

---
updated-dependencies:
- dependency-name: stella/.github/.github/workflows/cla.yml
  dependency-version: 608900bde4c0847e5224a0dd93a5cc4c911960d6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 665cf37)
…pr.yml

Bumps [stella/.github/.github/workflows/changeset-release-pr.yml](https://github.com/stella/.github) from c56b0c1d1e82f5e3fffa733a32b9a503a172ee35 to caa3ee1c2d02ef807994fdd3907c55ba104aff00.
- [Release notes](https://github.com/stella/.github/releases)
- [Commits](stella/.github@c56b0c1...caa3ee1)

---
updated-dependencies:
- dependency-name: stella/.github/.github/workflows/changeset-release-pr.yml
  dependency-version: 608900bde4c0847e5224a0dd93a5cc4c911960d6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 6368f56)
…lease.yml

Bumps [stella/.github/.github/workflows/npm-independent-release.yml](https://github.com/stella/.github) from 7198083e27bdd963cacc0b7d70ca54fe3ec83393 to caa3ee1c2d02ef807994fdd3907c55ba104aff00.
- [Release notes](https://github.com/stella/.github/releases)
- [Commits](stella/.github@7198083...caa3ee1)

---
updated-dependencies:
- dependency-name: stella/.github/.github/workflows/npm-independent-release.yml
  dependency-version: 608900bde4c0847e5224a0dd93a5cc4c911960d6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 6e85fdf)
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.9.0 to 5.0.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@2031cfc...a1d282b)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 102327d)
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 25.5.2 to 26.6.5.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.4
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit e90c044)
…pdates

Bumps the dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@changesets/changelog-github](https://github.com/changesets/changesets/tree/HEAD/packages/changelog-github) | `1.0.0` | `1.0.1` |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.0` | `3.0.3` |
| [@stll/typescript-config](https://github.com/stella/tooling/tree/HEAD/packages/typescript-config) | `0.6.0` | `0.8.0` |
| [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) | `4.0.3` | `4.2.2` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.14.2` | `6.41.0` |
| [sherif](https://github.com/QuiiBz/sherif) | `1.11.1` | `1.13.0` |
| [tsdown](https://github.com/rolldown/tsdown) | `0.22.9` | `0.23.1` |
| [turbo](https://github.com/vercel/turborepo) | `2.9.14` | `2.11.7` |
| [jszip](https://github.com/Stuk/jszip) | `3.10.1` | `3.10.2` |
| [@tanstack/intent](https://github.com/TanStack/intent) | `0.0.41` | `0.5.5` |
| [@lezer/python](https://github.com/lezer-parser/python) | `1.1.18` | `1.1.19` |

Updates `@changesets/changelog-github` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/changelog-github/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/changelog-github@1.0.1/packages/changelog-github)

Updates `@changesets/cli` from 3.0.0 to 3.0.3
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.3/packages/cli)

Updates `@stll/typescript-config` from 0.6.0 to 0.8.0
- [Release notes](https://github.com/stella/tooling/releases)
- [Changelog](https://github.com/stella/tooling/blob/main/packages/typescript-config/CHANGELOG.md)
- [Commits](https://github.com/stella/tooling/commits/@stll/typescript-config@0.8.0/packages/typescript-config)

Updates `eslint-plugin-sonarjs` from 4.0.3 to 4.2.2
- [Release notes](https://github.com/SonarSource/SonarJS/releases)
- [Changelog](https://github.com/SonarSource/SonarJS/blob/master/docs/RELEASE.md)
- [Commits](https://github.com/SonarSource/SonarJS/commits)

Updates `knip` from 6.14.2 to 6.41.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.41.0/packages/knip)

Updates `sherif` from 1.11.1 to 1.13.0
- [Release notes](https://github.com/QuiiBz/sherif/releases)
- [Commits](QuiiBz/sherif@v1.11.1...v1.13.0)

Updates `tsdown` from 0.22.9 to 0.23.1
- [Release notes](https://github.com/rolldown/tsdown/releases)
- [Commits](rolldown/tsdown@v0.22.9...v0.23.1)

Updates `turbo` from 2.9.14 to 2.11.7
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.9.14...v2.11.7)

Updates `jszip` from 3.10.1 to 3.10.2
- [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md)
- [Commits](Stuk/jszip@v3.10.1...v3.10.2)

Updates `@tanstack/intent` from 0.0.41 to 0.5.5
- [Release notes](https://github.com/TanStack/intent/releases)
- [Commits](https://github.com/TanStack/intent/compare/v0.0.41...@tanstack/intent@0.5.5)

Updates `@lezer/python` from 1.1.18 to 1.1.19
- [Changelog](https://github.com/lezer-parser/python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lezer-parser/python/commits)

---
updated-dependencies:
- dependency-name: "@changesets/changelog-github"
  dependency-version: 1.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@lezer/python"
  dependency-version: 1.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@stll/typescript-config"
  dependency-version: 0.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@tanstack/intent"
  dependency-version: 0.5.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: eslint-plugin-sonarjs
  dependency-version: 4.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: jszip
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: knip
  dependency-version: 6.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sherif
  dependency-version: 1.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tsdown
  dependency-version: 0.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: turbo
  dependency-version: 2.11.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 9dd294a)
@jan-kubica
jan-kubica merged commit 49fdc7b into main Oct 19, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant