Skip to content

chore(deps): monthly dependency refresh #2861

Closed

Description

@github-actions

Routine dependency refresh — npm outdated plus a workflow uses: check, run against v2/main on a monthly schedule. This sweep replaces Dependabot's version-update PRs (#2229, #2235); its security-update PRs are off too (#2233), and the alerts they used to act on are swept into their own issues daily.

This is a tracking issue, not a diff: pick what's worth bumping (wanted is the safe default; latest may cross a major and needs its own judgment call, especially for anything root-declared per Dependency placement) and open a normal PR against v2/main.

root

Package Current Wanted Latest
@hono/node-server 2.1.4 2.1.5 2.1.5
@napi-rs/keyring 2.1.1 2.1.2 2.1.2
@types/node 24.19.2 24.19.2 26.6.6
@vitest/coverage-v8 4.1.12 4.1.12 5.0.5
chokidar 4.0.3 4.0.3 6.0.0
eslint 10.12.0 10.14.0 10.14.0
hono 4.13.13 4.13.16 4.13.16
ink 6.8.0 6.8.0 8.0.0
pino 9.14.0 9.14.0 10.4.0
prettier 3.8.4 3.8.4 3.9.10
react 19.3.0 19.3.1 19.3.1
typescript 5.9.3 5.9.3 7.0.2
typescript-eslint 8.71.2 8.72.1 8.72.1
vite 8.3.4 8.3.5 8.3.5
vitest 4.1.12 4.1.12 5.0.5

clients/web

Package Current Wanted Latest
@chromatic-com/storybook 5.5.1 5.6.0 5.6.0
@dnd-kit/sortable 8.0.0 8.0.0 10.0.0
@mantine/core 8.3.18 8.3.18 9.7.4
@mantine/form 8.3.18 8.3.18 9.7.4
@mantine/hooks 8.3.18 8.3.18 9.7.4
@mantine/notifications 8.3.18 8.3.18 9.7.4
@storybook/addon-a11y 10.6.2 10.6.5 10.6.5
@storybook/addon-docs 10.6.2 10.6.5 10.6.5
@storybook/addon-onboarding 10.6.2 10.6.5 10.6.5
@storybook/addon-vitest 10.6.2 10.6.5 10.6.5
@storybook/react-vite 10.6.2 10.6.5 10.6.5
@testing-library/jest-dom 6.9.1 6.9.1 7.0.1
@testing-library/user-event 14.6.7 14.6.8 14.6.8
@vitest/browser-playwright 4.1.12 4.1.12 5.0.5
ace-builds 1.44.0 1.45.2 1.45.2
eslint-plugin-storybook 10.6.2 10.6.5 10.6.5
playwright 1.64.0 1.64.1 1.64.1
react-dom 19.3.0 19.3.1 19.3.1
storybook 10.6.2 10.6.5 10.6.5
tsdown 0.23.1 0.23.4 0.23.4
vite 8.3.4 8.3.5 8.3.5

clients/cli

Package Current Wanted Latest
tsdown 0.23.1 0.23.4 0.23.4

clients/tui

Package Current Wanted Latest
ink 6.8.0 6.8.0 8.0.0
ink-scroll-view 0.3.7 0.3.7 0.4.0
tsdown 0.23.1 0.23.4 0.23.4
vite 8.3.4 8.3.5 8.3.5

clients/mcpdo

Package Current Wanted Latest
tsdown 0.23.1 0.23.4 0.23.4

GitHub Actions

Action Current Latest
actions/download-artifact v8.0.1 (3e5f45b) v8.0.2
actions/setup-node v7.0.0 (8207627) v7.1.0
actions/upload-artifact v7.0.1 (043fb46) v7.0.2
anthropics/claude-code-action v1.0.235 (756cc22) v1.0.266
docker/login-action v4.6.0 (dbcb813) v4.7.0
github/codeql-action/analyze v4.39.0 (6f2ac81) v4.39.1
github/codeql-action/init v4.39.0 (6f2ac81) v4.39.1

A second run of this sweep before this issue closes updates this body in place rather than filing a duplicate.

Activity

  1. added this to the v2.15.0 milestone on Nov 1, 2026
  2. added
    v2Issues and PRs for v2
    choreMaintenance: deps, build tooling, CI, cleanup — no user-facing behavior change
    on Nov 1, 2026
  3. cliffhall commented on Nov 5, 2026

    @cliffhall
    Member

    Triage: Priority Medium (total 6)

    • Severity 2 — routine version refresh; nothing broken, deferring is easy
    • Urgency 3 — already scheduled for this milestone
    • Bonuses: +1 linked to a milestone (v2.15.0 — already approved)

    Board: #28, Status Todo (milestone was already set, so only the card was missing).

  4. self-assigned this
    on Nov 5, 2026
  5. cliffhall commented on Nov 5, 2026

    @cliffhall
    Member

    Shipped in #2887 (merge 6110a60).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

choreMaintenance: deps, build tooling, CI, cleanup — no user-facing behavior changedependabotv2Issues and PRs for v2

Type

No type

Projects

No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions