Repository navigation
deps: Bump the minor-patch group across 1 directory with 21 updates - #2446
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the minor-patch group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.1` | `1.10.0` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.64.0` | `1.65.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.71.1` | `8.72.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.71.1` | `8.72.1` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.3` | `5.1.0` | | [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.3.6` | `10.4.1` | | [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.14.0` | | [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) | `18.4.1` | `18.5.0` | | [markdown-it](https://github.com/markdown-it/markdown-it) | `15.0.2` | `15.0.3` | | [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2) | `0.23.3` | `0.24.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.1.0` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.32.1` | `1.32.2` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.5` | `26.6.6` | | [@github/copilot-sdk](https://github.com/github/copilot-agent-runtime/tree/HEAD/src/sdk/nodejs) | `1.0.19` | `1.0.28` | | [@opentelemetry/exporter-metrics-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.301.0` | | [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.301.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.301.0` | | [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.43.0` | `1.45.0` | | [sql.js](https://github.com/sql-js/sql.js) | `1.14.2` | `1.15.2` | | [ws](https://github.com/websockets/ws) | `8.22.0` | `8.22.1` | Updates `@opentelemetry/api` from 1.9.1 to 1.10.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.9.1...v1.10.0) Updates `@playwright/test` from 1.64.0 to 1.65.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.64.0...v1.65.0) Updates `@typescript-eslint/eslint-plugin` from 8.71.1 to 8.72.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.71.1 to 8.72.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/parser) Updates `@vitest/coverage-v8` from 5.0.3 to 5.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/coverage-v8) Updates `cspell` from 10.3.6 to 10.4.1 - [Release notes](https://github.com/streetsidesoftware/cspell/releases) - [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md) - [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.4.1/packages/cspell) Updates `eslint` from 10.12.0 to 10.14.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.12.0...v10.14.0) Updates `eslint-plugin-n` from 18.4.1 to 18.5.0 - [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases) - [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md) - [Commits](eslint-community/eslint-plugin-n@v18.4.1...v18.5.0) Updates `markdown-it` from 15.0.2 to 15.0.3 - [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md) - [Commits](markdown-it/markdown-it@15.0.2...15.0.3) Updates `markdownlint-cli2` from 0.23.3 to 0.24.0 - [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md) - [Commits](DavidAnson/markdownlint-cli2@v0.23.3...v0.24.0) Updates `vitest` from 5.0.3 to 5.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/vitest) Updates `@modelcontextprotocol/sdk` from 1.32.1 to 1.32.2 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.32.1...1.32.2) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `@types/node` from 26.6.5 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@github/copilot-sdk` from 1.0.19 to 1.0.28 - [Commits](https://github.com/github/copilot-agent-runtime/commits/HEAD/src/sdk/nodejs) Updates `@opentelemetry/exporter-metrics-otlp-grpc` from 0.223.0 to 0.301.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.301.0) Updates `@opentelemetry/exporter-trace-otlp-grpc` from 0.223.0 to 0.301.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.301.0) Updates `@opentelemetry/sdk-node` from 0.223.0 to 0.301.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.301.0) Updates `@opentelemetry/semantic-conventions` from 1.43.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@semconv/v1.43.0...semconv/v1.45.0) Updates `sql.js` from 1.14.2 to 1.15.2 - [Release notes](https://github.com/sql-js/sql.js/releases) - [Commits](sql-js/sql.js@v1.14.2...v1.15.2) Updates `ws` from 8.22.0 to 8.22.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.22.0...8.22.1) --- updated-dependencies: - dependency-name: "@opentelemetry/api" dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: "@playwright/test" dependency-version: 1.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.72.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: "@typescript-eslint/parser" dependency-version: 8.72.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: "@vitest/coverage-v8" dependency-version: 5.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: cspell dependency-version: 10.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: eslint dependency-version: 10.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: eslint-plugin-n dependency-version: 18.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: markdown-it dependency-version: 15.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: markdownlint-cli2 dependency-version: 0.24.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: vitest dependency-version: 5.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.32.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: "@github/copilot-sdk" dependency-version: 1.0.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: "@opentelemetry/exporter-metrics-otlp-grpc" dependency-version: 0.301.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: "@opentelemetry/exporter-trace-otlp-grpc" dependency-version: 0.301.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.301.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: "@opentelemetry/semantic-conventions" dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: sql.js dependency-version: 1.15.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: ws dependency-version: 8.22.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
🟡 Changes recommended
Active moderate and critical dependency conflicts remain, including incompatible OpenTelemetry generations, an uncapped SDK range that can restore known startup failures, and a Node version floor below the selected telemetry packages’ requirement.
4 open issues
What changed in this PR
This PR updates dependency versions across the root workspace, Squad SDK, and Squad CLI, with corresponding lockfile changes.
Changes:
- Refreshes root tooling, including Playwright, ESLint, Vitest, CSpell, and Markdown tooling.
- Updates SDK dependencies, including Copilot SDK, OpenTelemetry packages, SQL.js, WebSocket support, and Node.js types.
- Updates CLI dependencies, including the MCP SDK, React, and Node.js types.
- Regenerates resolved dependency metadata in the lockfile.
| File | Summary |
|---|---|
packages/squad-sdk/package.json |
Updates SDK runtime, optional telemetry, storage, WebSocket, Copilot SDK, and type dependencies. |
packages/squad-cli/package.json |
Updates CLI MCP, React, development, and Node.js type dependencies. |
package.json |
Updates root development, testing, linting, documentation, and OpenTelemetry dependencies. |
This pull request requires changes.
Review effort: Lite (auto)
| }, | ||
| "dependencies": { | ||
| "@github/copilot-sdk": ">=1.0.19 <1.0.29-0", | ||
| "@github/copilot-sdk": "^1.0.28", |
| }, | ||
| "devDependencies": { | ||
| "@opentelemetry/api": "^1.9.0", | ||
| "@opentelemetry/api": "^1.10.0", |
| "@opentelemetry/api": "^1.10.0", | ||
| "@opentelemetry/exporter-metrics-otlp-grpc": "^0.301.0", | ||
| "@opentelemetry/exporter-trace-otlp-grpc": "^0.301.0", |
| "@opentelemetry/exporter-metrics-otlp-grpc": "^0.301.0", | ||
| "@opentelemetry/exporter-trace-otlp-grpc": "^0.301.0", | ||
| "@opentelemetry/resources": "^2.9.0", | ||
| "@opentelemetry/sdk-metrics": "^2.12.0", | ||
| "@opentelemetry/sdk-node": "^0.223.0", | ||
| "@opentelemetry/sdk-node": "^0.301.0", |
|
Dependency triage (current head b7b39cd): this replacement group remains incompatible as proposed. The workspace lock entries ARE synchronized here, unlike #2341, so regenerating the lock alone will not solve it. Actual locked sdk-node 0.301.0 requires Node >=22.15.0 and API >=1.10.0, while the published SDK still supports >=22.5.0 and retained context-async-hooks/sdk-trace-base 2.12 require API <1.10.0. It also removes the intentional JavaScript SDK <1.0.29-0 cap. Those constraints must not be bypassed or raised merely to merge a bot group. I attempted a bounded compatible dependency-only consolidation, but local clean installs fail even on unchanged dev (configured feed E404 hono 4.13.17; upgraded Vite/IP archives also 404; official npm/Yarn endpoints unreachable). No unvalidated repair or policy change was pushed. Compatible existing standalone PRs are being validated/landed individually through protected current-head CI. |
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |


Bumps the minor-patch group with 21 updates in the / directory:
1.9.11.10.01.64.01.65.08.71.18.72.18.71.18.72.15.0.35.1.010.3.610.4.110.12.010.14.018.4.118.5.015.0.215.0.30.23.30.24.05.0.35.1.01.32.11.32.219.3.019.3.126.6.526.6.61.0.191.0.280.223.00.301.00.223.00.301.00.223.00.301.01.43.01.45.01.14.21.15.28.22.08.22.1Updates
@opentelemetry/apifrom 1.9.1 to 1.10.0Release notes
Sourced from @opentelemetry/api's releases.
Changelog
Sourced from @opentelemetry/api's changelog.
Commits
56e6b1bchore: Release API 1.4.1, SDK 1.10.0, Experimental 0.36.0 (#3654)ecb5ebefix: Minor typing issues for web sandbox (#3660)48ecf22feat(sdk-trace-base): add dropped attributes and events count on span (#3576)95bf6fcfix(build): addexample/httpto ignore list inupdate-ts-configs(#3657)3a2ca58feat: add unit to view instrument selection criteria (#3647)ebc8575chore(jeager-exporter): deprecate jaeger exporter (#3585)2f715bdfeat: allow to add attributes from grpc metadata in the patched server (#3589)cbbdfd3fix(sdk-node): update instrumentations once MeterProvider is initialized (#3624)4a4484achore: update http example (#3651)494effffix(otlp-exporter-base): fix changelog for merged retry pr (#3650)Updates
@playwright/testfrom 1.64.0 to 1.65.0Release notes
Sourced from @playwright/test's releases.
... (truncated)
Commits
a1f35e1chore: mark v1.65.0 (#43925)a99c1abcherry-pick(#43918): Revert "fix(docker): use latest stable Chrome for Testin...6f9a7f5cherry-pick(#43914): docs(release-notes): update Chromium version for 1.65daf93bbcherry-pick(#43912): feat(chromium): roll to r12546545e89cherry-pick(#43902): chore(deps): bump runtime deps0347448fix(test runner): track shared ESM dependencies for only-changed (#43837)86e6924fix(clock): cancel real-time timer when replay ends paused (#43873)d745ae0fix(route): wait for all active handlers before disabling interception (#43889)6e3f5ffdocs: release notes for v1.65 (#43874)aa33d27fix(chromium): honor Linux config directories for channel connections (#43884)Updates
@typescript-eslint/eslint-pluginfrom 8.71.1 to 8.72.1Release notes
Sourced from @typescript-eslint/eslint-plugin's releases.
... (truncated)
Changelog
Sourced from @typescript-eslint/eslint-plugin's changelog.
... (truncated)
Commits
4ad6b75chore(release): publish 8.72.17757694chore: cleanup typecheck & build and fix race condition (#13071)1166ba2chore(type-utils): detect methods in isTypeReadonly without reading the inter...2f0343afix(eslint-plugin): [no-unnecessary-type-assertion] bound recursive type trav...c49d287chore: [ci] test on oldest supported TS version (#13024)594fe28fix(eslint-plugin): [no-unnecessary-condition] false positives on unresolved ...a4c2603chore(release): publish 8.72.0c6eb98cfeat(eslint-plugin): [await-thenable] addallowMixedPromiseArraysoption (#...b382b74fix(type-utils): discriminateAnyType crashes when calling getAwaitedType on a...79edd89fix(eslint-plugin): [require-array-sort-compare] ignore extra this type argum...Updates
@typescript-eslint/parserfrom 8.71.1 to 8.72.1Release notes
Sourced from @typescript-eslint/parser's releases.
... (truncated)
Changelog
Sourced from @typescript-eslint/parser's changelog.
Commits
4ad6b75chore(release): publish 8.72.17757694chore: cleanup typecheck & build and fix race condition (#13071)a4c2603chore(release): publish 8.72.07488d68chore(release): publish 8.71.2Updates
@vitest/coverage-v8from 5.0.3 to 5.1.0Release notes
Sourced from @vitest/coverage-v8's releases.
... (truncated)
Commits
7a38449chore: release v5.1.0 (#11838)5901fb4fix(coverage): v8 to ignore Vite's generated CJS namespace import helper (#11...e02db08feat(coverage): v8 to supportignoreNodeoption (#11688)e1b0d33chore: release v5.1.0-beta.1 (#11647)de5af29fix(coverage): v8autoAttachSubprocessto use.tmpdirectory (#11632)7a825dbchore: release v5.0.5 (#11609)6a11cf6chore: release v5.0.4 (#11554)2297d93fix(coverage): v8 browser memory leak between test files (#11466)c74e099fix(deps): update all non-major dependencies (#11167)Updates
cspellfrom 10.3.6 to 10.4.1Release notes
Sourced from cspell's releases.
... (truncated)
Changelog
Sourced from cspell's changelog.
... (truncated)
Commits
Description has been truncated