deps: batch 21 Dependabot updates; hold TypeScript 7 - #770
Merged
Conversation
Consolidates the 26 open Dependabot PRs into one change, same methodology as #726: versions applied declaratively and lockfiles regenerated. Landed: @anthropic-ai/sdk 0.115.0, @openai/agents 0.13.5, @tanstack/ react-query 5.101.4, @testing-library/jest-dom 7.0.0, jsdom 30.0.0, lucide-react 1.27.0, react 19.2.8, react-dom 19.2.8, smol-toml 1.7.1, @vitejs/plugin-react 6.0.4, agents 0.19.0, @cloudflare/workers-types 5.20260727.1. @openai/agents 0.13.5 lands where #726 held 0.13.2 — the harness modelSettings break is fixed upstream; the tests/agent/ coverage that caught it passes. react and react-dom move together, which resolves the peer mismatch that failed Dependabot's solo react bump. TypeScript 7.0.2 stays held at 6.0.3 across all five workspaces, as in #726 — now with a concrete break: the TS 7 package no longer exposes the compiler API Canopy's parser imports (canopy/parsers/typescript.ts), per Dependabot #692's own CI failure. That is a standalone migration. Gate: lint + fast suite 636 pass / 0 fail; build:verify OK. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
sirkirby
force-pushed
the
deps/dependabot-rollup-2026-07-28
branch
from
July 29, 2026 02:45
f1121ba to
172bde6
Compare
sirkirby
added a commit
that referenced
this pull request
Jul 29, 2026
…r the compiler-API consumers (#772) typescript@7 is the native compiler: its npm package ships the tsc binary but no JS compiler API (the main module exports only version). Every tsc --noEmit gate moves to the native compiler; the repo's two programmatic API consumers — Canopy's AST parser (canopy/parsers/typescript.ts) and tests/ui/ui-typecheck-boundary.test.ts — import from a typescript-v6 npm alias (npm:typescript@^6.0.3), pinning the stable compiler API independent of the toolchain. TS 7's ./unstable/ast subpath is explicitly unstable and not a foundation for Canopy. The bun binary compile resolves the alias and bundles the v6 lib exactly as before; build:verify confirms. Closes the TypeScript 7 Dependabot PRs (#675 #676 #686 #689 #692) that #726 and #770 deliberately held back. Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Consolidates the 26 open Dependabot PRs into one change, same methodology as #726: versions applied declaratively to the manifests and lockfiles regenerated, rather than merging the branches.
Landed
Root: @anthropic-ai/sdk 0.115.0, @openai/agents 0.13.5, @tanstack/react-query 5.101.4, @testing-library/jest-dom 7.0.0, jsdom 30.0.0, lucide-react 1.27.0, react 19.2.8, react-dom 19.2.8
packages/myco: @anthropic-ai/sdk 0.115.0, @openai/agents 0.13.5, smol-toml 1.7.1
packages/myco/ui + packages/myco-collective/ui: react 19.2.8, react-dom 19.2.8, @vitejs/plugin-react 6.0.4, @tanstack/react-query 5.101.4
packages/myco-collective/worker + packages/myco-team/worker: agents 0.19.0, @cloudflare/workers-types 5.20260727.1
Notes:
tests/agent/modelSettings coverage, so the break is fixed upstream.Held back: TypeScript 7.0.2 (all five workspaces)
Same reasoning as #726 — a major-version migration doesn't belong in a batch meant to be uneventful — and now with a concrete break: TS 7's npm package no longer exposes the compiler API surface Canopy's parser imports (
ts.createSourceFile,ts.ScriptKind,ts.SyntaxKind, … inpackages/myco/src/canopy/parsers/typescript.ts) — Dependabot #692's CI fails on exactly this, and #689 (myco/ui) times out at 19m. TS 7 needs its own migration pass covering the Canopy parser and thets.sysusage intests/ui/ui-typecheck-boundary.test.ts. Holding 6.0.3 keeps all five workspaces consistent. #675, #676, #686, #689, #692 stay open for that migration.Closes #748, closes #749, closes #750, closes #751, closes #752, closes #753, closes #754, closes #755, closes #756, closes #757, closes #758, closes #759, closes #760, closes #761, closes #762, closes #763, closes #764, closes #765, closes #766, closes #767, closes #768
🤖 Generated with Claude Code