Skip to content

chore(deps): bump dependencies - #233

Merged
AdirAmsalem merged 1 commit into
mainfrom
devin/1794482931-bump-deps
Nov 12, 2026
Merged

AdirAmsalem merged 1 commit into
mainfrom
devin/1794482931-bump-deps

Conversation

@eilon-decart

@eilon-decart eilon-decart commented Nov 12, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Routine dependency refresh. Lockfile regenerated with pnpm 10.7.1 (CI version).

Direct bumps:

  • hono ^4.13.18 (hono-edge example)
  • express ^4.22.3 (express-api, express-proxy, realtime-session-queue examples)
  • @types/bun ^1.4.4 (sdk, bun-cli example), bumpp ^10.4.1, tsdown ^0.14.2 (dev only)

Transitive pins via overrides in pnpm-workspace.yaml:

baseline-browser-mapping: 2.11.36
diff: 8.0.4
h3-v2: npm:h3@2.0.8      # alias used by @tanstack/start-server-core
qs: 6.17.1
seroval: 1.8.1
srvx@^0.11.2: 0.12.8
yaml: 2.9.1

Not done: moving TanStack (streamer example) to its latest release — it requires Vite >= 8, a major migration. Its older plugin path therefore stays on srvx 0.12.x; the h3 path resolves srvx 1.0.8.

Checked locally: sdk/proxy build, lint, format, typecheck, tests (394 + 36 passing), TanStack example build, hono example typecheck, React Native Android/iOS bundling.

Link to Devin session: https://decart-ai.devinenterprise.com/sessions/29ea9cf31c1149108ef7d01476b19aba
Open in Devin Desktop: https://decart-ai.devinenterprise.com/desktop/session/29ea9cf31c1149108ef7d01476b19aba?variant=devin
Requested by: @eilon-decart


Note

Low Risk
Dependency-only changes with no application logic; risk is limited to install/build compatibility, which the author reports was verified locally.

Overview
This PR refreshes direct dependency versions across examples and packages: express to ^4.22.3 in the express-oriented examples, hono to ^4.13.18 in hono-edge, @types/bun to ^1.4.4**, plus dev bumps **tsdown** ^0.14.2and **bumpp**^10.4.1` in sdk/proxy.

It also adds a new overrides block in pnpm-workspace.yaml to pin transitive packages (baseline-browser-mapping, diff, h3-v2, qs, seroval, srvx, yaml) workspace-wide for consistent resolution (notably keeping older TanStack paths on compatible srvx/h3 versions per the PR notes).

Reviewed by Cursor Bugbot for commit 11f5799. Bugbot is set up for automated code reviews on this repo. Configure here.

@devin-ai-integration

Copy link
Copy Markdown
Contributor

I'll fix CI failures and address comments from users with write access. I'll skip comments containing "(aside)".

  • Disable automatic comment, CI, and merge conflict monitoring

@pkg-pr-new

pkg-pr-new Bot commented Nov 12, 2026

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/@decartai/sdk@233

commit: 11f5799

@AdirAmsalem
AdirAmsalem merged commit 6455afc into main Nov 12, 2026
5 checks passed
@AdirAmsalem
AdirAmsalem deleted the devin/1794482931-bump-deps branch November 12, 2026 12:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants