Build(deps): Bump 28 dependencies, hold typescript at 6 - #498
Merged
Conversation
Dependabot grouped 29 npm updates into #496, but typescript 7.0.2 fails npm ci: svelte-check 4.7.4 still peers on typescript ^5 || ^6, so the whole batch died at install and every CI job failed before running. Takes the 28 compatible updates and leaves typescript on 6, with a dependabot ignore for 7.x so next week's group is not blocked the same way. Drop the ignore once svelte-check accepts typescript 7. The source changes are prettier 3.9 reformatting only: it drops the leading pipe on union types that fit on one line. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
mtaanquist
marked this pull request as ready for review
July 28, 2026 20:28
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Replaces #496, which could not go green.
Why #496 fails
Dependabot grouped 29 npm updates into one PR, including
typescript6.0.3 -> 7.0.2.svelte-check@4.7.4(the newest release) still declares:So
npm ciaborts withERESOLVEand all three CI jobs die at install before running anything. One incompatible bump was holding the other 28 hostage.What this does
Takes the 28 compatible updates at the versions Dependabot picked, and leaves
typescripton 6. Notable ones: nodemailer 8 -> 9, @types/node 25 -> 26, @sveltejs/kit 2.65 -> 2.70, vite 8.0 -> 8.1, eslint 10.4 -> 10.8, prettier 3.8 -> 3.9, playwright 1.60 -> 1.62.Adds a dependabot
ignorefortypescript7.x so next week's group is not blocked the same way. Drop that entry once svelte-check accepts typescript 7 - it is a hold, not a decision.The only source changes are prettier 3.9 reformatting: it now drops the leading
|on union types that fit on one line. No semantic change.nodemailer 9 is a major, but the call site (
src/lib/server/email.ts) only usescreateTransportwith host/port/secure/auth andsendMailwith from/to/subject/text. That surface is unchanged in v9, and it still typechecks against @types/nodemailer 8.Verified locally
npm ciresolves clean - the blocker is gonenpm run check- 1955 files, 0 errors, 0 warningsnpm run lint- prettier and eslint clean, 0 warningsnpm run test:unit- 132 files, 1073 passed, 1 skippednpm run build- cleannpm run test:e2eunder CI conditions - 46 passed, 5 flaky, 0 failedOn e2e: a bare local run (no retries) failed 6 specs, but unmodified
developfailed 3 under the same conditions, with only one spec in common, and two specs that failed on develop passed here. Under CI's retry policy this branch exits 0. These are the flakes already being worked on infix/e2e-flakes, not upgrade regressions. The ones that flaked: author-review:116, core-flow:3, insights:5, rich-editing:6, signup:11.Close #496 once this lands.
🤖 Generated with Claude Code