chore(deps): land grouped Dependabot updates and unblock CI - #206
Merged
Conversation
Take the open Dependabot bumps that were failing or conflicting (#202 docs-site, #200 go-deps, #198 golang 1.27, #197 dashboard) and land them on current main with lockfiles regenerated so the security and lint gates pass. - Go modules to current minors (go 1.26.0) plus river 0.46 - Runtime image golang:1.27-alpine - golangci-lint v2.13.1 so the linter can typecheck go 1.26 - Dashboard minors (keep Next 16.3.4 from #201) + pnpm lockfile - docs-site @astrojs/react 6.0.4 / starlight 0.41.10 + npm lockfile - Point Dependabot labels at existing type:*/area:* labels Close #172 without taking it: it would downgrade @types/node from ^26 to ^20. Signed-off-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Santosh kumar <santoshkumarradha@users.noreply.github.com>
This was referenced Sep 1, 2026
santoshkumarradha
marked this pull request as ready for review
September 1, 2026 17:49
Resolve dependabot.yml on current main: keep the workspace-root js-workspace group and docs-site peer-resolver ignores from #205/#210, and keep existing type:*/area:* labels so Dependabot stops warning. Signed-off-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Santosh kumar <santoshkumarradha@users.noreply.github.com>
This was referenced Sep 1, 2026
This was referenced Sep 1, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Replaces the open Dependabot PRs that were failing CI, conflicting, or stale. Lands the valid version bumps on current
main(after #201, #205, #210) with lockfiles regenerated sonpm ci,pnpm install --frozen-lockfile, and golangci-lint succeed.Related issue
Supersedes #202, #200, #198, #197, #207, #208, #204. Closes #172 (stale; it would downgrade
@types/nodefrom^26to^20).Changes
#200/#208) — grouped module minors,go 1.26.0, River0.40→0.46. Bump golangci-lint tov2.13.1so the linter can typecheck a 1.26 module.#198) —golang:1.26-alpine→golang:1.27-alpine.#197/#204) — remaining minors on currentpackage.json(Next stays at16.3.4) and refreshpnpm-lock.yaml.#202/#207) —@astrojs/react^6.0.4,@astrojs/starlight^0.41.10, regenerated lockfile.js-workspacegroup and docs-site peer-resolver ignores from fix(ci): restore dashboard image build after js-yaml 4.3 #205/fix(ci): stop docs-site Dependabot failing the main commit check #210; map labels to existingtype:chore/area:*.Test plan
GOTOOLCHAIN=go1.26.0 go build ./...GOTOOLCHAIN=go1.26.0 go test ./services/... ./packages/...pnpm install --frozen-lockfile+ sdk-ts testsnpm ci/ audit / buildNotes for reviewers
Ready to merge. Leftover Dependabot PRs that this supersedes will be closed after merge.