chore: bump dependencies (consolidated) - #449
Merged
Merged
Conversation
Consolidates the three open dependabot PRs into one, plus a tuikit bump that dependabot cannot open because the release was cut for this change. Dependency bumps (taken as-is from dependabot, closes #434, #435, #437): - go.etcd.io/bbolt 1.4.3 -> 1.5.0 - github/codeql-action 4.37.3 -> 4.37.4 - postcss 8.5.12 -> 8.5.25 in /docs tuikit 0.4.1 -> 0.4.2 carries two logging fixes: - ::group:: was emitted whenever CI=true. It is GitHub syntax, so every other provider printed literal "::group::name" lines rather than a header. It is now gated on GITHUB_ACTIONS, and other providers get the styled header. Verified against this build: GITHUB_ACTIONS=true still emits the commands, CI=true alone no longer does. - Nested groups and unmatched EndGroup calls could emit invalid output that swallowed or truncated the surrounding log. bbolt backs pkg/store, so the full suite was run against it rather than taking the bump on trust. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01R328pa3FUUfga4gYah1iQi
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Consolidates the three open dependabot PRs into one, plus a tuikit bump dependabot cannot open on its own.
Summary
Dependency bumps (taken as-is from dependabot — closes #434, closes #435, closes #437):
go.etcd.io/bboltgithub/codeql-actionpostcss(in/docs)github.com/flowexec/tuikit0.4.1 → 0.4.2 — released for this change, so dependabot had nothing to open a PR against. It carries two logging fixes:::group::was emitted wheneverCI=true. It is GitHub syntax, so every other provider (GitLab, CircleCI, Buildkite) printed literal::group::namelines instead of a header. Now gated onGITHUB_ACTIONS; other providers get the styled header that local runs already got.EndGroupcalls could emit invalid output that swallowed or truncated the surrounding log — GitHub does not support nested groups, and a stray::endgroup::closes whatever it had open.Testing
flow validatepasses — generate, lint, unit + e2e, generated-diff, schema validation.bbolt backs
pkg/store, so the suite was run against it rather than taking a minor bump on the datastore on trust.pkg/storeandpkg/cacheboth pass.The tuikit fix was verified through this build, not just assumed from the version number:
Related
#448 stops flow from wrapping a single task's output in a group at all, which is the other half of making CI logs readable. It is independent of this PR — this one only moves the dependency.
🤖 Generated with Claude Code
https://claude.ai/code/session_01R328pa3FUUfga4gYah1iQi