chore(deps): bump radix and tailwind-merge - #65
Conversation
Updates @radix-ui/react-switch 1.1.3 -> 1.3.7, @radix-ui/react-context-menu 2.2.6 -> 2.3.7, @radix-ui/react-toast 1.2.6 -> 1.2.23 and tailwind-merge 3.0.2 -> 3.6.0 in a single lockfile transaction to avoid pnpm-lock.yaml conflicts. Closes #53, closes #49, closes #48, closes #47 Validated: pnpm audit clean, 21 tests pass, type-check pass, MegaLinter 10 verified on main (blocking linters pass, only known non-blocking shfmt/markdown warnings)
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Plus Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review. 📝 WalkthroughWalkthroughUpdated four dependency version ranges in ChangesDependency updates
Estimated code review effort: 1 (Trivial) | ~3 minutes Merge Risk: ⚪ Minimal · up to This PR updates four dependencies and the lockfile without introducing application behavior changes; the reported checks pass, so no actionable merge-blocking risk remains beyond normal review. 🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 inconclusive)
✅ Passed checks (4 passed)
Full details: Linked Issues checkExplanation The reviewable summary lists all four linked dependency packages, but it does not confirm the exact target versions or updated transitive dependencies. The required pnpm-lock.yaml file was excluded by the !**/pnpm-lock.yaml path filter, so full compliance cannot be verified. Full details: Docstring CoverageExplanation No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
✅
|
| Descriptor | Linter | Files | Fixed | Errors | Max errors | Warnings | Elapsed time |
|---|---|---|---|---|---|---|---|
| ✅ ACTION | actionlint | 5 | 0 | 0 | 0.11s | ||
| ✅ ACTION | zizmor | 5 | 0 | 0 | 1.16s | ||
| ✅ BASH | bash-exec | 1 | 0 | 0 | 0.01s | ||
| ✅ BASH | shellcheck | 1 | 0 | 0 | 0.22s | ||
| shfmt | 1 | 1 | 0 | 0.01s | |||
| ✅ COPYPASTE | jscpd | yes | no | no | 2.14s | ||
| ✅ EDITORCONFIG | editorconfig-checker | 176 | 0 | 0 | 0.48s | ||
| ✅ JAVASCRIPT | eslint | 1 | 0 | 0 | 3.06s | ||
| ✅ JAVASCRIPT | standard | 1 | 0 | 0 | 2.13s | ||
| ✅ JSON | jsonlint | 10 | 0 | 0 | 0.11s | ||
| ✅ JSON | npm-package-json-lint | yes | no | no | 0.97s | ||
| ✅ JSON | prettier | 10 | 0 | 0 | 0.75s | ||
| ✅ JSON | v8r | 10 | 0 | 0 | 12.25s | ||
| ✅ MARKDOWN | markdownlint | 10 | 0 | 0 | 0.97s | ||
| markdown-table-formatter | 10 | 1 | 0 | 0.35s | |||
| ✅ REPOSITORY | betterleaks | yes | no | no | 1.23s | ||
| ✅ REPOSITORY | checkov | yes | no | no | 18.72s | ||
| ✅ REPOSITORY | git_diff | yes | no | no | 0.03s | ||
| ✅ REPOSITORY | osv-scanner | yes | no | no | 1.69s | ||
| ✅ REPOSITORY | secretlint | yes | no | no | 2.87s | ||
| ✅ REPOSITORY | trivy | yes | no | no | 15.03s | ||
| ✅ REPOSITORY | trufflehog | yes | no | no | 3.4s | ||
| ✅ SPELL | cspell | 177 | 0 | 0 | 4.83s | ||
| ✅ TSX | eslint | 100 | 0 | 0 | 5.37s | ||
| ✅ YAML | prettier | 13 | 0 | 0 | 0.75s | ||
| ✅ YAML | yamllint | 13 | 0 | 0 | 0.84s |
Detailed Issues
⚠️ MARKDOWN / markdown-table-formatter - 1 error
1 files contain markdown tables to format:
- README.md
⚠️ BASH / shfmt - 1 error
diff public/install.sh.orig public/install.sh
--- public/install.sh.orig
+++ public/install.sh
@@ -25,7 +25,10 @@
GITHUB_DOWNLOAD="${GITHUB_DOWNLOAD:-https://github.com}"
info() { printf '%s\n' "$*" >&2; }
-die() { printf 'error: %s\n' "$*" >&2; exit 1; }
+die() {
+ printf 'error: %s\n' "$*" >&2
+ exit 1
+}
need_cmd() {
command -v "$1" >/dev/null 2>&1 || die "required command not found: $1"
See detailed reports in MegaLinter artifacts
Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)
- Documentation: Custom Flavors
- Command:
npx mega-linter-runner@10.0.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,BASH_EXEC,BASH_SHELLCHECK,BASH_SHFMT,COPYPASTE_JSCPD,EDITORCONFIG_EDITORCONFIG_CHECKER,JAVASCRIPT_ES,JAVASCRIPT_STANDARD,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_TRIVY,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,TSX_ESLINT,YAML_PRETTIER,YAML_YAMLLINT
Show us your support by starring ⭐ the repository
1 participant
Description
Bumps 4 dependencies that share
pnpm-lock.yamlin a single transaction to avoid lockfile conflicts:@radix-ui/react-switch1.1.3→1.3.7@radix-ui/react-context-menu2.2.6→2.3.7@radix-ui/react-toast1.2.6→1.2.23tailwind-merge3.0.2→3.6.0All updates are via
pnpm addon Node 24.17.0 / pnpm 10.32.0, keeping the existingpnpm-workspace.yamloverrides. Supersedes the individual Dependabot PRs that were continuously conflicting on the lockfile.Closes #53
Closes #49
Closes #48
Closes #47
Type of Change
How Has This Been Tested?
CI=true pnpm install --frozen-lockfile(via MegaLinter PRE_COMMANDS)pnpm audit --audit-level=high— 0 vulnerabilitiespnpm test --run— 21 tests passedpnpm type-check—tsc --noEmitcleanshfmtandmarkdown-table-formatterwarningsMegaLinter,test,type-check,pr-reviewChecklist
Summary by CodeRabbit