Skip to content

fix(deps): update all non-major dependencies #1331

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
renovate wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(deps): update all non-major dependencies #1331

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/docs-preview.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4.0.0
- uses: pnpm/action-setup@v4.4.0

@pkuhpc-review-bot pkuhpc-review-bot Bot May 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 pnpm/action-setup 从 v4.0.0 更新到 v4.4.0，但需要注意 v4.x 版本是否包含重大变更，建议查阅版本更新日志确认兼容性。

@pkuhpc-review-bot pkuhpc-review-bot Bot May 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm/action-setup版本从v4.0.0更新到v4.4.0。虽然这看起来像是“更新依赖”，但需要确保这个新版本与项目中使用的pnpm版本（在package.json的packageManager字段中指定为pnpm@9.15.9）兼容。

Suggested change
- uses: pnpm/action-setup@v4.4.0
建议在更新此Action之前，先测试与p@9.15.9的兼容性。

@pkuhpc-review-bot pkuhpc-review-bot Bot Jun 1, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm/action-setup从v4.0.0升级到v4.4.0，应确保新版本无破坏性变更。建议额外检查pnpm版本与action的兼容性。

- uses: actions/setup-node@v4
with:
node-version: 18.x
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/docs.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4.0.0
- uses: pnpm/action-setup@v4.4.0

@pkuhpc-review-bot pkuhpc-review-bot Bot May 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

与 docs-preview.yaml 相同的更新，同样建议确认兼容性。

- uses: actions/setup-node@v4
with:
node-version: 18.x
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/test-build-publish.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ jobs:
fetch-depth: 0
ref: ${{ github.event.pull_request.head.sha }}

- uses: pnpm/action-setup@v4.0.0

@pkuhpc-review-bot pkuhpc-review-bot Bot May 25, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm/action-setup更新到v4.4.0，但volta中packageManager指定pnpm@9.15.9，而action-setup v4.4.0默认自动安装的pnpm版本可能不匹配。建议显式指定pnpm版本。

Suggested change
- uses: pnpm/action-setup@v4.0.0
- uses: pnpm/action-setup@v4.4.0
with:
version: 9.15.9

- uses: pnpm/action-setup@v4.4.0

@pkuhpc-review-bot pkuhpc-review-bot Bot May 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

此处 pnpm/action-setup 更新，但未使用最新的 v4.x 版本，建议保持与其他 workflow 一致。


- uses: actions/setup-node@v4
with:
Expand Down Expand Up @@ -92,7 +92,7 @@ jobs:
steps:
- uses: actions/checkout@v4

- uses: pnpm/action-setup@v4.0.0

@pkuhpc-review-bot pkuhpc-review-bot Bot May 10, 2025

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 pnpm/action-setup 从 v4.0.0 升级到 v4.1.0

@pkuhpc-review-bot pkuhpc-review-bot Bot Aug 7, 2025

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

再次升级pnpm/action-setup版本到v4.1.0，确保整个文件中版本一致

- uses: pnpm/action-setup@v4.4.0

- uses: actions/setup-node@v4
with:
Expand Down
102 changes: 51 additions & 51 deletions apps/ai/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,17 +33,17 @@
]
},
"dependencies": {
"@ant-design/cssinjs": "1.21.0",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 17, 2025

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

更新了大量前端依赖包版本，特别是antd从5.18.3升级到5.25.1。建议确认这些更新不会影响UI组件的行为和样式。

"@ant-design/icons": "5.3.7",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 10, 2025

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 @ant-design/cssinjs 从 1.21.0 升级到 1.23.0

"@ddadaal/tsgrpc-client": "0.17.7",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 10, 2025

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 @ant-design/icons 从 5.3.7 升级到 5.6.1

"@ddadaal/tsgrpc-common": "0.2.5",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 10, 2025

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 @ddadaal/tsgrpc-client 从 0.17.7 升级到 0.17.8

"@grpc/grpc-js": "1.10.9",
"@kubernetes/client-node": "^0.21.0",
"@mikro-orm/cli": "6.2.9",

@pkuhpc-review-bot pkuhpc-review-bot Bot Jul 22, 2025

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

建议检查 @kubernetes/client-node 从 0.21.0 升级到 0.22.0 是否有重大变更，确保兼容性

"@mikro-orm/core": "6.2.9",
"@mikro-orm/migrations": "6.2.9",
"@mikro-orm/mysql": "6.2.9",
"@mikro-orm/seeder": "6.2.9",

@pkuhpc-review-bot pkuhpc-review-bot Bot Jul 12, 2025

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

多个@mikro-orm相关包从6.2.9升级到6.4.16，建议检查ORM相关的破坏性变更和性能改进

Suggested change
"@mikro-orm/seeder": "6.2.9",
@mikro-orm/cli": "6.2.9" // 如需回退

"@ant-design/cssinjs": "1.24.0",
"@ant-design/icons": "5.6.1",
"@ddadaal/tsgrpc-client": "0.17.9",
"@ddadaal/tsgrpc-common": "0.2.7",
"@grpc/grpc-js": "1.14.4",
"@kubernetes/client-node": "^0.22.0",

@pkuhpc-review-bot pkuhpc-review-bot Bot Apr 18, 2025

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@kubernetes/client-node从^0.21.0升级到^0.22.0，需要注意API有无破坏性变更，特别是与集群交互的部分。

"@mikro-orm/cli": "6.6.16",
"@mikro-orm/core": "6.6.16",
"@mikro-orm/migrations": "6.6.16",
"@mikro-orm/mysql": "6.6.16",
"@mikro-orm/seeder": "6.6.16",
"@scow/config": "workspace:*",
"@scow/lib-auth": "workspace:*",
"@scow/lib-config": "workspace:*",
Expand All @@ -55,70 +55,70 @@
"@scow/ai-scheduler-adapter-protos": "workspace:*",
"@scow/utils": "workspace:*",
"@scow/rich-error-model": "workspace:*",
"@sinclair/typebox": "0.32.34",
"@sinclair/typebox": "0.34.52",
"@tanstack/react-query": "4.36.1",
"@trpc/client": "10.45.2",
"@trpc/next": "10.45.2",
"@trpc/react-query": "10.45.2",
"@trpc/server": "10.45.2",
"antd": "5.18.3",
"dayjs": "1.11.11",
"dotenv": "16.4.5",
"@trpc/client": "10.45.4",
"@trpc/next": "10.45.4",
"@trpc/react-query": "10.45.4",
"@trpc/server": "10.45.4",
"antd": "5.29.3",
"dayjs": "1.11.21",
"dotenv": "16.6.1",
"http-proxy": "1.18.1",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 lodash 从 4.17.21 更新到 4.18.1。这似乎是一个次要版本升级，但 4.18.1 版本可能包含不兼容的更改。请确认此更改不会破坏现有功能。

"lodash": "4.17.21",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 25, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lodash从4.17.21更新到4.18.1，版本跳跃过大，4.18.x可能引入了破坏性变更。建议确认兼容性或锁定在4.17.x。

Suggested change
"lodash": "4.17.21",
"lodash": "4.17.21"

@pkuhpc-review-bot pkuhpc-review-bot Bot May 28, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lodash 从 4.17.21 升级到 4.18.1 是一个 major 版本变更（y版本号从17跳到18）。lodash 的 major 版本升级可能包含破坏性更改（如删除或重命名函数，改变行为等）。这是一个高风险依赖，建议仔细查阅 lodash 的 changelog，检查项目中使用的 lodash 功能是否有变更。

Suggested change
"lodash": "4.17.21",
建议先在本地或 CI 中运行完整的测试套件，确保所有依赖 lodash 的功能正常工作。如果可能，考虑迁移到 lodash 的现代替代品（如 `lodash-es` 或原生 JavaScript）以减少风险。

"long": "5.2.3",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 lodash 从 4.17.21 升级到 4.18.1 需要谨慎。lodash 在 4.17.21 之后很久没有官方发布，4.18.x 版本可能是一个非官方包或被恶意利用的 fork。请确认这个版本包的来源和安全性。如果只是一个单纯的小版本升级，请验证其兼容性。

Suggested change
"long": "5.2.3",
建议在升级前检查该版本来源，并确保所有使用 `lodash` 的代码与新版本兼容。如果 `4.18.1` 是来自 npm 的官方版本，请确认其安全公告。

@pkuhpc-review-bot pkuhpc-review-bot Bot May 12, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 lodash 从 4.17.21 升级到 4.18.1 是一个不安全的升级。lodash 的最新稳定版本是 4.17.21，4.18.1 可能是一个恶意或测试版本。建议确认此版本的来源，并确保它来自官方 lodash 仓库或是一个经过验证的 fork。如果是不小心打错版本号，请修正为 4.17.21。

Suggested change
"long": "5.2.3",
"lodash": "4.17.21"

@pkuhpc-review-bot pkuhpc-review-bot Bot May 17, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lodash 从 4.17.21 升级到 4.18.1，但这个版本号在 npm 上可能不存在。官方最新版本是 4.17.21，4.18.1 可能是内部版本或 typo。请确认版本号是否正确。

Suggested change
"long": "5.2.3",
"lodash": "4.17.21"

@pkuhpc-review-bot pkuhpc-review-bot Bot May 18, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 lodash 从 4.17.21 更新到 4.18.1 需要谨慎。lodash 的官方版本号是 4.17.21（截至知识截止日期），4.18.1 可能是一个不存在的或不稳定的版本。请确认 4.18.1 是否为正确的版本，以避免引入未经测试的变更或破坏性更新。

Suggested change
"long": "5.2.3",
建议核实 `lodash` 的最新稳定版本，通常应使用 `4.17.21` 或经过验证的更高版本，例如 `4.17.21` 或 `5.0.0`（如果项目兼容）。

@pkuhpc-review-bot pkuhpc-review-bot Bot May 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lodash 版本从 4.17.21 更新到 4.18.1，这可能是一个次版本升级。需要注意 lodash 4.18.x 版本是否稳定，并检查与现有代码的兼容性。

Suggested change
"long": "5.2.3",
建议核实 `lodash` 4.18.1 的发布状态和变更日志，确保没有破坏性更改。若存在疑虑，可暂时保留在 4.17.x 版本。

@pkuhpc-review-bot pkuhpc-review-bot Bot May 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lodash 从 4.17.21 更新到 4.18.1 似乎是一个不存在的版本。npm 上 lodash 的最新版本是 4.17.21，4.18.1 可能是一个 beta 版本或 typo。这可能会导致安装失败或意外行为。

Suggested change
"long": "5.2.3",
如果这是一个笔误，建议改回 4.17.21 或确认正确的版本号。

@pkuhpc-review-bot pkuhpc-review-bot Bot May 24, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 lodash 从 4.17.21 更新到 4.18.1 存在风险。lodash 的正式最新版本是 4.17.21，4.18.1 可能是社区分支或非官方版本（如 lodash-es?），但标准 lodash 包在 npm 上并未发布过 4.18.x 版本。请确认该版本号是否正确，建议使用 4.17.21 或官方认可的替代品。

Suggested change
"long": "5.2.3",
"lodash": "4.17.21"

@pkuhpc-review-bot pkuhpc-review-bot Bot May 27, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lodash 版本从 4.17.21 升级到 4.18.1，但 lodash 官方版本号目前最高为 4.17.21，不存在 4.18.1。请确认是否拼写错误或使用了非官方源。若为笔误，应回退到 4.17.21 或使用正确的版本。

Suggested change
"long": "5.2.3",
"lodash": "4.17.21"

@pkuhpc-review-bot pkuhpc-review-bot Bot May 30, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

同时更新 lodash 主版本号（4.17.21 → 4.18.1），这可能包含破坏性变更（API重大变更）。请确认所有使用 lodash 的代码与新版本兼容。建议先查看 lodash 4.18.1 的changelog，并优先升级到最新的4.17系列（如4.17.21是较新的补丁版本）。如果必须升级主版本，请充分测试。

Suggested change
"long": "5.2.3",
建议将lodash版本锁定为已知兼容的最新稳定版，例如 `"lodash": "4.17.21"` 如果不需要大写功能，或者确认为 `"lodash": "^4.17.21"`。

@pkuhpc-review-bot pkuhpc-review-bot Bot May 31, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lodash 从 4.17.21 升级到 4.18.1，这是一个主版本更新（从 4.x 升级到 4.18.x），但实际版本号 4.18.1 是不存在的，这是一个不存在的版本号。lodash 的最新版本依然是 4.17.21。这会导致安装失败或引入错误版本。请确认升级是否误写，建议回退到 4.17.21 或使用真实存在的版本。

Suggested change
"long": "5.2.3",
"lodash": "4.17.21"

@pkuhpc-review-bot pkuhpc-review-bot Bot Jun 1, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lodash 版本号 4.18.1 不存在于 npm 上，最新版本为 4.17.21。请核实版本号是否正确，可能是笔误。

Suggested change
"long": "5.2.3",
将其改回 4.17.21，或使用其他有效版本。

@pkuhpc-review-bot pkuhpc-review-bot Bot Jun 1, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lodash从4.17.21升级到4.18.1，注意lodash的版本格式从4.17.x跳到4.18.x，需确认无重大API变更（如lodash 5.0尚未发布，但4.18可能包含新功能或修复）。同时检查与现有代码的兼容性。

@pkuhpc-review-bot pkuhpc-review-bot Bot Jun 6, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lodash 从 4.17.21 升级到 4.18.1，但 npm 官方 registory 中 lodash 的最新稳定版是 4.17.21，不存在 4.18.1 版本。此版本号可能是拼写错误或指向了恶意包。建议确认正确的版本号，如 4.17.21（如需保持最新补丁）或选择一个已知的合法版本。

Suggested change
"long": "5.2.3",
"lodash": "4.17.21"

"lodash": "4.18.1",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lodash版本从4.17.21更新到4.18.1。lodash的最新版本是4.17.21，4.18.1可能不是一个官方发布的版本，或者是一个被篡改的包。请确认该版本的来源和安全性。建议使用官方维护的4.17.21或检查是否有更新到5.x的计划。

Suggested change
"lodash": "4.18.1",
"lodash": "4.17.21"

@pkuhpc-review-bot pkuhpc-review-bot Bot May 16, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 lodash 从 4.17.21 更新到 4.18.1。请注意，版本号从 4.17 跳到 4.18，中间跳过了多个次要版本，这被认为是一个“次版本”更新，可能包含破坏性更改。虽然 lodash 通常遵循语义化版本控制，但需要验证此版本是否与项目代码兼容。建议检查 lodash 的发布说明或更新日志，以确保没有破坏性变更。

Suggested change
"lodash": "4.18.1",
可以考虑保持现有版本，除非有明确的兼容性验证。如果需要更新，请确保进行全面的单元测试和集成测试。

"long": "5.3.2",
"mime-types": "2.1.35",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 17, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

next 从 14.2.4 升级到 14.2.35，这是一个较大的跳跃。请确认没有 breaking changes 影响现有代码，尤其是 App Router 和 Server Components 相关的改动。

@pkuhpc-review-bot pkuhpc-review-bot Bot May 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

next 版本从 14.2.4 升级到 14.2.35，这是一个补丁版本升级，通常包含安全修复和 bug 修复。但需要确认此版本与项目中使用的其他依赖（如 next-compose-plugins）兼容。

Suggested change
"mime-types": "2.1.35",
检查 `next` 14.2.35 的发布说明，确认是否有已知问题。运行构建和测试套件以确保一切正常。

"next": "14.2.4",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 next 从 14.2.4 升级到 14.2.35 是一个很大的版本跳升，可能包含破坏性变更。请仔细阅读 Next.js 的发布说明，特别是与 pages 或 app router 相关的变更，并确保与项目中使用的中间件、API 路由、配置等完全兼容。

Suggested change
"next": "14.2.4",
在升级前请确认新版本是否与当前项目代码完全兼容，并测试应用的构建和运行。

@pkuhpc-review-bot pkuhpc-review-bot Bot May 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

next版本从14.2.4跳升到14.2.35。这是一个较大的版本跳跃，通常Next.js的次版本号更新（如14.2.x）不会导致API不兼容，但建议查阅Next.js的发布说明，确认没有破坏性变更，特别是如果项目使用了实验性功能。

@pkuhpc-review-bot pkuhpc-review-bot Bot May 24, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 next 从 14.2.4 更新到 14.2.35。虽然这是 patch 版本升级，但 Next.js 的 patch 版本有时会包含安全修复或 bug 修复，也可能引入微小变更。建议确认所有使用了 Next.js 功能的代码（如路由、中间件、API 路由等）仍正常工作。特别是如果项目使用了 app router 或 pages router 中的新特性，需要确认兼容性。

Suggested change
"next": "14.2.4",
暂无具体代码建议，但建议运行 `next build` 和 `next start` 进行集成测试。

@pkuhpc-review-bot pkuhpc-review-bot Bot May 25, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

zod从3.23.8更新到3.25.76，版本跳跃较大，检查是否引入破坏性变更（例如API变更）。

@pkuhpc-review-bot pkuhpc-review-bot Bot Jun 1, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

next从14.2.4升级到14.2.35，这是重要的安全性和性能更新。但需注意，某些中间件或配置可能在14.2.x系列中有变化。建议参考Next.js官方更新日志确认。

@pkuhpc-review-bot pkuhpc-review-bot Bot Jun 6, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

next 从 14.2.4 升级到 14.2.35，但 Next.js 14.2.x 系列的最新正式版为 14.2.31（截至 2025 年 12 月）。14.2.35 疑似不存在或为测试版本。此版本号可能无法通过 npm 安装，请核实并修正为可用的版本号。

Suggested change
"next": "14.2.4",
"next": "14.2.31"

"next": "14.2.35",
"next-compose-plugins": "2.2.1",
"next-connect": "1.0.0",
"nextjs-cors": "2.2.0",
"node-ssh": "13.2.0",
"nextjs-cors": "2.2.1",
"node-ssh": "13.2.1",
"nookies": "2.5.2",
"nprogress": "0.2.0",
"pino": "8.16.2",
"protobufjs": "7.3.2",
"protobufjs": "7.6.5",
"react": "18.3.1",
"react-async": "10.0.1",
"react-dom": "18.3.1",
"react-is": "18.3.1",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 25, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

typescript从5.5.2更新到5.9.3，大版本更新，可能引入新语法或破坏性变更。确保代码兼容或进行相应调整。

"react-typed-i18n": "2.3.0",
"react-typed-i18n": "2.6.1",
"simstate": "3.0.1",
"styled-components": "6.1.11",
"superjson": "2.2.1",
"swagger-ui-react": "5.17.14",
"styled-components": "6.5.1",
"superjson": "2.2.6",
"swagger-ui-react": "5.32.12",
"trpc-openapi": "1.2.0",
"ws": "8.17.1",
"ws": "8.21.3",
"@xterm/xterm": "5.5.0",
"@xterm/addon-fit": "0.10.0",
"zod": "3.23.8",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 18, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 zod 从 3.23.8 更新到 3.25.76 是一个大版本跳跃。zod@3.25 可能包含破坏性更改或新的行为，需要检查 zod 的官方发布说明和项目中的使用情况，确保兼容性。

Suggested change
"zod": "3.23.8",
建议在更新前阅读 `zod` 的变更日志（changelog），并运行完整的测试套件以验证没有回归问题。

"shell-quote": "1.8.1",
"replace-in-file": "8.1.0"

@pkuhpc-review-bot pkuhpc-review-bot Bot May 31, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

replace-in-file 从 8.1.0 升级到 8.4.0，这是一个次要/补丁版本更新，通常向后兼容。但请注意，该工具用于文件内容替换，升级后可能会引入新特性或行为变化。如果使用到该功能，建议验证其行为是否符合预期。

"@xterm/addon-fit": "0.11.0",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 zod 从 3.23.8 升级到 3.25.76 是一个较大的版本跳升。请检查 zod 的 changelog，查看是否有 API 变更、新增的验证模式或破坏性更新，例如 safeParse 的返回值结构变更。

Suggested change
"@xterm/addon-fit": "0.11.0",
建议查看 Zod 的 CHANGELOG，特别是与 `ZodError` 或 `ZodEffects` 相关的变动，确保应用中的数据验证逻辑仍然正确。

@pkuhpc-review-bot pkuhpc-review-bot Bot May 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

zod 版本从 3.23.8 升级到 3.25.76，这是一个跨多个次版本的升级。zod 在 3.24 版本中引入了重大变更（如 ZodError 结构变化），可能会破坏现有代码。

Suggested change
"@xterm/addon-fit": "0.11.0",
建议先升级到 3.23.x 的最新版本，然后逐步测试 3.24 和 3.25 的兼容性，特别是检查所有使用 `zod` 进行验证和类型推断的地方。

"zod": "3.25.76",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 27, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

zod 从 3.23.8 升级到 3.25.76，其中包含多个 major 版本跳跃。Zod 3.24 和 3.25 引入了新特性但也可能有重大变更（如错误格式、类型推断等）。建议查阅 Zod changelog，并确保所有使用时没有使用已废除的 API。

Suggested change
"zod": "3.25.76",
建议在测试环境中运行所有使用 Zod 的测试用例。

"shell-quote": "1.10.0",
"replace-in-file": "8.4.0"
},
"devDependencies": {
"@next/bundle-analyzer": "14.2.4",
"@testing-library/jest-dom": "6.4.6",
"@testing-library/react": "16.0.0",
"@next/bundle-analyzer": "14.2.35",
"@testing-library/jest-dom": "6.9.1",
"@testing-library/react": "16.3.2",
"@types/busboy": "1.5.4",
"@types/google-protobuf": "3.15.12",
"@types/http-proxy": "1.17.14",
"@types/http-proxy": "1.17.17",
"@types/mime-types": "2.1.4",

@pkuhpc-review-bot pkuhpc-review-bot Bot Aug 5, 2025

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@types/react从18.3.3升级到18.3.23是一个较大的版本跨度，请注意版本间可能的兼容性问题，建议仔细阅读变更日志

"@types/node": "20.14.8",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@types/node 从 20.14.8 升级到 20.19.41，这是一个大跨度的版本更新。由于是类型定义，通常较为安全，但仍需确认与项目使用的 Node.js API 是否一致。

Suggested change
"@types/node": "20.14.8",
确保实际运行时的 Node.js 版本与类型定义匹配。当前根 package.json 中 Node 版本为 `20.20.2`，建议统一。

"@types/node": "20.19.43",
"@types/nprogress": "0.2.3",
"@types/react": "18.3.3",
"@types/react-dom": "18.3.0",
"@types/styled-components": "5.1.34",
"@types/swagger-ui-react": "4.18.3",
"@types/react": "18.3.31",
"@types/react-dom": "18.3.7",
"@types/styled-components": "5.1.36",
"@types/swagger-ui-react": "4.19.0",
"@types/url-join": "4.0.3",
"@types/ws": "8.5.10",
"@types/ws": "8.18.1",
"@types/shell-quote": "1.7.5",
"@types/ssh2": "1.15.0",
"fs-extra": "11.2.0",
"@types/ssh2": "1.15.5",
"fs-extra": "11.4.0",
"jest-environment-jsdom": "29.7.0",
"nextjs-node-loader": "1.1.5",
"node-mocks-http": "1.15.0",
"postcss": "8.4.38",
"ts-log": "2.2.5",
"webpack": "5.92.1"
"nextjs-node-loader": "1.1.9",
"node-mocks-http": "1.18.1",
"postcss": "8.5.26",
"ts-log": "2.2.7",
"webpack": "5.109.2"
},
"volta": {
"extends": "../../package.json"
Expand Down
20 changes: 10 additions & 10 deletions apps/audit-server/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,23 +23,23 @@
"license": "Mulan PSL v2",
"repository": "https://github.com/PKUHPC/OpenSCOW",
"dependencies": {
"@ddadaal/tsgrpc-server": "0.19.5",
"@ddadaal/tsgrpc-common": "0.2.5",
"@ddadaal/tsgrpc-client": "0.17.7",
"@grpc/grpc-js": "1.10.9",
"@mikro-orm/cli": "6.2.9",
"@mikro-orm/core": "6.2.9",
"@mikro-orm/migrations": "6.2.9",
"@mikro-orm/mysql": "6.2.9",
"@mikro-orm/seeder": "6.2.9",
"@ddadaal/tsgrpc-server": "0.19.8",
"@ddadaal/tsgrpc-common": "0.2.7",
"@ddadaal/tsgrpc-client": "0.17.9",
"@grpc/grpc-js": "1.14.4",
"@mikro-orm/cli": "6.6.16",
"@mikro-orm/core": "6.6.16",
"@mikro-orm/migrations": "6.6.16",
"@mikro-orm/mysql": "6.6.16",
"@mikro-orm/seeder": "6.6.16",
"@scow/config": "workspace:*",
"@scow/lib-config": "workspace:*",
"@scow/lib-server": "workspace:*",
"@scow/lib-decimal": "workspace:*",
"@scow/lib-operation-log": "workspace:*",
"@scow/utils": "workspace:*",
"@scow/protos": "workspace:*",
"dayjs": "1.11.11",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

dayjs 版本从 1.11.11 升级到 1.11.20，这是一个补丁版本升级，通常安全。但 dayjs 1.11.12+ 修复了一些 bug，建议快速验证日期格式化逻辑。

Suggested change
"dayjs": "1.11.11",
快速运行测试套件，特别是涉及日期处理的部分，确保无回归。

@pkuhpc-review-bot pkuhpc-review-bot Bot May 30, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

dayjs 从 1.11.11 升级到 1.11.21，是小版本更新，但建议确认无功能性回归。由于 dayjs 影响日期解析和显示，需要检查关键场景（如报表生成、时间格式化）。

Suggested change
"dayjs": "1.11.11",
如果有自动化测试覆盖日期逻辑，请运行它们。

"dayjs": "1.11.21",
"pino": "8.16.2",
"pino-pretty": "10.3.1"
},
Expand Down
22 changes: 11 additions & 11 deletions apps/auth/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,37 +22,37 @@
"license": "Mulan PSL v2",
"repository": "https://github.com/PKUHPC/OpenSCOW",
"dependencies": {
"@fastify/error": "4.0.0",
"@fastify/error": "4.2.0",
"@fastify/formbody": "7.4.0",
"@fastify/static": "7.0.4",
"@fastify/view": "9.1.0",
"liquidjs": "10.14.0",
"liquidjs": "10.28.0",
"@scow/config": "workspace:*",
"@scow/lib-config": "workspace:*",
"@scow/lib-server": "workspace:*",
"@scow/lib-ssh": "workspace:*",
"@scow/utils": "workspace:*",
"@sinclair/typebox": "0.32.34",
"@sinclair/typebox": "0.34.52",
"asn1": "0.2.6",
"fastify": "4.28.0",
"fastify": "4.29.1",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 24, 2025

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fastify从4.28.0升级到4.29.1，需要注意中间件API是否有变化

"fastify-graceful-shutdown": "3.5.3",
"fastify-plugin": "4.5.1",
"ioredis": "5.4.1",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ioredis 从 5.4.1 升级到 5.10.1，这是一个大的次版本跨越。ioredis 5.x 版本中可能有 API 变更或行为变化，需要检查 Redis 操作代码。

Suggested change
"ioredis": "5.4.1",
重点关注 `ioredis` 的连接配置、集群支持和命令执行代码。查看 ioredis 发布说明，特别是关于 5.5 之后的重大变更。

"ioredis": "5.11.1",
"ldapjs": "2.3.3",
"nanoid": "5.0.7",
"nanoid": "5.1.16",
"svg-captcha": "1.4.0",
"pino-pretty": "10.3.1",
"pino": "8.16.2",
"nodemailer": "6.9.14",
"qrcode": "1.5.3",
"nodemailer": "6.10.1",
"qrcode": "1.5.4",
"speakeasy": "2.0.0",
"react-typed-i18n": "2.3.0"
"react-typed-i18n": "2.6.1"
},
"devDependencies": {
"@types/asn1": "0.2.4",
"@types/ldapjs": "2.2.5",
"@types/nodemailer": "6.4.15",
"@types/qrcode": "1.5.5",
"@types/nodemailer": "6.4.24",
"@types/qrcode": "1.5.6",
"@types/speakeasy": "2.0.10"
},
"volta": {
Expand Down
12 changes: 6 additions & 6 deletions apps/cli/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,22 +14,22 @@
"dependencies": {
"@scow/lib-config": "workspace:*",
"pkg": "5.8.1",
"yargs": "17.7.2",
"yargs": "17.7.3",
"prompts": "2.4.2",
"@sinclair/typebox": "0.32.34",
"js-yaml": "4.1.0",

@pkuhpc-review-bot pkuhpc-review-bot Bot May 30, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@sinclair/typebox 从 0.32.34 升级到 0.34.49，跨次版本升级。请检查项目中是否有使用 @sinclair/typebox 的API，因为新版本可能移除了某些类型或改变了行为模式。

Suggested change
"js-yaml": "4.1.0",
查看TypeBox的changelog，并确保所有Schema定义正常工作。

"@sinclair/typebox": "0.34.52",
"js-yaml": "4.3.1",
"pino": "8.16.2",
"pino-pretty": "10.3.1",
"@octokit/rest": "20.1.1",
"jszip": "3.10.1",
"dotenv": "16.4.5",
"dotenv": "16.6.1",
"death": "1.1.0",
"https-proxy-agent": "7.0.4",
"https-proxy-agent": "7.0.6",
"node-fetch-commonjs": "3.3.2",
"@scow/config": "workspace:*"
},
"devDependencies": {
"@types/yargs": "17.0.32",
"@types/yargs": "17.0.35",
"@types/prompts": "2.4.9",
"@types/js-yaml": "4.0.9",
"@types/death": "1.1.5"
Expand Down
28 changes: 14 additions & 14 deletions apps/mis-server/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,16 +23,16 @@
"license": "Mulan PSL v2",
"repository": "https://github.com/PKUHPC/OpenSCOW",
"dependencies": {
"@ddadaal/tsgrpc-common": "0.2.5",
"@ddadaal/tsgrpc-server": "0.19.5",
"@ddadaal/tsgrpc-client": "0.17.7",
"@grpc/grpc-js": "1.10.9",
"@mikro-orm/cli": "6.2.9",
"@mikro-orm/core": "6.2.9",
"@mikro-orm/mariadb": "6.2.9",
"@mikro-orm/migrations": "6.2.9",
"@mikro-orm/mysql": "6.2.9",
"@mikro-orm/seeder": "6.2.9",
"@ddadaal/tsgrpc-common": "0.2.7",
"@ddadaal/tsgrpc-server": "0.19.8",
"@ddadaal/tsgrpc-client": "0.17.9",
"@grpc/grpc-js": "1.14.4",
"@mikro-orm/cli": "6.6.16",
"@mikro-orm/core": "6.6.16",
"@mikro-orm/mariadb": "6.6.16",
"@mikro-orm/migrations": "6.6.16",
"@mikro-orm/mysql": "6.6.16",
"@mikro-orm/seeder": "6.6.16",
"@scow/config": "workspace:*",
"@scow/lib-auth": "workspace:*",
"@scow/lib-config": "workspace:*",
Expand All @@ -44,14 +44,14 @@
"@scow/protos": "workspace:*",
"@scow/scheduler-adapter-protos": "workspace:*",
"@scow/utils": "workspace:*",
"@sinclair/typebox": "0.32.34",
"dayjs": "1.11.11",
"dotenv": "16.4.5",
"@sinclair/typebox": "0.34.52",
"dayjs": "1.11.21",
"dotenv": "16.6.1",
"node-cron": "3.0.3",
"pino": "8.16.2",
"pino-pretty": "10.3.1",
"uuid": "10.0.0",
"wait-on": "8.0.0"
"wait-on": "8.0.5"
},
"devDependencies": {
"@types/google-protobuf": "3.15.12",
Expand Down
Loading
Loading