Skip to content

chore(deps): update all dependencies except java_base 26 - #1697

Merged
aaylward merged 3 commits into
mainfrom
claude/great-gauss-lqkl3i-deps
Oct 25, 2026
Merged

aaylward merged 3 commits into
mainfrom
claude/great-gauss-lqkl3i-deps

Conversation

@aaylward

@aaylward aaylward commented Oct 25, 2026 •

Copy link
Copy Markdown
Collaborator

The current "update all dependencies" group from #116.

Included: rules_cc 0.2.27, rules_cc_autoconf 0.33.1, rules_go 0.65.0, rules_python 2.4.5, Forgejo 16 → 17, and Cargo lockfile bumps (rmcp 3.7.0, uuid 1.29.0, webpki-root-certs 1.0.11). Plus @cloudflare/vite-plugin 1.65.0 in the three web apps' lockfiles.

Excluded:

  • java_base 26: not LTS. renovate.json now allows only LTS majors (25, 29, …) for azul/zulu-openjdk, so this stops coming back. Digest refreshes within 25 still flow. Checked with Renovate's own lookup (--platform=local --dry-run=lookup): main's config proposes 25 → 26 (major); this branch's proposes nothing.
  • rules_foreign_cc 0.17: graphics: SDL3 and raylib on BCR modules; drop rules_foreign_cc #1694 drops the dependency.

Dependabot (undici): the vite-plugin bump alone doesn't fix it. miniflare pins undici exactly at 7.29.1, which is vulnerable (1 high, 3 moderate), and even miniflare's latest stable pins 7.28.0. The web apps now carry "overrides": {"miniflare": {"undici": "^7.30.1"}}: a patch-level bump inside 7.x, and a range, so it won't fight a newer miniflare. npm audit reports 0 vulnerabilities in all three apps. It's dev tooling (the Cloudflare dev server). Drop the override once miniflare ships 7.30.1+.

Forgejo 17: upstream currently advises against 17.0.0 because of an open issue with pushes and merges. Taken anyway: here it's only a mirror. Its migrations are one-way, so going back means restoring forgejo_data.

Locally: bazel test //... passes (283/283). typecheck, test (552) and build pass in all three web apps. Renovate config validator passes. MODULE.bazel.lock is from a resolution run without the sandbox overrides.

Review panel: not run.

@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
1d4-web d43e4d0 Commit Preview URL

Branch Preview URL
Oct 25 2026, 07:18 PM

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 25, 2026 •

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
iili d43e4d0 Commit Preview URL

Branch Preview URL
Oct 25 2026, 07:19 PM

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 25, 2026 •

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
ast-lol d43e4d0 Commit Preview URL

Branch Preview URL
Oct 25 2026, 07:19 PM

@github-actions github-actions Bot added service:chess_engine Changes the chess_engine image service:deja Changes the deja image service:go_engine Changes the go_engine image service:log_shipper Changes the log_shipper image service:microgpt-serve Changes the microgpt-serve image service:mithril Changes the mithril image service:posterize Changes the posterize image service:prom_proxy Changes the prom_proxy image service:stats Changes the stats image labels Oct 25, 2026
@aaylward
aaylward merged commit 6bb76c0 into main Oct 25, 2026
25 checks passed
@aaylward
aaylward deleted the claude/great-gauss-lqkl3i-deps branch October 25, 2026 20:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

service:chess_engine Changes the chess_engine image service:deja Changes the deja image service:go_engine Changes the go_engine image service:log_shipper Changes the log_shipper image service:microgpt-serve Changes the microgpt-serve image service:mithril Changes the mithril image service:posterize Changes the posterize image service:prom_proxy Changes the prom_proxy image service:stats Changes the stats image

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants