Skip to content

chore(deps): consolidate dependency bumps - #428

Merged
setkyar merged 2 commits into
mainfrom
chore/deps-consolidate-2026-10
Oct 26, 2026
Merged

setkyar merged 2 commits into
mainfrom
chore/deps-consolidate-2026-10

Conversation

@setkyar

@setkyar setkyar commented Oct 26, 2026

Copy link
Copy Markdown
Contributor

Consolidates the open Dependabot bumps into one branch so CI runs once.

Go (services/shared, orchestrator, whatsapp)

JS (patch-minor group, #426)

  • 37 updates across api/web/database/ui manifests; lockfile regenerated locally

Excluded

Local: biome lint, go vet, gofmt, typecheck, go unit tests (all 3 services), ts-unit (948 pass / 0 fail) all green.

Go (services/shared, orchestrator, whatsapp):
- nats.go 1.53.1 -> 1.54.0 (#408, #409, #411)
- aws-sdk-go-v2 stack + golang.org/x/sync 0.23->0.24 (#411)
- klauspost/compress resolves to 1.20.0 as required by nats.go 1.54
  (supersedes standalone 1.18.7 bumps #423/#424/#425)

JS (patch-minor group, #426):
- 37 updates across api/web/database/ui manifests; lockfile regenerated

Excludes zod 4 (#395): major-version migration with real type breaks,
tracked separately.
The patch-minor group bumped kysely 0.28.17 -> 0.29.7, whose repackaged
dist/index.js does not export Migrator under Bun, breaking db:migrate.
Pin to ^0.28.17 (kysely 0.x minors are effectively breaking).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant