Bump brace-expansion, aws-cdk-lib, eslint, eslint-plugin-svelte, sst and typescript-eslint in /apps/web - #205
Conversation
…and typescript-eslint Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) to 5.0.8 and updates ancestor dependencies [brace-expansion](https://github.com/juliangruber/brace-expansion), [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib), [eslint](https://github.com/eslint/eslint), [eslint-plugin-svelte](https://github.com/sveltejs/eslint-plugin-svelte/tree/HEAD/packages/eslint-plugin-svelte), [sst](https://github.com/anomalyco/sst) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint). These dependencies need to be updated together. Updates `brace-expansion` from 2.0.2 to 5.0.8 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v2.0.2...v5.0.8) Updates `aws-cdk-lib` from 2.142.1 to 2.262.2 - [Release notes](https://github.com/aws/aws-cdk/releases) - [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md) - [Commits](https://github.com/aws/aws-cdk/commits/v2.262.2/packages/aws-cdk-lib) Updates `eslint` from 9.39.1 to 10.8.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.1...v10.8.0) Updates `eslint-plugin-svelte` from 2.46.1 to 3.22.0 - [Release notes](https://github.com/sveltejs/eslint-plugin-svelte/releases) - [Changelog](https://github.com/sveltejs/eslint-plugin-svelte/blob/main/packages/eslint-plugin-svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/eslint-plugin-svelte/commits/eslint-plugin-svelte@3.22.0/packages/eslint-plugin-svelte) Updates `sst` from 2.43.2 to 4.17.1 - [Release notes](https://github.com/anomalyco/sst/releases) - [Commits](https://github.com/anomalyco/sst/compare/sst@2.43.2...v4.17.1) Updates `typescript-eslint` from 8.48.1 to 8.65.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 5.0.8 dependency-type: indirect - dependency-name: aws-cdk-lib dependency-version: 2.262.2 dependency-type: direct:development - dependency-name: eslint dependency-version: 10.8.0 dependency-type: direct:development - dependency-name: eslint-plugin-svelte dependency-version: 3.22.0 dependency-type: direct:development - dependency-name: sst dependency-version: 4.17.1 dependency-type: direct:development - dependency-name: typescript-eslint dependency-version: 8.65.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 05bee66154
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "react": "^18.2.0", | ||
| "react-dom": "^18.2.0", | ||
| "sst": "2.43.2", | ||
| "sst": "4.17.1", |
There was a problem hiding this comment.
Keep SST on v2 until the config is migrated
With sst upgraded to v4, the existing deployment still uses the v2 shape in apps/web/sst.config.ts (SSTConfig, stacks(app), and Cron/SvelteKitSite from sst/constructs), while SST v3+ switched away from CDK stacks and those v2 constructs. The production workflow in .github/workflows/cd.yml runs npx sst deploy --stage prod, so this dependency bump will block deployments unless the SST config and adapter are migrated at the same time or the package is kept on 2.x.
Useful? React with 👍 / 👎.
| "aws-cdk-lib": "2.262.2", | ||
| "constructs": "10.3.0", | ||
| "eslint": "^9.0.0", | ||
| "eslint": "^10.8.0", |
There was a problem hiding this comment.
Declare @eslint/js before upgrading ESLint
After this bump, apps/web/eslint.config.js still imports @eslint/js directly, but @eslint/js is not listed in package.json and the new lockfile no longer installs node_modules/@eslint/js transitively through eslint. A clean npm ci followed by npm run lint will fail while loading the config with a missing package error; add @eslint/js as a dev dependency or avoid the direct import.
Useful? React with 👍 / 👎.
|
Superseded by #208. |
Bumps brace-expansion to 5.0.8 and updates ancestor dependencies brace-expansion, aws-cdk-lib, eslint, eslint-plugin-svelte, sst and typescript-eslint. These dependencies need to be updated together.
Updates
brace-expansionfrom 2.0.2 to 5.0.8Release notes
Sourced from brace-expansion's releases.
... (truncated)
Commits
96a63c05.0.8a1bd339Merge commit from fork592a36fBump tar from 7.5.16 to 7.5.20 (#127)bd14690Bump brace-expansion from 2.0.2 to 2.1.2 (#126)e729ba6Bump ws from 8.19.0 to 8.21.1 (#124)5bf809eRemove Node.js 18 support (#110)8cb5716Bump markdown-it from 14.1.0 to 14.2.0 (#113)43122dfBump sigstore from 4.1.0 to 4.1.1 (#119)69bd65aBump@sigstore/verifyfrom 3.1.0 to 3.1.1 (#118)b3bfbf0Bump@sigstore/corefrom 3.1.0 to 3.2.1 (#117)Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
aws-cdk-libfrom 2.142.1 to 2.262.2Release notes
Sourced from aws-cdk-lib's releases.
... (truncated)
Changelog
Sourced from aws-cdk-lib's changelog.
... (truncated)
Commits
07d3334chore(core): regression test for nested stack DependsOn blowup (#38406) (#38431)d97dd8dfix: revert "fix(core): stack.node.addDependency gets slower as stacks grow (...d409b96fix(core): bump@aws/cloudformation-validateto 1.5.1-beta to fix install o...cc4208cfix(core): env CDK_VALIDATION=false does not disable built-in template valida...dd8ac9fMerge remote-tracking branch 'origin/v2-release' into bump/2.262.07e00626chore(release): 2.262.0db98909fix: cross-stack warnings are emitted for nested stacks (#38355)3f9422ffix(validation): incorrectly relative paths in Cloud Assemblies (#38352)0af7c34fix(core): stack-related validation has an empty construct path (#38350)5d11d70fix(validation): validation reports are not self-contained (#38333)Updates
eslintfrom 9.39.1 to 10.8.0Release notes
Sourced from eslint's releases.
... (truncated)
Commits
749dfed10.8.04bd0d75Build: changelog update for 10.8.04fbf46dtest: pinwebpackversion to 5.108.4 (#21137)6ddf858docs: fix broken Specify Parser Options anchor link (#21106)784dfbedocs: Clarifyno-eq-nulldescription (#21120)6b8d2f7fix: escape reserved characters in rule id inhtmlformatter (#21129)2d063e2chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)eccbe7btest: add error locations tono-class-assign(#21123)2fee9bbfeat: exportConfigObjectfromeslint/config(#21082)e7d1e43ci: bump actions/setup-go from 6 to 7 (#21118)Updates
eslint-plugin-sveltefrom 2.46.1 to 3.22.0Release notes
Sourced from eslint-plugin-svelte's releases.
... (truncated)
Changelog
Sourced from eslint-plugin-svelte's changelog.
... (truncated)
Commits
0d9f1a0chore: release eslint-plugin-svelte (#1564)cdad05afeat: addno-conflicting-module-namesrule (#1563)28c1234chore: release eslint-plugin-svelte (#1560)4138a57feat: addno-bind-value-on-checkable-inputsrule (#1559)e8ee416chore: release eslint-plugin-svelte (#1544)32ba915feat: add no-at-const-tags rule (#1545)989bfa5fix: disallow props based on SvelteKit route component type (#1503)5efd295chore: release eslint-plugin-svelte (#1538)f0416befeat: support Svelte 5 declaration tags (#1533)fc83a38chore: release eslint-plugin-svelte (#1535)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-svelte since your current version.
Updates
sstfrom 2.43.2 to 4.17.1Release notes
Sourced from sst's releases.
... (truncated)
Commits
a0bd20fFix duplicate CloudWatch role URN on fresh accounts (#6911)8bfe1c1Addstate.retentionoption to prevent big state buckets (#6925)adcdb2fFixsst addrequiring Prettier (or other dependencies) (#6924)d1e8ff1Re-runFunctionEnvironmentUpdatewhen Lambda changes (#6920)9321c40Support custom MAIL FROM domain for SES (#6906)4f1a634Sync IAM permissions breakdown (#6898)9f23ba0Remove enteprise page from docse881243Limit CloudFront Function name length in domain redirects (#6889)817ac33Use supplied credentials in AWS SDK client (#6893)9cfa06cAdd Durable objects Component (#6785)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for sst since your current version.
Updates
typescript-eslintfrom 8.48.1 to 8.65.0Release notes
Sourced from typescript-eslint's releases.
... (truncated)
Changelog
Sourced from