Skip to content

chore(deps): bump the all-dependencies group across 1 directory with 21 updates - #11746

Closed
dependabot[bot] wants to merge 1 commit into
Dev_new_guifrom
dependabot/npm_and_yarn/autobot-frontend/Dev_new_gui/all-dependencies-cf685b9e8b
Closed

dependabot[bot] wants to merge 1 commit into
Dev_new_guifrom
dependabot/npm_and_yarn/autobot-frontend/Dev_new_gui/all-dependencies-cf685b9e8b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026 •

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the all-dependencies group with 20 updates in the /autobot-frontend directory:

Package From To
@tanstack/vue-virtual 3.13.31 3.13.32
dompurify 3.4.11 3.4.12
vue-router 5.1.0 5.2.0
wavesurfer.js 7.12.9 7.12.10
@pinia/testing 1.0.3 2.0.1
@storybook/addon-docs 10.4.6 10.5.0
@storybook/vue3 10.4.6 10.5.0
@storybook/vue3-vite 10.4.6 10.5.0
@types/node 26.1.0 26.1.1
@types/three 0.185.0 0.185.1
@vitest/eslint-plugin 1.6.21 1.6.23
cypress 15.18.0 15.18.1
eslint 10.6.0 10.7.0
eslint-plugin-cypress 6.4.2 6.4.3
eslint-plugin-oxlint 1.72.0 1.73.0
msw 2.14.6 2.15.0
oxlint 1.72.0 1.74.0
postcss 8.5.16 8.5.19
prettier 3.9.4 3.9.5
vue-tsc 3.3.6 3.3.7

Updates @tanstack/vue-virtual from 3.13.31 to 3.13.32

Release notes

Sourced from @​tanstack/vue-virtual's releases.

@​tanstack/vue-virtual@​3.13.32

Patch Changes

Changelog

Sourced from @​tanstack/vue-virtual's changelog.

3.13.32

Patch Changes

Commits

Updates dompurify from 3.4.11 to 3.4.12

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.12

  • Fixed an issue where a hook would not get called for custom elements, thanks @​Rikuxx0
  • Hardened the handling of hooks removing elements, @​mkrause-bee360
  • Added support for a few new SVG attributes, thanks @​cbn-falias & @​Develop-KIM
  • Hardened the handling of declarative partial updates
  • Updated the documentation is several spots, README, wiki, etc.
  • Bumped several dependencies where possible
Commits

Updates vue-router from 5.1.0 to 5.2.0

Release notes

Sourced from vue-router's releases.

v5.2.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates wavesurfer.js from 7.12.9 to 7.12.10

Release notes

Sourced from wavesurfer.js's releases.

7.12.10

  • 7.12.10
  • feat(Spectrogram): decouple FFT size from the analysis window (fftSize option) (#4329) by @​koyukan
  • fix(Spectrogram): reject pending worker promises when the worker errors (#4328) by @​koyukan
  • fix(Spectrogram): use the same window alpha defaults in the worker and main thread (#4327) by @​koyukan

npm

Commits
  • d7e4a89 7.12.10
  • 2df3baa feat(Spectrogram): decouple FFT size from the analysis window (fftSize option...
  • c6e4a26 fix(Spectrogram): reject pending worker promises when the worker errors (#4328)
  • ddbef95 fix(Spectrogram): use the same window alpha defaults in the worker and main t...
  • See full diff in compare view

Updates @pinia/testing from 1.0.3 to 2.0.1

Release notes

Sourced from @​pinia/testing's releases.

@​pinia/testing@​2.0.1

   🐞 Bug Fixes

    View changes on GitHub

@​pinia/testing@​2.0.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • ae4e3b2 release: pinia@4.0.2 @​pinia/testing@​2.0.1
  • 0203b2d ci: fix size check
  • 39aae41 refactor: build configuration (#3158)
  • 75009b0 release: pinia@4.0.1
  • 2ed563c chore: update pinia readme
  • fb21766 fix: Re-add missing types exports field (#3154)
  • d797385 fix(ci): pin pnpm to 11.7.0 to match action-setup bootstrap
  • bd3d9b3 ci: install pnpm standalone to avoid self-switch crash in release
  • acad9f2 ci: pin pnpm version in release workflow
  • 1374c9d release: pinia@4.0.0 @​pinia/testing@​2.0.0 @​pinia/nuxt@​1.0.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​pinia/testing since your current version.


Updates @storybook/addon-docs from 10.4.6 to 10.5.0

Release notes

Sourced from @​storybook/addon-docs's releases.

v10.5.0

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales
  • 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
  • ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
  • 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

... (truncated)

Changelog

Sourced from @​storybook/addon-docs's changelog.

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales
  • 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
  • ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
  • 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

... (truncated)

Commits
  • 9dafcd2 Bump version from "10.5.0-beta.2" to "10.5.0" [skip ci]
  • 448db85 Bump version from "10.5.0-beta.1" to "10.5.0-beta.2" [skip ci]
  • a4ce979 Bump version from "10.5.0-beta.0" to "10.5.0-beta.1" [skip ci]
  • f0bf138 Bump version from "10.5.0-alpha.11" to "10.5.0-beta.0" [skip ci]
  • fac05a5 Bump version from "10.5.0-alpha.10" to "10.5.0-alpha.11" [skip ci]
  • 4057c41 Bump version from "10.5.0-alpha.9" to "10.5.0-alpha.10" [skip ci]
  • 91b9c34 Merge pull request #35321 from storybookjs/sidnioulz/fix-html-lang-refreshed
  • 383d590 Merge branch 'next' into sidnioulz/fix-html-lang-refreshed
  • 520c701 UI: Add docs.lang and htmlLang parameters
  • d71aa77 Merge origin/next into docgen/worker-threading
  • Additional commits viewable in compare view

Updates @storybook/vue3 from 10.4.6 to 10.5.0

Release notes

Sourced from @​storybook/vue3's releases.

v10.5.0

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales
  • 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
  • ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
  • 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

... (truncated)

Changelog

Sourced from @​storybook/vue3's changelog.

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales
  • 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
  • ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
  • 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

... (truncated)

Commits
  • 9dafcd2 Bump version from "10.5.0-beta.2" to "10.5.0" [skip ci]
  • 448db85 Bump version from "10.5.0-beta.1" to "10.5.0-beta.2" [skip ci]
  • a4ce979 Bump version from "10.5.0-beta.0" to "10.5.0-beta.1" [skip ci]
  • f0bf138 Bump version from "10.5.0-alpha.11" to "10.5.0-beta.0" [skip ci]
  • fac05a5 Bump version from "10.5.0-alpha.10" to "10.5.0-alpha.11" [skip ci]
  • 4057c41 Bump version from "10.5.0-alpha.9" to "10.5.0-alpha.10" [skip ci]
  • 1e51b9a Merge pull request #34909 from Arunsiva003/fix-vue-docgen-default-values
  • da84210 Bump version from "10.5.0-alpha.8" to "10.5.0-alpha.9" [skip ci]
  • a6e6068 Merge branch 'next' into fix-vue-docgen-default-values
  • c347410 Bump version from "10.5.0-alpha.7" to "10.5.0-alpha.8" [skip ci]
  • Additional commits viewable in compare view

Updates @storybook/vue3-vite from 10.4.6 to 10.5.0

Release notes

Sourced from @​storybook/vue3-vite's releases.

v10.5.0

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales
  • 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
  • ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
  • 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

…21 updates

Bumps the all-dependencies group with 20 updates in the /autobot-frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@tanstack/vue-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/vue-virtual) | `3.13.31` | `3.13.32` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.11` | `3.4.12` |
| [vue-router](https://github.com/vuejs/router) | `5.1.0` | `5.2.0` |
| [wavesurfer.js](https://github.com/katspaugh/wavesurfer.js) | `7.12.9` | `7.12.10` |
| [@pinia/testing](https://github.com/vuejs/pinia) | `1.0.3` | `2.0.1` |
| [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `10.4.6` | `10.5.0` |
| [@storybook/vue3](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/vue3) | `10.4.6` | `10.5.0` |
| [@storybook/vue3-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/vue3-vite) | `10.4.6` | `10.5.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.0` | `26.1.1` |
| [@types/three](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/three) | `0.185.0` | `0.185.1` |
| [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.6.21` | `1.6.23` |
| [cypress](https://github.com/cypress-io/cypress) | `15.18.0` | `15.18.1` |
| [eslint](https://github.com/eslint/eslint) | `10.6.0` | `10.7.0` |
| [eslint-plugin-cypress](https://github.com/cypress-io/eslint-plugin-cypress) | `6.4.2` | `6.4.3` |
| [eslint-plugin-oxlint](https://github.com/oxc-project/eslint-plugin-oxlint) | `1.72.0` | `1.73.0` |
| [msw](https://github.com/mswjs/msw) | `2.14.6` | `2.15.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.72.0` | `1.74.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.16` | `8.5.19` |
| [prettier](https://github.com/prettier/prettier) | `3.9.4` | `3.9.5` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.6` | `3.3.7` |



Updates `@tanstack/vue-virtual` from 3.13.31 to 3.13.32
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/vue-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/vue-virtual@3.13.32/packages/vue-virtual)

Updates `dompurify` from 3.4.11 to 3.4.12
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.11...3.4.12)

Updates `vue-router` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/vuejs/router/releases)
- [Commits](vuejs/router@v5.1.0...v5.2.0)

Updates `wavesurfer.js` from 7.12.9 to 7.12.10
- [Release notes](https://github.com/katspaugh/wavesurfer.js/releases)
- [Commits](katspaugh/wavesurfer.js@7.12.9...7.12.10)

Updates `@pinia/testing` from 1.0.3 to 2.0.1
- [Release notes](https://github.com/vuejs/pinia/releases)
- [Commits](https://github.com/vuejs/pinia/compare/@pinia/testing@1.0.3...@pinia/testing@2.0.1)

Updates `@storybook/addon-docs` from 10.4.6 to 10.5.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.0/code/addons/docs)

Updates `@storybook/vue3` from 10.4.6 to 10.5.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.0/code/renderers/vue3)

Updates `@storybook/vue3-vite` from 10.4.6 to 10.5.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.0/code/frameworks/vue3-vite)

Updates `@types/node` from 26.1.0 to 26.1.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/three` from 0.185.0 to 0.185.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/three)

Updates `@vitest/eslint-plugin` from 1.6.21 to 1.6.23
- [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases)
- [Commits](vitest-dev/eslint-plugin-vitest@v1.6.21...v1.6.23)

Updates `cypress` from 15.18.0 to 15.18.1
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v15.18.0...v15.18.1)

Updates `eslint` from 10.6.0 to 10.7.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.6.0...v10.7.0)

Updates `eslint-plugin-cypress` from 6.4.2 to 6.4.3
- [Release notes](https://github.com/cypress-io/eslint-plugin-cypress/releases)
- [Commits](cypress-io/eslint-plugin-cypress@v6.4.2...v6.4.3)

Updates `eslint-plugin-oxlint` from 1.72.0 to 1.73.0
- [Release notes](https://github.com/oxc-project/eslint-plugin-oxlint/releases)
- [Commits](oxc-project/eslint-plugin-oxlint@v1.72.0...v1.73.0)

Updates `msw` from 2.14.6 to 2.15.0
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](mswjs/msw@v2.14.6...v2.15.0)

Updates `oxlint` from 1.72.0 to 1.74.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.74.0/npm/oxlint)

Updates `postcss` from 8.5.16 to 8.5.19
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.16...8.5.19)

Updates `prettier` from 3.9.4 to 3.9.5
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.4...3.9.5)

Updates `storybook` from 10.4.6 to 10.5.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.0/code/core)

Updates `vue-tsc` from 3.3.6 to 3.3.7
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.7/packages/tsc)

---
updated-dependencies:
- dependency-name: "@tanstack/vue-virtual"
  dependency-version: 3.13.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: dompurify
  dependency-version: 3.4.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: vue-router
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: wavesurfer.js
  dependency-version: 7.12.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@pinia/testing"
  dependency-version: 2.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: "@storybook/addon-docs"
  dependency-version: 10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@storybook/vue3"
  dependency-version: 10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@storybook/vue3-vite"
  dependency-version: 10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/three"
  dependency-version: 0.185.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@vitest/eslint-plugin"
  dependency-version: 1.6.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: cypress
  dependency-version: 15.18.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: eslint
  dependency-version: 10.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: eslint-plugin-cypress
  dependency-version: 6.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: eslint-plugin-oxlint
  dependency-version: 1.73.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: msw
  dependency-version: 2.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: oxlint
  dependency-version: 1.74.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: postcss
  dependency-version: 8.5.19
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: prettier
  dependency-version: 3.9.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: storybook
  dependency-version: 10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: vue-tsc
  dependency-version: 3.3.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file frontend labels Jul 15, 2026
@dependabot
dependabot Bot requested a review from mrveiss as a code owner July 15, 2026 10:51
@dependabot dependabot Bot added frontend dependencies Pull requests that update a dependency file labels Jul 15, 2026
@github-actions

Copy link
Copy Markdown
Contributor

✅ SSOT Configuration Compliance: Passing

🎉 No hardcoded values detected that have SSOT config equivalents!

@dependabot @github

dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 15, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/autobot-frontend/Dev_new_gui/all-dependencies-cf685b9e8b branch July 15, 2026 19:16
@mrveiss

mrveiss commented Jul 15, 2026

Copy link
Copy Markdown
Owner

@dependabot recreate

@dependabot @github

dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is closed. If the branch still exists, you can re-open the PR and then use @dependabot rebase or @dependabot recreate. If the branch was deleted, Dependabot will create a new PR on the next scheduled run, or you can trigger an update from the Dependency graph page.

mrveiss added a commit that referenced this pull request Jul 27, 2026
#12798)

Dependabot PR #12792 (/autobot-frontend, 24 updates) died at `npm ci`, taking
four REQUIRED checks with it (Unit & Integration Tests, smoke-test,
verify-generated-types, vue-tsc-baseline).

The three majors in that group (apexcharts 5->6, @testing-library/jest-dom 6->7,
jsdom 29->30) look like the obvious suspects but are not the cause:

  npm error While resolving: eslint-plugin-oxlint@1.75.0
  npm error Found: oxlint@1.73.0
  npm error peer oxlint@"~1.75.0" from eslint-plugin-oxlint@1.75.0
  npm error Conflicting peer dependency: oxlint@1.75.0

eslint-plugin-oxlint peers on its OWN matching oxlint minor. package.json pins
both at ~1.73.0 (:145, :154), but the group advanced only the plugin — an
unsatisfiable pair, so install fails before a single test runs.

Under `all-dependencies: ["*"]` nothing kept them in lockstep, so this recurs on
any run that moves one without the other. Their own group (ordered above the
catch-all, since first match wins) forces them to move together.

A version cap — the remedy used just below for @pinia/testing (#11753/#11746) —
would be wrong here: both oxlint packages SHOULD keep advancing, they just must
never advance apart.

Only /autobot-frontend is affected; autobot-slm-frontend/package.json has
neither package.

Closes #12798
mrveiss added a commit that referenced this pull request Jul 27, 2026
…#12798) (#12797)

* ci: skip PR-template gate for bot-authored PRs (#12796)

All 9 open Dependabot PRs (#12787-#12795) carried a red "Validate PR template
sections". Dependabot writes its own fixed PR body and can never fill the human
template (Thinking Path / What Changed / Verification / Model Used), so the job
failed 100% of the time on bot PRs by construction.

The check is advisory — it is not in the branch-protection required set — so it
never blocked a merge. The real cost was signal quality: every bot PR carried a
permanent red that had to be opened and dismissed before you could tell whether
that PR was actually healthy. On #12792 (a genuinely broken frontend dep bump)
the meaningful failures — Unit & Integration Tests, smoke-test,
verify-generated-types, vue-tsc-baseline — sat in the same list as this
known-meaningless one.

Skip rather than pass, so the gate stays honest for human PRs. Since the job is
not required, skipping changes nothing about what is allowed to merge.

github.event.pull_request.user.type is a GitHub-controlled enum
(User/Bot/Organization) evaluated in an `if:` condition, not interpolated into a
shell command, so this adds no workflow-injection surface. The existing body
check already reads the PR body via env + `gh pr view` rather than direct
interpolation.

Closes #12796

* ci(deps): keep oxlint and eslint-plugin-oxlint in one dependabot group (#12798)

Dependabot PR #12792 (/autobot-frontend, 24 updates) died at `npm ci`, taking
four REQUIRED checks with it (Unit & Integration Tests, smoke-test,
verify-generated-types, vue-tsc-baseline).

The three majors in that group (apexcharts 5->6, @testing-library/jest-dom 6->7,
jsdom 29->30) look like the obvious suspects but are not the cause:

  npm error While resolving: eslint-plugin-oxlint@1.75.0
  npm error Found: oxlint@1.73.0
  npm error peer oxlint@"~1.75.0" from eslint-plugin-oxlint@1.75.0
  npm error Conflicting peer dependency: oxlint@1.75.0

eslint-plugin-oxlint peers on its OWN matching oxlint minor. package.json pins
both at ~1.73.0 (:145, :154), but the group advanced only the plugin — an
unsatisfiable pair, so install fails before a single test runs.

Under `all-dependencies: ["*"]` nothing kept them in lockstep, so this recurs on
any run that moves one without the other. Their own group (ordered above the
catch-all, since first match wins) forces them to move together.

A version cap — the remedy used just below for @pinia/testing (#11753/#11746) —
would be wrong here: both oxlint packages SHOULD keep advancing, they just must
never advance apart.

Only /autobot-frontend is affected; autobot-slm-frontend/package.json has
neither package.

Closes #12798
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file frontend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant