fix: trust vite v6.4.1 by TkDodo · Pull Request #10756 · TanStack/query

TkDodo · 2026-05-22T17:48:48Z

Summary by CodeRabbit

Chores
- Updated CI workflow pipeline versions
- Adjusted dependency management configuration

nx-cloud · 2026-05-22T17:49:14Z

View your CI Pipeline Execution ↗ for commit 3e6cade

Command	Status	Duration	Result
`nx run-many --target=build --exclude=examples/*...`	✅ Succeeded	2m 2s	View ↗
`nx affected --targets=test:sherif,test:knip,tes...`	✅ Succeeded	1m 41s	View ↗

☁️ Nx Cloud last updated this comment at 2026-05-22 17:57:24 UTC

github-actions · 2026-05-22T17:49:32Z

🚀 Changeset Version Preview

1 package(s) bumped directly, 24 bumped as dependents.

🟩 Patch bumps

Package	Version	Reason
`@tanstack/eslint-plugin-query`	5.100.11 → 5.100.12	Changeset
`@tanstack/angular-query-experimental`	5.100.11 → 5.100.12	Dependent
`@tanstack/angular-query-persist-client`	5.100.11 → 5.100.12	Dependent
`@tanstack/lit-query`	0.2.3 → 0.2.4	Dependent
`@tanstack/preact-query`	5.100.11 → 5.100.12	Dependent
`@tanstack/preact-query-devtools`	5.100.11 → 5.100.12	Dependent
`@tanstack/preact-query-persist-client`	5.100.11 → 5.100.12	Dependent
`@tanstack/query-async-storage-persister`	5.100.11 → 5.100.12	Dependent
`@tanstack/query-broadcast-client-experimental`	5.100.11 → 5.100.12	Dependent
`@tanstack/query-core`	5.100.11 → 5.100.12	Dependent
`@tanstack/query-devtools`	5.100.11 → 5.100.12	Dependent
`@tanstack/query-persist-client-core`	5.100.11 → 5.100.12	Dependent
`@tanstack/query-sync-storage-persister`	5.100.11 → 5.100.12	Dependent
`@tanstack/react-query`	5.100.11 → 5.100.12	Dependent
`@tanstack/react-query-devtools`	5.100.11 → 5.100.12	Dependent
`@tanstack/react-query-next-experimental`	5.100.11 → 5.100.12	Dependent
`@tanstack/react-query-persist-client`	5.100.11 → 5.100.12	Dependent
`@tanstack/solid-query`	5.100.11 → 5.100.12	Dependent
`@tanstack/solid-query-devtools`	5.100.11 → 5.100.12	Dependent
`@tanstack/solid-query-persist-client`	5.100.11 → 5.100.12	Dependent
`@tanstack/svelte-query`	6.1.30 → 6.1.31	Dependent
`@tanstack/svelte-query-devtools`	6.1.30 → 6.1.31	Dependent
`@tanstack/svelte-query-persist-client`	6.1.30 → 6.1.31	Dependent
`@tanstack/vue-query`	5.100.11 → 5.100.12	Dependent
`@tanstack/vue-query-devtools`	6.1.30 → 6.1.31	Dependent

pkg-pr-new · 2026-05-22T17:52:10Z

More templates

@tanstack/angular-query-experimental

npm i https://pkg.pr.new/@tanstack/angular-query-experimental@10756

@tanstack/eslint-plugin-query

npm i https://pkg.pr.new/@tanstack/eslint-plugin-query@10756

@tanstack/lit-query

npm i https://pkg.pr.new/@tanstack/lit-query@10756

@tanstack/preact-query

npm i https://pkg.pr.new/@tanstack/preact-query@10756

@tanstack/preact-query-devtools

npm i https://pkg.pr.new/@tanstack/preact-query-devtools@10756

@tanstack/preact-query-persist-client

npm i https://pkg.pr.new/@tanstack/preact-query-persist-client@10756

@tanstack/query-async-storage-persister

npm i https://pkg.pr.new/@tanstack/query-async-storage-persister@10756

@tanstack/query-broadcast-client-experimental

npm i https://pkg.pr.new/@tanstack/query-broadcast-client-experimental@10756

@tanstack/query-core

npm i https://pkg.pr.new/@tanstack/query-core@10756

@tanstack/query-devtools

npm i https://pkg.pr.new/@tanstack/query-devtools@10756

@tanstack/query-persist-client-core

npm i https://pkg.pr.new/@tanstack/query-persist-client-core@10756

@tanstack/query-sync-storage-persister

npm i https://pkg.pr.new/@tanstack/query-sync-storage-persister@10756

@tanstack/react-query

npm i https://pkg.pr.new/@tanstack/react-query@10756

@tanstack/react-query-devtools

npm i https://pkg.pr.new/@tanstack/react-query-devtools@10756

@tanstack/react-query-next-experimental

npm i https://pkg.pr.new/@tanstack/react-query-next-experimental@10756

@tanstack/react-query-persist-client

npm i https://pkg.pr.new/@tanstack/react-query-persist-client@10756

@tanstack/solid-query

npm i https://pkg.pr.new/@tanstack/solid-query@10756

@tanstack/solid-query-devtools

npm i https://pkg.pr.new/@tanstack/solid-query-devtools@10756

@tanstack/solid-query-persist-client

npm i https://pkg.pr.new/@tanstack/solid-query-persist-client@10756

@tanstack/svelte-query

npm i https://pkg.pr.new/@tanstack/svelte-query@10756

@tanstack/svelte-query-devtools

npm i https://pkg.pr.new/@tanstack/svelte-query-devtools@10756

@tanstack/svelte-query-persist-client

npm i https://pkg.pr.new/@tanstack/svelte-query-persist-client@10756

@tanstack/vue-query

npm i https://pkg.pr.new/@tanstack/vue-query@10756

@tanstack/vue-query-devtools

npm i https://pkg.pr.new/@tanstack/vue-query-devtools@10756

commit: 05f4699

coderabbitai · 2026-05-22T17:53:30Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: d08a1f23-10c8-4eae-add2-4420f87c2823

📥 Commits

Reviewing files that changed from the base of the PR and between b125ba9 and 05f4699.

📒 Files selected for processing (2)

.github/workflows/detect-agent.yml
pnpm-workspace.yaml

📝 Walkthrough

Walkthrough

This PR updates GitHub Actions workflow references to new pinned commit SHAs for the detect and backfill jobs, and adds a trust policy exclusion in the pnpm workspace configuration to exclude vite@6.4.1 from the no-downgrade constraint.

Changes

GitHub Workflow Automation Updates

Layer / File(s)	Summary
Detect and backfill job reference updates `.github/workflows/detect-agent.yml`	Both the `detect` and `backfill` job reusable workflow references are updated to new pinned commit SHAs.

Dependency Trust Policy Configuration

Layer / File(s)	Summary
Vite trust policy exclusion `pnpm-workspace.yaml`	A `trustPolicyExclude` entry is added to exempt `vite@6.4.1` from the workspace `trustPolicy: 'no-downgrade'` rule while maintaining the policy for other dependencies.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 A workflow hops to newer sha,
While Vite gets a trust reprieve—
Two configs dance, both light and small,
As rabbit whispers, "all's well, believe!" 🌙

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The pull request has no description; required sections like '🎯 Changes', '✅ Checklist', and '🚀 Release Impact' from the template are entirely missing.	Add a complete pull request description following the template, including sections for Changes, Checklist items, and Release Impact.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'fix: trust vite v6.4.1' directly corresponds to the main change—adding vite@6.4.1 to trustPolicyExclude in pnpm-workspace.yaml.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch feature/trust-vite

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

github-actions · 2026-05-22T17:57:24Z

size-limit report 📦

Path	Size
react full	12.1 KB (0%)
react minimal	9.07 KB (0%)

fix: trust vite v6.4.1

3e6cade

TkDodo marked this pull request as ready for review May 22, 2026 17:48

fix: update detect-agent because it has pinned setup actions

05f4699

TkDodo requested a review from a team as a code owner May 22, 2026 17:53

schiller-manuel approved these changes May 22, 2026

View reviewed changes

TkDodo merged commit ab9f0d5 into main May 22, 2026
10 checks passed

TkDodo deleted the feature/trust-vite branch May 22, 2026 18:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix: trust vite v6.4.1#10756

fix: trust vite v6.4.1#10756
TkDodo merged 2 commits into
mainfrom
feature/trust-vite

TkDodo commented May 22, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

nx-cloud Bot commented May 22, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented May 22, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented May 22, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented May 22, 2026 •

edited

Loading

Walkthrough

Changes

Estimated code review effort

Poem

❌ Failed checks (1 warning)

Uh oh!

github-actions Bot commented May 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

TkDodo commented May 22, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

nx-cloud Bot commented May 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented May 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Changeset Version Preview

🟩 Patch bumps

Uh oh!

pkg-pr-new Bot commented May 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

coderabbitai Bot commented May 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Poem

❌ Failed checks (1 warning)

Uh oh!

github-actions Bot commented May 22, 2026

size-limit report 📦

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

TkDodo commented May 22, 2026 •

edited by coderabbitai Bot

Loading

nx-cloud Bot commented May 22, 2026 •

edited

Loading

github-actions Bot commented May 22, 2026 •

edited

Loading

pkg-pr-new Bot commented May 22, 2026 •

edited

Loading

coderabbitai Bot commented May 22, 2026 •

edited

Loading