Skip to content

chore(deps): bump seroval from 1.5.1 to 1.5.6 in /web - #1507

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/web/seroval-1.5.6
Closed

chore(deps): bump seroval from 1.5.1 to 1.5.6 in /web#1507
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/web/seroval-1.5.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps seroval from 1.5.1 to 1.5.6.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 28, 2026
@zbigniewsobiecki

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [seroval](https://github.com/lxsmnsyc/seroval) from 1.5.1 to 1.5.6.
- [Release notes](https://github.com/lxsmnsyc/seroval/releases)
- [Commits](https://github.com/lxsmnsyc/seroval/commits)

---
updated-dependencies:
- dependency-name: seroval
  dependency-version: 1.5.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web/seroval-1.5.6 branch from d86e769 to c9fe383 Compare July 28, 2026 17:43
zbigniewsobiecki added a commit that referenced this pull request Jul 28, 2026
Supersedes #1507. Dependabot's own lockfile regeneration for this bump was
unusable: it dropped `@trpc/server@11.16.0` and downgraded/moved `react-is`,
so `cd web && npm ci` failed the CI gate with EUSAGE (lock out of sync with
package.json) on both the original branch and after an explicit rebase.

Regenerated from dev's healthy lock with a scoped `npm update seroval
seroval-plugins --package-lock-only` instead, which touches only the two
transitive entries. seroval is transitive via @tanstack/react-router ->
@tanstack/router-core, so package.json is intentionally unchanged.

Verified: `cd web && npm ci --dry-run` in sync, `npm run build:web` succeeds.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
@zbigniewsobiecki

Copy link
Copy Markdown
Member

Superseded by #1514, which is now merged.

Dependabot's lockfile regeneration for this bump was unusable — it dropped @trpc/server@11.16.0 and moved react-is, so cd web && npm ci failed with EUSAGE (lock out of sync). That reproduced both on the original branch and after an explicit @dependabot rebase, so it wasn't staleness.

#1514 does the same bump (seroval 1.5.1 → 1.5.6, seroval-plugins 1.5.0 → 1.5.6) via a scoped npm update seroval seroval-plugins --package-lock-only off dev's healthy lock — 6 lines of lockfile, web/package.json untouched, npm ci in sync and npm run build:web verified.

@dependabot @github

dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/web/seroval-1.5.6 branch July 28, 2026 18:02
zbigniewsobiecki added a commit that referenced this pull request Jul 28, 2026
…5.2 -> 6.0.4 in /web (#1515)

Supersedes #1511 (and #1410 before it). The bump itself is fine; Dependabot's
lockfile regeneration for the web workspace is not. Its lock fails `npm ci`
with EUSAGE — dropping `@trpc/server@11.16.0` and `react-is@19.2.8`, and
pinning `@emnapi/*` 2.0.0-alpha prereleases that conflict with the resolved
1.x. Same defect that made #1507 unmergeable; an explicit `@dependabot rebase`
did not fix it either.

Regenerated the lock from dev's healthy state with a scoped
`npm install --save-dev --package-lock-only` instead.

vite 8 swaps Rollup for rolldown, hence the large lockfile delta
(-1302/+314): the rollup toolchain drops out.

Verified: `cd web && npm ci` in sync, `npm run typecheck` clean, and
`npm run build:web` succeeds (2883 modules, bundle 1466 kB vs 1511 kB on
vite 6).

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant