Skip to content

fix(deps): pin dependencies in package.json#63

Merged
nitrocode merged 1 commit into
mainfrom
renovate/pin-dependencies
Apr 24, 2026
Merged

fix(deps): pin dependencies in package.json#63
nitrocode merged 1 commit into
mainfrom
renovate/pin-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 24, 2026

This PR contains the following updates:

Package Type Update Change
@playwright/test (source) devDependencies pin ^1.59.11.59.1
@types/js-yaml (source) devDependencies pin ^4.0.94.0.9
esbuild devDependencies pin ^0.28.00.28.0
jest (source) devDependencies pin ^30.3.030.3.0
jest-environment-jsdom (source) devDependencies pin ^30.3.030.3.0
js-yaml devDependencies pin ^4.1.04.1.0
serve devDependencies pin ^14.2.614.2.6
typescript (source) devDependencies pin ^6.0.36.0.3

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Monday through Friday (* * * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from nitrocode as a code owner April 24, 2026 12:09
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Apr 24, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: cc30c261-b94d-4e40-994e-2e4d23dc7008

📥 Commits

Reviewing files that changed from the base of the PR and between ff894f8 and a0da7a4.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json

📝 Walkthrough

Walkthrough

Fool, I pity you if you don't listen up! This change converts eight devDependencies entries in package.json from caret semver ranges to exact version pins. The versions for @playwright/test, @types/js-yaml, esbuild, jest, jest-environment-jsdom, js-yaml, serve, and typescript now lock to specific releases, restricting automatic compatible upgrades.

Changes

Cohort / File(s) Summary
Dependency Version Pinning
package.json
Eight devDependencies converted from caret (^) semver ranges to exact version strings. Affects testing tools (@playwright/test, jest, jest-environment-jsdom), type definitions (@types/js-yaml, typescript), build/runtime tools (esbuild, serve), and utilities (js-yaml). This restricts dependency resolution to exact versions rather than allowing compatible patch/minor upgrades.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title 'fix(deps): pin dependencies in package.json' clearly and specifically describes the main change - pinning devDependencies from caret ranges to exact versions.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/pin-dependencies

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions
Copy link
Copy Markdown
Contributor

👁️ PR Preview

🚀 Open Preview

Deployed from commit a0da7a4 · Updates on every push to this PR
(Preview is removed automatically when the PR is closed.)

@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 24, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (ced79e7) to head (a0da7a4).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff            @@
##              main       #63   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines          233       233           
  Branches       107       107           
=========================================
  Hits           233       233           
Flag Coverage Δ
unit 100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.


Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ff894f8...a0da7a4. Read the comment docs.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@nitrocode nitrocode merged commit 9176c88 into main Apr 24, 2026
10 checks passed
@nitrocode nitrocode deleted the renovate/pin-dependencies branch April 24, 2026 12:41
github-actions Bot added a commit that referenced this pull request Apr 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant