Skip to content

chore(deps): @moshcoder/moshpit-resolve 0.1.1 -> 0.1.2 — unblocks main - #67

Merged
ralyodio merged 1 commit into
mainfrom
bump-moshpit-resolve
Aug 1, 2026
Merged

chore(deps): @moshcoder/moshpit-resolve 0.1.1 -> 0.1.2 — unblocks main#67
ralyodio merged 1 commit into
mainfrom
bump-moshpit-resolve

Conversation

@ralyodio

@ralyodio ralyodio commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

main has been red since #66 merged. This clears it.

Why it was red

#66 dropped dashes from both local copies of the name grammar while the published package still allowed them, so moshpit-drift.test.js failed — and not merely on parsing:

blue.lazy-loaded → package 0.1.1: { use: 'park' }
                 → local copies:  { use: 'clearnet' }

The two disagreed on where a tab goes. That's the anchor earning its place.

Why publishing alone didn't fix it

@moshcoder/moshpit-resolve@0.1.2 is published and carries the rule, but CI installs frozen from the lockfile — so the ^0.1.1 range never applied and it kept installing 0.1.1. The lockfile update is the actual fix.

Verified

76 tests pass across moshpit-drift.test.js, moshpit.test.js and moshpit-resolve.test.ts — including parses hostnames the same way, which was the failing one.

🤖 Generated with Claude Code

@github-actions

github-actions Bot commented Aug 1, 2026

Copy link
Copy Markdown

vu1nz Security Review

0 finding(s) in PR #?

No security issues found.

@socket-security

socket-security Bot commented Aug 1, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​moshcoder/​moshpit-resolve@​0.1.2731009790100

View full report

@socket-security

socket-security Bot commented Aug 1, 2026

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

Unblocks main, red since #66 merged.

#66 dropped dashes from both local copies of the name grammar while the
published package still allowed them, so moshpit-drift.test.js failed on
blue.lazy-loaded — and not merely on parsing: the two disagreed on where
a tab goes, 'park' against the package and 'clearnet' against the new
rule. That is the anchor earning its place.

0.1.2 carries the rule. The lockfile is the part that matters: CI installs
frozen, so the ^0.1.1 range never picked the new version up on its own.

Scoped to the one package deliberately. Doing this with `pnpm update
--latest` first pulled the whole tree forward — TypeScript 5.9.3 to 7.0.2,
eslint 9 to 10, babel 7 to 8, 3509 lines of lockfile — and broke Lint with
"typescript-eslint does not support TS 7.0". This touches 11 lines.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@ralyodio
ralyodio force-pushed the bump-moshpit-resolve branch from ecbc1b1 to fa675ae Compare August 1, 2026 13:42
@ralyodio
ralyodio merged commit edf0578 into main Aug 1, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant