ci: auto upgrade deps and create pr - #368
Conversation
There was a problem hiding this comment.
Pull request overview
This PR introduces automated dependency upgrade functionality through a GitHub Actions workflow that runs daily to update upstream dependencies and create a pull request with the changes.
Key Changes
- Adds a scheduled GitHub Actions workflow that runs daily at midnight UTC to upgrade dependencies
- Implements a Node.js script that fetches latest versions from GitHub tags (rolldown, vite) and npm registry (vitest, tsdown)
- Updates multiple configuration files including
.upstream-versions.json,pnpm-workspace.yaml, and package.json files
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 8 comments.
| File | Description |
|---|---|
| .github/workflows/upgrade-deps.yml | GitHub Actions workflow that schedules daily dependency upgrades, runs build checks, and creates/updates PRs |
| .github/scripts/upgrade-deps.mjs | Node.js script that fetches latest versions from GitHub and npm, then updates configuration files accordingly |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
3a3fa96 to
11e8725
Compare
11e8725 to
0b639c7
Compare
0b639c7 to
a111af2
Compare
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 2 out of 2 changed files in this pull request and generated 11 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
a111af2 to
a728fd9
Compare
a728fd9 to
9588092
Compare
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
9588092 to
5e933f3
Compare
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 4 out of 4 changed files in this pull request and generated 8 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
04ee4ab to
d75b581
Compare
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 6 out of 7 changed files in this pull request and generated 5 comments.
Files not reviewed (1)
- pnpm-lock.yaml: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 6 out of 7 changed files in this pull request and generated 5 comments.
Files not reviewed (1)
- pnpm-lock.yaml: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Add res.ok checks to getLatestTagCommit and getLatestNpmVersion - Validate response structure before accessing properties - Expand regex patterns to handle pre-release versions (-beta.1, -rc.0) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
e470def to
3be7d4a
Compare
Merge activity
|
Note
Automates upstream dependency updates and refines CI/tooling.
.github/scripts/upgrade-deps.mjsandupgrade-deps.ymlto fetch latest tags/npm versions (rolldown, rolldown-vite, vitest, tsdown), update workspace/packages, build, and open a PR ondeps/upstream-updatedeps/upstream-updateand updates CI lint job to dropdprint(tools/steps), relying oncargo-shear,cargo fmt, andpnpm fmtdprint.json, switchesjust fmtandlint-stagedto non-dprint commandspackages/tools/src/sync-remote-deps.tsto prefer higher versions for oxc-related packages and certain vitest deps, and to usepnpm install --no-frozen-lockfilepnpm-workspace.yaml, move@vitejs/devtoolsto devDependencies in core, adjust exports (ensure./lib) and lockfile accordinglyWritten by Cursor Bugbot for commit 3be7d4a. This will update automatically on new commits. Configure here.