Skip to content

chore: update runtime and development dependencies - #48

Open
usercao wants to merge 3 commits into
mainfrom
chore/update-dependencies
Open

usercao wants to merge 3 commits into
mainfrom
chore/update-dependencies

Conversation

@usercao

@usercao usercao commented Oct 30, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Update the language-server runtime packages and the repository's formatting, linting, benchmarking, bundling, and test tools to their latest selected releases:

  • vscode-languageserver-textdocument from 1.0.15 to 1.0.16;
  • vscode-languageserver-types from 3.18.4 to 3.18.5;
  • oxfmt from 0.73.x to 0.76.x;
  • oxlint from 1.88.x to 1.91.x;
  • tinybench from 6.2.2 to 6.2.3;
  • tsdown from 0.23.1 to 0.23.5;
  • vite from 8.3.4 to 8.3.5;
  • vitest from 5.0.5 to 5.1.0.

The Yarn lockfile is updated with the resolved dependency graph. This PR contains no plugin behavior changes.

Testing

  • corepack yarn verify

Copilot AI balanced review requested due to automatic review settings October 30, 2026 03:33
@changeset-bot

changeset-bot Bot commented Oct 30, 2026 •

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 8ffce8a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

socket-security Bot commented Oct 30, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedvscode-languageserver-types@​3.18.4 ⏵ 3.18.510010080 +19370
Updatedvscode-languageserver-textdocument@​1.0.15 ⏵ 1.0.1610010080 +19270
Updatedvitest@​5.0.5 ⏵ 5.1.098 +110079 +199 +1100
Updatedvite@​8.3.4 ⏵ 8.3.599 +110082 +196100
Updatedoxfmt@​0.73.0 ⏵ 0.76.0941008895 +1100
Updatedtsdown@​0.23.1 ⏵ 0.23.5981008897 +2100
Updatedoxlint@​1.88.0 ⏵ 1.91.0991009196 +2100
Addedtinybench@​6.2.310010010095100

View full report

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues are reported for the dependency and tooling updates.

No open issues 🎉

What changed in this PR

Updates runtime dependencies and development tools for the styled-components TypeScript language service plugin, with no plugin source changes.

Changes:

  • Updates the language-server text document and types packages.
  • Upgrades formatting, linting, bundling, and test build tools.
  • Refreshes Yarn resolutions, transitive dependencies, and checksums.
File Description
yarn.lock Synchronizes resolved dependencies and checksums with the upgrades.
package.json Updates two runtime dependencies and four development tools.

Review effort: Balanced

@pullfrog pullfrog Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Important

tsdown ^0.23.4 is still inside the repo's 24-hour npmMinimalAgeGate window, so the lockfile could only have been produced with the gate bypassed. A fresh resolution currently fails under the repo config.

Reviewed changes

  • Runtime packages — vscode-languageserver-textdocument 1.0.15 → 1.0.16 and vscode-languageserver-types 3.18.4 → 3.18.5. The upstream diffs are bugfixes only: TextDocument.update CRLF-at-edit-boundary handling, and two is validators (ColorPresentation.is, SelectionRange.is) checking the right fields. The plugin uses only TextDocument.create, so no behavior change.
  • Dev tooling — oxfmt 0.75, oxlint 1.90, tsdown 0.23.4, vite 8.3.5, with transitive rolldown 1.2.15, @oxc-project/types 0.155.0, rolldown-plugin-dts 0.28.8, tinyps 0.5.1 replacing tree-kill, postcss 8.5.31, undici 8.12.3, and @changesets/format 0.1.3.
  • Lockfile — regenerated, and consistent with the manifests.

I ran the full corepack yarn verify on the branch (format, lint, typecheck, unit, scaling, e2e 160 tests, package runtime, all six consumer gates, pack contents): all green. A cold-cache yarn install --immutable also passes.

The only concern is the tsdown version, detailed inline.

Pullfrog  | Fix all ➔ | Fix 👍s ➔ | View workflow run | Using big-pickle (free) | 𝕏

Comment thread package.json Resolved
@usercao

usercao commented Nov 3, 2026

Copy link
Copy Markdown
Collaborator Author

@pullfrog review

@pullfrog

pullfrog Bot commented Nov 3, 2026 •

Copy link
Copy Markdown

Your OpenCode Zen account is out of credit. Top it up, then re-trigger Pullfrog.

OpenCode Zen's response
provider error: Free usage exceeded, subscribe to Go

Top up OpenCode Zen →

Pullfrog  | Rerun failed job ➔ | View workflow run | via Pullfrog | Using big-pickle (free)

@pullfrog

pullfrog Bot commented Nov 4, 2026

Copy link
Copy Markdown

Your OpenCode Zen account is out of credit. Top it up, then re-trigger Pullfrog.

OpenCode Zen's response
provider error: Free usage exceeded, subscribe to Go

Top up OpenCode Zen →

Pullfrog  | Rerun failed job ➔ | View workflow run | via Pullfrog | Using big-pickle (free)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants