Skip to content

deps: upgrade all dependencies to latest#167

Merged
jongio merged 2 commits into
mainfrom
deps/upgrade-all
Jun 30, 2026
Merged

deps: upgrade all dependencies to latest#167
jongio merged 2 commits into
mainfrom
deps/upgrade-all

Conversation

@jongio

@jongio jongio commented Jun 30, 2026

Copy link
Copy Markdown
Owner

Summary

  • Upgraded Go dependencies, including google.golang.org/grpc to v1.82.0.
  • Upgraded web dependency Astro to ^7.0.4.
  • Regenerated pnpm lockfile and added pnpm security overrides for yaml and esbuild vulnerable ranges.

Validation

  • go build ./... (cli) ✅
  • go test ./... (cli) ✅
  • go test -tags=integration -timeout=10m ./... (cli) ✅
  • golangci-lint run --timeout=5m ./src/...
  • gosec -quiet -exclude=G204,G304 ./src/...
  • govulncheck ./src/...
  • pnpm install --frozen-lockfile
  • pnpm audit
  • pnpm --filter azd-rest-web build

- Bump google.golang.org/grpc to v1.82.0.
- Bump Astro to ^7.0.4.
- Add pnpm overrides for vulnerable yaml and esbuild ranges.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@jongio jongio self-assigned this Jun 30, 2026
@github-actions

github-actions Bot commented Jun 30, 2026

Copy link
Copy Markdown
Contributor

🚀 Test This PR

A preview build (0.4.9-pr167) is ready for testing!

One-Line Install (Recommended)

PowerShell (Windows):

iex "& { $(irm https://raw.githubusercontent.com/jongio/azd-rest/main/scripts/install-pr.ps1) } -PrNumber 167 -Version 0.4.9-pr167"

Bash (macOS/Linux):

curl -fsSL https://raw.githubusercontent.com/jongio/azd-rest/main/scripts/install-pr.sh | bash -s 167 0.4.9-pr167

Uninstall

PowerShell (Windows):

iex "& { $(irm https://raw.githubusercontent.com/jongio/azd-rest/main/scripts/uninstall-pr.ps1) } -PrNumber 167"

Bash (macOS/Linux):

curl -fsSL https://raw.githubusercontent.com/jongio/azd-rest/main/scripts/uninstall-pr.sh | bash -s 167

Build Info:

- website.yml: pnpm action-setup version 9 -> 10 to match pnpm-workspace.yaml
  overrides (v10 format), fixing ERR_PNPM_LOCKFILE_CONFIG_MISMATCH on frozen install
- actions/setup-go 6.4.0 -> 6.5.0
- actions/cache v4 -> 6.1.0
- correct stale pinned-version comments (checkout v7.0.0, pnpm v6.0.9, sbom v0.24.0)
- go.mod/go.sum: bump transitive google.golang.org/genproto/googleapis/rpc

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@github-actions

Copy link
Copy Markdown
Contributor

🚀 Website Preview

Your PR preview is ready!

📎 Preview URL: https://jongio.github.io/azd-rest/pr/167/

This preview will be automatically cleaned up when the PR is closed.

github-actions Bot added a commit that referenced this pull request Jun 30, 2026
@jongio jongio merged commit f1cb648 into main Jun 30, 2026
13 checks passed
@jongio jongio deleted the deps/upgrade-all branch June 30, 2026 19:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant