Skip to content

Release: merge beta into main - #865

Open
rubenvdlinde wants to merge 7 commits into
mainfrom
beta
Open

Release: merge beta into main#865
rubenvdlinde wants to merge 7 commits into
mainfrom
beta

Conversation

@rubenvdlinde

Copy link
Copy Markdown
Contributor

Stable promotion. Signing failures waived by explicit decision; being fixed separately.

github-actions Bot and others added 7 commits August 30, 2026 17:43
…260830174314

chore(sync): carry beta back into development
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
…854)

Dependabot re-proposes these on every run, and each one takes `npm ci` or
`npm run build` from green to red with no code change in this repository that
can fix it. Closing the pull requests does nothing: without an ignore rule they
come straight back.

Each is blocked by a package we do not control, verified against the registry
rather than assumed:

- typescript 7      typescript-eslint hard-throws on TS >= 7 (a `versionMajor
                    >= 7` guard in its dist/index.js) and every published
                    version still peers `typescript: ">=4.8.4 <6.1.0"`.
- webpack-cli 7     @nextcloud/webpack-vue-config 7.0.4, the LATEST, peers
                    `webpack-cli: ^6.0.1`.
- @babel/core 8     the same package peers `@babel/core: ^7.22.9`.
- @babel/preset-env preset-env 8 requires core 8, so the pair moves together
                    or not at all. Splitting them is what broke filinq.

These are COMPATIBILITY limits, not security ones. `npm audit` reports no
advisory against any version pinned here, so holding them costs no exposure.
Lift each the moment its blocker ships support.

Deliberately NOT held: stylelint 17, vitest 4 and pinia 4. All three were
blocked earlier today and all three are now adoptable, so dependabot should
keep proposing them.
Release: merge development into beta
…91328

chore(sync): carry main back into beta
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant