Repository navigation
chore: consolidate open Dependabot updates - #413
Merged
Merged
Conversation
Bumps the minor-and-patch group with 1 update: [gradle/actions](https://github.com/gradle/actions). Updates `gradle/actions` from 6.3.0 to 6.4.0 - [Release notes](https://github.com/gradle/actions/releases) - [Commits](gradle/actions@v6.3.0...v6.4.0) --- updated-dependencies: - dependency-name: gradle/actions dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the minor-and-patch group with 7 updates: | Package | From | To | | --- | --- | --- | | [com.diffplug.spotless](https://github.com/diffplug/spotless) | `8.10.2` | `8.10.3` | | [com.diffplug.spotless:com.diffplug.spotless.gradle.plugin](https://github.com/diffplug/spotless) | `8.3.0` | `8.10.3` | | [dev.langchain4j:langchain4j](https://github.com/langchain4j/langchain4j) | `1.20.0` | `1.20.2` | | [dev.langchain4j:langchain4j-core](https://github.com/langchain4j/langchain4j) | `1.20.0` | `1.20.2` | | [dev.langchain4j:langchain4j-open-ai](https://github.com/langchain4j/langchain4j) | `1.20.0` | `1.20.2` | | [dev.langchain4j:langchain4j-mcp](https://github.com/langchain4j/langchain4j) | `1.20.0-beta30` | `1.20.2-beta30` | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.6.4` | `1.6.5` | Updates `com.diffplug.spotless` from 8.10.2 to 8.10.3 - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](diffplug/spotless@gradle/8.10.2...gradle/8.10.3) Updates `com.diffplug.spotless:com.diffplug.spotless.gradle.plugin` from 8.3.0 to 8.10.3 - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](diffplug/spotless@gradle/8.3.0...gradle/8.10.3) Updates `dev.langchain4j:langchain4j` from 1.20.0 to 1.20.2 - [Release notes](https://github.com/langchain4j/langchain4j/releases) - [Commits](langchain4j/langchain4j@1.20.0...1.20.2) Updates `dev.langchain4j:langchain4j-core` from 1.20.0 to 1.20.2 - [Release notes](https://github.com/langchain4j/langchain4j/releases) - [Commits](langchain4j/langchain4j@1.20.0...1.20.2) Updates `dev.langchain4j:langchain4j-open-ai` from 1.20.0 to 1.20.2 - [Release notes](https://github.com/langchain4j/langchain4j/releases) - [Commits](langchain4j/langchain4j@1.20.0...1.20.2) Updates `dev.langchain4j:langchain4j-core` from 1.20.0 to 1.20.2 - [Release notes](https://github.com/langchain4j/langchain4j/releases) - [Commits](langchain4j/langchain4j@1.20.0...1.20.2) Updates `dev.langchain4j:langchain4j-open-ai` from 1.20.0 to 1.20.2 - [Release notes](https://github.com/langchain4j/langchain4j/releases) - [Commits](langchain4j/langchain4j@1.20.0...1.20.2) Updates `dev.langchain4j:langchain4j-mcp` from 1.20.0-beta30 to 1.20.2-beta30 - [Release notes](https://github.com/langchain4j/langchain4j/releases) - [Commits](https://github.com/langchain4j/langchain4j/commits) Updates `ch.qos.logback:logback-classic` from 1.6.4 to 1.6.5 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.6.4...v_1.6.5) --- updated-dependencies: - dependency-name: com.diffplug.spotless dependency-version: 8.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: com.diffplug.spotless:com.diffplug.spotless.gradle.plugin dependency-version: 8.10.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: dev.langchain4j:langchain4j dependency-version: 1.20.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: dev.langchain4j:langchain4j-core dependency-version: 1.20.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: dev.langchain4j:langchain4j-open-ai dependency-version: 1.20.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: dev.langchain4j:langchain4j-core dependency-version: 1.20.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: dev.langchain4j:langchain4j-open-ai dependency-version: 1.20.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: dev.langchain4j:langchain4j-mcp dependency-version: 1.20.2-beta30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
vitest 5 and jsdom 30 both drop Node 20, so the viz and e2e jobs move to Node 24. vitest 5 no longer picks up the jest-dom matcher types from the bare import, so setup.ts imports @testing-library/jest-dom/vitest.
There was a problem hiding this comment.
🟢 Approval recommended
The dependency updates are consistently applied, required runtime adjustments are included, and no unresolved issues were identified.
0 open findings
What changed in this PR
Consolidates compatible JavaScript, Gradle plugin, and Java dependency updates while aligning CI with their Node.js requirements.
Changes:
- Updates Spotless, LangChain4j, Logback, and Gradle Actions.
- Updates jsdom and Vitest, including Vitest-specific jest-dom setup.
- Moves CI and release builds from Node.js 20 to 24.
| File | Description |
|---|---|
settings.gradle.kts |
Updates the Spotless plugin. |
gradle/libs.versions.toml |
Updates Java dependency versions. |
buildSrc/build.gradle.kts |
Aligns the buildSrc Spotless plugin. |
agentensemble-viz/src/__tests__/setup.ts |
Registers Vitest-compatible DOM matchers. |
agentensemble-viz/package.json |
Updates jsdom and Vitest. |
agentensemble-viz/package-lock.json |
Regenerates the resolved npm dependency tree. |
.github/workflows/release.yml |
Updates Gradle Actions and release Node.js. |
.github/workflows/publish-modules.yml |
Updates Gradle Actions. |
.github/workflows/ci.yml |
Updates Gradle Actions and CI Node.js. |
Files not reviewed (1)
- agentensemble-viz/package-lock.json: Generated file
🧠 Review effort: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Contributor
Test Results4 552 tests 4 546 ✅ 4m 28s ⏱️ Results for commit 75f7f15. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Consolidates the four open Dependabot PRs into one branch. Each fails its own checks in isolation; together they pass.
Supersedes #412, #411, #409 and #406.
What's included
gradle/actions6.3.0 to 6.4.0The two Gradle-side PRs are cherry-picked unchanged (Dependabot authorship preserved). The npm lockfile is regenerated once for both bumps.
Why the viz PRs failed individually
^22.22.2 || ^24.15.0 || >=26. Tests died withwebidl.util.markAsUncloneable is not a function(13 unhandled errors).tscfailed with 144Property 'toBeInTheDocument' does not exist on type 'Assertion'errors. vitest 5 no longer picks up the jest-dom matcher types from the bare@testing-library/jest-domimport.Fixes added on top
agentensemble-viz/src/__tests__/setup.tsimports@testing-library/jest-dom/vitest, which registers the matchers and augments vitest'sAssertiontype.ci.ymlx2,release.ymlx1). vitest 5 also requires Node 22.12+. Node 20 reached end of life in April 2026.Not addressed
The "Dependabot Auto-Merge" check fails on every Dependabot PR with
Auto merge is not allowed for this repository. That is a repository setting (Settings > General > Allow auto-merge), not something in this change.Verification (local, Node 26 / Java 25)
./gradlew build :agentensemble-core:javadoc --continue(the CI command): BUILD SUCCESSFUL, including spotlessCheckagentensemble-viz:tsc --noEmitclean,npm run buildOK,npm test385/385 passing