chore(deps): bump bullmq from 5.79.1 to 5.81.2 - #39
Conversation
Bumps [bullmq](https://github.com/taskforcesh/bullmq) from 5.79.1 to 5.81.2. - [Release notes](https://github.com/taskforcesh/bullmq/releases) - [Commits](taskforcesh/bullmq@v5.79.1...v5.81.2) --- updated-dependencies: - dependency-name: bullmq dependency-version: 5.81.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
…that cannot move alone (#43) * chore(deps): sweep every pending dependency bump, and group the ones that cannot move alone Applies fifteen bumps that Dependabot had opened as ten separate PRs. Two of those PRs were red, and for the same reason the CodeQL sub-actions were: the packages are not independently upgradable. BullMQ and ioredis are one type graph. BullMQ's `ConnectionOptions` accepts an ioredis `Redis`, and that assignment only typechecks while a single copy of ioredis resolves in the tree. Bumping either one alone leaves two copies, and every site that hands a client to a Queue, Worker, QueueEvents or FlowProducer fails with: error TS2322: Type 'Redis' is not assignable to type 'ConnectionOptions' That is exactly how #33 (ioredis alone) and #39 (bullmq alone) failed. The same two versions applied together are green, which is what this commit does — and a `bullmq-stack` group now keeps them moving as the pair they are, placed before the dev-dependencies catch-all so it wins the match. `ioredis` keeps its exact pin rather than gaining a caret. The pin is not incidental: it is what guarantees the single-copy resolution the type graph depends on. Verified with the full gate: typecheck, test:types, lint, 260 tests at 100% statements/branches/functions/lines, build, size (12 032 / 18 432 B brotli), check:exports (all four quadrants green on both subpaths), the dogfood smoke test, and the 8 Testcontainers E2E tests against a real Redis. * fix(deps): collapse bullmq and ioredis to one copy across the workspace The example workspace kept its own older pair while the root moved, so the two resolved separate copies of ioredis and the example stopped compiling: Type 'Redis' is missing the following properties from type 'Redis': _connect, _getServerAddress, _buildCommandContext, ... and 50 more Two structurally identical types from two copies. It is the same defect the grouped bump was written to prevent, one level out: forcing both manifests to name compatible ranges is not enough, because each workspace still resolves its own. Override the version instead, so exactly one copy exists for the root, the example, and anything added later.
|
Superseded by #43, which applied this bump together with the rest of the pending set and is now on Merging these one at a time was not viable: |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps bullmq from 5.79.1 to 5.81.2.
Release notes
Sourced from bullmq's releases.
... (truncated)
Commits
315ec33fix: prevent unhandled rejection when a connection's init fails before an 'er...36a3b2afix(telemetry): emit job.state while preserving job.status compatibility (#4293)4ba9a04chore(release): vrs1.1.1 (#4341)44601c5chore(release): vphp1.0.3 (#4340)17a9af2chore(release): vex1.3.6 (#4339)1e6e10bchore(release): vpy2.25.4 (#4338)53b82bfchore(release): 5.81.1 (#4337)8571503fix(queue): retrieve jobs in same transaction under getJobs (#4300) (python) ...58265eachore(release): 5.81.0 (#4331)e2b89f7feat(connection): add Valkey Glide client adapter (#4321)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)