chore(share): 升级 SWC patch 依赖 - #422
Merged
Merged
Conversation
Contributor
Author
自动化独立复核(非批准)
残余风险:本轮未在 Windows、macOS x64、Linux arm/ppc/s390x/musl 上实装运行;其他 workspace importer 仍使用现有 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
背景
核心依赖扫描将
@swc/core 1.15.43 -> 1.15.47归为 EVALUATE(medium/transform,patch)。官方 v1.15.47 保持 Node>=10、@swc/helpers >=0.5.17、依赖形状不变,适合在@empjs/share开发构建链中前移 patch 基线。改动
packages/emp-share/package.json:将@swc/core下限更新为^1.15.47。pnpm-lock.yaml:刷新@swc/core及 12 个平台可选二进制的完整性与 snapshot,从 1.15.43 到 1.15.47。test/toolchain.rules.test.ts:同步版本合约并断言锁文件不再含 1.15.43。未修改
apps/**、website/**、packages/cdn-*、packages/lib-*、发布工作流或公共运行时代码;未提交构建产物、缓存和索引。风险与回滚
这是同一主版本的 patch 更新,运行时 API、engines、peerDependencies 未变;主要残余风险是 SWC 转换器修复可能改变边缘输入的输出,可通过回退本提交恢复旧平台二进制。实时生产 audit 为 14 high / 18 moderate / 2 low / 0 critical;新增 js-yaml 两条高危链已独立更新到 Issue #414,本 PR 不做 blanket override。
验证
corepack pnpm install --frozen-lockfile --ignore-scriptscorepack pnpm --filter @empjs/share test(先构建 workspace chain/CLI,包测试通过)corepack pnpm --filter @empjs/share exec node --input-type=module -e ...(确认 SWC 1.15.47 TypeScript 转换)corepack pnpm workflow:checkcorepack pnpm ci:verify(49/49)corepack pnpm empbuildgit diff --checkReview
请按仓库 CODEOWNERS 复核依赖与锁文件变更;无需发布 npm。