Skip to content

deps.lock: glab 1.123.0, bun 1.4.3, node 24.22.0, cloudflared 2026.10.1, portless 0.15.8 - #838

Merged
m4ttheweric merged 7 commits into
mainfrom
deps-tool-pins-v2.25.0
Oct 16, 2026
Merged

deps.lock: glab 1.123.0, bun 1.4.3, node 24.22.0, cloudflared 2026.10.1, portless 0.15.8#838
m4ttheweric merged 7 commits into
mainfrom
deps-tool-pins-v2.25.0

Conversation

@m4ttheweric

@m4ttheweric m4ttheweric commented Oct 16, 2026 •
edited by coderabbitai Bot
Loading

Copy link
Copy Markdown
Collaborator

Bumps the five hand-pinned tool rows preflight reports stale for v2.25.0. It's staged as the cut for preflight's tool-pin gate, and it stays a draft until Matt decides cut or hold for each row.

What changed

  • One commit per tool, so a partial cut drops the others with a revert or a rebase
  • Each sha256 matches the upstream's own checksum: node SHASUMS256.txt, bun SHASUMS256.txt, glab checksums.txt, the cloudflared release asset digest, and portless's npm dist.integrity (sha512)
  • Each archive holds the extract path its row names

Verification

The archives were downloaded and hashed locally. The bundled tools first build together in the release rehearsal.

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Chores
    • Updated the project’s Bun version from 1.4.2 to 1.4.3 across its development and release setup.

m4ttheweric and others added 5 commits October 16, 2026 01:38
@m4ttheweric @claude
deps.lock: glab 1.123.0
01ce0f6 
sha256 checked against upstream's published checksum.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@m4ttheweric @claude
deps.lock: bun 1.4.3
bf90905 
sha256 checked against upstream's published checksum.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@m4ttheweric @claude
deps.lock: node 24.22.0
6482bc8 
sha256 checked against upstream's published checksum.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@m4ttheweric @claude
deps.lock: cloudflared 2026.10.1
aaf35bd 
sha256 checked against upstream's published checksum.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@m4ttheweric @claude
deps.lock: portless 0.15.8
c31012b 
sha256 checked against upstream's published checksum.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Oct 16, 2026 •
edited
Loading

Copy link
Copy Markdown

Review in Change Stack →

Warning

Review limit reached

Your organization has reached its usage spending cap. Adjust your spending cap in the billing tab.

Next included review available in 32 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used all 2 included reviews currently available. Your 77 included PR review attempts over the past 7 days set your current allowance at 2 reviews per hour.

Learn how review limits work.

Review configuration:

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 3f2a8eaf-1529-4d64-a58f-da7bbd9b7043
📥 Commits

Reviewing files that changed from the base of the PR and between 602cc17 and 7dbb014.

📒 Files selected for processing: 2
  • apps/deck/src/cli/client.test.ts
  • apps/deck/src/cli/client.ts

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 6a45b265-3261-4428-b938-2f59926fe541
📥 Commits

Reviewing files that changed from the base of the PR and between c31012b and 602cc17.

⛔ Files ignored due to path filters: 1
  • apps/deck/core/generated/board.js is excluded by !**/generated/**
📒 Files selected for processing: 6
  • .claude/rules/apps/apps-ci-and-publishing.md
  • .github/workflows/checks.yml
  • .github/workflows/e2e.yml
  • .github/workflows/release.yml
  • .github/workflows/timings.yml
  • package.json

Included review availability: This review used your included allowance. 0 included reviews remain after this review. Your included PR review attempts over the past 7 days set your current allowance at 2 reviews per hour.

📝 Walkthrough

The root package manager requirement, CI workflow Bun setup pins, and CI guidance change from Bun 1.4.2 to 1.4.3.

Changes: Bun Version Update

Layer / File(s) Summary
Update Bun version pins
package.json, .github/workflows/checks.yml, .github/workflows/e2e.yml, .github/workflows/release.yml, .github/workflows/timings.yml, .claude/rules/apps/apps-ci-and-publishing.md		 The package manager requirement and Bun setup pins across CI workflows change to version 1.4.3. The CI guidance documents the updated pin.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 602cc

The package-manager requirement, CI workflows, and guidance are aligned on Bun 1.4.3; no concrete merge risk is established by the supplied context.

Pre-merge checks: Passed 5
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title identifies the dependency pin updates, including the Bun 1.4.3 upgrade reflected in the changes. It is specific, although it lists more tools than the summarized file changes.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (6 skipped: 6 unsupported.)

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@m4ttheweric

m4ttheweric commented Oct 16, 2026

Copy link
Copy Markdown
Collaborator Author

Scout rehearsal of this branch (c31012b) is green: run 38862442615, build-apps and release both pass with the five bumped tools bundled, signed and notarized.

@m4ttheweric
m4ttheweric marked this pull request as ready for review October 16, 2026 12:18
m4ttheweric and others added 2 commits October 16, 2026 08:26
@m4ttheweric @claude
bun 1.4.3: move the CI pins and packageManager, regenerate deck's boa…
602cc17 
…rd bundle

bun 1.4.3's bundler emits a different board.js (3 lines), so the committed
bundle is rebuilt under 1.4.3 with bun run build:board. deck's
generated-fresh test and release-workflow's deps.lock pin test pass under
1.4.3; tui-kit's codegen output is unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@m4ttheweric @claude
deck: retry the ECONNREFUSED code bun 1.4.3 gives a refused fetch
7dbb014 
bun 1.4.3 renamed fetch's refusal code from ConnectionRefused to
ECONNREFUSED, so deck's wait inside a run stopped retrying a restarting
deck. Accept both: deck from source can still run on an older bun.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@m4ttheweric
m4ttheweric merged commit 7d70590 into main Oct 16, 2026
18 of 19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@m4ttheweric