Skip to content

chore(deps): open な Dependabot PR 6 件を 1 branch に統合する - #730

Merged
ymnao merged 6 commits into
mainfrom
deps/bulk-2026-10-27-2
Oct 27, 2026
Merged

ymnao merged 6 commits into
mainfrom
deps/bulk-2026-10-27-2

Conversation

@ymnao

@ymnao ymnao commented Oct 27, 2026 •

Copy link
Copy Markdown
Owner

概要

open な Dependabot PR のうち patch / minor と group の 6 件を 1 branch に統合し、CI の実行を 1 回にまとめる。依存ごとに 1 commit (本文に 統合元: #N)。

関連 Issue

なし (Dependabot PR の統合)

移行 Stage

該当なし (依存更新)

変更内容

統合対象

# パッケージ X→Y semver ecosystem
#719 github/codeql-action (init / analyze) 4.39.0→4.39.1 patch github-actions
#725 zustand 5.0.15→5.0.16 patch npm
#724 lucide-react 1.59.0→1.61.0 minor npm
#721 vite 8.3.4→8.3.5 patch npm
#718 electron-builder 26.15.3→26.18.0 minor npm
#720 @codemirror/autocomplete / @codemirror/view 6.20.3→6.20.4 / 6.43.14→6.43.15 patch npm
  • npm は cherry-pick せず、package.json の range を書き換えてから pnpm install で lockfile を再生成した (lockfile の世代衝突を避けるため)
  • lockfile 上の重複版 (@codemirror/lang-html 2 版・undici 3 版・semver 4 版) は main と同じで、この PR では増えていない
  • @electron/get>undici / node-gyp>undici の override は、electron-builder 更新後も親の宣言 range (^7.24.4 / ^6.25.0) の内側

個別維持 (統合外)

動作確認

  • pnpm verify (format / lint / typecheck / typecheck:e2e / unit / e2e / build) が手元で exit 0。unit 3731 passed / 18 skipped、renderer e2e 223 passed。format 後の working tree は無変更
  • 実 Electron e2e はローカルでは回せないため CI の electron-e2e job で確認 (success)
  • CI: run 40513987657 (verify 以外の lint / typecheck / test / e2e / electron-e2e / build / win32-fs-probe / dependency-review)・40513987607 (verify)・40513987506 (CodeQL Analyze) の 11 check すべて success

原本 PR

🤖 Generated with Claude Code

dependabot Bot and others added 6 commits October 27, 2026 02:07
Bumps the github-actions group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.39.0 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@6f2ac81...9b32540)

Updates `github/codeql-action/analyze` from 4.39.0 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@6f2ac81...9b32540)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.39.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.39.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant