Skip to content

chore(deps): take vitest 5.1, shiki 4.6, react-hook-form 7.91, MCP SDK 2.4, and small in-range updates - #9846

Merged
waleedlatif1 merged 1 commit into
stagingfrom
chore/deps-2026-11-10
Nov 10, 2026
Merged

waleedlatif1 merged 1 commit into
stagingfrom
chore/deps-2026-11-10

Conversation

@waleedlatif1

Copy link
Copy Markdown
Collaborator

Summary

  • vitest, @vitest/coverage-v8, @vitest/expect, @vitest/spy 5.0.4 → 5.1.0 across every workspace. 5.1 adds features (--last-failed, --since-last-run, per-attempt results) and fixes, with no breaking changes. Vite stays on 8.3.5 (peer range ^6.4 || ^7 || ^8); no workspace uses browser mode, whose default port changed
  • shiki / @shikijs/rehype 4.5.0 → 4.6.0: fixes (rehype cache-key collisions between code blocks, stream tokenizer offsets) and performance. Docs only call the async codeToHtml and rehypeShiki, so the Oniguruma Wasm now loading asynchronously and the style-to-class transformer change don't apply
  • react-hook-form 7.90 → 7.91: fixes only. Sim's two forms (knowledge-base create modal, help modal) use useForm, handleSubmit, reset, and Controller, with no field arrays, setValues, <Form />, or useWatch
  • @modelcontextprotocol/client / server 2.3.1 → 2.4.0 (docs): adds the Skills extension under new subpaths (root exports unchanged) plus spec fixes. The docs MCP tools declare no outputSchema, $id/.meta({ id }), or x-mcp-header, the areas the patch changes touch
  • unist-util-visit 5.1 → 5.2 (exit visitors, indexOf perf); binary-extensions 3.1 → 3.2 adds dds, dylib, msi, msp, p12, pfx, sqlite, sqlite3, wasm, which only changes the file parser's fallback label for those already-binary formats
  • Every version is past the 7-day release-age gate. Left for their own PRs: Next 16.4.6 (not yet aged; turns on route-handler compression), React/@types/react 19.3, zod 4.6, turbo 2.11, OpenTelemetry API 1.10, streamdown 2.7, neo4j 6.3, Azure blob 12.34

Type of Change

  • Dependency update

Testing

  • Vitest 5.1 locally: packages/utils (120), packages/db (107), packages/logger (27), apps/realtime (197), apps/docs (1) pass; no stale nested 5.0.4 copies in the lockfile
  • bun install --frozen-lockfile clean (lockfile stays v1); pre-push type-check passes
  • Full workspace suites, lint, check:audits, docs build, docs acceptance (incl. the MCP interface E2E) run in CI

Checklist

  • Code follows project style guidelines
  • Self-reviewed my changes
  • Tests added/updated and passing (new tests pass the test-audit authoring gate)
  • No new warnings introduced
  • I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

@waleedlatif1
waleedlatif1 requested a review from a team as a code owner November 10, 2026 19:18
@vercel

vercel Bot commented Nov 10, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docs Ready Ready Preview Nov 10, 2026 7:23pm UTC

Request Review

@greptile-apps

greptile-apps Bot commented Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

RetriggerView in GreptileConfidence Score: 5/5

[Medium impact] The dependency updates appear safe to merge; no actionable issues were found.

Summary

Updates dependencies without changing application code.

  • The file parser recognizes more binary file types.
  • Workspace tests run with Vitest 5.1.0.
  • Docs code highlighting uses updated Shiki packages.
  • Documentation MCP tools use the 2.4.0 SDK.
  • The two Sim forms use React Hook Form 7.91.0.

Reviews (1) · Last reviewed commit: "chore(deps): take vitest 5.1, shiki 4.6,..." · Reviewed by Greptile

@waleedlatif1
waleedlatif1 merged commit b68b2d9 into staging Nov 10, 2026
72 of 73 checks passed
@waleedlatif1
waleedlatif1 deleted the chore/deps-2026-11-10 branch November 10, 2026 19:21
waleedlatif1 added a commit that referenced this pull request Nov 10, 2026
- docs: MACHINE_ACCESS names MCP TypeScript SDK 2.4.0 (taken in #9846)
- run status: readPausedRunPoints reuses the pause_points the status read already
  loaded instead of re-querying paused_executions on every paused run read
- polling: markWebhookFailed logs "auto-disabled" only when this update turned the
  webhook off, read from a locked prior row in the same single statement
- mistral: an explicit image limit of 0 asks Mistral for no images instead of
  falling back to 100; block placeholder and tool description say so
- v2 meta: scopes reports every scope the credential reaches through
  oauthScopeSatisfies (api:write implies api:read, either implies search:read);
  enforcement unchanged, OpenAPI and CLI artifacts regenerated

This branch was successfully deployed

1 active deployment
Preview — c8e2af31 Deployed Nov 10, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant