Skip to content

chore: update deps - #14

Merged
Hashversion merged 9 commits into
mainfrom
dev
May 16, 2026
Merged

chore: update deps#14
Hashversion merged 9 commits into
mainfrom
dev

Conversation

@Hashversion

@Hashversion Hashversion commented May 16, 2026

Copy link
Copy Markdown
Owner

Summary by CodeRabbit

  • Chores
    • Updated infrastructure tooling to Terraform v1.15.2 and latest cloud provider versions for improved reliability
    • Upgraded JavaScript dependencies for UI styling and development tools
    • Increased minimum Node.js version requirement to v22.22.3

Review Change Stack

renovate Bot and others added 9 commits May 16, 2026 23:12
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@coderabbitai

coderabbitai Bot commented May 16, 2026

Copy link
Copy Markdown
📝 Walkthrough

Walkthrough

This PR upgrades Terraform infrastructure tooling from version 1.14.3 to 1.15.2 and bumps associated provider versions, while simultaneously updating JavaScript workspace dependencies including Tailwind CSS, motion, oxfmt, and Node.js engine requirements across multiple packages.

Changes

Dependency and Version Upgrades

Layer / File(s) Summary
Terraform Infrastructure Version Upgrades
.github/workflows/infra-main.yaml, .github/workflows/infra-static.yaml, infra/aws/main/main.tf, infra/aws/static/versions.tf, infra/aws/main/.terraform.lock.hcl, infra/aws/static/.terraform.lock.hcl
Terraform 1.14.3 is bumped to 1.15.2 in both CI workflows and configuration files. AWS provider constraint is updated from 6.28.0 to 6.45.0, and TLS provider from 4.1/4.2.1 to 4.3.0. Corresponding lock files regenerate provider checksums and pinned versions.
JavaScript/Node.js Workspace Dependencies
pnpm-workspace.yaml, package.json, apps/static/package.json, packages/ui/package.json
Tailwindcss catalog pin is updated to 4.3.0. Root package increments oxfmt to 0.49.0 and tightens Node.js engine from >=22 to >=22.22.3. Static app updates motion to 12.38.0 and @types/node to 22.19.19. UI package updates @tailwindcss/postcss to 4.3.0 and tailwind-merge to 3.6.0.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

  • Hashversion/koes#13: Contains overlapping Terraform and apps/static dependency upgrades (motion, @types/node, and Terraform provider versions).
  • Hashversion/koes#12: Updates the same dependency files and Terraform version constraints in infra/aws/* and apps/static/package.json.

Poem

🐰 With Terraform climbing to heights anew (1.15.2 so true!),
And Tailwind's glow in version blue,
Dependencies dance in harmony—oxfmt, motion too,
The monorepo springs forward, refreshed through and through! 🌱✨

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name Status Explanation Resolution
Title check ❓ Inconclusive The title 'chore: update deps' is vague and generic, using non-descriptive language that doesn't convey specific information about which dependencies were updated or their scope. Use a more specific title that reflects the primary updates, such as 'chore: update Terraform to 1.15.2 and bump dependencies' or list the major changes if multiple systems are affected.
✅ Passed checks (4 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dev

Comment @coderabbitai help to get the list of available commands and usage tips.

@Hashversion Hashversion changed the title dev chore: update deps May 16, 2026

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 3

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@infra/aws/main/main.tf`:
- Line 12: The Terraform TLS provider version constraint currently uses "~> 4.3"
which is not released; update the constraint to the latest stable series by
changing the version string in the provider declaration (the line containing
version = "~> 4.3") to "~> 4.2" so the TLS provider uses the 4.2.x release
series.

In `@package.json`:
- Line 20: package.json bumps the "oxfmt" dependency to "^0.49.0", which
contains a breaking change that makes oxfmt respect more gitignore rules;
confirm this change won't break formatting in your repo by running the formatter
and CI, and either pin to a safe prior version (e.g., change "oxfmt" to the
previous semver) or update repo ignore/config files to accommodate the new
behavior; specifically, run oxfmt against the codebase, check for missing files
now ignored, adjust .gitignore or oxfmt config as needed, update CHANGELOG or PR
notes to call out the behavior change, and add/adjust tests or CI formatting
checks to guard against regressions.

In `@pnpm-workspace.yaml`:
- Line 9: The project is being upgraded to Tailwind CSS 4.3.0 which deprecates
start-* and end-* utilities; search the codebase for any usages of start-* and
end-* (in templates, .css/.scss files, React/Vue/TSX/JSX components and
tailwind.config.js) and replace them with the new inset-s-* and inset-e-*
equivalents, update any custom plugin/shorthand definitions in
tailwind.config.js that emit start/end utilities to emit inset-s/inset-e, and
run the Tailwind build to verify no remaining references and that layout/rtl
behavior remains correct.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: ef0a8f0b-d92b-418d-b6fe-0adf1da19291

📥 Commits

Reviewing files that changed from the base of the PR and between 8e19b60 and 8cc2b72.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (10)
  • .github/workflows/infra-main.yaml
  • .github/workflows/infra-static.yaml
  • apps/static/package.json
  • infra/aws/main/.terraform.lock.hcl
  • infra/aws/main/main.tf
  • infra/aws/static/.terraform.lock.hcl
  • infra/aws/static/versions.tf
  • package.json
  • packages/ui/package.json
  • pnpm-workspace.yaml

Comment thread infra/aws/main/main.tf
tls = {
source = "hashicorp/tls"
version = "~>4.1"
version = "~> 4.3"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical | ⚡ Quick win

🧩 Analysis chain

🌐 Web query:

HashiCorp TLS provider 4.3 changelog

💡 Result:

As of May 16, 2026, there is no official changelog for a version 4.3 of the HashiCorp TLS provider [1][2][3]. The latest released version of the provider is 4.2.1, which was released on January 30, 2026 [4][5]. While version 4.3.0 is listed in the HashiCorp releases directory [3], it does not currently have an associated release, changelog, or published documentation, indicating it has not been officially released as of this date. Users should rely on the 4.2.x series for the most recent stable features and bug fixes [2][4].

Citations:


Update TLS provider version to 4.2—version 4.3 has not been released.

Version 4.3.0 does not currently have an official release or published documentation. The latest stable version is 4.2.1 (released January 30, 2026). Change the version constraint from ~> 4.3 to ~> 4.2 to use the most recent stable release.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@infra/aws/main/main.tf` at line 12, The Terraform TLS provider version
constraint currently uses "~> 4.3" which is not released; update the constraint
to the latest stable series by changing the version string in the provider
declaration (the line containing version = "~> 4.3") to "~> 4.2" so the TLS
provider uses the 4.2.x release series.

Comment thread package.json
"@commitlint/config-conventional": "^20.5.3",
"lefthook": "^2.1.6",
"oxfmt": "^0.48.0",
"oxfmt": "^0.49.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🌐 Web query:

oxfmt npm package version 0.49.0

💡 Result:

The oxfmt npm package version 0.49.0 was published on May 11, 2026 [1][2][3]. Oxfmt is a high-performance code formatter designed for the JavaScript ecosystem, built on the Oxc (Oxidation Compiler) stack [4][5]. It is intended for use in large codebases and CI environments, emphasizing high throughput and predictable performance [4][6]. Key details regarding the package include: - Functionality: It supports formatting for various languages and formats, including JavaScript, JSX, TypeScript, TSX, JSON, JSONC, JSON5, YAML, TOML, HTML, Angular, Vue, CSS, SCSS, Less, Markdown, MDX, GraphQL, Ember, and Handlebars [5][7]. - Usage: It can be installed as a development dependency using package managers like npm, pnpm, yarn, or bun [8][4]. - Ecosystem: The package utilizes various platform-specific bindings (e.g., @oxfmt/binding-linux-arm-musleabihf, @oxfmt/binding-win32-arm64-msvc) to support its high-performance requirements across different environments [2][3][9].

Citations:


🌐 Web query:

oxfmt 0.49.0 changelog release notes breaking changes

💡 Result:

Oxfmt version 0.49.0 was released as part of the Oxc project updates [1]. Breaking Changes: - The primary breaking change in version 0.49.0 is that oxfmt now respects more git ignore options, aligning its behavior with oxlint [1]. Other Notable Updates: - Features: Added experimental support for.svelte files [1]. - Bug Fixes: Added a space after commas in import attributes [1]. - Performance: Optimized nested configuration prescan and improved performance for single import runs and ImportDeclaration processing [1]. - Documentation: Included refreshed documentation for import sorting and other minor comment corrections [1].

Citations:


Update oxfmt dependency with awareness of breaking changes in 0.49.0.

Version 0.49.0 exists and is available on npm. Note that this release includes a breaking change: oxfmt now respects more git ignore options, aligning its behavior with oxlint. Verify that this behavior aligns with your project's expectations before deploying.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@package.json` at line 20, package.json bumps the "oxfmt" dependency to
"^0.49.0", which contains a breaking change that makes oxfmt respect more
gitignore rules; confirm this change won't break formatting in your repo by
running the formatter and CI, and either pin to a safe prior version (e.g.,
change "oxfmt" to the previous semver) or update repo ignore/config files to
accommodate the new behavior; specifically, run oxfmt against the codebase,
check for missing files now ignored, adjust .gitignore or oxfmt config as
needed, update CHANGELOG or PR notes to call out the behavior change, and
add/adjust tests or CI formatting checks to guard against regressions.

Comment thread pnpm-workspace.yaml

catalog:
"tailwindcss": ^4.1.18
"tailwindcss": ^4.3.0

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🌐 Web query:

Tailwind CSS 4.3.0 release breaking changes

💡 Result:

Tailwind CSS v4.3.0 was released on May 8, 2026 [1][2][3]. While this release primarily introduces new features and improvements, it includes one notable deprecation that may affect existing codebases [2]. Deprecation: The legacy start-* and end-* utilities are now deprecated in favor of inset-s-* and inset-e-* [2]. This change was made to align the API with the existing inset-bs-* and inset-be-* utilities [2]. Other notable changes and additions include: - New scrollbar utilities (scrollbar-{auto,thin,none}, scrollbar-thumb-, scrollbar-track-, and scrollbar-gutter-) [1][2]. - New @container-size utility for creating size containers [2]. - New zoom- and tab-* utilities [2]. - Support for stacked and compound @variant definitions [2]. - Enhanced functional @utility definitions with --default value support [2]. The release also includes various fixes to the canonicalization process for arbitrary values and improvements to the @tailwindcss/vite plugin [1]. Users are encouraged to review the official release blog post for detailed examples of these new features [2].

Citations:


Check codebase for deprecated start- and end- utilities before upgrading to Tailwind CSS 4.3.0.**

Tailwind CSS 4.3.0 (released May 8, 2026) deprecates the legacy start-* and end-* utilities in favor of inset-s-* and inset-e-* for API alignment. Review the codebase for usage of these deprecated utilities and plan migration accordingly. The release also includes new features (scrollbar utilities, @container-size, zoom-, tab-) but no breaking changes beyond this deprecation.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@pnpm-workspace.yaml` at line 9, The project is being upgraded to Tailwind CSS
4.3.0 which deprecates start-* and end-* utilities; search the codebase for any
usages of start-* and end-* (in templates, .css/.scss files, React/Vue/TSX/JSX
components and tailwind.config.js) and replace them with the new inset-s-* and
inset-e-* equivalents, update any custom plugin/shorthand definitions in
tailwind.config.js that emit start/end utilities to emit inset-s/inset-e, and
run the Tailwind build to verify no remaining references and that layout/rtl
behavior remains correct.

@Hashversion
Hashversion merged commit 80419e5 into main May 16, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant