Skip to content

chore: update dependencies (2026-09-30) and mark fire and forget executions - #113

Merged
alessandrobellesia merged 2 commits into
developfrom
fix/floating-promises
Sep 30, 2026
Merged

alessandrobellesia merged 2 commits into
developfrom
fix/floating-promises

Conversation

@alessandrobellesia

@alessandrobellesia alessandrobellesia commented Sep 30, 2026 •

Copy link
Copy Markdown
Member

Two changes on the way to the 2.1.0 release (#112).

1. Mark the watchers' executions as intentionally not awaited

The quality gate of #112 fails on reliability: SonarCloud rule S9383 ("Promises should not be left unhandled") flags 8 pre-existing calls in src/utilities.ts. The rule was not reported on #110.

The autoExecute, executeWhen, window focus and document visibility handlers call execute() / resubmit() without awaiting them. That is by design: they are fire and forget, and since #110 execute() never rejects, because a failure lands in the query state. The 8 calls are marked with void, which is the fix the rule suggests for promises that cannot practically reject. It does not swallow anything: an unexpected rejection still reaches the runtime as an unhandled rejection. No behavior change.

2. Dependencies update (ncu)

  • Minor/patch: @types/node ^26.6.3, eslint ^10.11.0, unplugin-dts 1.1.1, vite ^8.3.1, vitest ^5.0.2.
  • packageManager pnpm@12.4.2 -> pnpm@12.8.1.
  • peerDependencies untouched.

Held back on purpose:

  • typescript stays at 6.0.3: TS 7 drops the JavaScript Compiler API until 7.1, which breaks declaration emit in unplugin-dts (7.0.2 is the latest).
  • vitest resolves to 5.0.2, not 5.0.3: 5.0.3 was published a few hours ago and pnpm's one-day minimum release age applies (ncu --cooldown 1). The next update picks it up.

Supply chain check: the lockfile adds 9 package versions (plus the @pnpm/exe.* binaries), none published in the last 24 hours; the newest is pnpm@12.8.1 (2026-09-28).

CHANGELOG: the [2.1.0] entry gets a "dependencies update" line.

Checks

  • pnpm test: 81/81 passed
  • CI=true pnpm lint: clean
  • pnpm type-check: clean
  • pnpm build: clean, and the emitted .d.ts files are byte for byte identical to the ones before the update

🤖 Generated with Claude Code

SonarCloud rule S9383 (floating promises) flags the eight `execute()` and
`resubmit()` calls made by the autoExecute, executeWhen, window focus and
document visibility handlers, and fails the quality gate of the release
PR. They are fire and forget by design, and `execute()` never rejects: a
failure lands in the query state. Mark them with `void`, as the rule
suggests for promises that cannot practically reject. No behavior change.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Sep 30, 2026 •

Copy link
Copy Markdown

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 8 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: d90bc774-071e-43dd-b0d6-eefc0a568ab1

📥 Commits

Reviewing files that changed from the base of the PR and between 1a53b1b and 8945ba4.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (3)
  • CHANGELOG.md
  • package.json
  • src/utilities.ts
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Minor/patch bumps: @types/node, eslint, unplugin-dts, vite and vitest;
packageManager pnpm@12.4.2 -> pnpm@12.8.1.

Held back on purpose:
- typescript stays at 6.0.3: TS 7 drops the JavaScript Compiler API until
  7.1, which breaks declaration emit in unplugin-dts;
- vitest resolves to 5.0.2, not 5.0.3: 5.0.3 was published a few hours
  ago and pnpm's one-day minimum release age applies; the next update
  picks it up.

No newly locked package version is younger than one day. The emitted
.d.ts files are byte for byte identical to the ones before the update.
Type-check, lint, the 81 unit tests and the build all pass.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@alessandrobellesia alessandrobellesia changed the title refactor: mark the watchers' executions as intentionally not awaited chore: update dependencies (2026-09-30) and mark fire and forget executions Sep 30, 2026
@sonarqubecloud

Copy link
Copy Markdown

@alessandrobellesia
alessandrobellesia merged commit dc63c9f into develop Sep 30, 2026
9 checks passed
@alessandrobellesia
alessandrobellesia deleted the fix/floating-promises branch September 30, 2026 15:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant