Skip to content

Pin dependencies#25372

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/pin-dependencies
Open

Pin dependencies#25372
renovate[bot] wants to merge 1 commit intomainfrom
renovate/pin-dependencies

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 6, 2025

This PR contains the following updates:

Package Type Update Change
class-variance-authority dependencies pin ^0.7.10.7.1
clsx dependencies pin ^2.1.12.1.1
eslint-plugin-no-relative-import-paths devDependencies pin ^1.6.11.6.1
jest-extended devDependencies pin ^6.0.06.0.0
lucide-react (source) dependencies pin ^0.553.00.553.0
parse-email-address dependencies pin ^0.0.20.0.2
zod (source) dependencies pin ^4.1.124.1.12

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - Only on Sunday and Saturday ( * * * * 0,6 ), Between 12:00 AM and 12:59 PM, only on Monday ( * 0-12 * * 1 ) in timezone Etc/UTC.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions github-actions bot added the dependencies Pull requests that update a dependency file label Nov 6, 2025
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Nov 6, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Walkthrough

Caret (^) prefixes were removed from dependency version specifiers in multiple package.json files, pinning versions to exact values in apps/admin, apps/shade, e2e, and ghost/parse-email-address. The devDependency name for an eslint plugin was adjusted to eslint-plugin-no-relative-import-paths. Affected packages include zod, jest-extended, @radix-ui/react-dialog, @radix-ui/react-tooltip, class-variance-authority, clsx, lucide-react, and parse-email-address. No application logic or exported/public API signatures were modified.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title 'Pin dependencies' directly and accurately describes the main change: converting semantic version ranges to exact versions across multiple package.json files.
Description check ✅ Passed The description provides detailed information about each pinned dependency with links, package types, and version changes, directly related to the changeset.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch renovate/pin-dependencies

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@renovate renovate bot force-pushed the renovate/pin-dependencies branch 4 times, most recently from e839222 to 993b8d6 Compare November 6, 2025 14:27
@renovate renovate bot changed the title Pin dependency eslint-plugin-no-relative-import-paths to 1.6.1 Pin dependencies Nov 6, 2025
@renovate renovate bot force-pushed the renovate/pin-dependencies branch 20 times, most recently from 0fbcbc4 to 52ca950 Compare November 11, 2025 09:04
@github-actions
Copy link
Contributor

E2E Tests Failed

To view the Playwright test report locally, run:

REPORT_DIR=$(mktemp -d) && gh run download 19260498403 -n playwright-report -D "$REPORT_DIR" && npx playwright show-report "$REPORT_DIR"

@renovate renovate bot force-pushed the renovate/pin-dependencies branch 2 times, most recently from ba469aa to 4467a34 Compare November 11, 2025 11:12
@renovate renovate bot force-pushed the renovate/pin-dependencies branch 28 times, most recently from 6c4e4d8 to 5b4f60c Compare February 13, 2026 14:53
@renovate renovate bot force-pushed the renovate/pin-dependencies branch from 5b4f60c to 8104130 Compare February 13, 2026 15:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants