robbertbos/waggle
robbertbos/waggle
1
0
Fork 0
Code Issues 2 Pull requests 18 Releases 29 Packages 2 Activity Actions

Bundle the open Renovate updates #352

Merged
robbertbos merged 1 commit from renovate-combined into main 2026-09-05 11:51:53 +00:00
Conversation 0 Commits 1 Files changed 11 +705 -1120
robbertbos commented 2026-09-05 11:30:07 +00:00
Owner
Copy link

Replaces #339, #342, #343, #344, #345, #346, #347 and #348 - one branch, one CI run. The four npm PRs each rewrote the lockfile and would have conflicted pairwise, so their package.json bumps are merged and the lockfile is regenerated once from the result.

#341 (@nldd/design-system 0.8.86) is deliberately not in here. It fails two guard tests: 0.8.86 drops --semantics-forms-gap-tight, which AccountPanel.vue:612 still references (nlddTokens.test.ts - a dangling var() silently drops the whole declaration), and it no longer provides an à-la-carte module for nldd-form-field-error-text (nlddImports.test.ts). Both need a real fix plus a look at the running app, so that bump keeps its own PR.

UV_SHA256 checked against the actual 0.12.10 release tarball, not just taken from the PR.

Verified locally: backend 2069 tests at 100% coverage, 1420 vitest tests, 122 e2e, pre-commit --all-files, npm audit --audit-level=high --production clean.

Replaces #339, #342, #343, #344, #345, #346, #347 and #348 - one branch, one CI run. The four npm PRs each rewrote the lockfile and would have conflicted pairwise, so their `package.json` bumps are merged and the lockfile is regenerated once from the result. **#341 (@nldd/design-system 0.8.86) is deliberately not in here.** It fails two guard tests: 0.8.86 drops `--semantics-forms-gap-tight`, which `AccountPanel.vue:612` still references (`nlddTokens.test.ts` - a dangling `var()` silently drops the whole declaration), and it no longer provides an à-la-carte module for `nldd-form-field-error-text` (`nlddImports.test.ts`). Both need a real fix plus a look at the running app, so that bump keeps its own PR. `UV_SHA256` checked against the actual 0.12.10 release tarball, not just taken from the PR. Verified locally: backend 2069 tests at 100% coverage, 1420 vitest tests, 122 e2e, `pre-commit --all-files`, `npm audit --audit-level=high --production` clean.
Bundle the open Renovate updates
Some checks failed
CI / release-scripts (pull_request) Successful in 8s
Details
security-scan / SBOM (trivy) (pull_request) Successful in 12s
Details
security-scan / Filesystem scan (trivy fs) (pull_request) Successful in 13s
Details
security-scan / JS SCA (npm audit) (pull_request) Successful in 15s
Details
security-scan / Python SAST (bandit) (pull_request) Successful in 24s
Details
security-scan / Python SCA (pip-audit) (pull_request) Successful in 41s
Details
test-build / build (frontend) (pull_request) Successful in 1m3s
Details
CI / frontend-test (pull_request) Successful in 1m6s
Details
test-build / build (backend) (pull_request) Successful in 1m7s
Details
test-build / build (pull_request) Successful in 0s
Details
CI / pre-commit (pull_request) Successful in 3m4s
Details
CI / e2e (pull_request) Successful in 5m54s
Details
CI / backend-test (pull_request) Successful in 15m34s
Details
CI / release-scripts (push) Successful in 8s
Details
security-scan / SBOM (trivy) (push) Successful in 10s
Details
security-scan / Filesystem scan (trivy fs) (push) Successful in 15s
Details
security-scan / JS SCA (npm audit) (push) Successful in 16s
Details
security-scan / Python SAST (bandit) (push) Successful in 17s
Details
publish-and-stage / build (push) Has been cancelled
Details
publish-and-stage / deploy-staging (push) Has been cancelled
Details
security-scan / Python SCA (pip-audit) (push) Has been cancelled
Details
publish-and-stage / build (frontend) (push) Has been cancelled
Details
publish-and-stage / build (backend) (push) Has been cancelled
Details
CI / pre-commit (push) Has been cancelled
Details
CI / frontend-test (push) Has been cancelled
Details
CI / backend-test (push) Has been cancelled
Details
CI / e2e (push) Has been cancelled
Details
f840c04fb0
 
Nine PRs (#339, #342-#348) into one branch and one CI run. The four npm
PRs conflicted on the lockfile, so their package.json bumps are merged
and the lockfile is regenerated once.

@nldd/design-system 0.8.86 is not in here: it drops
--semantics-forms-gap-tight and the nldd-form-field-error-text module,
which fails nlddTokens.test.ts and nlddImports.test.ts. It keeps its own
PR (#341).

UV_SHA256 verified against the 0.12.10 release tarball.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ri9VRVJChubmQ4eFkd9ECQ
robbertbos deleted branch renovate-combined 2026-09-05 11:51:53 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something is not working

  
duplicate
This issue or pull request already exists

  
enhancement
New feature

  
help wanted
Need some help

  
invalid
Something is wrong

  
nldd ds

   
question
More information is needed

  
wontfix
This won't be fixed

No labels
bug
duplicate
enhancement
help wanted
invalid
nldd ds
question
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
robbertbos/waggle!352
No description provided.