Repository navigation
⬆️ Refresh latest-compatible dependencies - #688
Conversation
github-actions
Bot
added
🏗️ tooling-build
87dd7b3 to
5aac8b3
Compare
Bumps the actions-minor-and-patch group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [actions/setup-java](https://github.com/actions/setup-java). Updates `github/codeql-action/init` from 4.38.3 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@24c5418...6f2ac81) Updates `github/codeql-action/analyze` from 4.38.3 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@24c5418...6f2ac81) Updates `actions/setup-java` from 6.0.1 to 6.1.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@de7274f...b843ebf) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-and-patch - dependency-name: github/codeql-action/analyze dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-and-patch - dependency-name: actions/setup-java dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the go-minor-and-patch group in /Tools/Controller with 1 update: [github.com/Microsoft/go-winio](https://github.com/Microsoft/go-winio). Updates `github.com/Microsoft/go-winio` from 0.6.3 to 0.6.4 - [Release notes](https://github.com/Microsoft/go-winio/releases) - [Commits](microsoft/go-winio@v0.6.3...v0.6.4) --- updated-dependencies: - dependency-name: github.com/Microsoft/go-winio dependency-version: 0.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
7bd0fdd to
8ee731e
Compare
…th 6 updates Bumps the npm-minor-and-patch group with 6 updates in the /Tools/Controller/web directory: | Package | From | To | | --- | --- | --- | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.55.0` | `1.61.0` | | [motion](https://github.com/motiondivision/motion) | `14.0.0` | `14.6.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.4` | `8.3.5` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` | Updates `lucide-react` from 1.55.0 to 1.61.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.61.0/packages/lucide-react) Updates `motion` from 14.0.0 to 14.6.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v14.0.0...v14.6.0) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `vite` from 8.3.4 to 8.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite) Updates `vitest` from 5.0.3 to 5.0.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 1.61.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: motion dependency-version: 14.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: vite dependency-version: 8.3.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: vitest dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
bfee771 to
7bf48a3
Compare
7bf48a3 to
ecb5835
Compare
…nor-and-patch-57761e9cb8
…rn/Tools/Controller/web/npm-minor-and-patch-40d963357d
…patible-dependencies
…roller/go-minor-and-patch-57761e9cb8' into automation/latest-compatible-dependencies
…s-minor-and-patch-c3cd7de8dd' into automation/latest-compatible-dependencies
|
Additional hardware-free evidence for dependency integration: all47 canonical stable-path Go package suites passed (full passed.json cache); go vet ./... passed. Web TypeScript checking and75 Vitest files/371 tests passed against the reconciled lock; fresh npm audit reports0 known vulnerabilities. All32 dependency tests and canonical host-lock validation pass, including the new list-form Action inventory coverage. Upstream official release notes/tags for go-winio0.6.4, UPX5.3.0, setup-java6.1.0 and CodeQL4.39.0 were inspected; CodeQL's new minimum bundle requirement remains covered by its actual analysis jobs, not assumed from a generic neutral status. Current Actions must still pass after main refresh before normal merge. |
|
Final combined source3310050c1ee3f5dadcf9f4506dea94bb61d25e1c (including merged #701/mainb8cd35eb) now passes the full48-package stable-path Go suite, go vet ./..., all32 dependency tests, canonical lock validation, protocol regeneration and diff checks locally. This replaces the earlier47-package dependency-only checkpoint; playbackpriority is included in the combined suite. No tracked worktree changes remain. Fresh final-head Actions are still running; no merge/close is being based on the earlier5f4901e7 checks. |
|
Completed: normal merge441d89873e5294fb6963c3a2768afc4ee78c3e47 from final combined head3310050c1ee3f5dadcf9f4506dea94bb61d25e1c after all24 applicable checks passed, including every AVR/host/VirtualBoard/Android/CodeQL job and required aggregates. The merge tree equals the tested head. Exact #689/#690/repaired #699 heads are ancestors of main; newer compatible resolutions and tighter manifest ranges are retained. Canonical lock validation, full48-package stable-path Go tests, go vet,32 dependency tests and final75-file/371-test Web suite/typecheck pass locally; web audit0 known vulnerabilities. Native A5/1/Pakar A5/0 admission and published opcode allocations remain intact. No production app, settings or hardware changes occurred; existing physical/device/endurance/updater gates remain separate. |
Latest-compatible dependency integration
The original scheduled candidate passed its hardware-free validation. The reconciled head below has changed and must pass fresh Actions before merge. Exact versions and hashes remain in the lock files.
1.27.21.27.324.21.026.13.0KryptonLithiume8832fcbecd010a1c21900bc019a28455f15adb34b81eea8e610068bed57c5f1f3c1fee05ede1718f3fdcca526f279bce30a2cea928e00bc746160a4de61fb6c5.2.15.3.0v5.2.1v5.3.0ac09a29f0fe5787ff5c554a64a84342ca2bb5fc9b0d227184e4238621cb0444713a41175e37aa5b00ab30a3caeab0497e02babc43e88fb3ea87d2d5f9218843716.2.0-14.0.0-r116.2.0-14.0.0-r39ef40a27504e87ff69d6aa51b69c7ab577e705a42dd08e8992a0cc258c24156daa580d9a6dd322247d52f0111e4831a0116e442e33732229821a47e02ea177571d349bfe5eec49b09f2557742d65c11b48fa332845882f397a625b02878ae9bbf3ae6cf725ad8fb85eaf8cf02cdba8005166e56fb67c898e0c03aea237bf76b31.27.21.27.3v0.6.3v0.6.4v0.61.0v0.62.01.64.014.8.019.3.119.3.13.10.1Release notes
Impact review
Validation and review
Workflow evidence: https://github.com/atomicdeploy/PCController/actions/runs/40985471849
Source reconciliation (2026-10-30)
This integration retains exact heads of #689 (61a868e), #690 (37a41f2) and repaired #699 (44bbb1b), plus main8b0ea74a. The npm manifest keeps #699's tighter compatible ranges while retaining the newer validated #688 resolutions (including Lucide1.64.0, Motion14.8.0, Vite8.3.5 and Vitest5.0.5). Lock hashes and immutable Action inventory are synchronized. Source review also fixed list-form Action steps being omitted from the inventory; named and list-form steps now share fail-closed pin checks, with a regression fixture and an exact inventory/lock comparison. The existing official actions/setup-java repository is explicitly reviewed/allowlisted, not a wildcard exemption. CodeQL4.39.0 and setup-java6.1.0 revisions were checked against their upstream tags.
32 dependency tests and canonical host-lock validation pass locally. Current-head Actions are required before merge; the historical scheduled candidate run is not a replacement. Superseded PRs will be closed only after verified ancestry and successful normal integration. No installed app, board, configuration or hardware changes are part of this pass.