Skip to content

chore(deps): consolidated dependency updates#12210

Closed
theluckystrike wants to merge 1 commit intochartjs:masterfrom
theluckystrike:dependabot/consolidated-updates
Closed

chore(deps): consolidated dependency updates#12210
theluckystrike wants to merge 1 commit intochartjs:masterfrom
theluckystrike:dependabot/consolidated-updates

Conversation

@theluckystrike
Copy link

@theluckystrike theluckystrike commented Mar 4, 2026

Summary

This PR consolidates 5 open Dependabot PRs into a single update, reducing PR clutter and making it easier to review and merge all dependency updates at once.

Dependabot PRs Consolidated

Original PR Dependency Old Version New Version
#12207 minimatch 3.1.2 3.1.5
#12206 rollup 3.20.2 3.30.0
#12163 preactjs/compressed-size-action v2 v3
#12111 tmp 0.2.1 0.2.4
#12089 brace-expansion 1.1.11 1.1.12

Changes Made

  • Updated rollup from ^3.3.0 to ^3.30.0 in package.json
  • Updated preactjs/compressed-size-action from v2 to v3 in .github/workflows/compressed-size.yml
  • Updated pnpm-lock.yaml to reflect new dependency versions

Testing

Build completed successfully:

$ pnpm run build
✓ rollup build completed
✓ TypeScript declarations emitted

Notes

  • The rollup-plugin-terser has a peer dependency warning (expects rollup@^2.0.0 but found 3.30.0) - this is a pre-existing issue in the project and not caused by this update
  • All transitive dependencies (minimatch, tmp, brace-expansion) are automatically updated via the lockfile update

Contributed by theluckystrike | Zovo — Chrome Extension Studio

Consolidates the following Dependabot PRs:
- #12207: Bump minimatch from 3.1.2 to 3.1.5
- #12206: Bump rollup from 3.20.2 to 3.30.0
- #12163: Bump preactjs/compressed-size-action from 2 to 3
- #12111: Bump tmp from 0.2.1 to 0.2.4
- #12089: Bump brace-expansion from 1.1.11 to 1.1.12

Build passes successfully with updated dependencies.
@theluckystrike
Copy link
Author

Closing — repo blacklisted (537 open issues).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant