Upgrade dependencies (July 2026) [skip chg]#11265
Merged
Merged
Conversation
Bump pnpm to 11.10.0 and update catalog dependencies (starlight, babel, expressive-code, vite, oxlint-tsgolint, etc.). Pin astro to 7.0.3: 7.0.4-7.0.6 have a static-build regression (withastro/astro#17306) that breaks the website build; the fix (7.0.8) is still within the 7-day new-package quarantine.
microsoft-github-policy-service
Bot
added
ide
- Pin typescript back to ~6.0.2 (6.0.3): TS7 native port drops the JS Compiler API that unplugin-dts/vite-plugin-dts require. - Restore sha512 integrity and drop proxy tarball URLs in pnpm-lock.yaml.
Contributor
|
❌ There is undocummented changes. Run The following packages have changes but are not documented.
Show changes |
|
You can try these changes here
|
…rade-deps/july-2026
microsoft-github-policy-service
Bot
added
compiler:core
microsoft-github-policy-service
Bot
added
tspd
microsoft-github-policy-service
Bot
added
lib:http
lib:rest
lib:versioning
emitter:protobuf
…/typespec into upgrade-deps/july-2026
…for correct build order http-canonicalization peer-depends on @typespec/compiler and @typespec/http but did not list them in devDependencies, so turbo's ^build did not order them before its own build. On a cold cache this races ahead of @typespec/http and fails with TS2307. Matches convention of all sibling packages (graphql, emitter-framework, etc.).
microsoft-github-policy-service
Bot
added
the
emitter:client:python
…rerelease bump chronus version --prerelease rewrites package.json specifiers without updating the lockfile, so pnpm 11's verifyDepsBeforeRun check fails the subsequent pkg-pr-new step with ERR_PNPM_OUTDATED_LOCKFILE. Disable the check for the rest of the job, matching the build-packages pipeline.
@typespec/compiler
@typespec/emitter-framework
@typespec/http-canonicalization
@typespec/http-client
@typespec/http-client-js
@typespec/playground
@typespec/tspd
commit: |
timotheeguerin
changed the title
# Conflicts: # pnpm-lock.yaml
timotheeguerin
marked this pull request as ready for review
July 21, 2026 18:33
timotheeguerin
requested review from
MaryGao,
RodgeFu,
bterlson,
catalinaperalta,
iscai-msft,
lirenhe,
markcowl,
qiaozha,
witemple-msft and
xirzec
as code owners
July 21, 2026 18:33
timotheeguerin
enabled auto-merge
July 21, 2026 18:47
catalinaperalta
approved these changes
Jul 21, 2026
xirzec
approved these changes
Jul 21, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Routine dependency upgrade pass for July 2026.
pnpmto11.10.0.@astrojs/starlight,@babel/*(7 → 8),@expressive-code/core/astro-expressive-code,vite,@vscode/test-web,oxlint-tsgolint,vite-plugin-dts, etc.minimumReleaseAgeto 7 days.Note on astro
astrois pinned to7.0.3rather than bumped. Versions7.0.4-7.0.6contain a static-build regression (withastro/astro#17306) where dynamic file-extension endpoints (e.g.docs/[...slug].md.ts) withtrailingSlash: "always"fail the build withNoMatchingStaticPathFound. The upstream fix (#17320) ships in7.0.8, which is published but still within our 7-day new-package quarantine. The pin should be dropped once7.0.8clears quarantine.Validation
websitebuilds successfully with the pin (1128 pages, noNoMatchingStaticPathFound).