Skip to content

chore(deps-dev): bump tree-sitter-erlang from 0.0.0 to 0.17#1138

Open
dependabot[bot] wants to merge 4 commits into
mainfrom
dependabot/npm_and_yarn/tree-sitter-erlang-0.17
Open

chore(deps-dev): bump tree-sitter-erlang from 0.0.0 to 0.17#1138
dependabot[bot] wants to merge 4 commits into
mainfrom
dependabot/npm_and_yarn/tree-sitter-erlang-0.17

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 16, 2026

Bumps tree-sitter-erlang from 0.0.0 to 0.17.

Release notes

Sourced from tree-sitter-erlang's releases.

0.17

  • Convert Makefile post-processing from Ruby to Python3 and relax rustfmt check
  • Add :> (unchecked cast) operator to tree-sitter grammar
  • Fix precedence of andalso / orelse
  • Fix ?= precedence
  • Fix catch precedence for list cons
  • Use where to introduce SSR conditions

0.16

  • OTP 29 features support
    • multi-valued comprehensions EEP-78
    • native records EEP-79
    • make function application left associative

Release 0.15

  • Fix deps vulnerabilities
  • Expose highlights query in rust (@​wetneb) 0.14.0 (2025-04-08)
  • OTP 28 features support
    • based floating point literals EEP-75
    • nominal types EEP-69
    • zip generators EEP-73 0.13.0 (2025-03-11)

0.1.0

Add support for OTP 26 constructs

  • maybe
  • map comprehensions
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tree-sitter-erlang](https://github.com/WhatsApp/tree-sitter-erlang) from 0.0.0 to 0.17.
- [Release notes](https://github.com/WhatsApp/tree-sitter-erlang/releases)
- [Commits](https://github.com/WhatsApp/tree-sitter-erlang/commits/0.17)

---
updated-dependencies:
- dependency-name: tree-sitter-erlang
  dependency-version: '0.17'
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 16, 2026
@carlos-alm
Copy link
Copy Markdown
Contributor

@greptileai

@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps Bot commented May 17, 2026

Greptile Summary

This dependabot PR bumps tree-sitter-erlang from the 0.0.0 placeholder to version 0.17 (pointing to a new upstream commit), bringing in OTP 26–29 grammar support, operator precedence fixes, and a migration of the native addon from nan to node-addon-api+node-gyp-build. As a side effect of npm regenerating the lock file, the libc field was silently dropped from three @optave/codegraph-linux-* optional-dependency entries.

  • tree-sitter-erlang now depends on node-addon-api ^7.1.0 and node-gyp-build ^4.8.0 instead of nan, and its bundled tree-sitter-cli bumps from 0.20.8 to 0.23.2.
  • Three Linux optional native packages (linux-arm64-gnu, linux-x64-gnu, linux-x64-musl) lost their libc discriminator in the lock file, meaning npm can no longer use it to avoid installing mismatched glibc/musl binaries on Linux hosts.

Confidence Score: 4/5

Safe to merge on non-Linux or glibc-only environments; Linux deployments that mix glibc and musl targets (e.g. Alpine-based CI or Docker images) may install both native variants and potentially load the wrong binary.

The tree-sitter-erlang bump itself is straightforward and the upstream grammar changes are additive. The concern is the unintended loss of the libc discriminator for three @optave/codegraph-linux-* packages: without it, npm installs both the glibc and musl builds on any Linux host, and the runtime loader may pick the wrong one on musl systems such as Alpine Docker images, causing a hard crash on native-module load.

The libc-related changes in package-lock.json around lines 1478–1516 deserve a second look before merging into environments that target Alpine Linux or other musl-based systems.

Important Files Changed

Filename Overview
package-lock.json Bumps tree-sitter-erlang from 0.0.0 to 0.17 (new commit hash), migrates its native binding from nan to node-addon-api+node-gyp-build, bumps bundled tree-sitter-cli from 0.20.8 to 0.23.2, and as a lockfile-regeneration side effect removes the libc field from three @optave/codegraph-linux-* optional-dependency entries.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[npm install on Linux x64] --> B{libc field present?}
    B -- Yes --> C[Filter: glibc → install -gnu only
musl → install -musl only]
    B -- No
(after this PR) --> D[Fallback: match os+cpu only]
    D --> E[Both linux-x64-gnu AND
linux-x64-musl installed]
    E --> F{Runtime loader picks binary}
    F -- correct --> G[✅ Works]
    F -- wrong binary --> H[❌ Native module load error]

    I[tree-sitter-erlang 0.0.0] -->|bump| J[tree-sitter-erlang 0.17]
    J --> K[nan removed]
    J --> L[node-addon-api 7.1.1 added]
    J --> M[node-gyp-build 4.8.x added]
    J --> N[tree-sitter-cli 0.20.8 → 0.23.2]
Loading

Comments Outside Diff (1)

  1. package-lock.json, line 1478-1516 (link)

    P1 libc discriminator silently removed from Linux optional packages

    Three @optave/codegraph-linux-* entries (linux-arm64-gnu, linux-x64-gnu, linux-x64-musl) lost their libc field as a lock-file regeneration side effect. Without it, npm falls back to matching only on os+cpu, so on a Linux x64 host both linux-x64-gnu (glibc) and linux-x64-musl packages will match and be installed simultaneously. If the loader picks the wrong binary (e.g. the glibc build on an Alpine/musl system) the process will crash with a native-module load error at runtime. Verify that @optave/codegraph-linux-x64-gnu's published package.json intentionally omits libc, or restore the field manually in the lock file.

    Fix in Claude Code

Fix All in Claude Code

Reviews (1): Last reviewed commit: "Merge branch 'main' into dependabot/npm_..." | Re-trigger Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant