Skip to content

fix(deps): update all non-major dependencies#1331

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#1331
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Jun 29, 2024

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@adobe/jsonschema2md 8.0.28.0.10 age confidence devDependencies patch
@ant-design/colors 7.0.27.2.1 age confidence dependencies minor
@ant-design/cssinjs 1.21.01.24.0 age confidence peerDependencies minor
@ant-design/cssinjs 1.21.01.24.0 age confidence dependencies minor
@ant-design/icons (source) 5.3.75.6.1 age confidence peerDependencies minor
@ant-design/icons (source) 5.3.75.6.1 age confidence devDependencies minor
@ant-design/icons (source) 5.3.75.6.1 age confidence dependencies minor
@bufbuild/buf 1.34.01.66.1 age confidence devDependencies minor
@bufbuild/buf 1.34.01.66.1 age confidence dependencies minor
@bufbuild/protobuf (source) 1.8.01.10.1 age confidence dependencies minor
@bufbuild/protoc-gen-es (source) 1.8.01.10.1 age confidence dependencies minor
@changesets/cli (source) 2.27.62.30.0 age confidence devDependencies minor
@codemirror/language 6.10.26.12.2 age confidence dependencies minor
@codemirror/legacy-modes 6.4.06.5.2 age confidence dependencies minor
@codemirror/view 6.28.26.40.0 age confidence dependencies minor
@commitlint/config-conventional (source) 19.2.219.8.1 age confidence devDependencies minor
@connectrpc/connect (source) 1.4.01.7.0 age confidence dependencies minor
@connectrpc/connect-node (source) 1.4.01.7.0 age confidence dependencies minor
@connectrpc/protoc-gen-connect-es (source) 1.4.01.7.0 age confidence dependencies minor
@ddadaal/eslint-config 2.1.02.3.0 age confidence devDependencies minor
@​ddadaal/tsgrpc-client 0.17.70.17.9 age confidence dependencies patch
@​ddadaal/tsgrpc-client 0.17.70.17.9 age confidence devDependencies patch
@​ddadaal/tsgrpc-common 0.2.50.2.7 age confidence dependencies patch
@​ddadaal/tsgrpc-common 0.2.50.2.7 age confidence devDependencies patch
@​ddadaal/tsgrpc-server 0.19.50.19.8 age confidence devDependencies patch
@​ddadaal/tsgrpc-server 0.19.50.19.8 age confidence dependencies patch
@dnd-kit/core (source) 6.1.06.3.1 age confidence dependencies minor
@docusaurus/core (source) 3.4.03.9.2 age confidence dependencies minor
@docusaurus/module-type-aliases (source) 3.4.03.9.2 age confidence devDependencies minor
@docusaurus/preset-classic (source) 3.4.03.9.2 age confidence dependencies minor
@docusaurus/types (source) 3.4.03.9.2 age confidence devDependencies minor
@easyops-cn/docusaurus-search-local (source) 0.44.20.55.1 age confidence dependencies minor
@fastify/error 4.0.04.2.0 age confidence dependencies minor
@grpc/grpc-js (source) 1.10.91.14.3 age confidence dependencies minor
@kubernetes/client-node ^0.21.0^0.22.0 age confidence dependencies minor
@mikro-orm/cli (source) 6.2.96.6.9 age confidence dependencies minor
@mikro-orm/core (source) 6.2.96.6.9 age confidence dependencies minor
@mikro-orm/mariadb (source) 6.2.96.6.9 age confidence dependencies minor
@mikro-orm/migrations (source) 6.2.96.6.9 age confidence dependencies minor
@mikro-orm/mysql (source) 6.2.96.6.9 age confidence dependencies minor
@mikro-orm/seeder (source) 6.2.96.6.9 age confidence dependencies minor
@monaco-editor/react 4.6.04.7.0 age confidence dependencies minor
@next/bundle-analyzer (source) 14.2.414.2.35 age confidence devDependencies patch
@node-rs/jieba 1.10.31.10.4 age confidence devDependencies patch
@pnpm/lockfile-file (source) 9.1.19.1.3 age confidence devDependencies patch
@pnpm/logger (source) 5.0.05.2.0 age confidence devDependencies minor
@sinclair/typebox 0.32.340.34.48 age confidence dependencies minor
@sinclair/typebox 0.32.340.34.48 age confidence devDependencies minor
@testing-library/jest-dom 6.4.66.9.1 age confidence devDependencies minor
@testing-library/react 16.0.016.3.2 age confidence devDependencies minor
@trpc/client (source) 10.45.210.45.4 age confidence dependencies patch
@trpc/next (source) 10.45.210.45.4 age confidence dependencies patch
@trpc/react-query (source) 10.45.210.45.4 age confidence dependencies patch
@trpc/server (source) 10.45.210.45.4 age confidence dependencies patch
@tsconfig/docusaurus (source) 2.0.32.0.9 age confidence devDependencies patch
@types/http-proxy (source) 1.17.141.17.17 age confidence devDependencies patch
@types/jest (source) 29.5.1229.5.14 age confidence devDependencies patch
@types/node (source) 20.14.820.19.37 age confidence devDependencies minor
@types/nodemailer (source) 6.4.156.4.23 age confidence devDependencies patch
@types/qrcode (source) 1.5.51.5.6 age confidence devDependencies patch
@types/react (source) 18.3.318.3.28 age confidence devDependencies patch
@types/react-dom (source) 18.3.018.3.7 age confidence devDependencies patch
@types/ssh2 (source) 1.15.01.15.5 age confidence devDependencies patch
@types/styled-components (source) 5.1.345.1.36 age confidence devDependencies patch
@types/swagger-ui-react (source) 4.18.34.19.0 age confidence devDependencies minor
@types/ws (source) 8.5.108.18.1 age confidence devDependencies minor
@types/yargs (source) 17.0.3217.0.35 age confidence devDependencies patch
@uiw/codemirror-theme-github (source) 4.22.24.25.8 age confidence dependencies minor
@xterm/addon-fit (source) 0.10.00.11.0 age confidence dependencies minor
ajv (source) 8.16.08.18.0 age confidence dependencies minor
alpine 3.203.23 age confidence final minor
antd (source) 5.18.35.29.3 age confidence peerDependencies minor
antd (source) 5.18.35.29.3 age confidence devDependencies minor
antd (source) 5.18.35.29.3 age confidence dependencies minor
bignumber.js 9.1.29.3.1 age confidence dependencies minor
csv-stringify (source) 6.5.06.7.0 age confidence dependencies minor
dayjs (source) 1.11.111.11.20 age confidence peerDependencies patch
dayjs (source) 1.11.111.11.20 age confidence devDependencies patch
dayjs (source) 1.11.111.11.20 age confidence dependencies patch
dotenv 16.4.516.6.1 age confidence devDependencies minor
dotenv 16.4.516.6.1 age confidence dependencies minor
dotenv-cli 7.4.27.4.4 age confidence devDependencies patch
envalid 8.0.08.1.1 age confidence dependencies minor
eslint (source) 9.6.09.39.4 age confidence devDependencies minor
eslint (source) 9.6.09.39.4 age confidence dependencies minor
eslint-plugin-license-header 0.6.10.9.0 age confidence devDependencies minor
fastify (source) 4.28.04.29.1 age confidence dependencies minor
form-data 4.0.04.0.5 age confidence devDependencies patch
fs-extra 11.2.011.3.4 age confidence devDependencies minor
globby 14.0.114.1.0 age confidence devDependencies minor
google-protobuf 3.21.23.21.4 age confidence dependencies patch
https-proxy-agent (source) 7.0.47.0.6 age confidence dependencies patch
husky 9.0.119.1.7 age confidence devDependencies minor
iconv-lite ^0.6.3^0.7.0 age confidence dependencies minor
ioredis 5.4.15.10.0 age confidence dependencies minor
js-yaml 4.1.04.1.1 age confidence dependencies patch
less (source) 4.2.04.6.4 age confidence dependencies minor
liquidjs 10.14.010.25.0 age confidence dependencies minor
lodash (source) 4.17.214.17.23 age confidence dependencies patch
long 5.2.35.3.2 age confidence dependencies minor
monaco-editor 0.50.00.55.1 age confidence peerDependencies minor
nanoid 5.0.75.1.7 age confidence dependencies minor
next (source) 14.2.414.2.35 age confidence peerDependencies patch
next (source) 14.2.414.2.35 age confidence devDependencies patch
next (source) 14.2.414.2.35 age confidence dependencies patch
nextjs-cors 2.2.02.2.1 age confidence dependencies patch
nextjs-node-loader 1.1.51.1.9 age confidence devDependencies patch
node (source) 20.15.020.20.1 age confidence volta minor
node-mocks-http 1.15.01.17.2 age confidence devDependencies minor
node-ssh (source) 13.2.013.2.1 age confidence dependencies patch
nodemailer (source) 6.9.146.10.1 age confidence dependencies minor
nodemon (source) 3.1.43.1.14 age confidence devDependencies patch
p-limit 6.1.06.2.0 age confidence dependencies minor
pm2 (source) 5.4.15.4.3 age confidence devDependencies patch
pnpm (source) 9.4.09.15.9 age confidence packageManager minor
pnpm/action-setup v4.0.0v4.4.0 age confidence action minor
postcss (source) 8.4.388.5.8 age confidence devDependencies minor
protobufjs (source) 7.3.27.5.4 age confidence dependencies minor
qrcode 1.5.31.5.4 age confidence dependencies patch
react-typed-i18n 2.3.02.6.1 age confidence dependencies minor
recharts 2.12.72.15.4 age confidence dependencies minor
recharts 2.12.32.15.4 age confidence dependencies minor
replace-in-file 8.1.08.4.0 age confidence dependencies minor
rimraf 6.0.16.1.3 age confidence devDependencies minor
shell-quote 1.8.11.8.3 age confidence dependencies patch
styled-components (source) 6.1.116.3.11 age confidence peerDependencies minor
styled-components (source) 6.1.116.3.11 age confidence devDependencies minor
styled-components (source) 6.1.116.3.11 age confidence dependencies minor
superjson 2.2.12.2.6 age confidence dependencies patch
swagger-ui-react 5.17.145.32.1 age confidence dependencies minor
ts-jest (source) 29.1.529.4.6 age confidence devDependencies minor
ts-log 2.2.52.2.7 age confidence devDependencies patch
ts-log 2.2.52.2.7 age confidence dependencies patch
ts-proto 1.180.01.181.2 age confidence devDependencies minor
tsc-alias (source) 1.8.101.8.16 age confidence devDependencies patch
tslib (source) 2.6.32.8.1 age confidence dependencies minor
turbo (source) 2.0.42.8.17 age confidence devDependencies minor
typescript (source) 5.5.25.9.3 age confidence

@pkuhpc-review-bot pkuhpc-review-bot bot added the Code-ReviewRequested Code Review Requested label Jun 29, 2024
@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Jun 29, 2024

⚠️ No Changeset found

Latest commit: 044a86c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@pkuhpc-review-bot pkuhpc-review-bot bot requested a review from ddadaal June 29, 2024 16:24
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Jun 29, 2024

PR Preview Action v1.4.7
🚀 Deployed preview to https://PKUHPC.github.io/SCOW/pr-preview/pr-1331/
on branch gh-pages at 2024-07-10 09:31 UTC

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 15 times, most recently from 8ded137 to da99432 Compare July 6, 2024 06:51
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from a89f41b to 69acf42 Compare July 10, 2024 20:21
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from 6c2fc42 to e277b13 Compare July 31, 2024 22:52
Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

本次代码改动主要包括以下几个方面:

  • 更新了多个包的版本号,包括pnpm、docusaurus、各种前端和Node.js依赖包等
  • 升级了Docker基础镜像从alpine 3.20到3.21
  • 更新了Node.js版本从20.15.0到20.19.0
  • 更新了pnpm版本从9.4.0到9.15.9
  • 修正了一些依赖包的minor和patch版本更新

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.21
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Docker基础镜像从alpine 3.20升级到3.21,这个更新比较合理,因为3.21修复了一些安全漏洞。
建议继续关注后续的alpine版本更新以确保安全性。

Suggested change
FROM alpine:3.21
FROM alpine:3.21

"volta": {
"node": "20.15.0"
"node": "20.19.0"
},
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Node.js版本从20.15.0更新到20.19.0,这个更新包含了重要的安全修复和性能改进。
建议在升级后测试确认没有兼容性问题。

Suggested change
},
"node": "20.19.0"

"node": "20.19.0"
},
"packageManager": "pnpm@9.4.0",
"packageManager": "pnpm@9.15.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm版本从9.4.0更新到9.15.9,这是个大跨度更新。
建议测试确认新版本没有引入任何包管理相关的问题。

Suggested change
"packageManager": "pnpm@9.15.9",
"packageManager": "pnpm@9.15.9"

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

本次代码变更新主要包括以下几个方面:

  • 更新了多个workflow文件中的pnpm/action-setup版本从v4.0.0升级到v4.1.0
  • 升级了多个package.json中的依赖版本,包括@grpc/grpc-js、@ant-design相关组件、next.js、typescript等核心依赖
  • 更新了Dockerfile中的基础镜像从alpine:3.20升级到alpine:3.21
  • 统一升级了多个库的内部依赖版本,保持workspace:*依赖的一致性
  • 更新了Node.js版本从20.15.0升级到20.19.0
  • 更新了pnpm版本从9.4.0升级到9.15.9

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.21
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

基础镜像从alpine:3.20升级到alpine:3.21,需要注意新版本是否与现有环境兼容,特别是系统库的ABI兼容性。

"volta": {
"node": "20.15.0"
"node": "20.19.0"
},
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Node.js版本从20.15.0升级到20.19.0,需要注意CI/CD环境和新版本在生产环境的兼容性问题。

"node": "20.19.0"
},
"packageManager": "pnpm@9.4.0",
"packageManager": "pnpm@9.15.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm版本从9.4.0升级到9.15.9,跨度较大,需要注意lockfile格式变化和安装行为的潜在变化。

"@ddadaal/tsgrpc-client": "0.17.8",
"@ddadaal/tsgrpc-common": "0.2.6",
"@grpc/grpc-js": "1.13.3",
"@kubernetes/client-node": "^0.22.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@kubernetes/client-node从^0.21.0升级到^0.22.0,需要注意API有无破坏性变更,特别是与集群交互的部分。

},
"peerDependencies": {
"monaco-editor": "0.50.0"
"monaco-editor": "0.52.2"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

monaco-editor从0.50.0升级到0.52.2,需要注意编辑器API和功能的兼容性问题。

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

此次代码变更主要涉及多个依赖包的版本升级和GitHub Actions工作流配置的更新,具体包括:

  • 升级了多个GitHub Actions工作流中使用pnpm/action-setup的版本从v4.0.0到v4.1.0
  • 更新了多个应用的package.json文件中的依赖版本
  • 更新了文档站点相关的依赖包版本
  • 更新了dev/ssh-server/Dockerfile中的基础镜像版本

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.21
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

基础镜像从Alpine 3.20升级到3.21,建议确认所有应用的兼容性和稳定性

Suggested change
FROM alpine:3.21
议在升级后进行全面测试

"node": "20.19.0"
},
"packageManager": "pnpm@9.4.0",
"packageManager": "pnpm@9.15.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm版本从9.4.0升级到9.15.9,这是较大的版本跳跃,建议验证新版本下的构建和依赖解析是否正常

Suggested change
"packageManager": "pnpm@9.15.9",
建议逐步升级并测试

"@ant-design/icons": "5.6.1",
"@ddadaal/tsgrpc-client": "0.17.8",
"@ddadaal/tsgrpc-common": "0.2.6",
"@grpc/grpc-js": "1.13.3",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@grpc/grpc-js从1.10.9升级到1.13.3,涉及gRPC协议的改动,建议测试相关功能

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

此次代码变更有以下内容:

steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4.0.0
- uses: pnpm/action-setup@v4.1.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm/action-setup从v4.0.0升级到v4.1.0,这是一个依赖项的升级。

steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4.0.0
- uses: pnpm/action-setup@v4.1.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm/action-setup从v4.0.0升级到v4.1.0,这是一个依赖项的升级。

ref: ${{ github.event.pull_request.head.sha }}

- uses: pnpm/action-setup@v4.0.0
- uses: pnpm/action-setup@v4.1.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm/action-setup从v4.0.0升级到v4.1.0,这是一个依赖项的升级。

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.21
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

基础镜像从alpine:3.20升级到alpine:3.21,这是一个镜像版本的升级。

"volta": {
"node": "20.15.0"
"node": "20.19.1"
},
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Node.js版本从20.15.0升级到20.19.1,请注意测试新版本的兼容性。

},
"packageManager": "pnpm@9.4.0",
"packageManager": "pnpm@9.15.9",
"pnpm": {
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm版本从9.4.0升级到9.15.9,请注意测试新版本的兼容性。

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

本次代码变更主要包括以下内容:

  • 升级了多个 GitHub Actions 工作流中的 pnpm/action-setup 版本从 v4.0.0 到 v4.1.0
  • 更新了大量依赖包的版本号,包括前端框架(Next.js, antd)、TypeScript 相关库(@sinclair/typebox)、后端框架(@grpc/grpc-js)、数据库 ORM(@mikro-orm)、各种工具库(dayjs, dotenv等)
  • 将 Docker 基础镜像从 alpine:3.20 升级到 alpine:3.21
  • 更新了主项目的开发依赖版本,包括 Node.js 版本从 20.15.0 升级到 20.19.1
  • 将 PNPM 版本从 9.4.0 更新到 9.15.9

"prism-react-renderer": "2.2.0",
"react": "18.2.0",
"react-dom": "18.2.0",
"@easyops-cn/docusaurus-search-local": "0.44.2",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@easyops-cn/docusaurus-search-local 升级到 0.49.2 时需注意,这个版本可能有一些 breaking changes,建议检查文档搜索功能是否正常。

package.json Outdated
},
"volta": {
"node": "20.15.0"
"node": "20.19.1"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

husky 升级到 9.1.7 可能会有 hooks 运行方式的改变,建议检查 git hooks 是否仍然正常工作。

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.21
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

基础镜像从 alpine 3.20 升级到 3.21,需要测试 SSH 服务是否仍然正常运行,特别是与新的基础镜像的兼容性。

"node": "20.19.1"
},
"packageManager": "pnpm@9.4.0",
"packageManager": "pnpm@9.15.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PNPM 版本从 9.4.0 升级到 9.15.9 是较大的版本跨度,建议先测试安装和构建过程,确保没有兼容性问题。

"@types/nprogress": "0.2.3",
"@types/react": "18.3.3",
"@types/react-dom": "18.3.0",
"@types/react": "18.3.20",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@testing-library/react 从 16.0.0 升级到 16.3.0,需要注意测试用例是否需要调整,特别是关于渲染和事件处理相关的部分。

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

该PR主要做了以下更新:

steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4.0.0
- uses: pnpm/action-setup@v4.1.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 pnpm/action-setup 从 v4.0.0 升级到 v4.1.0

steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4.0.0
- uses: pnpm/action-setup@v4.1.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 pnpm/action-setup 从 v4.0.0 升级到 v4.1.0

ref: ${{ github.event.pull_request.head.sha }}

- uses: pnpm/action-setup@v4.0.0
- uses: pnpm/action-setup@v4.1.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 pnpm/action-setup 从 v4.0.0 升级到 v4.1.0

steps:
- uses: actions/checkout@v4

- uses: pnpm/action-setup@v4.0.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 pnpm/action-setup 从 v4.0.0 升级到 v4.1.0

},
"dependencies": {
"@ant-design/cssinjs": "1.21.0",
"@ant-design/icons": "5.3.7",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 @ant-design/cssinjs 从 1.21.0 升级到 1.23.0

"dependencies": {
"@ant-design/cssinjs": "1.21.0",
"@ant-design/icons": "5.3.7",
"@ddadaal/tsgrpc-client": "0.17.7",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 @ant-design/icons 从 5.3.7 升级到 5.6.1

"@ant-design/cssinjs": "1.21.0",
"@ant-design/icons": "5.3.7",
"@ddadaal/tsgrpc-client": "0.17.7",
"@ddadaal/tsgrpc-common": "0.2.5",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将 @ddadaal/tsgrpc-client 从 0.17.7 升级到 0.17.8

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

这个PR主要包含以下变更:

  • 更新了多个GitHub Actions工作流中使用的pnpm/action-setup版本从v4.0.0到v4.1.0
  • 更新了多个Docker镜像和依赖库的版本,包括从Alpine 3.20升级到3.21
  • 更新了项目中大量NPM包的版本,主要涉及安全补丁和功能更新
  • 更新了Node.js版本从20.15.0到20.19.2
  • 更新了pnpm版本从9.4.0到9.15.9
  • 更新了多个@ant-design相关包的版本
  • 更新了多个@ddadaal/tsgrpc相关包的版本
  • 更新了多个@mikro-orm相关包的版本

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.21
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Alpine镜像版本升级到3.21,请确认所有依赖包兼容新版本。建议在升级前进行充分测试。

"node": "20.19.2"
},
"packageManager": "pnpm@9.4.0",
"packageManager": "pnpm@9.15.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm版本有较大跨度升级,从9.4.0到9.15.9,可能会有不兼容变更。建议先检查变更日志和测试构建过程是否正常。

]
},
"dependencies": {
"@ant-design/cssinjs": "1.21.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

更新了大量前端依赖包版本,特别是antd从5.18.3升级到5.25.1。建议确认这些更新不会影响UI组件的行为和样式。

steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4.0.0
- uses: pnpm/action-setup@v4.1.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm/action-setup版本更新幅度较小(从4.0.0到4.1.0),属于合理的安全更新范围。

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

本次代码变更主要涉及以下内容:

  • 升级了多个GitHub工作流中的pnpm/action-setup版本
  • 更新了多个应用和库的依赖版本,包括antd、dayjs、grpc-js等
  • 升级了Docker基础镜像版本
  • 更新了开发环境和工具链的依赖版本

"@ant-design/icons": "5.6.1",
"@ddadaal/tsgrpc-client": "0.17.8",
"@ddadaal/tsgrpc-common": "0.2.6",
"@grpc/grpc-js": "1.13.4",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

建议检查新版@grpc/grpc-js的兼容性变化,特别是1.13.4版本的升级可能包含重大变更

"@sinclair/typebox": "0.34.33",
"asn1": "0.2.6",
"fastify": "4.28.0",
"fastify": "4.29.1",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fastify从4.28.0升级到4.29.1,需要注意中间件API是否有变化

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.21
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Alpine基础镜像从3.20升级到3.21,建议确认所有基础工具和库都兼容新版本

"node": "20.19.2"
},
"packageManager": "pnpm@9.4.0",
"packageManager": "pnpm@9.15.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

node版本从20.15.0升级到20.19.2,需要确保所有开发环境都支持新版本

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

本次代码变更主要包含以下几个方面:

  • 更新了多个GitHub Actions工作流文件中的pnpm/action-setup版本从v4.0.0到v4.1.0
  • 更新了多个应用的package.json文件中的依赖版本
  • 更新了dev/ssh-server/Dockerfile中的基础镜像从alpine:3.20到alpine:3.22
  • 更新了根目录package.json中的开发依赖版本和工具版本
  • 升级了多处TypeScript和Node.js相关依赖的版本
  • 更新了多个protobuf相关库的版本

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.22
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

基础镜像从alpine:3.20升级到alpine:3.22,建议检查新版本中是否有任何潜在兼容性问题

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

此次代码变更主要涉及以下内容:

  • 升级了多个GitHub Actions工作流中的pnpm/action-setup到v4.1.0版本
  • 更新了所有应用和库的依赖版本,包括React相关库、Ant Design、TypeScript等
  • 升级了Docker基础镜像从alpine:3.20到alpine:3.22
  • 项目全局配置更新,包括Node.js版本、pnpm包管理器版本等

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.22
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

建议在升级alpine版本时检查所有依赖包的兼容性,特别是如果有使用第三方二进制文件需要验证在3.22上是否可用

Suggested change
FROM alpine:3.22
FROM alpine:3.22

"volta": {
"node": "20.15.0"
"node": "20.19.2"
},
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Node.js版本从20.15.0升级到20.19.2是较大跨度的版本更新,需要考虑对现有代码的影响

Suggested change
},
"node": "20.19.2"

"node": "20.19.2"
},
"packageManager": "pnpm@9.4.0",
"packageManager": "pnpm@9.15.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm从9.4.0升级到9.15.9变化较大,需要确保构建流程不受影响

Suggested change
"packageManager": "pnpm@9.15.9",
"packageManager": "pnpm@9.15.9"

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

本次代码变更主要涉及以下几个方面:

  • 更新了多个 GitHub Actions 工作流中的 pnpm/action-setup 版本,从 v4.0.0 升级到 v4.1.0
  • 更新了多个应用和库的依赖版本,包括 @ant-design 系列、@ddadaal/tsgrpc 系列、@grpc/grpc-js、@mikro-orm 系列等
  • 升级了 Next.js 及相关依赖版本
  • 更新了 TypeScript 和其他开发工具链版本
  • 修改了 Dockerfile 中使用的基础镜像从 alpine:3.20 升级到 alpine:3.22

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.22
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

基础镜像从 alpine:3.20 升级到 3.22,建议确认所有依赖在 3.22 上的兼容性

"node": "20.19.2"
},
"packageManager": "pnpm@9.4.0",
"packageManager": "pnpm@9.15.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm 版本从 9.4.0 升级到 9.15.9,这是一个较大的跨度升级,建议测试确认构建过程无误

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

这个PR主要进行了以下更新:

  • 升级了多个GitHub Actions工作流中的pnpm/action-setup版本到v4.1.0
  • 更新了所有应用的依赖包版本,包括@ant-design组件、@grpc/grpc-js、@mikro-orm相关包、dayjs等核心依赖
  • 更新了开发依赖包版本,如typescript、@types/node等类型定义
  • 升级了基础镜像从alpine:3.20到alpine:3.22
  • 更新了项目根目录下的Node.js版本要求和pnpm版本
  • 修改了多个库包的peerDependencies版本要求

"node": "20.15.0"
"node": "20.19.3"
},
"packageManager": "pnpm@9.4.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm版本从9.4.0升级到9.15.9,这是一个较大的版本跨度升级,需要确保兼容性。建议检查pnpm的新特性/破坏性变更并与团队确认

Suggested change
"packageManager": "pnpm@9.4.0",
"packageManager": "pnpm@9.4.0" // 如需回退

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.22
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

基础镜像从alpine:3.20升级到3.22,建议测试镜像构建和运行时是否有兼容性问题,特别是glibc依赖等

Suggested change
FROM alpine:3.22
FROM alpine:3.20 // 如需回退

"@mikro-orm/core": "6.2.9",
"@mikro-orm/migrations": "6.2.9",
"@mikro-orm/mysql": "6.2.9",
"@mikro-orm/seeder": "6.2.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

多个@mikro-orm相关包从6.2.9升级到6.4.16,建议检查ORM相关的破坏性变更和性能改进

Suggested change
"@mikro-orm/seeder": "6.2.9",
@mikro-orm/cli": "6.2.9" // 如需回退

"@ant-design/icons": "5.6.1",
"@codemirror/language": "6.11.2",
"@codemirror/legacy-modes": "6.5.1",
"@codemirror/view": "6.38.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dnd-kit/core从6.1.0升级到6.3.1,涉及拖拽功能,需测试拖拽相关功能是否正常

Suggested change
"@codemirror/view": "6.38.0",
@dnd-kit/core": "6.1.0" // 如需回退

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

本次代码提交主要涉及以下更新:

  • 更新了多个 GitHub Actions 工作流中的 pnpm/action-setup 版本
  • 升级了大量 npm 依赖包的版本
  • 更新了 Docker 基础镜像版本
  • 更新了 Node.js 版本
  • 升级了 pnpm 版本

"@ddadaal/tsgrpc-common": "0.2.5",
"@grpc/grpc-js": "1.10.9",
"@kubernetes/client-node": "^0.21.0",
"@mikro-orm/cli": "6.2.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

建议检查 @kubernetes/client-node0.21.0 升级到 0.22.0 是否有重大变更,确保兼容性

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.22
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

基础镜像从 alpine:3.20 升级到 3.22,建议检查相关依赖是否兼容新版本

"volta": {
"node": "20.15.0"
"node": "20.19.4"
},
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Node.js 版本从 20.15.0 升级到 20.19.4,建议确认所有项目功能和构建流程在新版本下正常运行

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

本次代码变更主要涉及以下几个方面:

  • 升级了多个GitHub Actions工作流中使用的pnpm/action-setup版本从v4.0.0到v4.1.0
  • 更新了多个应用的Node.js依赖包版本,包括但不限于@ant-design/、@ddadaal/tsgrpc-、@grpc/grpc-js、@mikro-orm/*、next、react等
  • 升级了Docker基础镜像从alpine:3.20到alpine:3.22
  • 更新了多个库的依赖包版本,如@sinclair/typebox、zod、antd等
  • 更新了项目根目录的开发依赖版本,如@bufbuild/buf、@changesets/cli、eslint等
  • 更新了Node.js版本从20.15.0到20.19.4
  • 更新了pnpm版本从9.4.0到9.15.9

"@types/google-protobuf": "3.15.12",
"@types/http-proxy": "1.17.14",
"@types/http-proxy": "1.17.16",
"@types/mime-types": "2.1.4",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@types/react从18.3.3升级到18.3.23是一个较大的版本跨度,请注意版本间可能的兼容性问题,建议仔细阅读变更日志

"less": "4.4.0",
"mime-types": "2.1.35",
"next": "14.2.4",
"next": "14.2.31",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

升级了less从4.2.0到4.4.0,这个版本包含了一些重要变更,可能会影响现有的样式编译,建议测试样式是否正常

"node": "20.19.4"
},
"packageManager": "pnpm@9.4.0",
"packageManager": "pnpm@9.15.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm从9.4.0升级到9.15.9包含了多个重要更新,建议测试构建和依赖安装过程是否正常

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.22
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

从alpine:3.20升级到alpine:3.22,确保所有的系统依赖在新版本中都能正常工作

Suggested change
FROM alpine:3.22
FROM alpine:3.22

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

本次代码变更主要包含以下内容:

steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4.0.0
- uses: pnpm/action-setup@v4.1.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

升级pnpm/action-setup版本到v4.1.0,建议检查新版是否与当前CI流程兼容

steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4.0.0
- uses: pnpm/action-setup@v4.1.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

升级pnpm/action-setup版本到v4.1.0,与docs-preview.yaml保持同步

ref: ${{ github.event.pull_request.head.sha }}

- uses: pnpm/action-setup@v4.0.0
- uses: pnpm/action-setup@v4.1.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

升级pnpm/action-setup版本到v4.1.0,与其它workflow文件保持一致

steps:
- uses: actions/checkout@v4

- uses: pnpm/action-setup@v4.0.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

再次升级pnpm/action-setup版本到v4.1.0,确保整个文件中版本一致

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.22
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

将基础镜像从alpine:3.20升级到3.22,建议确认新版本是否有兼容性问题

"volta": {
"node": "20.15.0"
"node": "20.19.4"
},
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

node版本从20.15.0升级到20.19.4,建议检查新版本是否会导致构建或运行问题

"node": "20.19.4"
},
"packageManager": "pnpm@9.4.0",
"packageManager": "pnpm@9.15.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm版本从9.4.0升级到9.15.9,建议测试构建过程是否受影响

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

本次提交主要涉及以下几个方面:

  • 更新了GitHub Actions工作流中使用的pnpm/action-setup版本(从v4.0.0更新到v4.1.0)
  • 更新了多个应用和库的依赖包版本
  • 更新了Dockerfile中的基础镜像(从alpine:3.20更新到alpine:3.22)
  • 更新了volta的node版本(从20.15.0更新到20.19.4)
  • 更新了包管理器pnpm的版本(从9.4.0更新到9.15.9)

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.22
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

更新基础镜像版本到alpine:3.22可以获取最新的安全补丁和功能改进,建议在合并前测试兼容性以确保稳定性。

"node": "20.19.4"
},
"packageManager": "pnpm@9.4.0",
"packageManager": "pnpm@9.15.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pnpm版本从9.4.0升级到9.15.9,这是一个较大版本的升级,建议在团队内部协调升级策略以避免潜在的构建问题。

@renovate
Copy link
Copy Markdown
Contributor Author

renovate bot commented Aug 9, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml
Scope: all 31 workspace projects
Progress: resolved 1, reused 0, downloaded 0, added 0
apps/ai                                  |  WARN  deprecated nextjs-node-loader@1.1.9
Progress: resolved 58, reused 0, downloaded 0, added 0
Progress: resolved 88, reused 0, downloaded 0, added 0
Progress: resolved 112, reused 0, downloaded 0, added 0
apps/auth                                |  WARN  deprecated ldapjs@2.3.3
Progress: resolved 155, reused 0, downloaded 0, added 0
Progress: resolved 195, reused 0, downloaded 0, added 0
Progress: resolved 253, reused 0, downloaded 0, added 0
Progress: resolved 442, reused 0, downloaded 0, added 0
Progress: resolved 537, reused 0, downloaded 0, added 0
Progress: resolved 588, reused 0, downloaded 0, added 0
Progress: resolved 782, reused 0, downloaded 0, added 0
Progress: resolved 827, reused 0, downloaded 0, added 0
Progress: resolved 863, reused 0, downloaded 0, added 0
Progress: resolved 979, reused 0, downloaded 0, added 0
Progress: resolved 1061, reused 0, downloaded 0, added 0
Progress: resolved 1197, reused 0, downloaded 0, added 0
Progress: resolved 1462, reused 0, downloaded 0, added 0
Progress: resolved 1687, reused 0, downloaded 0, added 0
Progress: resolved 1755, reused 0, downloaded 0, added 0
Progress: resolved 1820, reused 0, downloaded 0, added 0
Progress: resolved 1858, reused 0, downloaded 0, added 0
Progress: resolved 2102, reused 0, downloaded 0, added 0
Progress: resolved 2388, reused 0, downloaded 0, added 0
Progress: resolved 2663, reused 0, downloaded 0, added 0
Progress: resolved 2734, reused 0, downloaded 0, added 0
 ERR_PNPM_PATCH_NOT_APPLIED  The following patches were not applied: react-typed-i18n@2.3.0, next@14.2.4

Either remove them from "patchedDependencies" or update them to match packages in your dependencies.

Copy link
Copy Markdown

@pkuhpc-review-bot pkuhpc-review-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

本次代码变更主要包括以下内容:

  • 升级了多个依赖包的版本,包括pnpm/action-setup、antd相关组件、grpc-js、typescript等
  • 更新了docker基础镜像从alpine:3.20到3.22
  • 更新了多个项目中使用的第三方库版本,包括react相关库、dayjs、dotenv等
  • 升级了monaco-editor的peerDependencies版本

# See the Mulan PSL v2 for more details.

FROM alpine:3.20
FROM alpine:3.22
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Alpine 3.22是最新稳定版本,这是一个合理的升级

Suggested change
FROM alpine:3.22
FROM alpine:3.22

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Code-ReviewRequested Code Review Requested

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants