Skip to content

chore(deps-dev): bump the development-dependencies group - #309

Merged
redfish4ktc merged 1 commit into
mainfrom
chore/bump_dev_dependencies
Aug 11, 2026
Merged

chore(deps-dev): bump the development-dependencies group#309
redfish4ktc merged 1 commit into
mainfrom
chore/bump_dev_dependencies

Conversation

@tbouffard

@tbouffard tbouffard commented Aug 11, 2026

Copy link
Copy Markdown
Member

Summary

Manual replacement for #308, which could not be merged as is because it also bumped TypeScript from 5.9.3 to 7.0.2.

  • Bump the development dependencies: parcel 2.16.3 -> 2.16.4, @rollup/plugin-terser 0.4.4 -> 1.0.0, rollup 4.55.1 -> 4.62.4, serve 14.2.5 -> 14.2.6 and @rsbuild/core 1.7.2 -> 2.1.10. package-lock.json is regenerated accordingly.
  • Make dependabot ignore typescript. v6 and v7 require configuration changes and more testing, so the projects stay on v5 until that work is done.
  • Add "type": "module" to the rsbuild-ts project. Its rsbuild config uses ES module syntax, so without it Node reparses the file as an ES module and prints a MODULE_TYPELESS_PACKAGE_JSON warning on every build.
  • Let dependabot label the pull requests it opens (dependencies, skip-changelog, plus javascript or github_actions), so they no longer need manual triage.

Test plan

  • CI is green
  • npm run build succeeds for every project, in particular rollup-ts (major bump of @rollup/plugin-terser) and rsbuild-ts (major bump of @rsbuild/core)
  • The rsbuild-ts build no longer prints the MODULE_TYPELESS_PACKAGE_JSON warning
  • The demo pages still render as expected

Closes #308

Update parcel to 2.16.4, @rollup/plugin-terser to 1.0.0, rollup to 4.62.4, serve to 14.2.6 and @rsbuild/core to
2.1.10, and regenerate package-lock.json accordingly.

Add "type": "module" to the rsbuild-ts project: the rsbuild config uses ES module syntax, so without it Node
reparses the file as an ES module and emits a MODULE_TYPELESS_PACKAGE_JSON warning on every build.

Make dependabot ignore typescript: v6 and v7 require configuration changes and more testing, so stay on v5 until
that work is done.

Also let dependabot label the pull requests it opens, so they are categorized without manual triage.
@tbouffard tbouffard added dependencies skip-changelog Do not include in Changelog and Release Notes javascript Pull requests that update Javascript code labels Aug 11, 2026
@sonarqubecloud

Copy link
Copy Markdown

@redfish4ktc
redfish4ktc merged commit a991006 into main Aug 11, 2026
21 checks passed
@redfish4ktc
redfish4ktc deleted the chore/bump_dev_dependencies branch August 11, 2026 05:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies javascript Pull requests that update Javascript code skip-changelog Do not include in Changelog and Release Notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants