Skip to content

Pin dependencies - #192

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/routine-updates
Open

Pin dependencies#192
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/routine-updates

Conversation

@renovate

@renovate renovate Bot commented Apr 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
@convex-dev/eslint-plugin (source) devDependencies pin ^5.0.0 → 5.0.0 age confidence
@convex-dev/static-hosting devDependencies pin ^0.2.0 → 0.2.0 age confidence
@convex-dev/workpool-old (source) devDependencies patch 0.4.7 → 0.4.15 age confidence
@eslint/eslintrc devDependencies patch 3.3.3 → 3.3.7 age confidence
@types/node (source) devDependencies minor 24.10.11 → 24.19.2 age confidence
@types/react (source) devDependencies minor 19.2.13 → 19.3.0 age confidence
@types/react-dom (source) devDependencies minor 19.2.3 → 19.3.0 age confidence
@vitejs/plugin-react (source) devDependencies minor 5.1.3 → 5.2.0 age confidence
@vitest/coverage-v8 (source) devDependencies patch 5.0.0 → 5.0.5 age confidence
actions/checkout (changelog) action digest de0fac2 → d23441a
actions/checkout (changelog) action digest 93cb6ef → fbc6f39
actions/setup-node (changelog) action digest 8207627 → 949feb2
convex (source) devDependencies minor 1.46.0 → 1.48.0 1.49.0 age confidence
convex-helpers devDependencies patch 0.1.128 → 0.1.133 age confidence
convex-test (source) devDependencies patch 0.0.64 → 0.0.66 age confidence
eslint (source) devDependencies minor 10.0.2 → 10.13.0 10.14.0 age confidence
eslint-plugin-react-hooks (source) devDependencies patch 7.1.0-canary-3f0b9e61-20260317 → 7.1.1 age confidence
eslint-plugin-react-refresh devDependencies patch 0.5.0 → 0.5.7 age confidence
globals devDependencies minor 17.3.0 → 17.13.0 17.14.0 age confidence
pkg-pr-new (source) devDependencies patch 0.0.63 → 0.0.93 age confidence
prettier (source) devDependencies minor 3.8.1 → 3.9.10 age confidence
raven-actions/actionlint action minor v2.1.2 → v2.2.0 age confidence
react (source) devDependencies minor 19.2.4 → 19.3.1 age confidence
react-dom (source) devDependencies minor 19.2.4 → 19.3.1 age confidence
recharts devDependencies pin ^3.8.1 → 3.8.1 age confidence
typescript-eslint (source) devDependencies minor 8.56.1 → 8.72.1 age confidence
vitest (source) devDependencies patch 5.0.0 → 5.0.5 age confidence
zizmorcore/zizmor-action action minor v0.5.6 → v0.7.1 v0.8.0 age confidence

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

Release Notes

convex/workpool (@​convex-dev/workpool-old)

v0.4.15

Compare Source

  • Upgrades @​convex-dev/batch-worker to 0.3. Requires Convex 1.43 or later.
  • Records each pendingStart ID on its work document, so the next minor version
    can report status accurately for work already in flight. Not backwards
    compatible due to this schema change.
  • Adds a one-off migration that records the queue entry on work enqueued before
    this version and removes queue entries whose work is gone. Before upgrading to
    0.5, deploy this version and run
    npx convex run --component workpool migrations:backfillPendingStartIds,
    replacing workpool with each component instance's name.

v0.4.14

Compare Source

  • Updates the /test entrypoint for compatibility with convex-test's new
    defineTestApp capability.

v0.4.13

Compare Source

  • Avoid unused local in shared.ts type assertion (#​242)

v0.4.12

Compare Source

  • Adds onCompleteExcludeKinds to filter callbacks by result kind (#​237). Use
    this to avoid callbacks on success or canceled results if you don't care about
    those cases.

v0.4.11

Compare Source

  • Bump Batch Worker dependency to prevent OCC conflicts on enqueue.
  • Keeps the Batch Worker running for a 10-second cooldown while Workpool is
    saturated, reducing enqueue retries with worker status transitions.

v0.4.10

Compare Source

  • Adds vRunResult and type-safety for passing onComplete handlers with return
    values and context validator.
  • Expands vOnCompleteArgs to take an optional second parameter for the
    validator for the return value to expect.
  • Adds a returnValue named parameter to workpool.defineOnComplete that does
    the same.

v0.4.9

Compare Source

  • Runs actions and queries in batches of up to 32 from a single scheduled
    action, instead of scheduling them individually. This reduces scheduled
    function use and reduces the number of actions used (previously each action
    had another action wrapping it).

v0.4.8

Compare Source

  • Reduces "generation mismatch" errors and unnecessary "kick"s from healthchecks
eslint/eslintrc (@​eslint/eslintrc)

v3.3.7

Compare Source

Bug Fixes

v3.3.6

Compare Source

Bug Fixes
  • update js-yaml to 4.3.0 to address security vulnerability (#​235) (0c5de74)

v3.3.5

Compare Source

Bug Fixes

v3.3.4

Compare Source

Bug Fixes
  • update ajv to 6.14.0 to address security vulnerabilities (#​221) (9139140)
  • update minimatch to 3.1.3 to address security vulnerabilities (#​224) (30339d0)
vitejs/vite-plugin-react (@​vitejs/plugin-react)

v5.2.0

Compare Source

v5.1.4

Compare Source

Fix canSkipBabel not accounting for babel.overrides (#​1098)

When configuring babel.overrides without top-level plugins or presets, Babel was incorrectly skipped. The canSkipBabel function now checks for overrides.length to ensure override configurations are processed.

vitest-dev/vitest (@​vitest/coverage-v8)

v5.0.5

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v5.0.4

Compare Source

   🚀 Features
   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub

v5.0.3

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v5.0.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v5.0.1

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
convex/convex-backend (convex)

v1.48.0

  • Convex deployments can now sign their own JWTs with an internally managed
    key-pair. The ctx.auth.signJwt API is available in mutations. The JWTs
    can be verified with the public key in the JWKS hosted at
    ${CONVEX_CLOUD_URL}/.well-known/jwks.json.

  • npx convex dev --verbose and npx convex deploy --verbose no longer print
    environment variable values. The logged list of environment variables shows
    every value as <redacted>, and values of 8 or more characters are also
    redacted wherever else they appear in the logged push response and diff, such
    as auth providers that auth.config.ts builds from process.env.

  • When an AI agent runs npx convex env list or npx convex env default list,
    they now list only names by default, so secrets stay out of the agent's
    context. Agents are detected from the environment variables they set. Pass
    --include-values to print the values.

  • Fixed npx convex ai-files install and npx convex ai-files update reporting
    success and exiting 0 when the guidelines download or the agent skills
    install failed. They now exit with code 1.

  • ctx.storage.store() and ctx.storage.get() are now available in mutations,
    not just actions. Files stored and read in a mutation count toward its
    transaction limits.

[v1.47.0](https://redirect.github.com/convex/c

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

  • Branch creation
    • Monday through Friday (* * * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/routine-updates branch 9 times, most recently from 30f38ea to 3b471c8 Compare April 13, 2026 05:05
@renovate
renovate Bot force-pushed the renovate/routine-updates branch 3 times, most recently from 84b0102 to e85656c Compare April 16, 2026 18:12
@pkg-pr-new

pkg-pr-new Bot commented Apr 16, 2026 •
edited
Loading

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/@convex-dev/workpool@192

commit: 88241bb

@renovate
renovate Bot force-pushed the renovate/routine-updates branch 7 times, most recently from 3b96892 to 29ec850 Compare April 24, 2026 02:06
@renovate
renovate Bot force-pushed the renovate/routine-updates branch 4 times, most recently from e81f539 to 048a390 Compare April 27, 2026 18:36
@renovate renovate Bot changed the title Update Routine updates Pin dependencies Apr 27, 2026
@renovate
renovate Bot force-pushed the renovate/routine-updates branch 5 times, most recently from a0e690a to 276dc70 Compare May 3, 2026 20:26
@renovate
renovate Bot force-pushed the renovate/routine-updates branch 10 times, most recently from a8eeaa7 to 0f61ac8 Compare May 21, 2026 19:10
@renovate
renovate Bot force-pushed the renovate/routine-updates branch 5 times, most recently from ffcdf57 to b18348e Compare May 28, 2026 17:48
@renovate
renovate Bot force-pushed the renovate/routine-updates branch 10 times, most recently from 5c33815 to b07203a Compare June 4, 2026 22:49
@renovate
renovate Bot force-pushed the renovate/routine-updates branch 4 times, most recently from e5ddee6 to cc3c337 Compare June 12, 2026 19:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants