chore(deps): bump the all-dependencies group across 1 directory with 5 updates - #366
Closed
dependabot[bot] wants to merge 1 commit into
Conversation
…5 updates Bumps the all-dependencies group with 5 updates in the /packages/x402-facilitator-node directory: | Package | From | To | | --- | --- | --- | | [@hono/node-server](https://github.com/honojs/node-server) | `2.0.8` | `2.0.12` | | [viem](https://github.com/wevm/viem) | `2.54.6` | `2.55.10` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.0` | `26.1.2` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.5` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | Updates `@hono/node-server` from 2.0.8 to 2.0.12 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.0.8...v2.0.12) Updates `viem` from 2.54.6 to 2.55.10 - [Release notes](https://github.com/wevm/viem/releases) - [Commits](https://github.com/wevm/viem/compare/viem@2.54.6...viem@2.55.10) Updates `@types/node` from 26.1.0 to 26.1.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `tsx` from 4.23.0 to 4.23.5 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.0...v4.23.5) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) --- updated-dependencies: - dependency-name: "@hono/node-server" dependency-version: 2.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: viem dependency-version: 2.55.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@types/node" dependency-version: 26.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: tsx dependency-version: 4.23.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
clestons
approved these changes
Aug 6, 2026
clestons
left a comment
clestons
left a comment
Collaborator
There was a problem hiding this comment.
✅ APPROVE — [2-round]
dependabot 分组 bump，只动 packages/x402-facilitator-node 的 package.json + pnpm-lock.yaml，5 个包：
| 包 | 变化 | 类型 |
|---|---|---|
@hono/node-server |
^2.0.8 → ^2.0.12 |
patch |
viem |
^2.54.6 → ^2.55.10 |
minor |
@types/node |
^26.1.0 → ^26.1.2 |
patch (dev) |
tsx |
^4.23.0 → ^4.23.5 |
patch (dev) |
typescript |
^6.0.3 → ^7.0.2 |
major (dev) |
TypeScript 跨大版本被打包进 "all-dependencies group" 里，这条不能靠读 diff 放过——所以我在 PR head 上真跑了一遍。
机械证据（PR head 6694e47f，独立 worktree）
pnpm install --frozen-lockfile → OK（lockfile 与 package.json 一致，无需重解析）
tsc --version → Version 7.0.2 ← 装到的确实是 TS 7
pnpm run typecheck (tsc --noEmit) → rc=0
pnpm run build (tsc) → rc=0
pnpm run test (vitest 4.1.10) → Test Files 1 passed / Tests 21 passed
对照组（origin/main，TS 6.0.3）：tsc --version → 6.0.3，typecheck rc=0。两边都干净，所以 rc=0 不是「本来就不检查」的假绿。
两条说明（不阻塞）
engines不一致（旧问题，非本 PR 引入）：package.json写"node": ">=18"，而@hono/node-server@2.0.12自己声明engines: {node: '>=20'}。Dockerfile 用的是node:22-alpine，所以实际部署没事；但>=18这个声明现在是骗人的，哪天有人照它在 Node 18 上跑就会踩。建议顺手改成>=20。- 和 #359 冲突：#359 把同一个
@hono/node-server升到2.0.10，改的是同一个pnpm-lock.yaml。本 PR 的2.0.12覆盖它。建议直接合本 PR、关掉 #359（我已经 approve 了 #359，那是就其自身内容而言；两个都合没有意义，而且第二个必然要 rebase）。
2-round：R1a/R1b DeepSeek-v4-flash（R1a 提示了 TS 7 major 需验证构建，站得住；R1b 无 finding）+ 执行器裁决。无可挑战的 finding，按既定规则跳过 Codex PK；改为在 PR head 上真跑 install/typecheck/build/test 并与 main 做对照，作为机械证据。
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/packages/x402-facilitator-node/all-dependencies-6d8f193de7
branch
August 10, 2026 15:16
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the all-dependencies group with 5 updates in the /packages/x402-facilitator-node directory:
2.0.82.0.122.54.62.55.1026.1.026.1.24.23.04.23.56.0.37.0.2Updates
@hono/node-serverfrom 2.0.8 to 2.0.12Release notes
Sourced from @hono/node-server's releases.
Commits
a813b6c2.0.12caf48bafix(response): copy headers when init is a foreign Response (#382)3b1dd68test: replace supertest (#379)834e54f2.0.11ba72bcdperf(request): fast-path PATCH method (#380)962baa4perf(request): fast-path QUERY methods (#376)62284d6test: use a custom helper for path traversal tests (#377)7c1457e2.0.103a21938Merge commit from fork98420212.0.9Updates
viemfrom 2.54.6 to 2.55.10Release notes
Sourced from viem's releases.
... (truncated)
Commits
bc95f56chore: version package (#4906)109ef0ffix: Replace deprecated Polygon Amoy RPC endpoint (#4856)a20fc67fix: emit type module marker in _types package.json (#4903)e5a4ac4fix: round base fee multiplier instead of ceiling it in fee estimation (#4862)0e6c671Update EDU Chain mainnet and testnet (#4846)3b78e9bFix EIP-7702 authorization yParity of 0 serialization (#4900)ccdf9a0feat(tempo): export validator V2 address (#4873)22a68a4fix: update vulnerable transitive dependencies (#4905)31f4749fix: update 0G chain metadata (#4861)715ceadchore(deps): bump actions/setup-node from 4 to 7 (#4842)Updates
@types/nodefrom 26.1.0 to 26.1.2Commits
Updates
tsxfrom 4.23.0 to 4.23.5Release notes
Sourced from tsx's releases.
... (truncated)
Commits
c55004dtest: remove legacy PTY retrye368161chore(deps): update pty-spawn to 1.1.18d39496ci: validate GitHub Actions workflows6fe724etest: clean up timed-out PTY attemptse0a0536ci: skip unused Windows Node cache6d6dd84ci: remove broken lock automation3c1d051fix: detect the Node inspector enabled via NODE_OPTIONS40380a4ci: lock down the release toolchainf217b6bci: restrict releases to public repository2afc7bbfix(cli): allow async process.once() signal handlers to finish (#827)Updates
typescriptfrom 6.0.3 to 7.0.2Commits
Maintainer changes
This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions