Skip to content

chore(deps): bump @types/bun, oxlint, oxfmt; float hono + drizzle - #1421

Merged
TheGreatAxios merged 3 commits into
mainfrom
cl-10658-pin-bump-bundle-types-bun-oxlintoxfmt-hono-drizzle-safe
Oct 15, 2026
Merged

TheGreatAxios merged 3 commits into
mainfrom
cl-10658-pin-bump-bundle-types-bun-oxlintoxfmt-hono-drizzle-safe

Conversation

@TheGreatAxios

Copy link
Copy Markdown
Collaborator

Summary

  • Bumps the safe pin bundle: @types/bun 1.3.9 → 1.4.3 (exact), oxlint ^1.82.0 → ^1.88.0, oxfmt ^0.67.0 → ^0.73.0; hono (4.13.7 → 4.13.13) and drizzle-orm (0.45.2 → 0.45.4) float transitively — zero first-party imports of either, verified across src and all workspaces; better-auth/tar/semver confirmed current (better-auth 1.7.7 postdates the ticket, noted).
  • @types/bun 1.4.3 widens Subprocess.signalCode to Signals | number | null; HookExitStatus.signal widens to match and the display layer normalizes with a numeric-signal regression test. Renderer rule-set unchanged (97 rules on both 1.82.0 and 1.88.0, zero new findings).
  • Deliberately out of scope: @corbits/* provider/auth pins (CL-10659), TS + typescript-language-server, the ssri catalog decision (CL-10657).

Verification

  • bun run check exit 0: oxfmt clean on 1363 files, oxlint 0 warnings/0 errors, tsc --noEmit clean, dead-exports, build, projects-dir guard, full one-process suite 8939 pass / 0 fail (581 files).
  • Formatter output churn is exactly the 0.73.0 version delta (3 docs files, code-fence continuation indent); no unrelated reformatting; .oxlintrc.json untouched.
  • Lock accounting: intended deltas (oxlint + 19 bindings, oxfmt + 19 bindings + tinypool, bun-types + undici-types entry, hono, drizzle) plus the deterministic @intx/* re-dedupe re-keying on any pin change (hoisted root @intx/workflow-deploy floats 0.3.0 → 0.4.0; every consumer still resolves its pinned version; zero first-party imports).

Fixes CL-10658

@types/bun 1.4.3 widens Subprocess.signalCode to Signals|number|null;
HookExitStatus.signal widens to match, normalized at the display layer
with a regression test for numeric signal rendering. hono and
drizzle-orm are transitive-only here and float via bun update.

The @intx/* workspace lock entries re-dedupe on any pin change (known
bun behavior): the nested @intx/hub-api/@intx/workflow-deploy slots
re-key, and the hoisted root @intx/workflow-deploy slot floats
0.3.0 -> 0.4.0. Every consumer still resolves its pinned version and
nothing first-party imports it. The three docs files flagged by the
oxfmt version delta pick up its new code-fence continuation indent.
@linear-code

linear-code Bot commented Oct 14, 2026

Copy link
Copy Markdown

CL-10658

@corbits-triage

corbits-triage Bot commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Superseded by the comment below.

@corbits-triage

corbits-triage Bot commented Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

Superseded by the comment below.

@corbits-triage

corbits-triage Bot commented Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

Triage: Pass

No changes needed from you. A maintainer will review this pull request.

…dle-types-bun-oxlintoxfmt-hono-drizzle-safe

# Conflicts:
#	bun.lock
@TheGreatAxios
TheGreatAxios merged commit 8c3908a into main Oct 15, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant