From e3a6964a5cf752f353609fc810c0cd520f8b96d9 Mon Sep 17 00:00:00 2001 From: vvillait88 Date: Sun, 2 Aug 2026 17:48:04 -0700 Subject: [PATCH] Sweep deps, take ioredis 6, stop the lint hook running bunx, cut 2.7.10 Dependency bumps: hono 4.12.31 to 4.12.33, jose 6.2.5 to 6.2.7, fastify 5.10.0 to 5.11.0, knip 6.29.0 to 6.31.0, @agent-score/sdk to 2.7.2. eslint 10 and TypeScript 7 stay held org-wide. ioredis moves to 6 as the DEV dependency, and the reasoning is the point. It is an optional PEER here, declared `>=5.0.0`, so a merchant could already bring ioredis 6 and run this code under RESP3 today while CI only ever exercised 5. Testing against the version consumers may actually supply is worth more than staying on the older one. ioredis 6 defaults to RESP3, which changes reply SHAPES, so the usage was checked rather than assumed: `_redis.ts` constructs the client, `quote_cache` reads GET (string or nil in both protocols) and ignores SET's reply, and the rate-limit core branches on INCR, an integer in both. There is no SET NX predicate and no map-typed reply anywhere, so nothing here depends on the protocol version. The 1804-test suite now runs against ioredis 6, which turns that reading into a tested fact. Deliberately NO `protocol: 2` pin, unlike core/api. Pinning the wire protocol inside a library would override a choice that belongs to the merchant who supplies the peer, and this code does not need it. The lint hook called `bunx eslint`, which resolves outside the project and would fetch eslint 10, the major this repo pins away from. It now runs the local binary, with a guard test asserting no hook uses bunx and that every `bun run