Skip to content

chore(deps): replace semver with verkit - #211

Merged
fengmk2 merged 2 commits into
mainfrom
renovate/npm-packages
Nov 9, 2026
Merged

fengmk2 merged 2 commits into
mainfrom
renovate/npm-packages

Conversation

@renovate

@renovate renovate Bot commented Nov 8, 2026 •

Copy link
Copy Markdown
Contributor

Replace the direct semver dependency with verkit (^0.5.0) to use the same version library as the Vite+ CLI and tooling. Remove @types/semver because verkit includes TypeScript declarations.

Use normalize and normalizeRange to preserve the existing cache version checks and Node selector validation across GitHub Actions, GitLab, and Azure Pipelines. Update the three runtime bundles. @actions/cache still requires semver as a transitive dependency.

@renovate renovate Bot added the needs-bundle-rebuild Rebuild dist/ bundle and push to the PR (Renovate bumps to bundled deps) label Nov 8, 2026
@socket-security

socket-security Bot commented Nov 8, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedverkit@​0.5.010010010088100

View full report

@fengmk2 fengmk2 changed the title chore(deps): update dependency semver to v7.8.6 chore(deps): replace semver with verkit Nov 9, 2026
@renovate

renovate Bot commented Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@fengmk2
fengmk2 merged commit ee6805d into main Nov 9, 2026
108 checks passed
@fengmk2
fengmk2 deleted the renovate/npm-packages branch November 9, 2026 03:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-bundle-rebuild Rebuild dist/ bundle and push to the PR (Renovate bumps to bundled deps)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant