Merged
Conversation
Collaborator
Author
|
kindling — task complete Phases (5/5)
Completion reportCompletion reportStatus: Dormant What happenedThe session handled two tasks. First, a dependency maintenance cycle updated the SDK monorepo: four transitive security advisories were resolved via package manager overrides, and four development dependency ranges were bumped. Second, a CI regression in the deploy test was traced to a newer wrangler release that broke how static assets are served during deployment -- the fix reverted that single dependency to the last working version. Decisions made
Worth noting
Last updated: Tue, 31 Mar 2026 13:48:25 GMT |
…sories - Bump knip ~5.86.0 → ~6.1.1, pnpm ^10.31.0 → ^10.33.0, wrangler ^4.77.0 → ^4.78.0, @types/node ~24.12.0 → ~25.5.0 - TypeScript left at ^5.9.3; v6 requires @typescript-eslint v9 which is outside scope of this greenkeeping pass - Override serialize-javascript@6.0.2 → 7.0.5 (was 7.0.4) - Add serialize-javascript@7.0.3 → 7.0.5 (transitive via content-collections) - Add path-to-regexp@8.3.0 → 8.4.0 (transitive via fumadocs-core, resolves CVE-2026-4926 and CVE-2026-4923) - Override brace-expansion → 5.0.5 (was ineffective via @isaacs/ scoped key) [skip ci]
Deploying redwood-sdk-docs with
|
| Latest commit: |
3a7f164
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://a7616f80.redwood-sdk-docs.pages.dev |
| Branch Preview URL: | https://kindling-2026-03-31-1056-gre.redwood-sdk-docs.pages.dev |
The wrangler ^4.78.0 bump introduced a 404 regression in the CSS playground E2E deploy test. The test 'production HTML includes stylesheet link to prevent FOUC' fails because the deployed worker returns a Cloudflare 404 instead of app content. The wrangler 4.78.0 "Dry-Run Asset Validation" change altered the asset handling pipeline, affecting workers that use the assets binding in wrangler.jsonc. Pinning the root devDependency back to ^4.77.0 restores the known working behaviour. The CSS playground already has wrangler 4.77.0 pinned, and the SDK test harness also uses ^4.77.0, so this change brings the root devDependency into alignment. [skip ci]
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Context
Routine dependency update for the Redwood SDK monorepo, covering Tier 1 critical packages and root-level infrastructure (Tier 3).
Details
Updates applied
The
packageManagerfield was synced topnpm@10.33.0to match.Overrides applied
Deferred