Skip to content

(#495)(#519)(#521)(#524) Bump to version 2.6.0#523

Merged
alexaveldanez merged 5 commits intomainfrom
choco-theme/astro
Mar 16, 2026
Merged

(#495)(#519)(#521)(#524) Bump to version 2.6.0#523
alexaveldanez merged 5 commits intomainfrom
choco-theme/astro

Conversation

@st3phhays
Copy link
Copy Markdown
Member

@st3phhays st3phhays commented Mar 5, 2026

Description Of Changes

  • Adds the --no-depreciation flag on yarn audit to ignore packages that are merely depreciated with no other issues.
  • Updates dependencies to their latest versions.
  • Updates Astro and it's components to their latest versions.

Motivation and Context

These dependencies needed updated to their latest versions, so our websites could be up to date.

Testing

Follow instructions on each individual PR.

Operating Systems Testing

Dev VM 4.

Change Types Made

  • Bug fix (non-breaking change).
  • Feature / Enhancement (non-breaking change).
  • Breaking change (fix or feature that could cause existing functionality to change).
  • Documentation changes.
  • PowerShell code changes.

Change Checklist

  • Requires a change to the documentation.
  • Documentation has been updated.
  • Tests to cover my changes, have been added.
  • All new and existing tests passed?
  • PowerShell code changes: PowerShell v3 compatibility checked?
  • All items are complete on the Definition of Done.

Related Issue

This sets a flag to ignore audit suggestions that are only related
to a depreciated package. This flag will still allow the vulnerability
to come up if the package contains other vulnerabilities other than
it being depreciated, which is wanted. Unfortunately some libraries
depend on package that are depreciated, but otherwise safe, with no
other version to upgrade to.
This continues some work that was previously done in choco-theme
2.5.2. This upgrades a few dependencies to their latest versions to
bring in new fixes and features.
This upgrades Astro and it's components to their latest versions. No
functionality changes will be apparent in Chocolatey websites that
run Astro.
@st3phhays st3phhays self-assigned this Mar 5, 2026
@st3phhays st3phhays requested a review from Copilot March 5, 2026 17:44
@st3phhays st3phhays force-pushed the choco-theme/astro branch from 717ac3b to a5af162 Compare March 5, 2026 17:48
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Bumps the monorepo and several packages to version 2.6.0 while updating key dependencies and adjusting the audit script behavior.

Changes:

  • Bump package versions to 2.6.0 across multiple workspaces.
  • Update dependencies (e.g., pdfmake, purgecss, astro/@astrojs/node, msnodesqlv8) to newer versions.
  • Update the root audit script to include a “no deprecations” option and remove a previous exclusion.

Reviewed changes

Copilot reviewed 6 out of 7 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
packages/test-tools/package.json Bumps package version and updates msnodesqlv8.
packages/credits/package.json Bumps package version and updates pdfmake.
packages/core/package.json Updates pdfmake version to match other workspaces.
packages/build-tools/package.json Bumps package version and upgrades purgecss.
packages/astro/package.json Bumps package version and updates Astro dependencies.
package.json Bumps root version and modifies the audit script flags/behavior.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

alexaveldanez
alexaveldanez previously approved these changes Mar 5, 2026
Copy link
Copy Markdown
Contributor

@alexaveldanez alexaveldanez left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@st3phhays st3phhays marked this pull request as draft March 12, 2026 15:34
@st3phhays st3phhays force-pushed the choco-theme/astro branch 2 times, most recently from a5144a6 to 1bbea1a Compare March 12, 2026 16:20
@st3phhays
Copy link
Copy Markdown
Member Author

@gep13 This requires a code owner review for the minor bump to the sweetalert2 package.

This PR has been looked at by @alexaveldanez but my force push overrode that review. This should be good for a merge after the Code Owner review.

@st3phhays st3phhays changed the title (#495)(#519)(#521) Bump to version 2.6.0 (#495)(#519)(#521)(#524) Bump to version 2.6.0 Mar 12, 2026
@st3phhays st3phhays marked this pull request as ready for review March 12, 2026 16:38
@st3phhays st3phhays requested a review from a team as a code owner March 12, 2026 16:38
@st3phhays st3phhays marked this pull request as draft March 13, 2026 12:52
@st3phhays
Copy link
Copy Markdown
Member Author

I put this back to draft because of failures in associated sites.

The ESLint config has been updated to correctly scan Playwright files
for errors and warnings. As part of this, errors and warnings that
showed up in the new scan have been fixed.
This upgrades the packages needed to the next minor version of
2.6.0 so that they can be utilized on Chocolatey websites.
@st3phhays st3phhays marked this pull request as ready for review March 13, 2026 14:52
Copy link
Copy Markdown
Member

@gep13 gep13 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just one quick question here, otherwise, this looks good to me, so I will approve it as is, and we can discuss further depending on the answer.

@alexaveldanez alexaveldanez merged commit 01037d0 into main Mar 16, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants