Skip to content
This repository was archived by the owner on Aug 14, 2026. It is now read-only.

chore(deps-dev): bump lint-staged from 15.5.2 to 17.0.5 - #156

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/lint-staged-17.0.5
Open

chore(deps-dev): bump lint-staged from 15.5.2 to 17.0.5#156
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/lint-staged-17.0.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 22, 2026

Copy link
Copy Markdown
Contributor

Bumps lint-staged from 15.5.2 to 17.0.5.

Release notes

Sourced from lint-staged's releases.

v17.0.5

Patch Changes

  • #1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.

v17.0.4

Patch Changes

  • #1788 f95c1f8 - Another fix for making sure lint-staged adds task modifications correctly to the commit in the following cases:

    • after editing <file> it is staged with git add <file>, and then committed with git commit
    • after editing <file> it is committed with git commit --all without explicit git add
    • after editing <file> it is committed with git commit <pathspec> without explicit git add

    There's new test cases which actually setup the Git pre_commit hook to run lint-staged and verify them. These issues started in v17.0.0 when trying to improve support for committig without having explicitly staged files.

v17.0.3

Patch Changes

  • #1782 06813f9 Thanks @​iiroj! - Fix lint-staged behavior when implicitly committing files without using git add by either:
    • git commit -am "my commit message" where -a (--all) means to automatically stage all tracked modified and deleted files
    • git commit -m "my commit message" . where . is an example of a pathspec where matching files will be staged

v17.0.2

Patch Changes

v17.0.1

Patch Changes

  • #1776 4a5664b Thanks @​iiroj! - Adjust GitHub Actions workflow so that automatic publishing works with signed commits.

v17.0.0

Major Changes

  • #1745 e244adf Thanks @​iiroj! - Node.js v20 is no longer supported, and the oldest supported version is now 22.22.1, which is an active LTS version at the time of this release. Node.js 20 will be EOL after April 2026. Please upgrade your Node.js version!

  • #1676 0584e0b Thanks @​outslept! - Lint-staged now tries to verify the installed Git version is at least 2.32.0, released in 2021. If you're using an even older Git version, you need to upgrade it before running lint-staged!

  • #1745 2dcc40a Thanks @​iiroj! - The dependency yaml is now marked as optional and probably won't be installed by default. If you're using a YAML configuration file you should install the package separately:

    npm install --development yaml

    If you're using .lintstagedrc as the config file name (without a file extension), it will be treated as a YAML file. If the content is JSON, consider renaming it to .lintstagedrc.json to avoid needing to install yaml.

Minor Changes

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.0.5

Patch Changes

  • #1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.

17.0.4

Patch Changes

  • #1788 f95c1f8 - Another fix for making sure lint-staged adds task modifications correctly to the commit in the following cases:

    • after editing <file> it is staged with git add <file>, and then committed with git commit
    • after editing <file> it is committed with git commit --all without explicit git add
    • after editing <file> it is committed with git commit <pathspec> without explicit git add

    There's new test cases which actually setup the Git pre_commit hook to run lint-staged and verify them. These issues started in v17.0.0 when trying to improve support for committig without having explicitly staged files.

17.0.3

Patch Changes

  • #1782 06813f9 Thanks @​iiroj! - Fix lint-staged behavior when implicitly committing files without using git add by either:
    • git commit -am "my commit message" where -a (--all) means to automatically stage all tracked modified and deleted files
    • git commit -m "my commit message" . where . is an example of a pathspec where matching files will be staged

17.0.2

Patch Changes

17.0.1

Patch Changes

  • #1776 4a5664b Thanks @​iiroj! - Adjust GitHub Actions workflow so that automatic publishing works with signed commits.

17.0.0

Major Changes

  • #1745 e244adf Thanks @​iiroj! - Node.js v20 is no longer supported, and the oldest supported version is now 22.22.1, which is an active LTS version at the time of this release. Node.js 20 will be EOL after April 2026. Please upgrade your Node.js version!

  • #1676 0584e0b Thanks @​outslept! - Lint-staged now tries to verify the installed Git version is at least 2.32.0, released in 2021. If you're using an even older Git version, you need to upgrade it before running lint-staged!

  • #1745 2dcc40a Thanks @​iiroj! - The dependency yaml is now marked as optional and probably won't be installed by default. If you're using a YAML configuration file you should install the package separately:

    npm install --development yaml

... (truncated)

Commits
  • cbd822e Merge pull request #1793 from lint-staged/changeset-release/main
  • 1911244 chore(changeset): release
  • 7339d7d Merge pull request #1792 from lint-staged/fix-max-arg-length-default
  • 1f67271 fix: default maxArgLength to undefined instead of NaN when parsing cli ...
  • 2862964 Merge pull request #1789 from lint-staged/changeset-release/main
  • c9ecd54 chore(changeset): release
  • cc6b51a Merge pull request #1788 from lint-staged/fix-update-index-again
  • f95c1f8 fix: update both default index.lock and non-standard lock when latter exists
  • f44ee68 Merge pull request #1786 from lint-staged/update-repo-url
  • a61cf18 build(deps): update dependencies
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lint-staged since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Upgrade lint-staged from 15.5.2 to 17.0.5 to improve commit handling and fix platform-specific argument chunking.

  • Migration
    • Requires Node.js >= 22.22.1. Update local and CI Node versions.
    • Requires Git >= 2.32.0 on environments running hooks/CI.
    • If using YAML config for lint-staged, install yaml (e.g., npm i -D yaml) or rename config to .lintstagedrc.json.

Written for commit aad7920. Summary will update on new commits. Review in cubic

Summary by CodeRabbit

Notas de Lançamento

  • Chores
    • Atualizada a versão de uma ferramenta de desenvolvimento para melhorar o pipeline de lint.

Review Change Stack

Bumps [lint-staged](https://github.com/lint-staged/lint-staged) from 15.5.2 to 17.0.5.
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v15.5.2...v17.0.5)

---
updated-dependencies:
- dependency-name: lint-staged
  dependency-version: 17.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 22, 2026
@dependabot
dependabot Bot requested a review from adm01-debug as a code owner May 22, 2026 10:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 22, 2026
@vercel

vercel Bot commented May 22, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
zapp-web Ready Ready Preview, Comment May 22, 2026 10:54am

@coderabbitai

coderabbitai Bot commented May 22, 2026

Copy link
Copy Markdown

Walkthrough

Atualização de patch para lint-staged em devDependencies, passando de ^15.5.2 para ^17.0.5. Ferramenta de linting roda pre-commit, sem impacto direto em runtime ou produção.

Changes

Atualização de dependência de linting

Layer / File(s) Summary
Atualização lint-staged
package.json
devDependencies.lint-staged atualizado de ^15.5.2 para ^17.0.5, mudança de versão menor em ferramenta de desenvolvimento.

Esforço estimado de revisão

🎯 1 (Trivial) | ⏱️ ~2 minutos

Reviewers sugeridos

  • adm01-debug
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed O título segue o padrão convencional de commits (chore com escopo deps-dev), é conciso e descreve com precisão a mudança principal: atualização da dependência lint-staged de 15.5.2 para 17.0.5.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/npm_and_yarn/lint-staged-17.0.5

Comment @coderabbitai help to get the list of available commands and usage tips.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@package.json`:
- Line 135: The repo is pinned to Node 20 while package.json declares
"lint-staged": "^17.0.5" which requires Node >=22.22.1; add an engines field in
package.json (e.g., node >=22.22.1 and git >=2.32.0) to prevent installing
incompatible versions, and either update .nvmrc and CI to use Node >=22.22.1 and
regenerate bun.lock (if you intend to move to lint-staged v17) or downgrade/lock
lint-staged to the v15 range in package.json to remain on Node 20; also ensure
.husky/pre-commit (runs `bun run lint-staged`) and bun.lock are consistent with
the chosen option.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: bac9cacc-3450-48f1-9fd4-81ff68d7b74a

📥 Commits

Reviewing files that changed from the base of the PR and between 8654abd and aad7920.

📒 Files selected for processing (1)
  • package.json

Comment thread package.json
"happy-dom": "^20.9.0",
"husky": "^9.1.7",
"lint-staged": "^15.5.2",
"lint-staged": "^17.0.5",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Verificar especificações de versão do Node.js no repositório

echo "=== Verificando especificações de versão do Node.js ==="
echo ""

# Procurar por .nvmrc
if [ -f ".nvmrc" ]; then
  echo "📄 .nvmrc encontrado:"
  cat .nvmrc
  echo ""
fi

# Procurar por .node-version
if [ -f ".node-version" ]; then
  echo "📄 .node-version encontrado:"
  cat .node-version
  echo ""
fi

# Verificar configurações de CI
echo "=== Configurações de CI/CD ==="
fd -e yml -e yaml . .github/workflows --exec echo "📄 {}" \; --exec grep -H "node-version\|NODE_VERSION" {} \; 2>/dev/null || echo "Nenhum workflow do GitHub Actions encontrado com especificação de versão do Node.js"
echo ""

# Verificar Dockerfile
if [ -f "Dockerfile" ]; then
  echo "📄 Dockerfile encontrado, verificando imagem base do Node.js:"
  grep -n "FROM.*node" Dockerfile || echo "Nenhuma imagem Node.js encontrada"
  echo ""
fi

# Verificar outras configurações
fd -e json -e toml -e ini . -d 1 --exec grep -l "node.*version\|engine" {} \; 2>/dev/null | while read file; do
  echo "📄 $file pode conter especificação de versão"
done

echo ""
echo "⚠️  ATENÇÃO: lint-staged v17+ requer Node.js >= 22.22.1"

Repository: adm01-debug/zapp-web

Length of output: 654


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "=== package.json (engines + lint-staged + husky) ==="
if [ -f "package.json" ]; then
  rg -n '"engines"\s*:' package.json || true
  rg -n '"lint-staged"\s*:' package.json || true
  rg -n '"husky"' package.json || true
  rg -n 'lint-staged|husky' package.json || true

  echo "--- Contexto em torno do lint-staged ---"
  node -e 'const fs=require("fs");const s=fs.readFileSync("package.json","utf8").split("\n");let i=0;for(const [idx,line] of s.entries()){if(line.includes('"'"'"lint-staged"'"')){i=idx;break}}; console.log(s.slice(Math.max(0,i-10), i+20).map((l,ix)=>String(ix+Math.max(0,i-10)+1).padStart(4," ")+": "+l).join("\n"));'
else
  echo "package.json não encontrado"
fi

echo
echo "=== Workflows: setup-node e especificação de versão ==="
if [ -d ".github/workflows" ]; then
  fd -e yml -e yaml .github/workflows --exec echo "---- {} ----" \; --exec cat {} \; | rg -n "setup-node|node-version|node-version-file|NODE_VERSION" || true
else
  echo ".github/workflows não encontrado"
fi

echo
echo "=== Busca por Dockerfile(s) e imagens Node ==="
fd -e Dockerfile --type f . --exec sh -c 'echo "---- {} ----"; cat "{}" | rg -n "^FROM.*node" || true' \;
fd -e dockerfile --type f . --exec sh -c 'echo "---- {} ----"; cat "{}" | rg -n "^FROM.*node" || true' \; || true

Repository: adm01-debug/zapp-web

Length of output: 198


🌐 Web query:

lint-staged v17 minimum Node version 22.22.1 git >=2.32.0 requirement

💡 Result:

As of May 2026, lint-staged version 17 has the following minimum system requirements: Node.js: The minimum supported version is 22.22.1 [1][2]. Version 17 dropped support for Node.js v20 [1][3]. Git: The minimum supported version is 2.32.0 [4]. lint-staged now explicitly verifies this version and requires an upgrade if an older version is detected [4].

Citations:


🏁 Script executed:

#!/bin/bash
set -euo pipefail
echo "=== Checar se há .nvmrc / node-version-file no repositório ==="
ls -la .nvmrc .node-version 2>/dev/null || true
fd -t f -e yml -e yaml .github/workflows --exec rg -n "node-version-file|\\.nvmrc" {} \; || true

Repository: adm01-debug/zapp-web

Length of output: 572


🏁 Script executed:

#!/bin/bash
set -euo pipefail
echo "=== Husky/lint-staged executando no repo ==="
rg -n "pre-commit|lint-staged" -S .husky . 2>/dev/null || true
fd -t f . -g "*.husky*" -g ".husky/*" 2>/dev/null || true
ls -la .husky 2>/dev/null || true

Repository: adm01-debug/zapp-web

Length of output: 1705


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "=== package.json: engines + lint-staged (v17 bump) ==="
if [ -f "package.json" ]; then
  nl -ba package.json | sed -n '90,160p'
  echo
  echo "engines field present?"
  rg -n '"engines"\s*:' package.json || echo "NÃO"
else
  echo "package.json não encontrado"
fi

echo
echo "=== .husky/pre-commit ==="
if [ -f ".husky/pre-commit" ]; then
  nl -ba .husky/pre-commit
else
  echo ".husky/pre-commit não encontrado"
fi

echo
echo "=== Workflows: setup-node/node-version/node-version-file + bun install flags ==="
if [ -d ".github/workflows" ]; then
  fd -e yml -e yaml .github/workflows --exec sh -c 'echo "---- {} ----"; rg -n "setup-node|node-version|node-version-file|NODE_VERSION|actions/setup-node" "{}" || true' \; | sed -n '1,200p'
  fd -e yml -e yaml .github/workflows --exec sh -c 'echo "---- {} ----"; rg -n "bun install|--frozen-lockfile|--frozen|--lockfile-only|npm ci|yarn --frozen-lockfile" "{}" || true' \; | sed -n '1,200p'
else
  echo ".github/workflows não encontrado"
fi

echo
echo "=== Confere lockfile: bun.lock lint-staged ==="
if [ -f "bun.lockb" ]; then
  echo "bun.lockb existe (binário) — ignorado"
elif [ -f "bun.lock" ]; then
  rg -n '"lint-staged":\s*"\^\d' bun.lock || true
  rg -n 'lint-staged@' bun.lock | head -n 20 || true
else
  echo "bun.lock/bun.lockb não encontrado"
fi

echo
echo "=== .nvmrc ==="
cat .nvmrc 2>/dev/null || true

Repository: adm01-debug/zapp-web

Length of output: 180


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "=== package.json: engines + lint-staged ==="
rg -n '"engines"\s*:' package.json || true
rg -n '"lint-staged"\s*:' package.json || true
echo "--- engines section (if any) ---"
rg -n '"engines"\s*:' package.json -n -C 3 || true
echo "--- lint-staged around line ~111-135 ---"
sed -n '95,150p' package.json

echo
echo "=== .husky/pre-commit ==="
cat .husky/pre-commit

echo
echo "=== Workflows: setup-node / node-version ==="
ls -ლა .github/workflows 2>/dev/null || true
rg -n --glob '.github/workflows/*.yml' --glob '.github/workflows/*.yaml' \
  'actions/setup-node|node-version-file|node-version|NODE_VERSION' \
  .github/workflows || true

echo
echo "=== bun.lock* vs lint-staged v17 (instalado de fato) ==="
ls -la bun.lock* 2>/dev/null || true
if [ -f bun.lockb ]; then
  echo "bun.lockb existe (binário) — procurando no bun.lock (texto) só se houver."
fi
if [ -f bun.lock ]; then
  rg -n 'lint-staged@' bun.lock | head -n 50 || true
  rg -n '"lint-staged": "\^(15|16|17)\.' bun.lock || true
  rg -n 'lint-staged@17\.' bun.lock || true
fi

echo
echo "=== .nvmrc ==="
cat .nvmrc

Repository: adm01-debug/zapp-web

Length of output: 2607


Quebra operacional: lint-staged v17 exige Node.js >= 22.22.1 (repo está preso em Node 20)

  • package.json já está com lint-staged ^17.0.5, mas o repo usa .nvmrc = 20 → ao resolver/instalar o v17, o pre-commit deve falhar e bloquear commits.
  • O pre-commit roda .husky/pre-commit: bun run lint-staged; e hoje o bun.lock ainda lista lint-staged@15.5.2, então o break pode aparecer quando o lock for atualizado (ou se CI não estiver usando lock congelado).
  • Falta campo engines para impedir instalações incompatíveis; adicionar pelo menos node >= 22.22.1 (e git >= 2.32.0) é necessário.
🔧 Sugestão de constraint via `engines`
   "resolutions": {
     "csstype": "3.1.3"
-  }
+  },
+  "engines": {
+    "node": ">=22.22.1",
+    "git": ">=2.32.0"
+  }
 }
  • Ajustar também .nvmrc e/ou o Node do CI para >= 22.22.1, e atualizar o lockfile se a intenção é realmente subir para lint-staged v17.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@package.json` at line 135, The repo is pinned to Node 20 while package.json
declares "lint-staged": "^17.0.5" which requires Node >=22.22.1; add an engines
field in package.json (e.g., node >=22.22.1 and git >=2.32.0) to prevent
installing incompatible versions, and either update .nvmrc and CI to use Node
>=22.22.1 and regenerate bun.lock (if you intend to move to lint-staged v17) or
downgrade/lock lint-staged to the v15 range in package.json to remain on Node
20; also ensure .husky/pre-commit (runs `bun run lint-staged`) and bun.lock are
consistent with the chosen option.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 1 file

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="package.json">

<violation number="1" location="package.json:135">
P1: The .nvmrc specifies Node 20, but lint-staged 17.x requires Node >= 22.22.1, causing a runtime incompatibility in dev environments and CI that use nvm.</violation>
</file>

Reply with feedback, questions, or to request a fix.

Re-trigger cubic

Comment thread package.json
"happy-dom": "^20.9.0",
"husky": "^9.1.7",
"lint-staged": "^15.5.2",
"lint-staged": "^17.0.5",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1: The .nvmrc specifies Node 20, but lint-staged 17.x requires Node >= 22.22.1, causing a runtime incompatibility in dev environments and CI that use nvm.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At package.json, line 135:

<comment>The .nvmrc specifies Node 20, but lint-staged 17.x requires Node >= 22.22.1, causing a runtime incompatibility in dev environments and CI that use nvm.</comment>

<file context>
@@ -132,7 +132,7 @@
     "happy-dom": "^20.9.0",
     "husky": "^9.1.7",
-    "lint-staged": "^15.5.2",
+    "lint-staged": "^17.0.5",
     "playwright": "^1.59.1",
     "postcss": "^8.5.6",
</file context>

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants