Merge pull request #57 from offendingcommit/chore/deps-consolidated

chore(deps): consolidate Dependabot PRs #34-53 + widen grouping

.github/dependabot.yml

@@ -1,5 +1,9 @@
 # Dependabot configuration
 # Docs: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+#
+# Grouping policy: collapse all minor+patch bumps into ONE PR per ecosystem so
+# the review queue stays small; majors get their own grouped PR per ecosystem so
+# breaking changes still get individual scrutiny.
 
 version: 2
 updates:
@@ -19,47 +23,17 @@ updates:
       - "dependencies"
       - "javascript"
     groups:
-      # Keep TanStack libs in lockstep — they release as a family
-      tanstack:
+      npm-minor-patch:
         patterns:
-          - "@tanstack/*"
-      # Tauri JS bindings
-      tauri:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+      npm-major:
         patterns:
-          - "@tauri-apps/*"
-      # Test stack
-      testing:
-        patterns:
-          - "vitest"
-          - "@vitest/*"
-          - "@testing-library/*"
-          - "jsdom"
-          - "@playwright/*"
-      # Build/lint tooling
-      tooling:
-        patterns:
-          - "@biomejs/*"
-          - "turbo"
-          - "vite"
-          - "@vitejs/*"
-          - "typescript"
-      # React core
-      react:
-        patterns:
-          - "react"
-          - "react-dom"
-          - "@types/react"
-          - "@types/react-dom"
-      # Semantic-release ecosystem
-      semantic-release:
-        patterns:
-          - "semantic-release"
-          - "@semantic-release/*"
-      # Commitlint + husky
-      commit-tooling:
-        patterns:
-          - "@commitlint/*"
-          - "husky"
+          - "*"
+        update-types:
+          - "major"
 
   # ─── Rust / Cargo (Tauri desktop shell) ───────────────────────────────────
   - package-ecosystem: "cargo"
@@ -77,16 +51,17 @@ updates:
       - "dependencies"
       - "rust"
     groups:
-      tauri-core:
+      cargo-minor-patch:
         patterns:
-          - "tauri"
-          - "tauri-*"
-      tokio:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+      cargo-major:
         patterns:
-          - "tokio"
-          - "tokio-*"
-          - "futures"
-          - "futures-*"
+          - "*"
+        update-types:
+          - "major"
 
   # ─── GitHub Actions workflow pins ─────────────────────────────────────────
   - package-ecosystem: "github-actions"
@@ -103,3 +78,7 @@ updates:
     labels:
       - "dependencies"
       - "github-actions"
+    groups:
+      github-actions:
+        patterns:
+          - "*"

.github/workflows/docker-publish.yml

@@ -16,8 +16,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: docker/setup-qemu-action@v3
-      - uses: docker/setup-buildx-action@v3
+      - uses: docker/setup-qemu-action@v4
+      - uses: docker/setup-buildx-action@v4
 
       - uses: docker/login-action@v3
         with:
@@ -35,7 +35,7 @@ jobs:
             type=raw,value=latest
             type=sha,format=short
 
-      - uses: docker/build-push-action@v6
+      - uses: docker/build-push-action@v7
         with:
           context: .
           platforms: linux/amd64,linux/arm64

package.json

@@ -27,17 +27,17 @@
 	},
 	"devDependencies": {
 		"@biomejs/biome": "catalog:",
-		"@commitlint/cli": "~20.5.2",
-		"@commitlint/config-conventional": "~20.5.0",
-		"@semantic-release/changelog": "^6.0.0",
-		"@semantic-release/commit-analyzer": "^13.0.0",
+		"@commitlint/cli": "~20.5.3",
+		"@commitlint/config-conventional": "~20.5.3",
+		"@semantic-release/changelog": "^6.0.3",
+		"@semantic-release/commit-analyzer": "^13.0.1",
 		"@semantic-release/exec": "^7.1.0",
-		"@semantic-release/git": "^10.0.0",
-		"@semantic-release/github": "^10.0.0",
+		"@semantic-release/git": "^10.0.1",
+		"@semantic-release/github": "^10.3.5",
 		"@semantic-release/npm": "^13.1.5",
-		"@semantic-release/release-notes-generator": "^14.0.0",
+		"@semantic-release/release-notes-generator": "^14.1.1",
 		"husky": "~9.1.7",
 		"semantic-release": "catalog:",
-		"turbo": "^2"
+		"turbo": "^2.9.16"
 	}
 }

pnpm-workspace.yaml

@@ -5,7 +5,7 @@ allowBuilds:
 
 catalog:
   # Standard tooling
-  "@biomejs/biome": "^2.4.0"
+  "@biomejs/biome": "^2.4.16"
 
   # Testing
   "@playwright/test": "^1.59.1"
@@ -15,16 +15,16 @@ catalog:
   "@types/react": "^19.2.14"
   "@types/react-dom": "^19.2.3"
   "@vitejs/plugin-react": "^6.0.1"
-  "@vitest/coverage-v8": "^4.0.0"
-  jsdom: "^26.1.0"
+  "@vitest/coverage-v8": "^4.1.8"
+  jsdom: "^29.1.1"
 
   # React
   react: "^19.2.5"
   react-dom: "^19.2.5"
-  semantic-release: "^25.0.0"
+  semantic-release: "^25.0.3"
   typescript: "~6.0.2"
 
   # Vite
   vite: "^8.0.10"
-  vitest: "^4.0.0"
+  vitest: "^4.1.8"
   zod: "^4.0.0"