Skip to content

chore(deps): bump the monorepo-infra group with 4 updates - #641

Merged
squareone-ci[bot] merged 3 commits into
mainfrom
dependabot/npm_and_yarn/monorepo-infra-bf82cba01d
Aug 1, 2026
Merged

chore(deps): bump the monorepo-infra group with 4 updates#641
squareone-ci[bot] merged 3 commits into
mainfrom
dependabot/npm_and_yarn/monorepo-infra-bf82cba01d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the monorepo-infra group with 4 updates: @changesets/cli, @turbo/gen, turbo and eslint-config-turbo.

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.1

Patch Changes

  • #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.
Commits
  • a897bb8 Use a different publish tag for maintenance/v2 branch (#2162)
  • e8650b9 Version Packages (#2161)
  • 15cf592 Fixed handling of the npm 12 info output (#2159)
  • 9f2cb2a Configure Changesets for maintenance/v2 line (#2076)
  • 97247cb Change allowed publish pattern to maintenance/v* given rulesets behavior (#...
  • 13286a8 Build(deps): Bump the github-actions group across 1 directory with 3 updates ...
  • 8f6acd6 Update dependabot group to exclude major (#2067)
  • c70c675 Setup backport workflow and sync next setup (#2057)
  • 9672019 Remove SECURITY.md to defer to .github (#2055)
  • 18e1661 Use internal bot for versioning (#2039)
  • Additional commits viewable in compare view

Updates @turbo/gen from 2.10.0 to 2.10.7

Release notes

Sourced from @​turbo/gen's releases.

Turborepo v2.10.7

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.10.6...v2.10.7

Turborepo v2.10.7-canary.1

What's Changed

Changelog

... (truncated)

Commits

Updates turbo from 2.10.0 to 2.10.7

Release notes

Sourced from turbo's releases.

Turborepo v2.10.7

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.10.6...v2.10.7

Turborepo v2.10.7-canary.1

What's Changed

Changelog

... (truncated)

Commits

Updates eslint-config-turbo from 2.10.0 to 2.10.7

Release notes

Sourced from eslint-config-turbo's releases.

Turborepo v2.10.7

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.10.6...v2.10.7

Turborepo v2.10.7-canary.1

What's Changed

Changelog

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 1, 2026
@changeset-bot

changeset-bot Bot commented Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 1184d87

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
squareone Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@jonathansick
jonathansick force-pushed the dependabot/npm_and_yarn/monorepo-infra-bf82cba01d branch from f6df835 to e5abc6f Compare August 1, 2026 16:54
@github-actions github-actions Bot added the dependencies-patch Dependabot semver update type label Aug 1, 2026
@squareone-ci
squareone-ci Bot enabled auto-merge (squash) August 1, 2026 17:03
@squareone-ci

squareone-ci Bot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

🤖 Auto-merge enabled

This Dependabot PR has been configured for auto-merge with squash strategy:

  • ✅ CI passed
  • ✅ Changeset detected
  • ✅ Update type: dependencies-patch

The PR will automatically merge once all branch protection requirements are satisfied.

1 similar comment
@squareone-ci

squareone-ci Bot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

🤖 Auto-merge enabled

This Dependabot PR has been configured for auto-merge with squash strategy:

  • ✅ CI passed
  • ✅ Changeset detected
  • ✅ Update type: dependencies-patch

The PR will automatically merge once all branch protection requirements are satisfied.

dependabot Bot and others added 2 commits August 1, 2026 13:15
@dependabot @jonathansick
chore(deps): bump the monorepo-infra group with 4 updates
347bba0 
Bumps the monorepo-infra group with 4 updates: [@changesets/cli](https://github.com/changesets/changesets), [@turbo/gen](https://github.com/vercel/turborepo/tree/HEAD/packages/turbo-gen), [turbo](https://github.com/vercel/turborepo) and [eslint-config-turbo](https://github.com/vercel/turborepo/tree/HEAD/packages/eslint-config-turbo).

Updates `@changesets/cli` from 2.31.0 to 2.31.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/compare/@changesets/cli@2.31.0...@changesets/cli@2.31.1)

Updates `@turbo/gen` from 2.10.0 to 2.10.7
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](https://github.com/vercel/turborepo/commits/v2.10.7/packages/turbo-gen)

Updates `turbo` from 2.10.0 to 2.10.7
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.0...v2.10.7)

Updates `eslint-config-turbo` from 2.10.0 to 2.10.7
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](https://github.com/vercel/turborepo/commits/v2.10.7/packages/eslint-config-turbo)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 2.31.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: monorepo-infra
- dependency-name: "@turbo/gen"
  dependency-version: 2.10.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: monorepo-infra
- dependency-name: turbo
  dependency-version: 2.10.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: monorepo-infra
- dependency-name: eslint-config-turbo
  dependency-version: 2.10.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: monorepo-infra
...

Signed-off-by: dependabot[bot] <support@github.com>
@jonathansick
Sync Dockerfile turbo version with monorepo-infra bump
ff13960 
Dependabot bumps only package.json/lockfile; apps/squareone/Dockerfile
pins turbo separately for the prune stage, and validate-docker requires
an exact match.
@jonathansick
jonathansick force-pushed the dependabot/npm_and_yarn/monorepo-infra-bf82cba01d branch from 8e399b2 to ff13960 Compare August 1, 2026 17:16
@squareone-ci

squareone-ci Bot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

🤖 Auto-merge enabled

This Dependabot PR has been configured for auto-merge with squash strategy:

  • ✅ CI passed
  • ✅ Changeset detected
  • ✅ Update type: dependencies-patch

The PR will automatically merge once all branch protection requirements are satisfied.

@squareone-ci
squareone-ci Bot merged commit 2aa972f into main Aug 1, 2026
16 checks passed
@squareone-ci
squareone-ci Bot deleted the dependabot/npm_and_yarn/monorepo-infra-bf82cba01d branch August 1, 2026 17:24
@squareone-ci

squareone-ci Bot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

🤖 Auto-merge enabled

This Dependabot PR has been configured for auto-merge with squash strategy:

  • ✅ CI passed
  • ✅ Changeset detected
  • ✅ Update type: dependencies-patch

The PR will automatically merge once all branch protection requirements are satisfied.

@squareone-ci squareone-ci Bot mentioned this pull request Aug 1, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file dependencies-patch Dependabot semver update type javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jonathansick