Skip to content

chore(deps): bump Biome to 2.6.4, supabase CLI to 2.122.0, react-data-grid to beta.63 - #64

Open
hamchowderr wants to merge 12 commits into
mainfrom
claude/deps-exact-pins
Open

hamchowderr wants to merge 12 commits into
mainfrom
claude/deps-exact-pins

Conversation

@hamchowderr

@hamchowderr hamchowderr commented Oct 30, 2026 •

Copy link
Copy Markdown
Owner

This PR is stacked on #62 and #63. Its base is main so CI runs, which means the diff shows their commits until they merge. This PR's own commits are the Biome/CLI bump and the regenerated database types.

Before: Biome, the supabase CLI and react-data-grid were held at exact older pins.

After: all three are on their latest releases. Lint passes under Biome 2.6, which includes its new noComponentHookFactories rule.

What changed in code

  • Calendar (components/ui/calendar.tsx, both the web copy and the preview-template copy): Root, Chevron and WeekNumber moved to module level. Before, they were re-created on every render, so DayPicker remounted them. DayButton stays inline because it needs the locale prop, and it carries a biome-ignore saying so.
  • Icon factories (icons/hi.tsx, icons/brands.tsx): these only run at module level, so each has a biome-ignore with that reason.

supabase CLI 2.122.0: I regenerated database.types.ts against the local stack with npm run db:types. The schema itself is unchanged; the newer generator just writes some types differently:

  • it adds ComputedFields: never to each table
  • it types NOT NULL json columns as NonNullable<Json>
  • it writes functions that take no arguments as Args: Record<PropertyKey, never>

Agents and web both typecheck against the new file, and db:types:check passes locally.

How:

  • npm run lint: no errors, warnings only
  • web tsc and next build: pass
  • agents tsc: clean
  • npm test: 573 passed

🤖 Generated with Claude Code

https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK

Every @mastra/* pin moves together (core/deployer/server 1.80.0, memory
1.39.1, observability 1.22.0, pg 1.33.0, rag 2.7.1, mastra CLI 1.36.0).

Breaking: AgentController sessions are now keyed by session id. The
createSession `scope` option and getSessionByResource are gone, and
channel resolveResourceId receives the request context.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK
next build refuses to finish on 16.4.0 because of a known vulnerability.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK
…14.3

No registry changes on the stable surface: the mcp registry still holds
the same 58 methods. The Next Gen Zaps methods moved to /beta, and
/experimental still includes them, so imports stay as they are.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK
…n twice

Uses the SDK 0.118.0 idempotencyKey on runAction and createActionRun.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK
Draft test runs pass the SDK 0.119.0 waitSeconds (30s) and return the
run's output or error when it ends in time.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK
…-grid to beta.63

Biome 2.6 adds noComponentHookFactories. The calendar's Root, Chevron and
WeekNumber move to module level so DayPicker keeps their identity across
renders; DayButton stays inline because it needs the locale prop. The
icon factories run once at module level and are annotated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK
@vercel

vercel Bot commented Oct 30, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
foreman Ready Ready Preview Oct 30, 2026 11:17pm UTC

Request Review

GitHub's runners now ship bwrap, so the isolated path runs in CI and was
broken (red on main since 2026-10-25):
- bwrap refuses a bind source that doesn't exist, and the runner named
  every ancestor node_modules, including ones that don't exist.
- Only the working directory was writable, but the durable journal is
  written to the tenant state dir above it, so no approval gate was ever
  recorded. The state dir is now passed as a read-write path.

The sandbox-provider test assumed no host has bwrap; it now checks the
backend is forwarded on hosts with and without it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK
The newer generator adds ComputedFields: never to each table, types NOT
NULL json columns as NonNullable<Json>, and writes no-arg functions as
Args: Record<PropertyKey, never>. No schema change.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK

This branch was successfully deployed

1 active deployment
Preview — 0a89edf5 Deployed Oct 30, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants