chore: bump echarts from 5.6.0 to 6.0.0 in /web#380
chore: bump echarts from 5.6.0 to 6.0.0 in /web#380dependabot[bot] wants to merge 2 commits intomainfrom
Conversation
|
PR author is in the excluded authors list. |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.OpenSSF Scorecard
Scanned Files
|
e8324bf to
c0f3c5b
Compare
Bumps [echarts](https://github.com/apache/echarts) from 5.6.0 to 6.0.0. - [Release notes](https://github.com/apache/echarts/releases) - [Commits](apache/echarts@5.6.0...6.0.0) --- updated-dependencies: - dependency-name: echarts dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
c0f3c5b to
519eab4
Compare
## Summary - Add `major` update-type group to all 8 Dependabot ecosystem configs (uv, github-actions, pre-commit, npm x2, docker x3) - Interdependent major bumps (e.g. echarts 6 + vue-echarts 8) now land in a single PR instead of separate conflicting ones - Add missing `minor-and-patch` grouping to the 3 Docker configs for consistency **Motivation:** PRs #380 (echarts 5→6) and #384 (vue-echarts 7→8) are interdependent but arrived as separate PRs, both with broken CI due to peer dependency conflicts. Grouping majors prevents this. ## Test plan - [x] YAML validated by pre-commit `check-yaml` hook - [ ] Wait for next Dependabot run to confirm grouped PRs appear correctly - [ ] Existing open individual major PRs will need to be closed manually (Dependabot will recreate them grouped) 🤖 Generated with [Claude Code](https://claude.com/claude-code)
|
Closing: dependabot config now groups major bumps per ecosystem. This will be recreated as part of a grouped PR with all /web major updates (echarts + vue-echarts + vite + vitest + coverage-v8). |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #380 +/- ##
=======================================
Coverage 93.83% 93.83%
=======================================
Files 462 462
Lines 21653 21653
Branches 2079 2079
=======================================
Hits 20319 20319
Misses 1032 1032
Partials 302 302 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
Bumps echarts from 5.6.0 to 6.0.0.
Release notes
Sourced from echarts's releases.
... (truncated)
Commits
52104f7Merge pull request #21132 from apache/release-dev5e02596chore: release771c523chore: add license headers and a script of pre-commit8d7f252Merge pull request #21127 from apache/release-dev64f8d9cchore: release 6.0.0-rc.165efa66test: add mark as expected5365621Merge pull request #21126 from apache/fix-162669055feftest(scale): add missing test8a40d27Merge branch 'release' into fix-1626618b5db2fix(scale): Fix that extreme small numbers can not be displayed in Cartesian ...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)