Skip to content

Bump @microsoft/vally-cli from 0.19.0 to 0.21.0 - #29

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/microsoft/vally-cli-0.21.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/microsoft/vally-cli-0.21.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 13, 2026

Copy link
Copy Markdown

Bumps @microsoft/vally-cli from 0.19.0 to 0.21.0.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps @microsoft/vally-cli from 0.19.0 to 0.21.0.

---
updated-dependencies:
- dependency-name: "@microsoft/vally-cli"
  dependency-version: 0.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner November 13, 2026 00:09
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 13, 2026
Copilot AI dynamic review requested due to automatic review settings November 13, 2026 00:09
@github-actions

Copy link
Copy Markdown

Evals: passed

Suite: copilot-smoke

Lint: validated (no model execution) - Evidence

Run: passed - 1 trial - Evidence

Eval Trials Result
copilot-skill-smoke 1 passed

Quality & token summary

Eval Verdict Score Duration Tokens
copilot-skill-smoke passed 1.00 (threshold 1.00) 2632ms 33055 tokens (32982 in / 73 out)

Exact revision | Workflow run

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The dependency update leaves the native test fixture expecting version 0.19.0 while the installed CLI reports 0.21.0, causing real-CLI tests to fail, and the README still documents the old pin.

2 open issues
1 file not reviewed
  • pnpm-lock.yaml: Generated file
What changed in this PR

Updates the development dependency on @microsoft/vally-cli from 0.19.0 to 0.21.0, along with its resolved dependency graph.

Changes:

  • Bumps the pinned Vally CLI development dependency to 0.21.0.
  • Refreshes Vally, Copilot SDK, Koffi, OpenTelemetry, JSON-RPC, Zod, platform binaries, and related lockfile metadata.
File Description
pnpm-lock.yaml Refreshes the Vally 0.21.0 package graph, transitive dependency resolutions, platform-specific binaries, and integrity metadata.
package.json Updates the development dependency on @microsoft/vally-cli to 0.21.0.

Review effort: Lite (auto)

Comment thread package.json
},
"devDependencies": {
"@microsoft/vally-cli": "0.19.0",
"@microsoft/vally-cli": "0.21.0",

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Medium: Align the real CLI test fixture with the upgraded version

The Unit tests check confirms that six tests fail with native-version-mismatch on commit 264dbf7. The fixture still expects 0.19.0, so the version check stops these tests before they exercise the upgraded CLI. Keep the fixture's expected version aligned with the dependency, then rerun the model-free tests. Leave the runtime version check intact.

Generated by 🌳Breza Bot

Auto-replied by the GitHub Copilot app

Comment thread package.json
},
"devDependencies": {
"@microsoft/vally-cli": "0.19.0",
"@microsoft/vally-cli": "0.21.0",

@wbreza wbreza left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changes requested for #29 at 264dbf7.

Reviewed the dependency and lockfile changes against the adapter and existing discussion. Reused both existing inline threads; added the confirmed CI failure to the first. No local tests or PR scripts were run. The passing packaged smoke check still uses 0.19.0, so it does not establish compatibility with 0.21.0. Both findings remain open.

Generated by 🌳Breza Bot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants