Skip to content

chore: track undici-types to the resolved undici version#652

Merged
zimeg merged 3 commits into
mainfrom
chore/undici-types-track-undici
Jul 15, 2026
Merged

chore: track undici-types to the resolved undici version#652
zimeg merged 3 commits into
mainfrom
chore/undici-types-track-undici

Conversation

@zimeg

@zimeg zimeg commented Jul 15, 2026

Copy link
Copy Markdown
Member

Summary

This pull request makes undici-types follow undici automatically and removes the now-redundant Dependabot group.

  • The overrides block pinned undici-types to ^7.28.0 while undici is a direct dependency that Dependabot bumps independently (e.g. build(deps): bump undici from 7.28.0 to 8.7.0 in the undici group across 1 directory #648 moves undici to 8.x). Because undici-types is pulled in transitively by @types/node, the runtime library and its type declarations could drift apart on a major bump.
  • Using the "$undici" override resolves undici-types to whatever version undici resolves to, keeping them in lockstep automatically on every future bump.
  • With the override handling lockstep, the Dependabot undici group (which existed to bump undici + undici-types together) is redundant, so it is removed. undici bumps now arrive as normal ungrouped PRs and the types follow via the override.
  • Minimal change: $undici resolves to 7.28.0 today (same as the old pin), so the lockfile is unchanged; the new behavior activates when undici bumps.

Testing

  • Simulate a future undici bump locally: set undici to ^8.7.0, run npm install, and confirm npm ls undici undici-types shows both resolving to 8.7.0 (the override tracks undici to 8.x, overriding @types/node's declared ~7.18.0).

Requirements

🤖 Generated with Claude Code

@changeset-bot

changeset-bot Bot commented Jul 15, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 97b488a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@codecov

codecov Bot commented Jul 15, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.86%. Comparing base (31d473e) to head (97b488a).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #652   +/-   ##
=======================================
  Coverage   99.86%   99.86%           
=======================================
  Files           8        8           
  Lines         731      731           
=======================================
  Hits          730      730           
  Misses          1        1           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

zimeg and others added 2 commits July 15, 2026 12:46
The overrides pin held undici-types at ^7.28.0 while undici is a direct
dependency that Dependabot bumps independently. Because undici-types is
pulled in transitively by @types/node, the runtime library and its type
declarations could drift apart on a major bump.

Use the "$undici" override so undici-types always resolves to whatever
version undici resolves to, keeping them in lockstep automatically on
every future bump. $undici resolves to the current 7.28.0, so the
lockfile is unchanged; the behavior only activates when undici bumps.

Co-Authored-By: Claude <svc-devxp-claude@slack-corp.com>
The group existed to bump undici and undici-types together in one PR.
Now that the "$undici" override resolves undici-types to the undici
version automatically, undici can bump as a normal ungrouped PR and the
types follow via the override. The group is redundant.

Co-Authored-By: Claude <svc-devxp-claude@slack-corp.com>
@zimeg
zimeg force-pushed the chore/undici-types-track-undici branch from 5bfda53 to dc5e0b0 Compare July 15, 2026 19:47
@zimeg
zimeg changed the base branch from dependabot/npm_and_yarn/undici-f10e2608fb to main July 15, 2026 19:47
The failing unit-test run merged this branch against the old base
(the undici@8 branch, #648) because the pull/652/merge ref was stale
after retargeting the PR to main. Against main (undici@^7.28.0) the
committed lockfile satisfies the "$undici" override and npm ci passes.
This empty commit regenerates the merge ref so CI runs against main.

Co-Authored-By: Claude <svc-devxp-claude@slack-corp.com>
@zimeg zimeg self-assigned this Jul 15, 2026
@zimeg zimeg added bug Something isn't working dependencies Pull requests that update a dependency file labels Jul 15, 2026
@zimeg
zimeg marked this pull request as ready for review July 15, 2026 19:56
@zimeg
zimeg requested a review from a team as a code owner July 15, 2026 19:56

@zimeg zimeg left a comment

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👻 A note of reference for readers so kind!

Comment thread package.json
Comment on lines 55 to 57
"overrides": {
"undici-types": "^7.28.0"
"undici-types": "$undici"
},

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📣 note: This syntax is used to match earlier versions:

// BEST, the override is defined as a reference to the dependency
// the referenced package does not need to match the overridden one

🔗 https://docs.npmjs.com/cli/v12/configuring-npm/package-json#overrides

@zimeg

zimeg commented Jul 15, 2026

Copy link
Copy Markdown
Member Author

🔍 Will fast merge now to confirm with #648!

@zimeg
zimeg merged commit 03922a9 into main Jul 15, 2026
13 checks passed
@zimeg
zimeg deleted the chore/undici-types-track-undici branch July 15, 2026 21:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant