Skip to content

chore(deps-dev): bump lint-staged from 15.5.2 to 17.0.4#10

Closed
dependabot[bot] wants to merge 14 commits into
mainfrom
dependabot/npm_and_yarn/lint-staged-17.0.4
Closed

chore(deps-dev): bump lint-staged from 15.5.2 to 17.0.4#10
dependabot[bot] wants to merge 14 commits into
mainfrom
dependabot/npm_and_yarn/lint-staged-17.0.4

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 16, 2026

Bumps lint-staged from 15.5.2 to 17.0.4.

Release notes

Sourced from lint-staged's releases.

v17.0.4

Patch Changes

  • #1788 f95c1f8 - Another fix for making sure lint-staged adds task modifications correctly to the commit in the following cases:

    • after editing <file> it is staged with git add <file>, and then committed with git commit
    • after editing <file> it is committed with git commit --all without explicit git add
    • after editing <file> it is committed with git commit <pathspec> without explicit git add

    There's new test cases which actually setup the Git pre_commit hook to run lint-staged and verify them. These issues started in v17.0.0 when trying to improve support for committig without having explicitly staged files.

v17.0.3

Patch Changes

  • #1782 06813f9 Thanks @​iiroj! - Fix lint-staged behavior when implicitly committing files without using git add by either:
    • git commit -am "my commit message" where -a (--all) means to automatically stage all tracked modified and deleted files
    • git commit -m "my commit message" . where . is an example of a pathspec where matching files will be staged

v17.0.2

Patch Changes

v17.0.1

Patch Changes

  • #1776 4a5664b Thanks @​iiroj! - Adjust GitHub Actions workflow so that automatic publishing works with signed commits.

v17.0.0

Major Changes

  • #1745 e244adf Thanks @​iiroj! - Node.js v20 is no longer supported, and the oldest supported version is now 22.22.1, which is an active LTS version at the time of this release. Node.js 20 will be EOL after April 2026. Please upgrade your Node.js version!

  • #1676 0584e0b Thanks @​outslept! - Lint-staged now tries to verify the installed Git version is at least 2.32.0, released in 2021. If you're using an even older Git version, you need to upgrade it before running lint-staged!

  • #1745 2dcc40a Thanks @​iiroj! - The dependency yaml is now marked as optional and probably won't be installed by default. If you're using a YAML configuration file you should install the package separately:

    npm install --development yaml

    If you're using .lintstagedrc as the config file name (without a file extension), it will be treated as a YAML file. If the content is JSON, consider renaming it to .lintstagedrc.json to avoid needing to install yaml.

Minor Changes

  • #1748 809d5ef Thanks @​iiroj! - Add new option --hide-all for hiding all unstaged changes and untracked files, before running tasks. This makes it easier to run tools like Knip which check for unused code. Untracked files are included in the backup stash and restored automatically after running.

  • #1759 f13045a Thanks @​iiroj! - Update dependencies, including tinyexec@1.1.1 to fix the following issues:

    • When using a Node.js version manager with multiple versions installed (nvm, n, for example), scripts with the #!/usr/bin/env node shebang (Prettier, ESLint, for example) were previously spawned using the default Node.js version configured by the version manager (the one which node points to) on POSIX systems. Now, they will be spawned with the same version that lint-staged itself was started with.
      • For example, if your default Node.js version is 24.14.1 but lint-staged is run with the latest version 25.9.0, the tasks spawned by lint-staged will now also use version 25.9.0. Previously they were spawned using 24.14.1.

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.0.4

Patch Changes

  • #1788 f95c1f8 - Another fix for making sure lint-staged adds task modifications correctly to the commit in the following cases:

    • after editing <file> it is staged with git add <file>, and then committed with git commit
    • after editing <file> it is committed with git commit --all without explicit git add
    • after editing <file> it is committed with git commit <pathspec> without explicit git add

    There's new test cases which actually setup the Git pre_commit hook to run lint-staged and verify them. These issues started in v17.0.0 when trying to improve support for committig without having explicitly staged files.

17.0.3

Patch Changes

  • #1782 06813f9 Thanks @​iiroj! - Fix lint-staged behavior when implicitly committing files without using git add by either:
    • git commit -am "my commit message" where -a (--all) means to automatically stage all tracked modified and deleted files
    • git commit -m "my commit message" . where . is an example of a pathspec where matching files will be staged

17.0.2

Patch Changes

17.0.1

Patch Changes

  • #1776 4a5664b Thanks @​iiroj! - Adjust GitHub Actions workflow so that automatic publishing works with signed commits.

17.0.0

Major Changes

  • #1745 e244adf Thanks @​iiroj! - Node.js v20 is no longer supported, and the oldest supported version is now 22.22.1, which is an active LTS version at the time of this release. Node.js 20 will be EOL after April 2026. Please upgrade your Node.js version!

  • #1676 0584e0b Thanks @​outslept! - Lint-staged now tries to verify the installed Git version is at least 2.32.0, released in 2021. If you're using an even older Git version, you need to upgrade it before running lint-staged!

  • #1745 2dcc40a Thanks @​iiroj! - The dependency yaml is now marked as optional and probably won't be installed by default. If you're using a YAML configuration file you should install the package separately:

    npm install --development yaml

    If you're using .lintstagedrc as the config file name (without a file extension), it will be treated as a YAML file. If the content is JSON, consider renaming it to .lintstagedrc.json to avoid needing to install yaml.

Minor Changes

  • #1748 809d5ef Thanks @​iiroj! - Add new option --hide-all for hiding all unstaged changes and untracked files, before running tasks. This makes it easier to run tools like Knip which check for unused code. Untracked files are included in the backup stash and restored automatically after running.

... (truncated)

Commits
  • 2862964 Merge pull request #1789 from lint-staged/changeset-release/main
  • c9ecd54 chore(changeset): release
  • cc6b51a Merge pull request #1788 from lint-staged/fix-update-index-again
  • f95c1f8 fix: update both default index.lock and non-standard lock when latter exists
  • f44ee68 Merge pull request #1786 from lint-staged/update-repo-url
  • a61cf18 build(deps): update dependencies
  • ea00037 docs: disable Changesets "thanks"
  • ab7c26c docs: update repo URL to point in lint-staged/lint-staged
  • a36ec1e Merge pull request #1783 from lint-staged/changeset-release/main
  • 03ce2a9 chore(changeset): release
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lint-staged since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

meser1905 and others added 14 commits May 15, 2026 19:15
Set up the OpenNota monorepo foundation:
- Turborepo + pnpm workspaces (apps/*, packages/*)
- Shared @opennota/config package (ESLint, Prettier, TypeScript, Tailwind)
- Root tooling: ESLint 9 flat config, Prettier, EditorConfig
- Conventional Commits enforced via commitlint + husky + lint-staged
- .env.example with zero-install defaults (SQLite, local dirs)
- Gitignored data/, emails/, uploads/, generated/ directories

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Add the @opennota/shared package:
- Domain enums (roles, term/evaluation types, grade scales)
- Zod validation schemas for every input DTO
- CacheStore abstraction with an in-memory implementation
- JobRunner abstraction with an in-process implementation

Add the @opennota/db package:
- Prisma SQLite schema covering all domain entities
- Initial migration
- Idempotent seed for Colegio San Martin (5 teachers, 30 students,
  30 guardians, 24 evaluations, 360 grades)

The cache, job runner and mailer are kept behind interfaces so Redis,
BullMQ or a real SMTP transport can replace them without touching
business code.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Stand up the @opennota/api backend:
- Zod-validated environment and typed AppConfig
- Pino structured logging, helmet, CORS and global rate limiting
- Global exception filter with the consistent ApiErrorResponse shape
- Per-route Zod validation pipe
- JWT auth: register/login/refresh/logout/me with bcrypt (cost 12),
  rotating refresh tokens stored hashed for revocation
- Global JwtAuthGuard (with @public) and RolesGuard (with @roles)
- Prisma, cache, job-runner and file-based mailer wired behind their
  shared abstractions

Disable consistent-type-imports for the API: NestJS reads constructor
parameter types at runtime, so injected classes must be value imports.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Institutions module (ADMIN): institutions, academic years, terms;
  activating an academic year deactivates the others in a transaction
- Academic module (ADMIN/PRINCIPAL): class groups, subjects,
  teacher-subject assignments and student enrollments
- Users module (ADMIN): user CRUD, teacher/student/guardian profiles
  and guardian-student links; passwordHash never leaves the API

Soft delete for institutions, class groups, subjects and users; hard
delete for years, terms, enrollments and assignments.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Evaluations module: evaluation CRUD and per-subject/term grading
  weight configuration (weights validated to sum to 100)
- Grades module: single and batch grade entry, editable only while
  the evaluation is published and the term is open
- GradeCalculationService: pure weighted-average engine that
  normalizes mixed scales to 0-10, applies type weights, renormalizes
  for partially graded terms; results cached in-memory keyed
  term-average:{studentId}:{subjectId}:{termId} and refreshed on change
- Reports module: report card JSON, PDFKit PDF (copy saved to
  ./generated via the job runner) and the class-group average view

Teachers can only manage subjects they are assigned to; students and
guardians can only read their own report cards.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Next.js 15 App Router with Tailwind and shadcn/ui components
- next-intl wired up with Spanish messages (English/Portuguese ready)
- Auth.js v5 credentials provider backed by the NestJS API, with
  access-token refresh and route-protecting middleware
- TanStack Query and toast providers
- Typed API client for the browser
- Login page and role-aware dashboard shell (sidebar + topbar)

The end-to-end auth flow is verified: NextAuth login through the API,
session callbacks and middleware redirects all work.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Token-aware browser API client and TanStack Query data layer
- shadcn table, dialog, select, textarea, switch and alert-dialog
- Reusable CRUD building blocks (page header, row actions, data
  states, confirm-delete dialog)
- Six management screens for Admin/Principal: institutions, academic
  years (with nested term management), class groups, subjects (with
  teacher assignments), enrollments and users

Forms reuse the shared Zod schemas; all visible text comes from the
Spanish i18n messages.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Returns the subjects the current user can work with: a teacher's
assigned subjects, or every subject for staff. The grade-entry and
evaluation screens need this so teachers can discover their subjects
without access to the admin-only class-group listing.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- GET /terms is now readable by every authenticated role (teachers,
  students and guardians need to pick a term); mutations stay ADMIN
- Add GET /reports/students returning the students whose report cards
  the current user may view: their own, their linked students, or all

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Evaluations CRUD screen with subject/term filters and a
  published/draft state
- Grade entry sheet: students-by-evaluations matrix with debounced
  per-cell autosave, per-cell save indicators, an absent toggle, and
  conceptual-scale selects; weight configuration dialog
- Report card viewer with per-subject averages, pass/fail badges,
  per-evaluation drilldown and PDF download
- Teacher dashboard card listing assigned subjects

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- 26 Vitest unit tests for the grade calculation engine, covering
  weight scenarios, absences, missing config, mixed scales,
  conceptual grades, the pass threshold and rounding
- 6 integration tests exercising GradeCalculationService against a
  temporary SQLite database created and torn down per suite
- 13 unit tests for the in-memory cache and in-process job runner
- Playwright E2E covering the critical flow: teacher login to grade
  sheet, then student login to report card

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Bumps [lint-staged](https://github.com/lint-staged/lint-staged) from 15.5.2 to 17.0.4.
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v15.5.2...v17.0.4)

---
updated-dependencies:
- dependency-name: lint-staged
  dependency-version: 17.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 16, 2026

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 16, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/lint-staged-17.0.4 branch May 16, 2026 03:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant