From 84b7acd2ebbfe5b2186f53773ef0d83c0251a0ed Mon Sep 17 00:00:00 2001 From: cjharriskc-ai Date: Tue, 4 Aug 2026 23:10:42 -0500 Subject: [PATCH] Group vite with its plugins so a coupled bump can install `@vitejs/plugin-react` 6.x requires `vite ^8.0.0`; this project is on `vite ^6.3.5`. Bumped alone, the plugin dies at `npm ci` before any code is compiled: npm error ERESOLVE could not resolve npm error While resolving: @vitejs/plugin-react@6.0.5 npm error Found: vite@6.4.3 So #72 was unmergeable by construction, not failing on anything in this repository. Splitting a peer-coupled pair into separate pull requests can only ever produce two branches that each fail. This is the same failure the cargo section already documents for the RustCrypto crates, and it takes the same remedy: one group, one atomic pull request. The next attempt will carry vite and its plugins together, which is also the only way the 6 -> 8 jump can be reviewed honestly -- as a single build-tool upgrade with the UI build and browser tests run against it, rather than as a plugin bump. Co-Authored-By: Claude Opus 5 --- .github/dependabot.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 1ba52207..2febb2c8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -26,6 +26,17 @@ updates: time: "05:30" timezone: America/Chicago open-pull-requests-limit: 3 + groups: + # Vite and its plugins are coupled by peer range, so bumped one at a + # time they cannot install. @vitejs/plugin-react 6.x requires + # vite ^8.0.0 while this project is on vite ^6.3.5, so the lone plugin + # bump dies at `npm ci` with ERESOLVE before any code is compiled. + # Same shape as the rustcrypto group below: keeping them in one pull + # request makes the major bump atomic and installable. + vite: + patterns: + - "vite" + - "@vitejs/*" - package-ecosystem: cargo directory: /ui/src-tauri