Skip to content

chore(deps): pin all dependencies to exact versions#25

Merged
wavyx merged 1 commit into
mainfrom
chore-pin-dep-versions
Jul 8, 2026
Merged

chore(deps): pin all dependencies to exact versions#25
wavyx merged 1 commit into
mainfrom
chore-pin-dep-versions

Conversation

@wavyx

@wavyx wavyx commented Jul 8, 2026

Copy link
Copy Markdown
Owner

Pins the three remaining caret ranges (js-yaml, @modelcontextprotocol/sdk, zod) to the exact versions already resolved in the lockfile. All other deps were already exact-pinned. Tests pass (730).

https://claude.ai/code/session_01WFtdR1yhvYG6SjWhhMcsaE

Greptile Summary

Pins three previously caret-ranged dependencies to their exact resolved versions: @modelcontextprotocol/sdk (^1.29.01.29.0), js-yaml (^5.2.15.2.1), and zod (^4.4.34.4.3). Both package.json and package-lock.json are updated consistently, making them match the versions already locked in the lockfile.

  • Both package.json and package-lock.json reflect the same pinned versions, so no semantic version drift is introduced.
  • The change is purely mechanical — no logic, runtime behavior, or API surface is altered.

Confidence Score: 5/5

Safe to merge — the change is purely cosmetic, removing caret ranges from three packages that the lockfile had already resolved to the now-pinned versions.

Both files are updated consistently and no resolved versions change. The lockfile already had these exact versions locked; the edit simply aligns the declared range in package.json with reality. There is no behavioral or runtime impact.

No files require special attention.

Important Files Changed

Filename Overview
package.json Removed ^ prefix from @modelcontextprotocol/sdk, js-yaml, and zod — pinning all three to the exact versions already resolved in the lockfile. No other changes.
package-lock.json Updated the declared range strings for the three pinned packages in the lockfile root package entry to match package.json. Resolved versions are unchanged.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[package.json] -->|declares exact version| B["@modelcontextprotocol/sdk 1.29.0"]
    A -->|declares exact version| C["js-yaml 5.2.1"]
    A -->|declares exact version| D["zod 4.4.3"]
    B --> E[package-lock.json]
    C --> E
    D --> E
    E -->|resolved & installed| F[node_modules]

    style B fill:#d4edda
    style C fill:#d4edda
    style D fill:#d4edda
Loading
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    A[package.json] -->|declares exact version| B["@modelcontextprotocol/sdk 1.29.0"]
    A -->|declares exact version| C["js-yaml 5.2.1"]
    A -->|declares exact version| D["zod 4.4.3"]
    B --> E[package-lock.json]
    C --> E
    D --> E
    E -->|resolved & installed| F[node_modules]

    style B fill:#d4edda
    style C fill:#d4edda
    style D fill:#d4edda
Loading

Reviews (2): Last reviewed commit: "chore(deps): pin all dependencies to exa..." | Re-trigger Greptile

Replace the remaining caret ranges (js-yaml, @modelcontextprotocol/sdk,
zod) with the exact versions already in the lockfile, matching the
pinning style used for every other dependency.

Claude-Session: https://claude.ai/code/session_01WFtdR1yhvYG6SjWhhMcsaE
@wavyx wavyx force-pushed the chore-pin-dep-versions branch from 0458c8d to c94bb10 Compare July 8, 2026 20:55
@codecov-commenter

Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@wavyx wavyx merged commit ef47f98 into main Jul 8, 2026
12 checks passed
@wavyx wavyx deleted the chore-pin-dep-versions branch July 8, 2026 20:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants