Bump knip from 5.61.3 to 5.65.0 in /web-app #24
Closed
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) from 5.61.3 to 5.65.0. - [Release notes](https://github.com/webpro-nl/knip/releases) - [Changelog](https://github.com/webpro-nl/knip/blob/main/packages/knip/.release-it.json) - [Commits](https://github.com/webpro-nl/knip/commits/5.65.0/packages/knip) --- updated-dependencies: - dependency-name: knip dependency-version: 5.65.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
|
✓ Safe to upgradeI recommend merging this upgrade because the breaking changes do not impact this project. The TypeScript incompatibility warning applies to TypeScript v7 (not yet released), while this project uses TypeScript v5, and the renamed re-exports change only affects knip's internal behavior as a development tool. The upgrade brings 36 new features and 63 bug fixes that will improve dead code detection capabilities. Known issues with package.json exports and TypeScript rootDirs resolution exist but these are pre-existing limitations documented in knip, not new problems introduced by this version. What we checked
Dependency UsageKnip serves as a development tool for the web application's codebase hygiene, configured to detect unused code, dependencies, and exports across the TypeScript/React source files and test suites. The dependency is invoked exclusively through the "find-deadcode" npm script in the build toolchain, helping developers maintain clean code by identifying dead code patterns including unused binaries, dependencies, duplicates, and unresolved imports. This development-only tool supports the team's code quality practices without directly enabling end-user business functionality.
Other Usages (1)These usages were analyzed but no breaking changes were detected: knip
ChangesKnip has been upgraded with 2 breaking changes: re-exported modules are now prioritized differently which may affect import resolution, and TypeScript v7 is explicitly unsupported. This update delivers 36 new features including JSON5 config support, new plugins for rstest/bumpp/env-cmd/pnpm, and 63 bug fixes addressing namespace export detection, Angular/Rsbuild plugin issues, and import resolution edge cases.
View 232 more changes
References (5)[1]: TypeScript dependency is ^5.5.3, which is compatible with knip. The breaking change about TypeScript v7 incompatibility does not affect this project since v7 is not yet released. [2]: Knip is a devDependency upgraded from 5.61.3 to 5.65.0, used only for development-time dead code detection [3]: Knip is invoked only through the 'find-deadcode' npm script, isolating any breaking changes to this specific development workflow [4]: Project uses rootDir configuration which relates to a documented knip known issue, but this is a pre-existing limitation, not a new breaking change [5]: Official migration documentation confirms knip aims for smooth upgrades with minimal breaking changes (source link) fossabot analyzed this PR using static analysis and dependency research. |
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Comment |
Author
|
Superseded by #25. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/web-app/knip-5.65.0
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps knip from 5.61.3 to 5.65.0.
Release notes
Sourced from knip's releases.
... (truncated)
Commits
6ea7368Release 5.65.02d261f5Add .npmrc to .gitignore9b3981b4 ain't 57172653Speed upstrip-json-commentsa tadb39832dFix up lint-staged plugin (resolves #1293)bfe7a0eWork JSON Schemac9ab3c9AddignoreFilesconfig optionfac5613Iterate on configuring-project-files.md4a3025dFix up added glob ignore patterns and debug output8b91d08Consider imported ns members referenced w/ spread (resolves #1298)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)