Skip to content

chore(deps): Bump dfx from 0.127.0 to 1.0.16 - #715

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dfx-1.0.16
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dfx-1.0.16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps dfx from 0.127.0 to 1.0.16.

Release notes

Sourced from dfx's releases.

dfx@1.0.16

1.0.16 (2026-09-10)

Note: Version bump only for package dfx

dfx@1.0.15

1.0.15 (2026-07-24)

Note: Version bump only for package dfx

dfx@1.0.14

1.0.14 (2026-05-28)

Note: Version bump only for package dfx

dfx@1.0.13

1.0.13 (2026-04-20)

Note: Version bump only for package dfx

dfx@1.0.12

1.0.12 (2026-04-20)

Note: Version bump only for package dfx

dfx@1.0.11

1.0.11 (2026-03-25)

Note: Version bump only for package dfx

dfx@1.0.10

1.0.10 (2026-03-02)

Note: Version bump only for package dfx

dfx@1.0.9

1.0.9 (2026-03-01)

Note: Version bump only for package dfx

dfx@1.0.8

1.0.8 (2026-03-01)

Note: Version bump only for package dfx

dfx@1.0.7

1.0.7 (2026-03-01)

Note: Version bump only for package dfx

... (truncated)

Changelog

Sourced from dfx's changelog.

1.0.16 (2026-09-10)

Note: Version bump only for package dfx

1.0.15 (2026-07-24)

Note: Version bump only for package dfx

1.0.14 (2026-05-28)

Note: Version bump only for package dfx

1.0.13 (2026-04-20)

Note: Version bump only for package dfx

1.0.12 (2026-04-20)

Note: Version bump only for package dfx

1.0.11 (2026-03-25)

Note: Version bump only for package dfx

1.0.10 (2026-03-02)

Note: Version bump only for package dfx

1.0.9 (2026-03-01)

Note: Version bump only for package dfx

1.0.8 (2026-03-01)

Note: Version bump only for package dfx

1.0.7 (2026-03-01)

Note: Version bump only for package dfx

1.0.6 (2026-03-01)

Note: Version bump only for package dfx

1.0.5 (2026-02-25)

Note: Version bump only for package dfx

1.0.3 (2026-02-25)

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026
@dependabot
dependabot Bot requested a review from TGTGamer as a code owner September 28, 2026 06:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026
@github-actions

github-actions Bot commented Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

smartcloud found 12 error(s), 0 warning(s).

Level Rule Where Finding
error required.failed The check check concluded failure.
error required.failed The test (macos-latest, Node 24) check concluded failure.
error required.failed The smoke (push) check concluded failure.
error required.failed The test (ubuntu-latest, Node 24) check concluded failure.
error required.failed The test (windows-latest, Node 24) check concluded failure.
error required.failed The test (macos-latest, Node current) check concluded failure.
error required.failed The smoke (pull_request) check concluded failure.
error required.failed The test (ubuntu-latest, Node current) check concluded failure.
error required.failed The smoke (schedule) check concluded failure.
error required.failed The smoke (issues) check concluded failure.
error required.failed The test (windows-latest, Node current) check concluded failure.
error required.failed The build check concluded failure.

This comment updates itself when you push a fix.

@graphify-labs graphify-labs Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Graphify reviewed this change.

Worth a look — the grounded gate found no coupling regressions or blocking issues, but 1 advisory finding(s) below merit a look before merge.


Graphify review — findings

Bumps dfx in the notifications package from 0.127.0 to 1.0.16, which drops its @effect/platform peer dependency and moves to an effect >=4.0.0-rc.113 peer range. Regenerates the lockfile accordingly, pulling in the new dfx resolution and refreshed transitive entries (@types/node 25.9.8, an extra vite/vitest/@vitest/mocker variant).

Worth a look

  • dfx 1.0.16 peer-requires effect >=4.0.0-rc.113 but workspace uses effect 3.22.2 — packages/notifications/package.json:20 · Escalate · high
    • agreed by 2 of 2 members but NOT verified (no proof, no reproducing execution) — consensus is not a verdict; needs human review
Analysis details — impact, health, verification

Impact & health

Graphify review

Impact — 25 functions depend on the 25 functions this change touches.

Health — grade A; no new coupling hotspots.

Verification — 25 functions in the blast radius were not formally verified this run (proofs are advisory here).

Gate & verification

graphify gate

PASS — objectively clean (no health regressions, tests not run — proofs not run this pass (advisory)). Grounded, not self-assessed.

Advisory (not blocking):

  • verification_scope: 25 function(s) in the blast radius were not formally verified this run

Bumps [dfx](https://github.com/tim-smart/dfx) from 0.127.0 to 1.0.16.
- [Release notes](https://github.com/tim-smart/dfx/releases)
- [Changelog](https://github.com/tim-smart/dfx/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tim-smart/dfx/compare/dfx@0.127.0...dfx@1.0.16)

---
updated-dependencies:
- dependency-name: dfx
  dependency-version: 1.0.16
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dfx-1.0.16 branch from 5c7c10d to e70db0b Compare September 28, 2026 15:03
@TGTGamer TGTGamer closed this Sep 29, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 29, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dfx-1.0.16 branch September 29, 2026 06:02
@TGTGamer
TGTGamer restored the dependabot/npm_and_yarn/dfx-1.0.16 branch September 29, 2026 06:02
@TGTGamer TGTGamer reopened this Sep 29, 2026
@TGTGamer

Copy link
Copy Markdown
Member

@claude can you fix the issues with this PR so it can merge?

@graphify-labs graphify-labs Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Graphify reviewed this change.

Worth a look — the grounded gate found no coupling regressions or blocking issues, but 1 advisory finding(s) below merit a look before merge.


Graphify review — findings

Bumps dfx in the notifications package from 0.127.0 to 1.0.16, which drops the @effect/platform peer dependency and requires effect >=4.0.0-rc.113. Regenerates the lockfile accordingly, resolving @types/node to 25.9.8 and adding yaml@2.9.1-keyed variants of the vite/vitest/@vitest/mocker graph.

Worth a look

  • dfx major upgrade to version requiring effect >=4.0.0-rc.113 while project uses effect 3.22.2 — packages/notifications/package.json:20 · Escalate · high
    • agreed by 2 of 2 members but NOT verified (no proof, no reproducing execution) — consensus is not a verdict; needs human review
Analysis details — impact, health, verification

Impact & health

Graphify review

Impact — 25 functions depend on the 25 functions this change touches.

Health — grade A; no new coupling hotspots.

Verification — 25 functions in the blast radius were not formally verified this run (proofs are advisory here).

Health delta baseline: last indexed commit b3b9ca6, 1 commit(s) behind this PR's base.

Gate & verification

graphify gate

PASS — objectively clean (no health regressions, tests not run — proofs not run this pass (advisory)). Grounded, not self-assessed.

Advisory (not blocking):

  • verification_scope: 25 function(s) in the blast radius were not formally verified this run

@TGTGamer

Copy link
Copy Markdown
Member

@dependabot DFX 0.127.0 is the latest version before the effect v4 prerelease migration. This is the correct version

@TGTGamer TGTGamer closed this Sep 30, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dfx-1.0.16 branch September 30, 2026 14:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant