Repository navigation
Python: Bump TypeScript frontend dependencies - #9230
Eduard van Valkenburg (eavanvalkenburg) merged 2 commits into
Conversation
GitHub Actions
Inactive
GitHub Actions
Inactive
agent-framework-automation
Bot
added
the
python
There was a problem hiding this comment.
🟡 Changes recommended
The DevUI Yarn lockfile omits native dependency entries required for reproducible non-Darwin installs.
0 open findings
What changed in this PR
Consolidates frontend dependency updates across DevUI and three Python samples.
Changes:
- Updates DevUI React, ESLint, TypeScript, and state dependencies.
- Migrates sample frontends to TypeScript 7.0.2.
- Refreshes npm/Yarn lockfiles and updates
source-map-js.
| File | Description |
|---|---|
python/packages/devui/frontend/package.json |
Updates DevUI dependencies. |
python/packages/devui/frontend/yarn.lock |
Refreshes resolved dependencies. |
python/packages/devui/frontend/eslint.config.js |
Adapts lint policy for ESLint 10. |
python/samples/05-end-to-end/ag_ui_single_agent/frontend/package.json |
Updates TypeScript. |
python/samples/05-end-to-end/ag_ui_single_agent/frontend/package-lock.json |
Locks TypeScript 7 packages. |
python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend/package.json |
Updates TypeScript. |
python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend/package-lock.json |
Locks TypeScript 7 packages. |
python/samples/05-end-to-end/chatkit-integration/frontend/package.json |
Updates TypeScript. |
python/samples/05-end-to-end/chatkit-integration/frontend/package-lock.json |
Locks TypeScript and source-map-js updates. |
Files not reviewed (3)
- python/samples/05-end-to-end/ag_ui_single_agent/frontend/package-lock.json: Generated file
- python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend/package-lock.json: Generated file
- python/samples/05-end-to-end/chatkit-integration/frontend/package-lock.json: Generated file
🧠 Review effort: Balanced
💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
MAF Automated Review — Iteration 1
Result: No findings
Scope: full PR (1 commit(s)): 06ec1d9064cf
Model: gpt-5.6-sol
Overview
The PR consistently refreshes the four frontend dependency graphs and updates the DevUI ESLint configuration for the ESLint 10 plugin APIs. Strict TypeScript build scripts, compatible peer ranges, integrity-pinned lockfiles, and successful lockfile/compiler validation constrain the main compatibility risks. No supported Critical, High, or Medium defect remains after reconciliation.
Reviewed the supplied pull-request change set across correctness, security/reliability, architecture, and failure behavior.
No publishable findings remained after source verification for this scope.
Jose Alvarez (jpalvarezl)
left a comment
Jose Alvarez (jpalvarezl)
left a comment
There was a problem hiding this comment.
Reviewed the complete dependency and lockfile diff. I found no additional issues beyond the existing DevUI Yarn lockfile reproducibility feedback, so I am not duplicating it inline. I am leaving a comment review rather than approving while that concern remains in the current head.
This comment was marked as duplicate.
This comment was marked as duplicate.
Sorry, something went wrong.
|
Addressed in 89ef0c8: regenerated the DevUI Yarn lockfile with Yarn 1.22.22 using |
GitHub Actions
Inactive
Motivation & Context
Consolidates nine overlapping Dependabot updates for the Python TypeScript frontends into one coherent change. This avoids competing lockfile updates and resolves the ESLint incompatibility introduced by updating
@eslint/jsto v10 without the rest of the ESLint toolchain.Description & Review Guide
source-map-js; and refreshes the associated npm and Yarn lockfiles. The DevUI ESLint configuration preserves the existing lint policy while adopting the ESLint 10-compatible plugin APIs.Related Issue
N/A - repository automation. Consolidates Dependabot updates from #9206, #9207, #9208, #9209, #9210, #9211, #9212, #9213, and #9220.
AI Assistance
AI assistance details: Dependency consolidation, ESLint compatibility adjustments, validation, and PR description.
Contribution Checklist
breaking changelabel (or add "[BREAKING]" to the title prefix, before or after any language prefix) — a workflow keeps the label and title prefix in sync automatically.