Merge branch 'main' into dependabot/npm_and_yarn/cloudflare/vite-plugin-1.52.1

Author: casablanque-code

.github/workflows/dependabot-auto-merge.yml

@@ -1,6 +1,11 @@
 name: Dependabot Auto-Merge
 
-on: pull_request_target
+on:
+  pull_request_target:
+    types:
+      - opened
+      - synchronize
+      - reopened
 
 permissions:
   pull-requests: write
@@ -10,56 +15,34 @@ jobs:
   auto-merge:
     runs-on: ubuntu-latest
     if: github.event.pull_request.user.login == 'dependabot[bot]'
-    
+
     steps:
       - name: Dependabot metadata
         id: metadata
         uses: dependabot/fetch-metadata@v2
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
-      
-      # Auto-merge only for patch updates AND if CI passes
-      - name: Auto-merge patch updates (if CI passes)
-        if: |
-          steps.metadata.outputs.update-type == 'version-update:semver-patch'
-        run: |
-          PR="${{ github.event.pull_request.number }}"
 
-          # Wait for CI checks to complete
-          gh pr checks "$PR" --watch --interval 10 --timeout 5m || true
-
-          # Consider CI green only if every check concluded successfully
-          FAILED=$(gh pr checks "$PR" --json name,conclusion \
-            --jq '[.[] | select(.conclusion != "SUCCESS" and .conclusion != "NEUTRAL" and .conclusion != "SKIPPED")] | length')
-
-          if [ "$FAILED" -eq 0 ]; then
-            echo "✅ CI passed! Auto-merging patch update..."
-            gh pr merge --auto --squash "$PR"
-          else
-            echo "❌ CI failed or incomplete. Skipping auto-merge for safety."
-          fi
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GH_REPO: ${{ github.repository }}
-      
-      # Approve patch updates (only if we're auto-merging)
-      - name: Approve patch updates
-        if: |
-          steps.metadata.outputs.update-type == 'version-update:semver-patch'
+      - name: Enable auto-merge for patch updates
+        if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
         run: |
-          gh pr review --approve "${{ github.event.pull_request.number }}" -b "Auto-approved by dependabot workflow"
+          gh pr merge "${{ github.event.pull_request.number }}" \
+            --auto \
+            --squash
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GH_REPO: ${{ github.repository }}
-      
-      # For major/minor updates: add a label and comment to review manually
-      - name: Flag major/minor updates for manual review
+
+      - name: Flag minor and major updates for manual review
         if: |
           steps.metadata.outputs.update-type == 'version-update:semver-major' ||
           steps.metadata.outputs.update-type == 'version-update:semver-minor'
         run: |
-          gh pr comment "${{ github.event.pull_request.number }}" --body "⚠️ This is a **${{ steps.metadata.outputs.update-type }}** update. Please review manually before merging."
-          gh pr edit "${{ github.event.pull_request.number }}" --add-label "dependencies,manual-review-required"
+          gh pr comment "${{ github.event.pull_request.number }}" \
+            --body "⚠️ This is a **${{ steps.metadata.outputs.update-type }}** update. Please review manually before merging."
+
+          gh pr edit "${{ github.event.pull_request.number }}" \
+            --add-label "dependencies,manual-review-required"
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GH_REPO: ${{ github.repository }}

package-lock.json

@@ -29,11 +29,11 @@
     "@types/node": "^26.1.1",
     "@types/react": "^18.2.0",
     "@types/react-dom": "^18.2.0",
-    "@vitejs/plugin-react": "^6.0.3",
+    "@vitejs/plugin-react": "^6.0.5",
     "@vitest/coverage-v8": "^4.1.10",
     "eslint": "^10.7.0",
     "eslint-plugin-react-hooks": "^7.1.1",
-    "eslint-plugin-react-refresh": "^0.5.3",
+    "eslint-plugin-react-refresh": "^0.5.4",
     "globals": "^17.7.0",
     "typescript": "~5.9.3",
     "typescript-eslint": "^8.63.0",