Aman-Mittal opened a new pull request, #858:
URL: https://github.com/apache/fineract-backoffice-ui/pull/858
Three dependency pull requests are open and all three are red. None of them
is red by accident, and none can be fixed by retrying: each carries a package
that something upstream refuses to install alongside. This takes everything
that *is* installable and says plainly what is left and why.
## What moves
The Angular family moves together, which is the only way it moves at all.
The pinned `@angular/*` packages peer-depend on each other by **exact**
version, and `@angular-devkit/build-angular` depends on `@angular/build`
exactly, so `npm install` rejects any subset of them — I confirmed that by
hand-pinning first and reading the `ERESOLVE` report. Driven through `ng
update` instead, so the whole set resolves in one pass:
| | from | to |
| --- | --- | --- |
|
`@angular/{core,common,compiler,compiler-cli,forms,platform-browser,router,animations}`
| 22.2.3 | 22.2.4 |
| `@angular/{build,cli}`, `@angular-devkit/build-angular` | 22.2.3 / ^22.2.0
| 22.2.5 |
| `@angular/cdk` | ^22.2.0 | ^22.2.5 |
| `@angular-architects/native-federation` | ^22.2.1 | ^22.2.4 |
| `@softarc/native-federation-orchestrator` | ^4.5.2 | ^4.9.0 |
| `@ngx-translate/{core,http-loader}` | ^18.0.0 | ^18.1.0 |
| `tslib` | ^2.8.1 | ^2.9.1 |
| `eslint-plugin-security` | ^4.0.1 | ^4.2.1 |
| `typescript-eslint` | 8.64.0 | 8.72.1 |
Exact pins stay exact and caret ranges stay caret; only the floors move.
## What does not move, and what holds it
These are upstream caps, already recorded in the grouping notes in
`.github/dependabot.yml`, not packages nobody has tried:
- **typescript 7** — `@angular/build` peers `typescript >=6.0 <6.1`.
Dependabot groups `typescript` with Angular, so this one package is why the
open Angular-group bump cannot install.
- **eslint 10** — `eslint-plugin-import` 2.32.0 is its newest release and
peers `eslint ^9`. The linting group fails with it in, grouped or alone.
- **eslint-plugin-unicorn 79** and **@ionic/angular 9** — majors that
deserve their own review; Ionic 9 currently fails the production build.
Each needs an upstream release or a deliberate migration, so each belongs in
its own pull request rather than blocking the routine refresh.
## Verification
`npm ci` installs clean — that is the `Dependency Integrity` job, and the
one every open dependency pull request fails. Past that: `lint` silent, `tsc`
clean, `format:check` clean, **329 unit files / 2822 tests** green, and a
production build that completes.
Two pre-existing warnings survive the build and are not from this change:
`NG8113` for Ionic imports left unused by the earlier date-field conversions,
and the `header.component.ts` style budget.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
