Skip to content

build(deps): bump the alloy group across 1 directory with 7 updates - #12535

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/alloy-983a309240
Open

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/alloy-983a309240

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the alloy group with 7 updates in the / directory:

Package From To
@alloy-js/cli 0.25.0 0.26.0
@alloy-js/core 0.25.0 0.26.0
@alloy-js/csharp 0.25.0 0.26.0
@alloy-js/markdown 0.25.0 0.26.0
@alloy-js/msbuild 0.25.0 0.26.0
@alloy-js/python 0.6.0 0.7.0
@alloy-js/typescript 0.25.0 0.26.0

Updates @alloy-js/cli from 0.25.0 to 0.26.0

Commits

Updates @alloy-js/core from 0.25.0 to 0.26.0

Commits

Updates @alloy-js/csharp from 0.25.0 to 0.26.0

Commits

Updates @alloy-js/markdown from 0.25.0 to 0.26.0

Commits

Updates @alloy-js/msbuild from 0.25.0 to 0.26.0

Commits

Updates @alloy-js/python from 0.6.0 to 0.7.0

Commits

Updates @alloy-js/typescript from 0.25.0 to 0.26.0

Commits

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).
1 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The stale @pinterest/alloy-graphql override installs a separate Alloy 0.25 runtime alongside 0.26, breaking shared rendering and context state during GraphQL emission.

1 open issue
1 file not reviewed
  • pnpm-lock.yaml: Generated file
What changed in this PR

Updates the shared Alloy dependencies used by TypeSpec’s emitter framework and code-generation tooling.

Changes:

  • Bumps six Alloy packages from 0.25.0 to 0.26.0 and @alloy-js/python from 0.6.0 to 0.7.0.
  • Refreshes lockfile resolutions and related transitive dependencies.
File Description
pnpm-workspace.yaml Updates the seven shared Alloy catalog versions.
pnpm-lock.yaml Records updated Alloy versions and transitive dependency resolutions.

Review effort: Balanced

Comment thread pnpm-workspace.yaml Resolved

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved automatically for a Dependabot update.

@microsoft-github-policy-service microsoft-github-policy-service Bot added the auto-merge Automatically merge the pull request after all requirements pass label Nov 11, 2026
Bumps the alloy group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@alloy-js/cli](https://github.com/alloy-framework/alloy) | `0.25.0` | `0.26.0` |
| [@alloy-js/core](https://github.com/alloy-framework/alloy) | `0.25.0` | `0.26.0` |
| [@alloy-js/csharp](https://github.com/alloy-framework/alloy) | `0.25.0` | `0.26.0` |
| [@alloy-js/markdown](https://github.com/alloy-framework/alloy) | `0.25.0` | `0.26.0` |
| [@alloy-js/msbuild](https://github.com/alloy-framework/alloy) | `0.25.0` | `0.26.0` |
| [@alloy-js/python](https://github.com/alloy-framework/alloy) | `0.6.0` | `0.7.0` |
| [@alloy-js/typescript](https://github.com/alloy-framework/alloy) | `0.25.0` | `0.26.0` |



Updates `@alloy-js/cli` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/alloy-framework/alloy/releases)
- [Commits](https://github.com/alloy-framework/alloy/commits)

Updates `@alloy-js/core` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/alloy-framework/alloy/releases)
- [Commits](https://github.com/alloy-framework/alloy/commits)

Updates `@alloy-js/csharp` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/alloy-framework/alloy/releases)
- [Commits](https://github.com/alloy-framework/alloy/commits)

Updates `@alloy-js/markdown` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/alloy-framework/alloy/releases)
- [Commits](https://github.com/alloy-framework/alloy/commits)

Updates `@alloy-js/msbuild` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/alloy-framework/alloy/releases)
- [Commits](https://github.com/alloy-framework/alloy/commits)

Updates `@alloy-js/python` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/alloy-framework/alloy/releases)
- [Commits](https://github.com/alloy-framework/alloy/compare/alloy@0.6.0...alloy@0.7.0)

Updates `@alloy-js/typescript` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/alloy-framework/alloy/releases)
- [Commits](https://github.com/alloy-framework/alloy/commits)

---
updated-dependencies:
- dependency-name: "@alloy-js/cli"
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alloy
- dependency-name: "@alloy-js/core"
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alloy
- dependency-name: "@alloy-js/csharp"
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alloy
- dependency-name: "@alloy-js/markdown"
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alloy
- dependency-name: "@alloy-js/msbuild"
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alloy
- dependency-name: "@alloy-js/python"
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alloy
- dependency-name: "@alloy-js/typescript"
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alloy
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the alloy group with 7 updates build(deps): bump the alloy group across 1 directory with 7 updates Nov 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/alloy-983a309240 branch from 831d836 to eff49ef Compare November 11, 2026 02:57
Copilot AI balanced review requested due to automatic review settings November 11, 2026 02:57

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

Stale dependency configuration splits GraphQL rendering across incompatible Alloy core versions and drops the CLI’s required TypeScript dependency, breaking shared context state and the documented build lookup.

2 open issues
1 file not reviewed
  • pnpm-lock.yaml: Generated file

Review effort: Balanced

Comment thread pnpm-workspace.yaml Resolved
Copilot AI balanced review requested due to automatic review settings November 11, 2026 13:13

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

The forced pre-1.0 Alloy core upgrade requires downstream build and emitter-output tests to confirm @pinterest/alloy-graphql compatibility, which this dependency-free snapshot cannot provide.

2 open issues
1 file not reviewed
  • pnpm-lock.yaml: Generated file

Review effort: Balanced

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Verified that the CLI package extension and GraphQL override target Alloy 0.26, and the CLI lockfile retains TypeScript. CI passed the GraphQL emitter and end-to-end tests.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge Automatically merge the pull request after all requirements pass

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants