Skip to content

Update Routine updates - #308

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/routine-updates
Nov 6, 2026
Merged

Update Routine updates#308
renovate[bot] merged 1 commit into
mainfrom
renovate/routine-updates

Conversation

@renovate

@renovate renovate Bot commented Oct 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@convex-dev/eslint-plugin (source) 5.0.0 → 5.0.1 age confidence devDependencies patch
@convex-dev/workpool (source) 0.4.14 → 0.4.15 age confidence devDependencies patch
@typescript-eslint/eslint-plugin (source) 8.71.1 → 8.72.1 age confidence devDependencies minor
@typescript-eslint/parser (source) 8.71.1 → 8.72.1 age confidence devDependencies minor
actions/setup-node v7.0.0 → v7.1.0 age confidence action minor
convex (source) 1.46.0 → 1.49.0 age confidence devDependencies minor
convex-helpers 0.1.128 → 0.1.133 age confidence devDependencies patch 0.1.134
convex-test (source) 0.0.64 → 0.0.67 age confidence devDependencies patch
eslint (source) 10.12.0 → 10.14.0 age confidence devDependencies minor
globals 17.13.0 → 17.14.0 age confidence devDependencies minor
npm-run-all2 9.0.3 → 9.0.4 age confidence devDependencies patch
openai 7.32.0 → 7.47.0 age confidence devDependencies minor 7.52.0 (+4)
pkg-pr-new (source) 0.0.91 → 0.0.93 age confidence devDependencies patch
typescript-eslint (source) 8.71.1 → 8.72.1 age confidence devDependencies minor
vitest (source) 5.0.4 → 5.1.0 age confidence devDependencies minor
zizmorcore/zizmor-action v0.6.4 → v0.7.1 age confidence action minor v0.8.1 (+1)

Release Notes

convex/convex-backend (@​convex-dev/eslint-plugin)

v5.0.1

  • Fix false positives in @convex-dev/no-collect-in-query with type-aware
    linting. In projects that include Convex's types, the rule reported every
    .collect() call, including ones on classes and objects unrelated to Convex.
    It now only reports .collect() on Convex queries. Thanks to
    @​stickerdaniel for the fix.
  • Fix false positives in @convex-dev/no-filter-in-query with type-aware
    linting. The rule recognized Convex queries partly by name, so it reported
    .filter() on unrelated types, such as a class whose predicate takes a
    parameter of a type named FilterBuilder, or a non-Convex db.query() result
    stored in a variable. It now only reports .filter() on Convex queries.
convex/workpool (@​convex-dev/workpool)

v0.4.15

Compare Source

  • Upgrades @​convex-dev/batch-worker to 0.3. Requires Convex 1.43 or later.
  • Records each pendingStart ID on its work document, so the next minor version
    can report status accurately for work already in flight. Not backwards
    compatible due to this schema change.
  • Adds a one-off migration that records the queue entry on work enqueued before
    this version and removes queue entries whose work is gone. Before upgrading to
    0.5, deploy this version and run
    npx convex run --component workpool migrations:backfillPendingStartIds,
    replacing workpool with each component instance's name.
typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.72.1

Compare Source

🩹 Fixes
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#​13039)
  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#​13062)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

Compare Source

🚀 Features
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#​12992)
  • eslint-plugin: lazy load rules (#​13010)
🩹 Fixes
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#​13054)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#​13055)
  • eslint-plugin: [require-array-sort-compare] check tuples (#​13058)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#​13053)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#​12704)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#​13016)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#​12991)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

Compare Source

🩹 Fixes
  • eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#​12805)
  • eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#​12995)
  • eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#​12977)
  • eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#​12974)
  • eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#​12989)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.72.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

actions/setup-node

v7.1.0

Compare Source

What's Changed
Enhancements:
Bug fixes:
Documentation updates:
Dependency updates:
New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

convex/convex-backend (convex)

v1.49.0

  • New npx convex plugins install command, which installs the Convex plugin for
    Claude Code and Codex on macOS and Linux. It works with the terminal CLIs, the
    desktop apps and the VS Code extensions. Running it again upgrades the plugin
    to the latest version.
  • This version drops support for Node.js 20. Please update to Node.js 22 or
    newer.
  • Adds the v.function({ fnType, args, returns }) validator, which validates
    that a value is a well-formed function handle. You can specify fnType,
    args, and returns for TypeScript typechecking and including type
    signatures in codegen, but they are not checked when running functions or
    writing to a table at runtime. The inferred type of v.function() is
    FunctionHandle_future, which has the same type semantics as
    FunctionReference_future. When incorporating v.function() into your
    codebase, existing code that uses the FunctionHandle type may need to be
    updated to use FunctionHandle_future.
  • Security fixes for
    GHSA-qw8j-4xj7-6f28
    and
    GHSA-9mw5-7p28-rvv4.

v1.48.0

  • Convex deployments can now sign their own JWTs with an internally managed
    key-pair. The ctx.auth.signJwt API is available in mutations. The JWTs
    can be verified with the public key in the JWKS hosted at
    ${CONVEX_CLOUD_URL}/.well-known/jwks.json.

  • npx convex dev --verbose and npx convex deploy --verbose no longer print
    environment variable values. The logged list of environment variables shows
    every value as <redacted>, and values of 8 or more characters are also
    redacted wherever else they appear in the logged push response and diff, such
    as auth providers that auth.config.ts builds from process.env.

  • When an AI agent runs npx convex env list or npx convex env default list,
    they now list only names by default, so secrets stay out of the agent's
    context. Agents are detected from the environment variables they set. Pass
    --include-values to print the values.

  • Fixed npx convex ai-files install and npx convex ai-files update reporting
    success and exiting 0 when the guidelines download or the agent skills
    install failed. They now exit with code 1.

  • ctx.storage.store() and ctx.storage.get() are now available in mutations,
    not just actions. Files stored and read in a mutation count toward its
    transaction limits.

v1.47.0

  • Fixed the next step printed by npx convex project create. It suggested
    npx convex deployment create <team>:<project>:dev --type dev, which always
    failed because dev is reserved for your default dev deployment. It now
    suggests a dev/my-feature reference and passes --select.
  • npx convex deploy now asks for confirmation before creating or changing an
    index on a large table, since the deploy blocks until the index is backfilled.
    Stage the index (staged: true) to backfill it in the background instead, or
    pass the new --skip-large-indexes-check flag to proceed without
    confirmation. That flag also covers deleting large indexes, replacing the
    hidden --allow-deleting-large-indexes flag, which keeps working.
  • The envList MCP tool now returns only environment variable names by default,
    so secrets stay out of the agent's context. Pass includeValues: true to get
    the values too, or use envGet to read a single variable.
  • npx convex env list and npx convex env default list have a new
    --include-values flag for printing values explicitly. Values are still
    printed by default. The docs and help text now use --include-values wherever
    the values are needed, like
    npx convex env list --include-values > .env.convex, and --names-only for
    just listing variables.
  • Added .staged() to defineTable for validating a schema change in the
    background instead of blocking the deploy on a scan of the table. Pass the
    fields to add or change, set a field to undefined to remove it, or pass a
    full validator. The current validator stays enforced while Convex checks
    existing documents and new writes against the staged one. npx convex deploy
    and npx convex deploy --dry-run report each staged table as validating,
    validated, or failed, and the dry-run warning about scanning large tables now
    suggests staging the validator. Once a staged validator is validated, moving
    it into defineTable deploys without scanning the table. A deploy that would
    discard pending or completed staged validation asks for confirmation; pass
    --allow-unstaging-schema to skip the prompt in CI. See
    https://docs.convex.dev/database/schemas#staged-validators.
  • ctx.meta.getSnapshotTs() is now public API. It returns the database
    timestamp of the snapshot the current function reads from, in nanoseconds, on
    the same clock as db.vars.commitTs. See
    https://docs.convex.dev/database/advanced/commit-timestamp.
  • convex/server exports getServiceUrl, which returns the base URL of a
    Convex-managed service such as the AI gateway, to pair with getServiceToken,
    along with a ServiceName type. The client no longer rejects service names it
    doesn't know about, so libraries can adopt new services without requiring a
    newer convex version.
  • Fixed the Convex MCP server stalling permanently after overlapping tool calls.
  • Fixed the error reported when a function or symbol is passed where a Convex
    value is expected. It now names the unsupported type and its path, like
    Function "[Function]" is not a supported Convex type at .cb, instead of
    throwing Cannot read properties of undefined (reading 'length').
  • When a push fails because an environment variable used by auth.config.ts is
    not set on the deployment, the CLI now prints the npx convex env set
    commands to run and a link to the deployment's environment variable settings.
  • Region prompts in the CLI list regions in the same order as the dashboard, and
    npx convex deployment create --region accepts the Canada
    (aws-ca-central-1) and Asia Pacific (aws-ap-southeast-2) regions. See
    https://docs.convex.dev/production/regions.
  • npx convex deployment usage-limits set --metric aiGatewayCostDollars sets
    the AI gateway spending limit.
convex/convex-helpers (convex-helpers)

v0.1.133

  • Zod 4 support: when a z.object() schema is passed as args to
    zCustomQuery/zCustomMutation/zCustomAction, checks on the object
    itself (.refine(), .superRefine(), .check()) are now run. Previously
    they were silently skipped. (#​1055)

v0.1.132

Compare Source

  • Enforces defaultPolicy: "deny" for RLS on bare db.get calls where
    table name is not provided and cannot be determined.

v0.1.131

Compare Source

  • Zod 4 support: fixed a regression in 0.1.130 when chaining multiple .brand()
    calls together.

v0.1.130

Compare Source

  • Zod 4 support: bug fixes when used across different Zod versions:
    • zodToConvex now makes the fields of z.partialRecord optional on Zod 4.5
      and later, with literal and enum keys. Thanks to @​aymanemt1 for the fix!
      (#​1025, #​1047)
    • Fixed TS2589: Type instantiation is excessively deep and possibly infinite
      when calling convexToZod inline (e.g. in the args of zCustomMutation)
      on Zod 4.6.6 and later. Thanks to @​jherth for the fix! (#​1043)
    • Fixed the type of v.commitTs() in convexToZod on Zod 4.6. (#​1050)
    • Fixed the type of branded zod/mini objects on Zod 4.0–4.2. (#​1051)
  • validate and parse now reject arrays and class instances (e.g. Date,
    Map) for v.record(...) validators, as Convex does. Thanks to
    @​RishavTiwari25 for the fix! (#​1040)

v0.1.129

Compare Source

  • (fix:streams) Retry later groups after nonempty pages (#​1027)
  • (fix:validators) Only match own keys of an object validator's fields. Thanks to
    @​mikirejf for the fix! (#​1035)
convex/convex-test (convex-test)

v0.0.67

Compare Source

  • Adds support for file storage access in mutations.

v0.0.66

Compare Source

  • perf: only visit the queried table's documents in _iterateDocs (#​154)

v0.0.65

Compare Source

  • Adds support for Convex mutations that call the ctx.auth.signJwt API.
eslint/eslint (eslint)

v10.14.0

Compare Source

Features

  • d23a7f9 feat: fix property descriptor handling in func-name-matching (#​21400) (xbinaryx)

Bug Fixes

Documentation

  • 0f94f47 docs: remove zh-hans from docs language switcher (#​21437) (lumir)
  • dab466e docs: Update README (GitHub Actions Bot)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#​21452) (Pixel)
  • 7697550 docs: Update README (GitHub Actions Bot)
  • 0c699d5 docs: Remove Tidelift commercial support (#​21416) (Milos Djermanovic)
  • 0880666 docs: update loadESLint() documentation for v10 (#​21374) (Minseon Kim)
  • e06fe87 docs: Revise AI acknowledgment options in PR template (#​21414) (Nicholas C. Zakas)

Chores

  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#​21462) (Francesco Trotta)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#​21450) (renovate[bot])
  • a031c40 chore: update ecosystem plugins (#​21445) (ESLint Bot)
  • 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#​21429) (Milos Djermanovic)
  • 276021d chore: update github/codeql-action action to v4.39.0 (#​21432) (renovate[bot])
  • 449724e chore: update ecosystem plugins (#​21420) (ESLint Bot)
  • 8ffeb8c chore: update dependency prettier to v3.9.10 (#​21417) (renovate[bot])

v10.13.0

Compare Source

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#​21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#​21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#​21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#​21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#​21287) (lumir)

Chores

sindresorhus/globals (globals)

v17.14.0

Compare Source

bcomnes/npm-run-all2 (npm-run-all2)

v9.0.4

Compare Source

Merged
  • fix: honor explicit nodeRun options and clarify Node API docs #255
  • Upgrade: Bump typescript from 6.0.3 to 7.0.2 #240
  • fix: avoid retaining argument placeholder regex state #258
  • fix: bump shell-quote to ^1.12.0- #​260 #261
  • Upgrade: Bump neostandard from 0.13.0 to 0.14.1 #259
  • docs: fix default argument placeholder syntax #254
  • Group TypeScript Dependabot updates #263
  • Upgrade: Bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1 #262
  • Upgrade: Bump @​voxpelli/tsconfig from 16.2.1 to 17.0.0 #256
  • Upgrade: Bump codecov/codecov-action from 7.0.0 to 7.1.1 #252
  • Upgrade: Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 #250
  • Upgrade: Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 #248
  • Upgrade: Bump installed-check from 10.0.1 to 11.0.0 #246
  • Upgrade: Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 #245
Commits
  • Add Zed and Codex worktree setup 9f54ec7
  • Rename agent instructions to AGENTS.md b06eac4
openai/openai-node (openai)

v7.47.0

Compare Source

Features

v7.46.0

Compare Source

Features
Bug Fixes
  • realtime: honor the selected WebSocket session target (#​3059) (d6c8425)
Chores

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

  • Branch creation
    • Monday through Friday (* * * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@pkg-pr-new

pkg-pr-new Bot commented Oct 15, 2026 •
edited
Loading

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/@convex-dev/workflow@308

commit: 7fc1e5d

@renovate
renovate Bot force-pushed the renovate/routine-updates branch from 2a0f8c8 to 2d56386 Compare November 1, 2026 11:00
@renovate renovate Bot changed the title Update Routine updates to v8.71.2 Update Routine updates Nov 1, 2026
@renovate
renovate Bot force-pushed the renovate/routine-updates branch 8 times, most recently from c035b42 to 953b1c0 Compare November 5, 2026 02:56
@renovate
renovate Bot force-pushed the renovate/routine-updates branch from 953b1c0 to 7fc1e5d Compare November 6, 2026 03:59
@renovate
renovate Bot merged commit 2d9e142 into main Nov 6, 2026
7 checks passed
@renovate
renovate Bot deleted the renovate/routine-updates branch November 6, 2026 04:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants