pnpm update by TkDodo · Pull Request #11209 · TanStack/query

TkDodo · 2026-08-17T10:48:14Z

Summary by CodeRabbit

Chores
- Updated development, testing, formatting, and build tooling.
- Refreshed workspace overrides and TypeScript compatibility across supported versions.
Style
- Standardized formatting across internal code, type declarations, templates, and examples.
- Simplified type declarations without changing runtime behavior.
Documentation
- Improved formatting consistency in Lit guides and examples.
Bug Fixes
- Corrected default handling for Vue mutation-state options.

coderabbitai · 2026-08-17T10:48:34Z

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

@coderabbitai resume to resume automatic reviews.
@coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

▶️ Resume reviews
🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 03a3ea82-9194-47c0-9e14-594493bb2986

📥 Commits

Reviewing files that changed from the base of the PR and between 0778440 and cc91511.

📒 Files selected for processing (1)

packages/query-core/src/types.ts

🚧 Files skipped from review as they are similar to previous changes (1)

packages/query-core/src/types.ts

Included review availability: Your plan includes up to 10 reviews per rolling hour; 6 remain after this review.

📝 Walkthrough

Walkthrough

Development dependency constraints were updated across the repository. TypeScript compatibility aliases now use explicit patch versions. Type declarations, Lit templates, examples, and devtools code were reformatted. The Vue useMutationState parameter declaration was simplified.

Changes

Repository maintenance updates

Layer / File(s)	Summary
Development dependency updates `package.json`, `packages/*/package.json`, `pnpm-workspace.yaml`	Root tooling, package-level `npm-run-all2`, and workspace override versions were updated.
Lit documentation and example formatting `docs/framework/lit/...`, `examples/lit/...`	Conditional template expressions and a type assertion were reformatted without changing conditions or rendered output.
Framework adapter type formatting `packages/angular-query-experimental/src/...`, `packages/lit-query/src/...`, `packages/preact-query/src/...`, `packages/react-query/src/...`, `packages/solid-query/src/...`, `packages/svelte-query/src/...`, `packages/vue-query/src/...`	Type declarations and query-cache calls were reformatted without changing their described type behavior.
Query core type and test formatting `packages/query-core/src/...`	Type declarations, assertions, utility signatures, and test annotations were simplified or reformatted.
Devtools rendering and stylesheet formatting `packages/query-devtools/src/...`	CSS interpolations and the stylesheet early-return branch were reformatted without changing styling or nonce handling.
Vue mutation-state parameter declaration `packages/vue-query/src/useMutationState.ts`	The `useMutationState` options parameter retains direct and callback-based options while applying its default to the complete union.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: ⚪ Minimal · up to cc915

This dependency update is merge-ready after normal checks and review; no actionable merge-blocking risk remains.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately identifies the main change: updating project dependencies with pnpm.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches 💡 1

📝 Generate docstrings 💡

Create stacked PR
Commit on current branch

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch feature/dependencies

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

nx-cloud · 2026-08-17T10:48:45Z

🤖 Nx Cloud AI Fix Eligible

An automatically generated fix could have helped fix failing tasks for this run, but Self-healing CI is disabled for this workspace. Visit workspace settings to enable it and get automatic fixes in future runs.

_{To disable these notifications, a workspace admin can disable them in workspace settings.}

View your CI Pipeline Execution ↗ for commit cc91511

Command	Status	Duration	Result
`nx affected --targets=test:sherif,test:knip,tes...`	❌ Failed	6m 10s	View ↗
`nx run-many --target=build --exclude=examples/*...`	✅ Succeeded	1m 58s	View ↗

☁️ Nx Cloud last updated this comment at 2026-08-17 12:32:23 UTC

socket-security · 2026-08-17T10:50:19Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@size-limit/preset-small-lib@12.1.0
	@types/react-dom@19.2.4
	@types/react@19.2.18
	vitest@4.1.10
	size-limit@12.1.0
	@types/node@22.20.1
	publint@0.3.23
	react@19.2.8
	markdown-link-extractor@4.0.4
	@arethetypeswrong/cli@0.18.5
	@cspell/eslint-plugin@9.8.0
	npm-run-all2@9.0.3
	sherif@1.13.0
	prettier-plugin-svelte@3.5.2
	eslint@9.39.5
	@testing-library/jest-dom@6.10.0
	@changesets/cli@2.31.1
	prettier@3.9.6
	@vitest/eslint-plugin@1.6.27

View full report

socket-security · 2026-08-17T10:50:20Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@mswjs/interceptors` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/msw@2.12.14` → `npm/vitest@4.1.10` → `npm/@mswjs/interceptors@0.41.9` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@mswjs/interceptors@0.41.9`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `yargs` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/msw@2.12.14` → `npm/vitest@4.1.10` → `npm/nx@22.1.3` → `npm/yargs@17.7.3` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/yargs@17.7.3`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

github-actions · 2026-08-17T11:35:41Z

🚀 Changeset Version Preview

1 package(s) bumped directly, 24 bumped as dependents.

🟨 Minor bumps

Package	Version	Reason
`@tanstack/query-core`	5.101.4 → 5.102.0	Changeset
`@tanstack/angular-query-experimental`	5.101.4 → 5.102.0	Dependent
`@tanstack/angular-query-persist-client`	5.101.4 → 5.102.0	Dependent
`@tanstack/eslint-plugin-query`	5.101.4 → 5.102.0	Dependent
`@tanstack/preact-query`	5.101.4 → 5.102.0	Dependent
`@tanstack/preact-query-devtools`	5.101.4 → 5.102.0	Dependent
`@tanstack/preact-query-persist-client`	5.101.4 → 5.102.0	Dependent
`@tanstack/query-async-storage-persister`	5.101.4 → 5.102.0	Dependent
`@tanstack/query-broadcast-client-experimental`	5.101.4 → 5.102.0	Dependent
`@tanstack/query-devtools`	5.101.4 → 5.102.0	Dependent
`@tanstack/query-persist-client-core`	5.101.4 → 5.102.0	Dependent
`@tanstack/query-sync-storage-persister`	5.101.4 → 5.102.0	Dependent
`@tanstack/react-query`	5.101.4 → 5.102.0	Dependent
`@tanstack/react-query-devtools`	5.101.4 → 5.102.0	Dependent
`@tanstack/react-query-next-experimental`	5.101.4 → 5.102.0	Dependent
`@tanstack/react-query-persist-client`	5.101.4 → 5.102.0	Dependent
`@tanstack/solid-query`	5.101.4 → 5.102.0	Dependent
`@tanstack/solid-query-devtools`	5.101.4 → 5.102.0	Dependent
`@tanstack/solid-query-persist-client`	5.101.4 → 5.102.0	Dependent
`@tanstack/vue-query`	5.101.4 → 5.102.0	Dependent

🟩 Patch bumps

Package	Version	Reason
`@tanstack/lit-query`	0.2.11 → 0.2.12	Dependent
`@tanstack/svelte-query`	6.1.38 → 6.1.39	Dependent
`@tanstack/svelte-query-devtools`	6.1.38 → 6.1.39	Dependent
`@tanstack/svelte-query-persist-client`	6.1.38 → 6.1.39	Dependent
`@tanstack/vue-query-devtools`	6.1.38 → 6.1.39	Dependent

pkg-pr-new · 2026-08-17T12:06:16Z

More templates

@tanstack/angular-query-experimental

npm i https://pkg.pr.new/@tanstack/angular-query-experimental@11209

@tanstack/eslint-plugin-query

npm i https://pkg.pr.new/@tanstack/eslint-plugin-query@11209

@tanstack/lit-query

npm i https://pkg.pr.new/@tanstack/lit-query@11209

@tanstack/preact-query

npm i https://pkg.pr.new/@tanstack/preact-query@11209

@tanstack/preact-query-devtools

npm i https://pkg.pr.new/@tanstack/preact-query-devtools@11209

@tanstack/preact-query-persist-client

npm i https://pkg.pr.new/@tanstack/preact-query-persist-client@11209

@tanstack/query-async-storage-persister

npm i https://pkg.pr.new/@tanstack/query-async-storage-persister@11209

@tanstack/query-broadcast-client-experimental

npm i https://pkg.pr.new/@tanstack/query-broadcast-client-experimental@11209

@tanstack/query-core

npm i https://pkg.pr.new/@tanstack/query-core@11209

@tanstack/query-devtools

npm i https://pkg.pr.new/@tanstack/query-devtools@11209

@tanstack/query-persist-client-core

npm i https://pkg.pr.new/@tanstack/query-persist-client-core@11209

@tanstack/query-sync-storage-persister

npm i https://pkg.pr.new/@tanstack/query-sync-storage-persister@11209

@tanstack/react-query

npm i https://pkg.pr.new/@tanstack/react-query@11209

@tanstack/react-query-devtools

npm i https://pkg.pr.new/@tanstack/react-query-devtools@11209

@tanstack/react-query-next-experimental

npm i https://pkg.pr.new/@tanstack/react-query-next-experimental@11209

@tanstack/react-query-persist-client

npm i https://pkg.pr.new/@tanstack/react-query-persist-client@11209

@tanstack/solid-query

npm i https://pkg.pr.new/@tanstack/solid-query@11209

@tanstack/solid-query-devtools

npm i https://pkg.pr.new/@tanstack/solid-query-devtools@11209

@tanstack/solid-query-persist-client

npm i https://pkg.pr.new/@tanstack/solid-query-persist-client@11209

@tanstack/svelte-query

npm i https://pkg.pr.new/@tanstack/svelte-query@11209

@tanstack/svelte-query-devtools

npm i https://pkg.pr.new/@tanstack/svelte-query-devtools@11209

@tanstack/svelte-query-persist-client

npm i https://pkg.pr.new/@tanstack/svelte-query-persist-client@11209

@tanstack/vue-query

npm i https://pkg.pr.new/@tanstack/vue-query@11209

@tanstack/vue-query-devtools

npm i https://pkg.pr.new/@tanstack/vue-query-devtools@11209

commit: 87bbfd2

github-actions · 2026-08-17T12:08:56Z

size-limit report 📦

Path	Size
react full	12.25 KB (-0.16% 🔽)
react minimal	9.21 KB (-0.18% 🔽)

pnpm update

352b375

fix: overwrites

a276d99

autofix-ci Bot and others added 4 commits August 17, 2026 11:35

ci: apply automated fixes

6879348

upgrate attw

5c9dd2d

lock esbuild

0778440

Merge branch 'main' into feature/dependencies

cc91511

ref: revert knip

87bbfd2

TkDodo closed this Aug 17, 2026

TkDodo deleted the feature/dependencies branch August 17, 2026 12:39

This was referenced Aug 17, 2026

chore: update to ts 7 and move cut-off to 5.6 #11212

Merged

ref: remove unused experimental_beforeQuery and experimental_afterQuery #11233

Merged

test(lit-query): replace inline 'new Promise' timeouts with 'sleep' from 'query-test-utils' #11104

Merged

Navigation Menu

Uh oh!

Uh oh!

pnpm update - #11209

pnpm update#11209
TkDodo wants to merge 7 commits into
mainfrom
feature/dependencies

TkDodo commented Aug 17, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Aug 17, 2026 •

edited

Loading

Reviews paused

Walkthrough

Changes

❌ Failed checks (1 warning)

Uh oh!

nx-cloud Bot commented Aug 17, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 17, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 17, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 17, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Aug 17, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 17, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

TkDodo commented Aug 17, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Reviews paused

Walkthrough

Changes

❌ Failed checks (1 warning)

Uh oh!

nx-cloud Bot commented Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 Nx Cloud AI Fix Eligible

Uh oh!

socket-security Bot commented Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Changeset Version Preview

🟨 Minor bumps

🟩 Patch bumps

Uh oh!

pkg-pr-new Bot commented Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

size-limit report 📦

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

TkDodo commented Aug 17, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Aug 17, 2026 •

edited

Loading

nx-cloud Bot commented Aug 17, 2026 •

edited

Loading

socket-security Bot commented Aug 17, 2026 •

edited

Loading

socket-security Bot commented Aug 17, 2026 •

edited

Loading

github-actions Bot commented Aug 17, 2026 •

edited

Loading

pkg-pr-new Bot commented Aug 17, 2026 •

edited

Loading

github-actions Bot commented Aug 17, 2026 •

edited

Loading