pnpm update by TkDodo · Pull Request #11209 · TanStack/query

TkDodo · 2026-08-17T10:48:14Z

Summary by CodeRabbit

Chores
- Updated development, testing, formatting, and build tooling.
- Refreshed workspace overrides and TypeScript compatibility across supported versions.
Style
- Standardized formatting across internal code, type declarations, templates, and examples.
- Simplified type declarations without changing runtime behavior.
Documentation
- Improved formatting consistency in Lit guides and examples.
Bug Fixes
- Corrected default handling for Vue mutation-state options.

coderabbitai · 2026-08-17T10:48:34Z

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

@coderabbitai resume to resume automatic reviews.
@coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

▶️ Resume reviews
🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 03a3ea82-9194-47c0-9e14-594493bb2986

📥 Commits

Reviewing files that changed from the base of the PR and between 0778440 and cc91511.

📒 Files selected for processing (1)

packages/query-core/src/types.ts

🚧 Files skipped from review as they are similar to previous changes (1)

packages/query-core/src/types.ts

Included review availability: Your plan includes up to 10 reviews per rolling hour; 6 remain after this review.

📝 Walkthrough

Walkthrough

Development dependency constraints were updated across the repository. TypeScript compatibility aliases now use explicit patch versions. Type declarations, Lit templates, examples, and devtools code were reformatted. The Vue useMutationState parameter declaration was simplified.

Changes

Repository maintenance updates

Layer / File(s)	Summary
Development dependency updates `package.json`, `packages/*/package.json`, `pnpm-workspace.yaml`	Root tooling, package-level `npm-run-all2`, and workspace override versions were updated.
Lit documentation and example formatting `docs/framework/lit/...`, `examples/lit/...`	Conditional template expressions and a type assertion were reformatted without changing conditions or rendered output.
Framework adapter type formatting `packages/angular-query-experimental/src/...`, `packages/lit-query/src/...`, `packages/preact-query/src/...`, `packages/react-query/src/...`, `packages/solid-query/src/...`, `packages/svelte-query/src/...`, `packages/vue-query/src/...`	Type declarations and query-cache calls were reformatted without changing their described type behavior.
Query core type and test formatting `packages/query-core/src/...`	Type declarations, assertions, utility signatures, and test annotations were simplified or reformatted.
Devtools rendering and stylesheet formatting `packages/query-devtools/src/...`	CSS interpolations and the stylesheet early-return branch were reformatted without changing styling or nonce handling.
Vue mutation-state parameter declaration `packages/vue-query/src/useMutationState.ts`	The `useMutationState` options parameter retains direct and callback-based options while applying its default to the complete union.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk:⚪ Minimal · up to cc915

This dependency update is merge-ready after normal checks and review; no actionable merge-blocking risk remains.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately identifies the main change: updating project dependencies with pnpm.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches 💡 1

📝 Generate docstrings 💡

Create stacked PR
Commit on current branch

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch feature/dependencies

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

nx-cloud · 2026-08-17T10:48:45Z

🤖 Nx Cloud AI Fix Eligible

An automatically generated fix could have helped fix failing tasks for this run, but Self-healing CI is disabled for this workspace. Visit workspace settings to enable it and get automatic fixes in future runs.

_{To disable these notifications, a workspace admin can disable them in workspace settings.}

View your CI Pipeline Execution ↗ for commit cc91511

Command	Status	Duration	Result
`nx affected --targets=test:sherif,test:knip,tes...`	❌ Failed	6m 10s	View ↗
`nx run-many --target=build --exclude=examples/*...`	✅ Succeeded	1m 58s	View ↗

☁️ Nx Cloud last updated this comment at 2026-08-17 12:32:23 UTC

socket-security · 2026-08-17T10:50:19Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@size-limit/preset-small-lib@12.1.0
	@types/react-dom@19.2.4
	@types/react@19.2.18
	vitest@4.1.10
	size-limit@12.1.0
	@types/node@22.20.1
	publint@0.3.23
	react@19.2.8
	markdown-link-extractor@4.0.4
	@arethetypeswrong/cli@0.18.5
	@cspell/eslint-plugin@9.8.0
	npm-run-all2@9.0.3
	sherif@1.13.0
	prettier-plugin-svelte@3.5.2
	eslint@9.39.5
	@testing-library/jest-dom@6.10.0
	@changesets/cli@2.31.1
	prettier@3.9.6
	@vitest/eslint-plugin@1.6.27

View full report

socket-security · 2026-08-17T10:50:20Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@mswjs/interceptors` is 90.0% likely obfuscated Confidence: 0.90 Location:Package overview From:pnpm-lock.yaml → `npm/msw@2.12.14` → `npm/vitest@4.1.10` → `npm/@mswjs/interceptors@0.41.9` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@mswjs/interceptors@0.41.9`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `yargs` is 90.0% likely obfuscated Confidence: 0.90 Location:Package overview From:pnpm-lock.yaml → `npm/msw@2.12.14` → `npm/vitest@4.1.10` → `npm/nx@22.1.3` → `npm/yargs@17.7.3` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/yargs@17.7.3`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

github-actions · 2026-08-17T11:35:41Z

🚀 Changeset Version Preview

1 package(s) bumped directly, 24 bumped as dependents.

🟨 Minor bumps

Package	Version	Reason
`@tanstack/query-core`	5.101.4 → 5.102.0	Changeset
`@tanstack/angular-query-experimental`	5.101.4 → 5.102.0	Dependent
`@tanstack/angular-query-persist-client`	5.101.4 → 5.102.0	Dependent
`@tanstack/eslint-plugin-query`	5.101.4 → 5.102.0	Dependent
`@tanstack/preact-query`	5.101.4 → 5.102.0	Dependent
`@tanstack/preact-query-devtools`	5.101.4 → 5.102.0	Dependent
`@tanstack/preact-query-persist-client`	5.101.4 → 5.102.0	Dependent
`@tanstack/query-async-storage-persister`	5.101.4 → 5.102.0	Dependent
`@tanstack/query-broadcast-client-experimental`	5.101.4 → 5.102.0	Dependent
`@tanstack/query-devtools`	5.101.4 → 5.102.0	Dependent
`@tanstack/query-persist-client-core`	5.101.4 → 5.102.0	Dependent
`@tanstack/query-sync-storage-persister`	5.101.4 → 5.102.0	Dependent
`@tanstack/react-query`	5.101.4 → 5.102.0	Dependent
`@tanstack/react-query-devtools`	5.101.4 → 5.102.0	Dependent
`@tanstack/react-query-next-experimental`	5.101.4 → 5.102.0	Dependent
`@tanstack/react-query-persist-client`	5.101.4 → 5.102.0	Dependent
`@tanstack/solid-query`	5.101.4 → 5.102.0	Dependent
`@tanstack/solid-query-devtools`	5.101.4 → 5.102.0	Dependent
`@tanstack/solid-query-persist-client`	5.101.4 → 5.102.0	Dependent
`@tanstack/vue-query`	5.101.4 → 5.102.0	Dependent

🟩 Patch bumps

Package	Version	Reason
`@tanstack/lit-query`	0.2.11 → 0.2.12	Dependent
`@tanstack/svelte-query`	6.1.38 → 6.1.39	Dependent
`@tanstack/svelte-query-devtools`	6.1.38 → 6.1.39	Dependent
`@tanstack/svelte-query-persist-client`	6.1.38 → 6.1.39	Dependent
`@tanstack/vue-query-devtools`	6.1.38 → 6.1.39	Dependent

pkg-pr-new · 2026-08-17T12:06:16Z

More templates

@tanstack/angular-query-experimental

npm i https://pkg.pr.new/@tanstack/angular-query-experimental@11209

@tanstack/eslint-plugin-query

npm i https://pkg.pr.new/@tanstack/eslint-plugin-query@11209

@tanstack/lit-query

npm i https://pkg.pr.new/@tanstack/lit-query@11209

@tanstack/preact-query

npm i https://pkg.pr.new/@tanstack/preact-query@11209

@tanstack/preact-query-devtools

npm i https://pkg.pr.new/@tanstack/preact-query-devtools@11209

@tanstack/preact-query-persist-client

npm i https://pkg.pr.new/@tanstack/preact-query-persist-client@11209

@tanstack/query-async-storage-persister

npm i https://pkg.pr.new/@tanstack/query-async-storage-persister@11209

@tanstack/query-broadcast-client-experimental

npm i https://pkg.pr.new/@tanstack/query-broadcast-client-experimental@11209

@tanstack/query-core

npm i https://pkg.pr.new/@tanstack/query-core@11209

@tanstack/query-devtools

npm i https://pkg.pr.new/@tanstack/query-devtools@11209

@tanstack/query-persist-client-core

npm i https://pkg.pr.new/@tanstack/query-persist-client-core@11209

@tanstack/query-sync-storage-persister

npm i https://pkg.pr.new/@tanstack/query-sync-storage-persister@11209

@tanstack/react-query

npm i https://pkg.pr.new/@tanstack/react-query@11209

@tanstack/react-query-devtools

npm i https://pkg.pr.new/@tanstack/react-query-devtools@11209

@tanstack/react-query-next-experimental

npm i https://pkg.pr.new/@tanstack/react-query-next-experimental@11209

@tanstack/react-query-persist-client

npm i https://pkg.pr.new/@tanstack/react-query-persist-client@11209

@tanstack/solid-query

npm i https://pkg.pr.new/@tanstack/solid-query@11209

@tanstack/solid-query-devtools

npm i https://pkg.pr.new/@tanstack/solid-query-devtools@11209

@tanstack/solid-query-persist-client

npm i https://pkg.pr.new/@tanstack/solid-query-persist-client@11209

@tanstack/svelte-query

npm i https://pkg.pr.new/@tanstack/svelte-query@11209

@tanstack/svelte-query-devtools

npm i https://pkg.pr.new/@tanstack/svelte-query-devtools@11209

@tanstack/svelte-query-persist-client

npm i https://pkg.pr.new/@tanstack/svelte-query-persist-client@11209

@tanstack/vue-query

npm i https://pkg.pr.new/@tanstack/vue-query@11209

@tanstack/vue-query-devtools

npm i https://pkg.pr.new/@tanstack/vue-query-devtools@11209

commit: 87bbfd2

github-actions · 2026-08-17T12:08:56Z

size-limit report 📦

Path	Size
react full	12.25 KB (-0.16% 🔽)
react minimal	9.21 KB (-0.18% 🔽)

pnpm update
352b375

fix: overwrites
a276d99

autofix-ciBotand others added 4 commits August 17, 2026 11:35

ci: apply automated fixes
6879348

upgrate attw
5c9dd2d

lock esbuild
0778440

Merge branch 'main' into feature/dependencies
cc91511

ref: revert knip
87bbfd2

TkDodo closed this Aug 17, 2026

TkDodo deleted the feature/dependencies branch August 17, 2026 12:39

This was referenced Aug 17, 2026
chore: update to ts 7 and move cut-off to 5.6 #11212
Merged
ref: remove unused experimental_beforeQuery and experimental_afterQuery #11233
Merged
test(lit-query): replace inline 'new Promise' timeouts with 'sleep' from 'query-test-utils' #11104
Merged

Navigation Menu

Uh oh!

Uh oh!

pnpm update - #11209

pnpm update#11209
TkDodo wants to merge 7 commits into
mainfrom
feature/dependencies

TkDodo commented Aug 17, 2026•
edited by coderabbitai Bot
Loading

Uh oh!

coderabbitaiBot commented Aug 17, 2026•
edited
Loading

Reviews paused

Walkthrough

Changes

❌ Failed checks (1 warning)

Uh oh!

nx-cloudBot commented Aug 17, 2026•
edited
Loading

Uh oh!

socket-securityBot commented Aug 17, 2026•
edited
Loading

Uh oh!

socket-securityBot commented Aug 17, 2026•
edited
Loading

Uh oh!

github-actionsBot commented Aug 17, 2026•
edited
Loading

Uh oh!

pkg-pr-newBot commented Aug 17, 2026•
edited
Loading

Uh oh!

github-actionsBot commented Aug 17, 2026•
edited
Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

TkDodo commented Aug 17, 2026• edited by coderabbitai BotLoading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

coderabbitaiBot commented Aug 17, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Reviews paused

Walkthrough

Changes

❌ Failed checks (1 warning)

Uh oh!

nx-cloudBot commented Aug 17, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 Nx Cloud AI Fix Eligible

Uh oh!

socket-securityBot commented Aug 17, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-securityBot commented Aug 17, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented Aug 17, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Changeset Version Preview

🟨 Minor bumps

🟩 Patch bumps

Uh oh!

pkg-pr-newBot commented Aug 17, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented Aug 17, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

size-limit report 📦

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

TkDodo commented Aug 17, 2026•
edited by coderabbitai Bot
Loading

coderabbitaiBot commented Aug 17, 2026•
edited
Loading

nx-cloudBot commented Aug 17, 2026•
edited
Loading

socket-securityBot commented Aug 17, 2026•
edited
Loading

socket-securityBot commented Aug 17, 2026•
edited
Loading

github-actionsBot commented Aug 17, 2026•
edited
Loading

pkg-pr-newBot commented Aug 17, 2026•
edited
Loading

github-actionsBot commented Aug 17, 2026•
edited
Loading