From b0af9a9f0aa4305ec68a20f16da762bb71057e6f Mon Sep 17 00:00:00 2001 From: fOuttaMyPaint <154358121+TMHSDigital@users.noreply.github.com> Date: Sun, 16 Aug 2026 16:03:18 -0400 Subject: [PATCH 1/2] fix(scaffold): ignore vitest major bumps in new mcp-servers A vitest 4 lockfile rewrite already broke npm ci on an existing server; new repos should ship the same ignore. Signed-off-by: fOuttaMyPaint <154358121+TMHSDigital@users.noreply.github.com> Co-authored-by: Cursor --- VERSION | 2 +- scaffold/templates/dependabot.yml.j2 | 4 ++++ tests/test_scaffold_born_green.py | 3 +++ 3 files changed, 8 insertions(+), 1 deletion(-) diff --git a/VERSION b/VERSION index 815d5ca..66e2ae6 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -1.19.0 +1.19.1 diff --git a/scaffold/templates/dependabot.yml.j2 b/scaffold/templates/dependabot.yml.j2 index b7a8f3b..743ee94 100644 --- a/scaffold/templates/dependabot.yml.j2 +++ b/scaffold/templates/dependabot.yml.j2 @@ -22,6 +22,10 @@ updates: # of the supported runtimes. - dependency-name: "@types/node" versions: [">=23"] + # Hold vitest 3.x. A 4.x bump rewrote the lockfile without optional + # esbuild platform packages, so npm ci failed. Major upgrades stay manual. + - dependency-name: "vitest" + update-types: ["version-update:semver-major"] {% endif %} {% if has_mcp %} - package-ecosystem: "pip" diff --git a/tests/test_scaffold_born_green.py b/tests/test_scaffold_born_green.py index 96eb68b..f18a971 100644 --- a/tests/test_scaffold_born_green.py +++ b/tests/test_scaffold_born_green.py @@ -338,6 +338,9 @@ def test_deployed_service_shape(rendered): assert "gh workflow run publish.yml" in ( library / ".github" / "workflows" / "release.yml" ).read_text(encoding="utf-8") + dep = (library / ".github" / "dependabot.yml").read_text(encoding="utf-8") + assert 'dependency-name: "vitest"' in dep + assert "version-update:semver-major" in dep def _make_temp_registry_root(tmp_path: Path) -> Path: From 219a452067c223c9cb31ca1177e5ab0ac5f74a5c Mon Sep 17 00:00:00 2001 From: fOuttaMyPaint <154358121+TMHSDigital@users.noreply.github.com> Date: Sun, 16 Aug 2026 16:05:32 -0400 Subject: [PATCH 2/2] fix: sync docs footer to VERSION 1.19.1 Signed-off-by: fOuttaMyPaint <154358121+TMHSDigital@users.noreply.github.com> Co-authored-by: Cursor --- docs/index.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/index.html b/docs/index.html index f46b327..dbfc19b 100644 --- a/docs/index.html +++ b/docs/index.html @@ -345,7 +345,7 @@

Scaffold Generator