chore: upgrade toolchain and dependencies by bzp2010 · Pull Request #503 · api7/adc

bzp2010 · 2026-06-28T18:06:28Z

Description

Upgrade nx and dependencies.

Checklist

I have explained the need for this PR and the problem it solves
I have explained the changes or the new features added to this PR
I have added tests corresponding to this change
I have updated the documentation to reflect this change
I have verified that this change is backward compatible

Summary by CodeRabbit

Chores
- Updated CI, release, lint, typecheck, unit, and deployment workflows to use newer pinned action/tooling versions.
- Upgraded the Nx toolchain and pnpm, plus several shared development dependency versions and workspace overrides.
- Refreshed unit-test runtime configuration and improved CI environment formatting.
- Updated ignored build/migration artifacts and removed an obsolete JS YAML type dependency; bumped a local dev tool dependency.
Documentation
- Added APISIX 3.17.x as fully supported in the supported versions listings.

coderabbitai · 2026-06-28T18:06:52Z

Warning

Review limit reached

@bzp2010, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 30 minutes and 3 seconds. Learn how PR review limits work.

Your organization has used up its prepaid credits, and credit purchases are no longer available. Enable the review add-on in the billing tab to keep reviews running — you're only billed for reviews past your plan's rate limits ($0.25/file).

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based credits.

🚦 How do rate limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: ced3434e-bbe1-4809-a500-ceb8a5d4036e

📥 Commits

Reviewing files that changed from the base of the PR and between 55745c9 and 67a0af3.

⛔ Files ignored due to path filters (1)

pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (2)

.github/workflows/update-s3-and-cloudfront.yaml
package.json

📝 Walkthrough

Walkthrough

Pins workflow actions, bumps Nx and pnpm, updates workspace dependency catalogs and overrides, removes @types/js-yaml from two packages, bumps docker-compose, and adds APISIX 3.17 support in e2e coverage and README tables.

Changes

Dependency and CI Updates

Layer / File(s)	Summary
Root and workspace dependency bumps `package.json`, `pnpm-workspace.yaml`, `.gitignore`	Nx packages move to 23.0.1, pnpm moves to 11.9.0, catalog versions are updated for multiple workspace packages, axios override minimum is raised, and `.nx/migrate-runs` is added to ignore rules.
Package cleanup and APISIX support updates `apps/cli/package.json`, `libs/converter-openapi/package.json`, `libs/backend-apisix-standalone/package.json`, `libs/backend-apisix/README.md`, `libs/backend-apisix-standalone/README.md`, `.github/workflows/e2e.yaml`	`@types/js-yaml` is removed from two package devDependencies, `docker-compose` is bumped in one library, APISIX 3.17.x is added to supported-version tables, and the e2e APISIX matrices gain 3.17.0 entries.
Workflow action pinning `.github/workflows/e2e.yaml`, `.github/workflows/lint.yaml`, `.github/workflows/release.yaml`, `.github/workflows/typecheck.yaml`, `.github/workflows/unit.yaml`, `.github/workflows/update-s3-and-cloudfront.yaml`	Workflow steps switch to pinned action revisions; release also updates `softprops/action-gh-release` and the macOS runner, and unit updates `NODE_OPTIONS` quoting.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly related PRs

api7/adc#448: Overlaps on package.json and pnpm-workspace.yaml dependency/catalog updates, including Vitest-related version changes.
api7/adc#461: Related APISIX support-table updates in the backend README files.

Suggested labels

test/api7

Suggested reviewers

LiteSun
guoqqqi
juzhiyuan

🚥 Pre-merge checks | ✅ 6

✅ Passed checks (6 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main change: upgrading the toolchain and dependencies across the repo.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
E2e Test Quality Review	✅ Passed	PASS: This PR only updates toolchain/workflows; no E2E test logic was changed, and the existing suites already exercise real APISIX/CLI flows.
Security Check	✅ Passed	No security regressions found: changes are workflow pinning, dependency bumps, and non-behavioral YAML import updates; no new secret, auth, TLS, or persistence issues.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch bzp/chore-upgrade-deps-260628

_{Comment @coderabbitai help to get the list of available commands.}

coderabbitai

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/workflows/release.yaml:
- Line 14: The checkout step in both release jobs still persists Git
credentials, which leaves unnecessary write access available to later
install/build steps. Update the existing actions/checkout usage in the release
workflow to disable persisted credentials for each job, and verify no later step
depends on git authentication.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

Push a commit to this branch (recommended)
Create a new PR with the fixes

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 91da6873-204e-4045-9b71-04865a87c31b

📥 Commits

Reviewing files that changed from the base of the PR and between 144101e and 24c148d.

⛔ Files ignored due to path filters (1)

pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (12)

.github/workflows/e2e.yaml
.github/workflows/lint.yaml
.github/workflows/release.yaml
.github/workflows/typecheck.yaml
.github/workflows/unit.yaml
.github/workflows/update-s3-and-cloudfront.yaml
.gitignore
apps/cli/package.json
libs/backend-apisix-standalone/package.json
libs/converter-openapi/package.json
package.json
pnpm-workspace.yaml

💤 Files with no reviewable changes (2)

libs/converter-openapi/package.json
apps/cli/package.json

bzp2010 added 4 commits June 29, 2026 01:27

chore: upgrade toolchain and dependencies

17e852e

nx

f44f2b5

deps

57149f8

apisix 3.17

24c148d

bzp2010 self-assigned this Jun 28, 2026

bzp2010 added the test/apisix-standalone Trigger the APISIX standalone test on the PR label Jun 28, 2026

bzp2010 added 2 commits June 29, 2026 02:07

docs apisix 3.17

c470bf8

fix

dcd8f08

coderabbitai Bot reviewed Jun 28, 2026

View reviewed changes

Comment thread .github/workflows/release.yaml

bzp2010 added 3 commits June 29, 2026 02:16

fix build

55745c9

deps

4507c6a

update s3

67a0af3

bzp2010 requested review from LiteSun, guoqqqi and juzhiyuan June 29, 2026 00:55

juzhiyuan approved these changes Jun 29, 2026

View reviewed changes

bzp2010 merged commit 595da28 into main Jun 29, 2026
39 of 40 checks passed

bzp2010 deleted the bzp/chore-upgrade-deps-260628 branch June 29, 2026 01:23

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: upgrade toolchain and dependencies#503

chore: upgrade toolchain and dependencies#503
bzp2010 merged 9 commits into
mainfrom
bzp/chore-upgrade-deps-260628

bzp2010 commented Jun 28, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Jun 28, 2026 •

edited

Loading

Review limit reached

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested labels

Suggested reviewers

Uh oh!

coderabbitai Bot left a comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

bzp2010 commented Jun 28, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Checklist

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Jun 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review limit reached

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested labels

Suggested reviewers

Uh oh!

coderabbitai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

bzp2010 commented Jun 28, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jun 28, 2026 •

edited

Loading