Files
composiohq__composio/turbo.jsonc
T
Alberto Schiabel 58bc93b2d9 chore(deps): consolidate dependency updates (#3760)
This PR:
- consolidates https://github.com/ComposioHQ/composio/pull/3733,
https://github.com/ComposioHQ/composio/pull/3735 through
https://github.com/ComposioHQ/composio/pull/3744, and
https://github.com/ComposioHQ/composio/pull/3752
- refreshes the pnpm workspace dependencies under the existing
`minimumReleaseAge` supply-chain gate
- keeps latest compatible pins for ESLint 9, AI SDK 6, and Cloudflare
workers types 4 where latest majors conflict with the current workspace
- keeps zod-v3 runtime fixtures on `zod@3.25.76` while bumping the
workspace catalog to zod 4
- bumps Python `composio-client` to `1.42.0` and refreshes `uv.lock`
- updates the SHA-pinned Claude and Codex workflow actions from the
Dependabot action group
- adds a patch changeset for the versioned package manifests touched by
dependency updates
- verifies the rollup with frozen pnpm/uv locks, peer checks, audit
threshold checks, typecheck, lint, builds, TypeScript tests, and Python
`nox -s chk`

## Context

`pnpm audit --prod --audit-level=moderate` passes. The remaining
production audit item is a low `@ai-sdk/provider-utils` advisory through
Mastra transitive dependencies; forcing it higher would require leaving
the compatible stable Mastra dependency path.
2026-07-06 14:33:55 +04:00

96 lines
3.0 KiB
JSON

{
"$schema": "https://turbo.build/schema.json",
// pnpm is installed and enforced by mise (`npm:pnpm` in mise.toml). The root
// `packageManager` field exists for tools like Turbo that need explicit
// workspace package-manager metadata; keep it aligned with mise.toml.
"dangerouslyDisablePackageManagerCheck": true,
// The toolchain (node, bun, pnpm, tsgo host) is pinned by mise, not by
// package.json/lockfile, so toolchain bumps must invalidate every task hash
// or restored CI caches would skip the very runs meant to validate them.
"globalDependencies": ["mise.toml", "mise.lock"],
"tasks": {
"build": {
"dependsOn": ["^build"],
"inputs": [
"$TURBO_DEFAULT$",
"tsdown.config.ts",
// for core
"../../../tsdown.config.base.ts",
"../../../tsconfig.base.json",
// for providers
"../../../../tsdown.config.base.ts",
"../../../../tsconfig.base.json"
],
"outputs": ["dist/"]
},
"test": {
"dependsOn": ["^build"]
},
"test:e2e": {
"dependsOn": ["^build"],
"env": ["ANTHROPIC_API_KEY", "COMPOSIO_API_KEY", "COMPOSIO_BASE_URL", "COMPOSIO_USER_API_KEY", "OPENAI_API_KEY"],
"cache": false
},
"test:e2e:node": {
"dependsOn": ["^build"],
"env": ["ANTHROPIC_API_KEY", "COMPOSIO_API_KEY", "COMPOSIO_BASE_URL", "COMPOSIO_USER_API_KEY", "COMPOSIO_E2E_NODE_VERSION", "OPENAI_API_KEY"],
"cache": false
},
"test:e2e:deno": {
"dependsOn": ["^build"],
"env": ["COMPOSIO_API_KEY", "COMPOSIO_BASE_URL", "COMPOSIO_USER_API_KEY", "COMPOSIO_E2E_DENO_VERSION", "OPENAI_API_KEY"],
"cache": false
},
"test:e2e:cli": {
"dependsOn": ["^build"],
"env": ["COMPOSIO_API_KEY", "COMPOSIO_BASE_URL", "COMPOSIO_USER_API_KEY", "COMPOSIO_E2E_CLI_VERSION", "OPENAI_API_KEY"],
"cache": false
},
"test:e2e:cloudflare": {
"dependsOn": ["^build"],
"env": ["COMPOSIO_API_KEY", "COMPOSIO_BASE_URL", "COMPOSIO_USER_API_KEY", "OPENAI_API_KEY"],
"cache": false
},
"install:binary": {
"dependsOn": ["build:binary"],
"cache": false
},
"clean": {
"cache": false
},
"typecheck": {
"dependsOn": ["^build"],
// package tsconfigs extend the root base config, which lives outside the
// package dirs and is therefore not part of $TURBO_DEFAULT$
"inputs": [
"$TURBO_DEFAULT$",
// for core
"../../../tsconfig.base.json",
// for providers
"../../../../tsconfig.base.json"
]
},
"typecheck:tsc": {
"dependsOn": ["^build"],
"cache": false
},
"//#clean": {
"cache": false
},
"record": {
"dependsOn": ["^build"],
"inputs": [
"src/**",
"scripts/record.ts",
"recordings/recordings.yaml"
],
"outputs": [
"recordings/tapes/**",
"recordings/svgs/**",
"recordings/ascii/**"
],
"env": ["COMPOSIO_API_KEY"]
}
}
}