Skip to content

build(deps): bump github.com/railwayapp/railpack from 0.37.1 to 0.39.0 in the railpack group - #9

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/railpack-f02ba03647
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/railpack-f02ba03647

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the railpack group with 1 update: github.com/railwayapp/railpack.

Updates github.com/railwayapp/railpack from 0.37.1 to 0.39.0

Release notes

Sourced from github.com/railwayapp/railpack's releases.

railpack v0.39.0

What's Changed

New Contributors

Full Changelog: railwayapp/railpack@v0.38.0...v0.39.0

railpack v0.38.0

Breaking Changes

  • pnpm provisioning and devEngines precedence: pnpm is now installed directly via Mise instead of Corepack, and devEngines declarations in package.json now take precedence over engines, .nvmrc, and lockfiles for Node.js and pnpm resolution. (#678)

Providers

New

  • Node: Railpack now supports pnpm idiomatic version files and devEngines.packageManager in package.json, provisioning pnpm directly via Mise instead of Corepack. Specify your pnpm version using "devEngines": { "packageManager": { "name": "pnpm", "version": "9.1.0" } } (or the array syntax [{ "name": "pnpm", "version": "9.1.0" }]), and Railpack will automatically resolve and install it. by @​iloveitaly in railwayapp/railpack#678

Mise Upgrades

Updated mise from v2026.8.11 to v2026.8.13.

  • GitHub install rate limits: Lockfile-pinned tools with checksums no longer query the GitHub API at install time, avoiding rate-limit failures during builds. (v2026.8.13)
  • UTF-8 BOM in version files: Idiomatic version files such as .tool-versions, .node-version, and package.json that begin with a UTF-8 byte-order mark now parse correctly instead of corrupting version strings. (v2026.8.12)
  • Monorepo lockfiles: Tool versions across monorepo directories are now tracked in their respective lockfiles rather than merged into a single file. (v2026.8.13)
  • Go GOROOT isolation: go install no longer inherits a GOROOT exported for a different Go installation, preventing tool version mismatch errors. (v2026.8.12)

Full Changelog: railwayapp/railpack@v0.37.1...v0.38.0


Internal improvements to testing and dependency maintenance by @​iloveitaly.

Commits
  • a42cbf5 feat(node): suggest moving @​tanstack/react-start out of devDependencies (#735)
  • c0f3076 fix(node): don't crash TanStack Start apps that use Nitro without a start scr...
  • 2a40d4f chore: mise update 2026.8.16 (#731)
  • 84e38f8 chore: mise update 2026.8.15 (#729)
  • 8aa8358 chore: mise update 2026.8.14 (#726)
  • 97625a2 chore: mise update 2026.8.13 (#722)
  • d621a20 chore: mise update 2026.8.12 (#718)
  • 83ba787 test: update example snapshot for mise image version (#717)
  • 33a75f8 feat(mise): support pnpm idiomatic version files (#678)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the railpack group with 1 update: [github.com/railwayapp/railpack](https://github.com/railwayapp/railpack).


Updates `github.com/railwayapp/railpack` from 0.37.1 to 0.39.0
- [Release notes](https://github.com/railwayapp/railpack/releases)
- [Changelog](https://github.com/railwayapp/railpack/blob/main/RELEASE.md)
- [Commits](railwayapp/railpack@v0.37.1...v0.39.0)

---
updated-dependencies:
- dependency-name: github.com/railwayapp/railpack
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: railpack
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants