refactor(deps): migrate semver to verkit

[9romise]

No description provided.

[github-actions]

📊 Dependency Size Changes

Note

🎉 This PR removes 24.4 kB of dependencies.

📦 Package	📏 Size
@types/semver@7.7.1	-24.4 kB

Total size change: -24.4 kB

⚠️ Package Size Increase

📦 Package	📏 Base Size	📏 Source Size	📈 Size Change
npmx-language-server	235.1 kB	235.1 kB	+2 B

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 2aa87164-1ee1-4c6a-9f2b-5d96f22f42bc

📥 Commits

Reviewing files that changed from the base of the PR and between c0c21f4 and d45498d.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (3)

• AGENTS.md
• packages/language-server/package.json
• pnpm-workspace.yaml

🚧 Files skipped from review as they are similar to previous changes (1)

• pnpm-workspace.yaml

---

📝 Walkthrough

Walkthrough

The change replaces semver with verkit in workspace and package dependencies, language-core package utilities, and language-service diagnostic rules. Range parsing, version comparisons, prerelease handling, engine-range checks, and vulnerability fix selection now use verkit. Tests and vulnerability fixtures cover invalid ranges and versions, build metadata, and selecting the greatest fixed version.

Possibly related PRs

• npmx-dev/vscode-npmx#92: Updates overlapping language-service diagnostic rules with verkit-based semver and range comparisons.

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	No pull request description was provided, so its relevance to the dependency migration cannot be assessed.	Add a brief description that explains the migration from semver to verkit and the related test updates.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch verkit

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

packages/language-server/package.json

ESLint skipped: missing config or dependency (missing-dependency). The ESLint configuration references a package that is not available in the sandbox.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​verkit@​0.3.2

View full report