Set stricter versions for internal packages depending on each other

[juliolmuller]

Summary by CodeRabbit

• Patch Releases

  • Released patch versions across multiple packages with dependency constraint refinements to improve stability and predictability.

• Chores

  • Updated internal dependency version constraints across packages.
  • Updated dependency management policy documentation.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: bfb71038-2646-4de5-806a-b482a8575be0

📥 Commits

Reviewing files that changed from the base of the PR and between 6cc822d and df89b25.

📒 Files selected for processing (13)

• agents/dependencies.md
• packages/br-utils/CHANGELOG.md
• packages/br-utils/composer.json
• packages/cnpj-gen/CHANGELOG.md
• packages/cnpj-gen/composer.json
• packages/cnpj-utils/CHANGELOG.md
• packages/cnpj-utils/composer.json
• packages/cnpj-val/CHANGELOG.md
• packages/cnpj-val/composer.json
• packages/cpf-utils/CHANGELOG.md
• packages/cpf-utils/composer.json
• packages/cpf-val/CHANGELOG.md
• packages/cpf-val/composer.json

---

📝 Walkthrough

Walkthrough

This PR standardizes internal dependency version constraints across the monorepo from caret (^) to tilde (~) notation. It updates the dependency policy to document the new convention and applies it systematically to all affected composer.json files with corresponding changelog entries.

Changes

Dependency constraint standardization to tilde notation

Layer / File(s)	Summary
Dependency policy update agents/dependencies.md	Adds approval-free exception for replicating dependency bumps when the new published semver range mirrors sibling packages, and expands internal dependency versioning guidance with tilde-constraint conventions for BR Utils packages, including instructions for determining the correct ~X.Y.Z version via git tag lookup.
CPF package dependency updates packages/cpf-utils/composer.json, packages/cpf-utils/CHANGELOG.md, packages/cpf-val/composer.json, packages/cpf-val/CHANGELOG.md	CPF utility packages update their internal dependency constraints from caret to tilde notation (^1.0 → ~1.0.x), with patch changelogs documenting the changes for version 1.1.1 and 1.0.1.
CNPJ package dependency updates packages/cnpj-utils/composer.json, packages/cnpj-utils/CHANGELOG.md, packages/cnpj-val/composer.json, packages/cnpj-val/CHANGELOG.md, packages/cnpj-gen/composer.json, packages/cnpj-gen/CHANGELOG.md	CNPJ utility packages update their internal dependency constraints from caret to tilde notation, with patch changelogs documenting the changes for versions 2.0.1, 2.0.1, and 2.1.1 respectively.
Root br-utils package update packages/br-utils/composer.json, packages/br-utils/CHANGELOG.md	Top-level br-utils package updates dependencies on cnpj-utils and cpf-utils from caret to tilde constraints (^2.0 → ~2.0.0, ^1.1 → ~1.1.0), with patch changelog for version 2.0.1.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Possibly related PRs

• LacusSolutions/br-utils-php#44: Earlier PR that bumped lacus/cnpj-dv constraint in cnpj-gen/composer.json; this PR further tightens it to tilde notation.

Suggested labels

dependencies, documentation

Poem

🐰 From caret to tilde, the versions align,
Each package now follows the standardized line,
Predictable patches, no surprises to find,
The monorepo's dependencies, perfectly signed! ✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main change: switching dependency constraints from caret to tilde notation to enforce stricter version pinning across internal packages.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/specific-pkg-verison

Warning

Review ran into problems

🔥 Problems

Stopped waiting for pipeline failures after 30000ms. One of your pipelines takes longer than our 30000ms fetch window to run, so review may not consider pipeline-failure results for inline comments if any failures occurred after the fetch window. Increase the timeout if you want to wait longer or run a @coderabbit review after the pipeline has finished.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}