Skip to content

1.0.3

Choose a tag to compare

View all tags
@SyniRon SyniRon released this 22 May 13:07
· 172 commits to main since this release
1.0.3
9f71849
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Maintenance release. No user-facing changes — entirely dependency hygiene and CI tooling. Staging has been running this for the past hour with the apexcharts upgrade verified against real roster data.

Dependency bumps

Client

  • react 18.2.0 → 18.3.1 (+ react-dom)
  • apexcharts 3.43.0 → 3.54.1
  • react-apexcharts 1.4.1 → 1.5.0
  • lucide-react 1.11.0 → 1.16.0
  • tailwind-merge 3.5.0 → 3.6.0
  • autoprefixer 10.4.16 → 10.5.0
  • postcss 8.4.31 → 8.5.14

Server

  • express 4.17.2 → 5.2.1 (audited surface area; v5 breaking changes don't touch this codebase)
  • axios 0.25.0 → 1.16.1 (latent fix — axios-retry already required axios ≥ 1)
  • compression 1.7.4 → 1.8.1
  • cors 2.8.5 → 2.8.6

GitHub Actions

  • actions/checkout v3/v4 → v6
  • docker/login-action v3 → v4
  • docker/build-push-action v5 → v7.1.0

Tooling

  • Dependabot configured with a weekly cooldown to prevent PR-spam (#102)
  • Removed five orphan client deps (express, date-fns, compression, cors, axios) that weren't actually imported anywhere — Next.js app doesn't need them (#116)
  • Prettier is now self-hosted via a root package.json instead of the third-party creyD/prettier_action (which had a version-pinning bug); one-time Prettier 3 reformat applied across 11 files, all trailingComma: "all" cosmetic (#122)

Not in this release

Held for dedicated migration sessions, both with explanatory comments on their Dependabot PRs:

  • Tailwind CSS 3 → 4 (#113) — full rewrite, needs CSS-first config migration
  • Next.js 13 → 16 (#120) — three majors of breaking changes; will land paired with React 19. Worth prioritizing because 13.5.4 has ~10 unpatched advisories.

PRs: #115, #116, #121, #122, #123

Assets 2
Loading