Update project dependencies - #587
Merged
Merged
Conversation
|
Coverage report for commit: 7254912 Summary - Lines: 100.00% | Methods: 100.00% | Branches: 96.67%
🤖 comment via lucassabreu/comment-coverage-clover |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Related Issue
N / A
PR Type
Description
Updates the project's dependencies to their latest versions, including a major version bump of pnpm from 10.33.0 to 11.25.0. The lockfile has been regenerated accordingly and now makes use of pnpm 11's built-in supply-chain protections, removing the need for the manually maintained security
overridesthat previously pinned patched versions of vulnerable transitive dependencies.Proposed Changes
packageManagerfrom pnpm 10.33.0 to pnpm 11.25.0.microdiffto ^1.6.0 andreact-error-boundaryto ^6.1.4.eslint,typescript,typescript-eslint,vite(^8.2.2),vitest(^4.1.11),@vitejs/plugin-react,@testing-library/jest-dom(7.0.1),@types/node(^26.4.1),prettierand others.vite-plugin-dtsconfiguration fromrollupTypes/outDiroptions to the newbundleTypesoption (vite-plugin-dts ^5.1.0).overridesfrompnpm-workspace.yamlin favour of pnpm 11'sminimumReleaseAgeStrictsupply-chain setting, excludinghappy-dom@20.13.2.peerDependencyRulesallowed versions for@babel/eslint-parser,@babel/eslint-plugin,@vitejs/plugin-reactandeslint-plugin-react-hooks.@babel/core(^8.0.1),@microsoft/api-extractor(^7.59.0) andjiti(^2.7.0).pnpm-lock.yaml.How Has This Been Tested?
Screenshots/Recordings
Breaking Changes
Checklist
Additional Notes
All 43 unit tests pass (2 skipped). Vite 8.2.2 now emits a warning about
configLoader: 'native'unsupported features in the Vite config (__dirnameusage and extension-less imports), which can be suppressed withVITE_CONFIG_NATIVE_IGNORE_WARNING=trueand addressed separately since this is something that will affect us only in the next major vite version.