deps: consolidate Dependabot majors + fix corrupted client manifest + low-maintenance setup#36
Merged
Merged
Conversation
Fast-merged Dependabot PRs left client/package.json with duplicate react / react-dom keys (react 19 + react-dom 18 mismatch) and Vite 8 paired with an incompatible plugin-react 4. Repair and take the rest of the open bumps as one tested set: - client: react/react-dom 19, @vitejs/plugin-react 6 (for Vite 8); add client/.npmrc legacy-peer-deps for plugin-react 6's transitive Babel peers so npm ci is clean. Build + npm ci verified. - server: express 5, dockerode 5, dotenv 17, better-sqlite3 12. Tests 111/111, npm ci (native rebuild) clean, Express 5 boot smoke green (routing, auth, SPA fallback, SSE). Silence dotenv 17's startup tip (quiet: true). - ci: setup-qemu-action v4. Maintainability: group Dependabot minor/patch into one PR per ecosystem (majors stay individual), run CI on PRs to main (not arbitrary branch pushes), and add a Dependabot auto-merge workflow for patch/minor once CI is green. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_013Lj6nYJQDtLaZFvvEQJGM4
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The earlier fast-merges left
client/package.jsoncorrupted — duplicatereact/react-domkeys (react 19 + react-dom 18 mismatch) and Vite 8 with an incompatible plugin-react 4. This repairs it and takes the remaining open Dependabot bumps as one tested set, plus sets up low-maintenance automation.Fixes / upgrades
@vitejs/plugin-react→ 6 (needed for the already-merged Vite 8). Addedclient/.npmrc(legacy-peer-deps) for plugin-react 6's transitive Babel peer noise sonpm ciis clean. Build +npm civerified.npm ci(native rebuild) clean, and an Express-5 boot smoke passed (health, auth,/api/status, SPA fallback, 503 on the daemon-less container call). Silenced dotenv 17's startup tip.docker/setup-qemu-action→ v4.Low-maintenance automation (your goal)
This supersedes the 6 open Dependabot PRs (#26, #27, #29, #30, #32, #33) — I'll close them after merge.
🤖 Generated with Claude Code
Generated by Claude Code