chore(deps): weekly dependency update to latest pinned versions - #364
Draft
jimmydjabali wants to merge 1 commit into
Draft
chore(deps): weekly dependency update to latest pinned versions#364jimmydjabali wants to merge 1 commit into
jimmydjabali wants to merge 1 commit into
Conversation
Bump 58 dependencies to their latest published versions (exact pins). All patch/minor updates within the same major line, plus text-encoding-polyfill pinned exact. Verified: npm install resolves, all 19 patch-package patches apply, tsc introduces no new type errors vs. the pre-existing baseline, and the production web build succeeds. Adapt webpack config for react-router-dom 7.18: add resolve.fullySpecified=false for .mjs so react-router's extension-less "process/browser" import resolves. Held back (see PR description) 45 packages: the React Native 0.81 toolchain, packages carrying version-pinned patch-package patches, native/build-toolchain major upgrades, styled-components 6.4 and @yudiel/react-qr-scanner 2.6 (type/API regressions), and the bitcoinjs-lib pre-release pin. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TfjnEKb2TT2HE1AoynE9Ko
✅ Deploy Preview for swissbitcoinpayapp ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview for app-swiss-bitcoin-pay-ch ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Weekly dependency refresh: 58 dependencies bumped to their latest published versions, pinned exact (all patch/minor within the same major line).
text-encoding-polyfillwas also converted from a caret range to an exact pin (^0.6.7→0.6.7).Validation
npm installresolves cleanly (legacy-peer-deps).patch-packagepatches still apply cleanly.tsc --noemit: 0 new type errors introduced vs. the pre-existing baseline (382 after vs. 383 before — the typecheck is already red onmain, independent of this change).webpack --mode=production): succeeds (warnings only).Code change required by an update
webpack.config.ts— added{ test: /\.m?js$/, resolve: { fullySpecified: false } }.react-router-dom 7.18 imports
process/browser(extension-less) from its.mjsbuild; webpack 5 rejects that under fully-specified ESM resolution, breaking the web build. This rule relaxes extension resolution for.mjsdependencies (the standard RN-web + webpack fix) and restores the build.Held back (not updated) and why
React Native 0.81 toolchain — version-locked, needs a native migration
react-native(0.81.4 → 0.86.0),@react-native/assets-registry,@react-native/babel-preset,@react-native/eslint-config,@react-native/metro-config,@react-native/typescript-config,@react-native-community/cli(+-platform-android/-platform-ios). RN 0.81 → 0.86 is 5 breaking RN releases touching iOS/Android native code; not validatable here.Carry a version-pinned patch-package patch (bumping silently drops the patch)
react-native-web(0.21.1),babel-plugin-react-native-web(kept aligned),react-native-ble-plx(3.4.0),lottie-react-native(7.3.4),@ledgerhq/react-native-hid(6.32.10). (react-native-webviewand@sentry/react-nativealso carry patches and are majors — listed below.)Major bumps held — native / build-toolchain / broad surface, unvalidatable unattended
@fortawesome/react-native-fontawesome0.3→1.0,@ledgerhq/hw-app-btc10→11,@react-native-async-storage/async-storage2→3,@react-native-community/slider4→5,@sentry/react-native7→8,@sentry/webpack-plugin4→5,react-native-bootsplash6→7,react-native-device-info14→15,react-native-error-boundary2→3,react-native-get-random-values1→2,react-native-screenguard1→2,react-native-vision-camera4→5,react-native-webview13→14,i18next25→26 +react-i18next15→17 (paired; broadt()type surface),@babel/*7→8,eslint9→10 +@eslint/js9→10 +@eslint/compat1→2 +eslint-plugin-react-hooks5→7,typescript5.9→7.0,@types/node24→26,webpack-cli6→7,webpack-dev-server5→6,uuid13→14,locale-currency0.0.4→1.0.0.Same-major bumps that regress in this repo — held to keep the change zero-regression
tscerrors (asprop /onPress/disabled/ prop-existence on styled RN-web components). Needs a focused typing pass.audiokey was removed from thecomponentsprop (IScannerComponents), breakingQRCamera.tsx. Payment-critical scanner; not bumped without runtime validation.Intentional pins left as-is
react-native-nyx-printer— deliberate github fork pin.bitcoinjs-lib7.0.0-rc.0 — deliberate pre-release pin; rc → 7.0.1 on a wallet-signing core lib not done without runtime validation.react-native-text-size4.0.0-rc.1 — already latest, patched.Generated by Claude Code