Skip to content

chore(deps): aggregate follow-up Dependabot batch (api, ui)#276

Merged
agjs merged 1 commit into
mainfrom
chore/deps-weekly-batch-20260709b
Jul 9, 2026
Merged

chore(deps): aggregate follow-up Dependabot batch (api, ui)#276
agjs merged 1 commit into
mainfrom
chore/deps-weekly-batch-20260709b

Conversation

@agjs

@agjs agjs commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Summary

Dependency bumps

api — nodemailer 9.0.1→9.0.3 (#273) · lint group (#274): eslint-plugin-unicorn 69.0.0→70.0.0, prettier 3.9.1→3.9.4, typescript-eslint 8.62.0→8.62.1

ui — tailwind-shadcn group (#275): lucide-react 1.22.0→1.23.0, radix-ui 1.6.0→1.6.1, @tailwindcss/vite 4.3.1→4.3.2, tailwindcss 4.3.1→4.3.2 · lint tooling bumped in lockstep with api (unicorn 70.0.0, prettier 3.9.4, typescript-eslint 8.62.1) so prettier/lint versions stay identical across apps and avoid format-check drift — Dependabot only opened the api lint PR.

Test plan

  • cd apps/api && bun run validate — check + 1188 pass / 0 fail (live dev stack)
  • cd apps/ui && bun run validate — check + test:ci + build + size:check all pass
  • Full pre-push gate (gitleaks + osv-scanner + per-app validates)

App merge bars

Area Command
API cd apps/api && bun run validate
UI cd apps/ui && bun run validate
Repo drift bun run check (from repo root)

Conventions

  • No any, no blind as, no ! — no production source changed (only version pins)
  • No new env vars
  • No behavior changed — tests unchanged, all green

Closes #273, #274, #275

Second weekly batch — three Dependabot PRs (#273, #274, #275) opened
right after #272 merged. Lockfiles regenerated; api + ui gates pass
locally (api 1188/0 tests, ui check + test + build + size all green).

api (apps/api):
  nodemailer 9.0.1→9.0.3 (#273)
  lint group (#274): eslint-plugin-unicorn 69.0.0→70.0.0,
  prettier 3.9.1→3.9.4, typescript-eslint 8.62.0→8.62.1

ui (apps/ui):
  tailwind-shadcn group (#275): lucide-react 1.22.0→1.23.0,
  radix-ui 1.6.0→1.6.1, @tailwindcss/vite 4.3.1→4.3.2, tailwindcss 4.3.1→4.3.2
  lint tooling bumped in lockstep with api (unicorn 70.0.0, prettier 3.9.4,
  typescript-eslint 8.62.1) so prettier/lint versions stay identical across
  apps and avoid format-check drift — Dependabot only opened the api lint PR.

unicorn 70 is a major bump; no new rule violations surfaced and prettier
3.9.4 required no reformatting, so there is no source churn this round.
@agjs agjs merged commit 79ecc1c into main Jul 9, 2026
29 checks passed
@agjs agjs deleted the chore/deps-weekly-batch-20260709b branch July 9, 2026 13:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant