Skip to content

chore(deps): upgraded to latest dependencies#280

Merged
yeshamavani merged 5 commits intomasterfrom
GH-279
Apr 21, 2026
Merged

chore(deps): upgraded to latest dependencies#280
yeshamavani merged 5 commits intomasterfrom
GH-279

Conversation

@Sourav-kashyap
Copy link
Copy Markdown
Contributor

Description

This issue tracks upgrading all project dependencies to their latest stable versions.

Changes

  • Updated all dependencies and devDependencies to latest versions
  • Resolved version conflicts and peer dependency issues
  • Fixed breaking changes introduced by major version upgrades

Checklist:

  • Performed a self-review of my own code
  • npm test passes on your machine

Build Passed:

Screenshot 2026-04-07 at 1 10 49 PM

Test Passed:

Screenshot 2026-04-07 at 1 10 59 PM

@Sourav-kashyap Sourav-kashyap self-assigned this Apr 7, 2026
@Sourav-kashyap Sourav-kashyap force-pushed the GH-279 branch 2 times, most recently from eb73d5d to 6353674 Compare April 7, 2026 10:19
Removed a period from the description field.
@sonarqubecloud
Copy link
Copy Markdown

SonarQube reviewer guide

Summary: Dependency updates across the project, including GitHub Actions version upgrades, npm package updates, and installation script changes.

Review Focus: The most significant change is adding --ignore-scripts flag to npm ci commands in workflows, which prevents execution of npm scripts during installation. This is a security/stability measure but could impact builds if they rely on postinstall scripts. Additionally, Trivy action was updated from v0.28.0 to v0.35.0 with explicit commit hash pinning.

Start review at: .github/workflows/main.yaml. This file contains the primary workflow change that affects all builds—switching npm ci to npm ci --ignore-scripts—which is important to verify doesn't break the test pipeline, and it shows the systematic upgrade pattern (actions/checkout@v3→v4, actions/setup-node@v3→v4) applied across all workflow files.

💬 Please send your feedback

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@yeshamavani yeshamavani merged commit 757a491 into master Apr 21, 2026
7 checks passed
@yeshamavani yeshamavani deleted the GH-279 branch April 21, 2026 08:50
@yeshamavani
Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 13.1.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants