Skip to content

chore(deps): upgrade dependencies + packaging-metadata fixes - #53

Merged
kalwalt merged 3 commits into
devfrom
chore/deps-upgrade
Jul 7, 2026
Merged

chore(deps): upgrade dependencies + packaging-metadata fixes#53
kalwalt merged 3 commits into
devfrom
chore/deps-upgrade

Conversation

@kalwalt

@kalwalt kalwalt commented Jul 7, 2026

Copy link
Copy Markdown
Member

Package upgrades, guarded by the parity suite (Phase 0). First upgrade PR since the test harness landed — CI runs all 57 parity tests + the build against the new dependency tree.

Changes

  • Refresh the lockfile within existing semver ranges: typescript 5.7.3 → 5.9.3, @babel/*7.29.x, plus transitive updates.
  • prettier 3.5.1 → 3.5.3 (pinned ~3.5.3 — a minor bump reformats code, which would bloat this PR and conflict with in-flight work; kept conservative).
  • Packaging fix (audit, Axis 5): move prettier and ts-loader from dependenciesdevDependencies (they are dev/build-only and were polluting the published dependency set).
  • Dependabot now targets the dev integration branch (target-branch: dev).

Deliberately deferred

Build-tooling majors (babel-loader 9→10, webpack, etc.) are not upgraded here — the Vite migration (#42) removes webpack/babel entirely, so bumping them now is throwaway work.

Supersedes the stale Dependabot PRs

#30 (prettier), #36 (typescript), #37/#38 (@babel) — all target old main (pre-CI-fixes) and are covered here. #32 (babel-loader major) is intentionally deferred to #42. Recommend closing them.

Verification

🤖 Generated with Claude Code

kalwalt and others added 2 commits July 7, 2026 15:55
Guarded by the parity suite (Phase 0, #39): npm test 57 passed, npm run build-ts compiles.

- Refresh the lockfile within existing semver ranges: typescript 5.7.3 -> 5.9.3, @babel/* -> 7.29.x, plus transitive updates
- prettier 3.5.1 -> 3.5.3 (pinned ~3.5.3 to avoid reformatting churn and conflicts with in-flight PRs)
- Move prettier and ts-loader from dependencies to devDependencies — they are dev/build-only (audit finding, Axis 5)
- Point Dependabot at the dev integration branch (target-branch: dev)

Deliberately DEFERRED: build-tooling majors (babel-loader 9->10, webpack) are left for the Vite migration (#42), which removes webpack/babel entirely — upgrading them now would be thrown away.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@kalwalt kalwalt added this to the Parity & Modernization milestone Jul 7, 2026
@kalwalt kalwalt self-assigned this Jul 7, 2026
@kalwalt kalwalt added enhancement New feature or request dependencies Pull requests that update a dependency file labels Jul 7, 2026
…m optionals

The previous lockfile was regenerated on Windows with npm 10.9.4, which omits
other-platform optional native binaries (@rolldown/*, lightningcss-*) — npm
bug #4828. CI's 'npm ci' (npm 11) then failed with 'package-lock.json out of
sync / Missing: ...'. Regenerated with npm 11 (via npx), which writes all
platform optionals. Verified: 'npm@11 ci' + vitest = 57 passed.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@kalwalt
kalwalt merged commit af3ebfd into dev Jul 7, 2026
4 checks passed
@kalwalt
kalwalt deleted the chore/deps-upgrade branch July 7, 2026 21:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant