Skip to content

Dependency sweep: consolidated green updates - #1739

Merged
testower merged 1 commit into
masterfrom
deps/green-sweep
Jul 28, 2026
Merged

Dependency sweep: consolidated green updates#1739
testower merged 1 commit into
masterfrom
deps/green-sweep

Conversation

@testower

Copy link
Copy Markdown
Contributor

Consolidates the safe green Renovate + Dependabot PRs into one locally-verified change, avoiding the lockfile rebase-cascade of merging them individually.

Included

Non-major (supersedes #1727): @apollo/client 4.2.8, @mui/x-date-pickers 8.29.2, @sentry/react 10.68.0, @types/node 24.13.3, axios 1.18.1, caniuse-lite 1.0.30001806, graphql-tag 2.12.7, lint-staged 17.2.0, prettier 3.9.6, react/react-dom 19.2.8, react-router-dom 7.18.1, vite 7.3.6

Safe majors — build + tests green (supersedes #1731 #1737 #1732): graphql 17.0.2, @testing-library/jest-dom 7.0.0, uuid 14.0.1

Security (supersedes #1723): lodash/postcss transitives refreshed via lockfile regeneration.

Verification

  • npm run check — clean (reformatted 3 files for prettier 3.9.6, cosmetic union-type wrapping)
  • npm run test -- run — 142/142 pass
  • npm run build — succeeds

Not included (tracked separately — real build breaks)

vite v8 (#1733/#1649), material-ui major (#1707), react-intl v10 (#1648), typescript v7 (#1738).

Note

The remaining npm audit findings are dev-only transitive chains (source-map-explorer) or the react-router RSC-CSRF advisory, which is not applicable to this Vite SPA (no RSC) and whose only "fix" is a downgrade to 7.11.0.

Consolidates the safe/green Renovate + Dependabot PRs into one verified change:

Non-major (#1727): @apollo/client 4.2.8, @mui/x-date-pickers 8.29.2,
  @sentry/react 10.68.0, @types/node 24.13.3, axios 1.18.1,
  caniuse-lite ...806, graphql-tag 2.12.7, lint-staged 17.2.0,
  prettier 3.9.6, react/react-dom 19.2.8, react-router-dom 7.18.1, vite 7.3.6
Safe majors (build+tests green): graphql 17.0.2 (#1731),
  @testing-library/jest-dom 7.0.0 (#1737), uuid 14.0.1 (#1732/#1723)
Security (#1723): lodash/postcss transitives refreshed via lockfile regen

Reformatted 3 files for prettier 3.9.6. Verified: prettier check clean,
142/142 tests pass, production build succeeds.

Supersedes #1727 #1731 #1737 #1732 #1723
@sonarqubecloud

Copy link
Copy Markdown

@github-actions

Copy link
Copy Markdown

Preview for this PR in dev (updated for commit 2247608):

https://ent-ror-abzu-dev--preview-1739-deps-green-sweep-if5qf88r.web.app
(Expires Tue, 04 Aug 2026 09:36:08 GMT)

@testower
testower merged commit 1e0838c into master Jul 28, 2026
4 checks passed
@testower
testower deleted the deps/green-sweep branch July 28, 2026 09:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant