⬆️ chore: update dependencies to latest compatible versions#665
Merged
Conversation
- Bump 28 patch/minor deps (Radix UI, Storybook 10.5, Tailwind 4.3, Vite 8.1.5, Vitest 4.1.10, typescript-eslint 8.65, etc.) - Major updates: @testing-library/jest-dom 7, react-day-picker 10, vite-plugin-dts 5 - Fix Datepicker: react-day-picker 10 removed the deprecated classNames.table key; merge w-full into month_grid - Add .ncurc.json rejecting eslint 10 (react/vitest plugins don't support it yet) and typescript 7 (blocked by @typescript-eslint peer range) - Document the dependency update workflow in CLAUDE.md - npm audit fix: brace-expansion high severity resolved (0 vulnerabilities)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Non-interactive dependency update via
npm-check-updates(npx npm-check-updates --format group -u), keeping only versions that pass the full toolchain.Updated (31 packages)
@testing-library/jest-dom6 → 7,react-day-picker9 → 10,vite-plugin-dts4 → 5.npm audit fix: resolved high-severitybrace-expansionadvisory (GHSA-3jxr-9vmj-r5cp) — 0 vulnerabilities remaining.Intentionally NOT updated
eslint-plugin-reactsupports up to ESLint 9.7 andeslint-plugin-vitestup to ESLint 9; the flat config also imports@eslint/js, no longer bundled with ESLint 10. Stays on^9.39.5.@typescript-eslint8.65 requires TypeScript<6.1; the peer conflict breaksnpm install. Stays on^6.0.3.Both are now listed in a new
.ncurc.jsonrejectarray (same pattern as the civo micro-frontends) sodeps:updateskips them until the ecosystem catches up.Code changes
react-day-picker10 removed the deprecatedclassNames.tablekey — mergedw-fullintomonth_grid(the replacement key the component already used).npm-check-updates, respect.ncurc.json, verify with lint/types/ci).Test plan
npm run lint— cleannpm run check:types— cleannpm run ci— prettier check, 460 tests passed (35 files), production build OKnpm audit— 0 vulnerabilitiesnpx npm-check-updatesre-run confirms.ncurc.jsonreject list is honored