Skip to content

chore(deps): refresh dependencies and take verified majors - #15

Merged
albanm merged 5 commits into
mainfrom
chore-deps-refresh
Sep 23, 2026
Merged

albanm merged 5 commits into
mainfrom
chore-deps-refresh

Conversation

@albanm

@albanm albanm commented Sep 23, 2026

Copy link
Copy Markdown
Member

Routine dependency refresh: in-range updates, node:24.21.0-alpine3.24 base image, and majors verified side by side against their previous version.

  • api: config 3 → 5 (identical loaded config across production, development, env-var and NODE_CONFIG scenarios; ships its own types so @types/config is dropped), nanoid 5 → 6 (identical output).
  • ui: @data-fair/frame 0.17 → 0.18, unplugin-vue-components 31 → 32, vue-tsc 2 → 3. The built bundle is identical apart from frame's content-side data-iframe-height="false" opt-out; no frame message protocol change.
  • Remove the root sass: 1.98.0 pin: sass-embedded builds the ui in the alpine image on its own, with byte-identical css/js.
  • dev/status.sh: probe dev-api's ping on its own port. /api/ping is mounted before the site middleware, so it always 404'd through nginx.

npm audit (full and --omit=dev) and trivy on the image: 0 before, 0 after.

Deferred: mongodb 7, blocked by the mongodb: "6" peer dependency of @data-fair/lib-node 2.13.3.

Heads-up: config 5 makes top-level config objects and arrays inextensible; nothing mutates config today. After pulling, run npm run build-types and restart dev-api: the gitignored validators go stale when @data-fair/lib-common-types moves.

albanm and others added 5 commits September 23, 2026 15:56
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
config 5 ships its own types. Both majors were compared side by side with
their previous version: identical loaded config across production,
development, env-var and NODE_CONFIG scenarios; identical nanoid output.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Built bundle compared against the previous versions: identical file set and
components.d.ts; the only code difference is the frame content-side
data-iframe-height opt-out. frame 0.18 has no message protocol change.
vue-tsc 3 checked with a canary .vue file to still report template and
script errors.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
sass-embedded now builds the ui inside the alpine image on its own: the
image built without the pin ships byte-identical css and js to a local build.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
/api/ping is mounted before the site middleware that strips the /events
prefix, so /events/api/ping through nginx always returned 404 and status.sh
reported a healthy dev-api as ERROR.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@albanm
albanm merged commit 1a253bd into main Sep 23, 2026
3 of 4 checks passed
@albanm
albanm deleted the chore-deps-refresh branch September 23, 2026 14:35
BatLeDev added a commit that referenced this pull request Sep 25, 2026
config 5 no longer resolves NODE_CONFIG_DIR=api/config (Cannot find module
'api/config/default.cjs'): the quality check fails since the dependencies refresh (#15).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant