Skip to content

Updated NPM packages to latest versions#7645

Merged
DawoudIO merged 5 commits intomasterfrom
package-version-sync
Nov 27, 2025
Merged

Updated NPM packages to latest versions#7645
DawoudIO merged 5 commits intomasterfrom
package-version-sync

Conversation

@DawoudIO
Copy link
Contributor

What Changed

  • Updated NPM packages to latest versions

Type

  • ✨ Feature
  • 🐛 Bug fix
  • ♻️ Refactor
  • 🏗️ Build/Infrastructure
  • 🔒 Security

Testing

Screenshots

Security Check

  • Introduces new input validation
  • Modifies authentication/authorization
  • Affects data privacy/GDPR

Code Quality

  • Database: Propel ORM only, no raw SQL
  • No deprecated attributes (align, valign, nowrap, border, cellpadding, cellspacing, bgcolor)
  • Bootstrap CSS classes used
  • All CSS bundled via webpack

Pre-Merge

  • Tested locally
  • No new warnings
  • Build passes
  • Backward compatible (or migration documented)

@DawoudIO DawoudIO added this to the 6.3.0 milestone Nov 26, 2025
@DawoudIO DawoudIO requested a review from a team as a code owner November 26, 2025 23:17
Copilot AI review requested due to automatic review settings November 26, 2025 23:17
@DawoudIO DawoudIO requested review from DAcodedBEAT, MrClever, bigtigerku, grayeul and respencer and removed request for a team November 26, 2025 23:17
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates NPM package dependencies as part of build/infrastructure and security maintenance. However, the PR title "Updated NPM packages to latest versions" is misleading - while most packages are updated to newer versions, TypeScript is actually downgraded from 5.7.2 to 5.9.3, which is inconsistent with the stated goal.

Key issues identified:

  • TypeScript downgrade from a newer version (bug)
  • Inconsistent version pinning strategy across packages (best practice)
  • Several packages switched from semver ranges (^) to exact versions without clear justification

Positive updates:

  • Cypress: 15.4.0 → 15.7.0 (minor version upgrade for testing framework)
  • Webpack: 5.97.1 → 5.102.1 (patch updates with bug fixes)
  • Multiple TypeScript type definitions updated
  • Various dependency patches for security and bug fixes

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 3 comments.

File Description
package.json Updates 20+ package versions; removes semver ranges (^) from many dependencies; downgrades TypeScript
package-lock.json Reflects package.json changes with full dependency tree updates; includes peer dependency additions and internal dependency restructuring

DawoudIO and others added 4 commits November 26, 2025 15:45
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@DawoudIO DawoudIO merged commit 458aaa6 into master Nov 27, 2025
7 checks passed
@DawoudIO DawoudIO deleted the package-version-sync branch November 27, 2025 00:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants