dependencies updates #38

HardMax71 · 2025-12-22T22:21:24Z

Summary by CodeRabbit

Chores
- Updated numerous backend and frontend dependencies and build tooling to newer versions (including core Python packages, plotting and HTTP libraries, Rollup tooling, and Tailwind/PostCSS integrations).
- No changes to public APIs, exported entities, or application behavior.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

coderabbitai · 2025-12-22T22:21:41Z

Walkthrough

Dependency version updates for both backend and frontend projects. Backend updates multiple Python package versions in backend/pyproject.toml. Frontend upgrades Rollup build tooling, Rollup plugins, a serve plugin, and related frontend tooling in frontend/package.json.

Changes

Cohort / File(s)	Summary
Backend dependencies `backend/pyproject.toml`	Bumps multiple Python dependency versions (examples: `asgiref` 3.9.1→3.11.0, `urllib3` 1.26.20→2.6.2, `Werkzeug` 3.0.4→3.1.4, `matplotlib` 3.9.2→3.10.8, `markdown-it-py` 3.0.0→4.0.0, etc.). No changes to public API declarations.
Frontend tooling upgrades `frontend/package.json`	Upgrades Rollup and related tooling (`rollup` ^3.15.0→^4.54.0, `@rollup/plugin-commonjs` ^24.0.0→^29.0.0, `@rollup/plugin-node-resolve` ^15.0.0→^16.0.3, `rollup-plugin-serve` ^1.1.1→^3.0.0), plus `@hey-api/openapi-ts` and `@tailwindcss/postcss` version bumps. No functional code changes.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Pre-merge checks and finishing touches

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title 'dependencies updates' is vague and generic, using non-descriptive language that fails to convey meaningful information about which dependencies were updated or why.	Consider a more specific title such as 'Update Python and Node.js dependencies' or 'Bump backend and frontend dependency versions' to better communicate the scope of changes.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch dependencies-bump

📜 Recent review details

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 6c1cc77 and 9f11a06.

⛔ Files ignored due to path filters (1)

backend/uv.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

backend/pyproject.toml

🚧 Files skipped from review as they are similar to previous changes (1)

backend/pyproject.toml

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (3)

GitHub Check: Scan Backend
GitHub Check: E2E Tests
GitHub Check: Integration Tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

coderabbitai

Actionable comments posted: 1

📜 Review details

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between c505216 and 6c1cc77.

⛔ Files ignored due to path filters (2)

backend/uv.lock is excluded by !**/*.lock
frontend/package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (2)

backend/pyproject.toml
frontend/package.json

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (3)

GitHub Check: Scan Backend
GitHub Check: Build Frontend
GitHub Check: E2E Tests

🔇 Additional comments (5)

frontend/package.json (3)

53-53: Minor version updates look reasonable.

The updates to @hey-api/openapi-ts (patch bump) and @tailwindcss/postcss (patch bump) appear to be minor updates that should be backwards compatible.

Also applies to: 58-58

66-66: Remove unused rollup-plugin-serve dependency.

The rollup-plugin-serve package is listed in package.json but is not used in the rollup configuration. The dev server is implemented via a custom HTTPS server in startServer(). Remove this unused dependency.

Likely an incorrect or invalid review comment.

27-27: The plugin versions are already compatible with Rollup 4.54.0. Both @rollup/plugin-commonjs 29.0.0 and @rollup/plugin-node-resolve 16.0.3 support Rollup 4.x and exceed the documented minimum version requirements. No verification action needed.

backend/pyproject.toml (2)

140-140: Both versions are available on PyPI and compatible with Python 3.12.

matplotlib 3.10.8 is available on PyPI with CPython 3.12 wheels, and ruff 0.14.10 is available on PyPI with Python 3 wheels.

14-14: Dependency versions verified as secure.

asgiref 3.11.0 has no known security vulnerabilities and is safe to use. markdown-it-py had denial of service vulnerabilities before v2.2.0, but version 4.0.0 includes the fix. pyasn1-modules 0.4.2 has no known security issues.

frontend/package.json

codecov-commenter · 2025-12-22T22:31:40Z

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Flag	Coverage Δ
backend	`66.80% <ø> (?)`
frontend	`21.52% <ø> (ø)`

Flags with carried forward coverage won't be shown. Click here to find out more.
see 225 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

sonarqubecloud · 2025-12-22T22:37:55Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependencies updates

6c1cc77

coderabbitai bot reviewed Dec 22, 2025

View reviewed changes

frontend/package.json Show resolved Hide resolved

urllib3 update

e0ced0c

werkzeug, fonttools fixes

9f11a06

HardMax71 merged commit a957854 into main Dec 22, 2025
15 checks passed

HardMax71 deleted the dependencies-bump branch December 22, 2025 22:44

coderabbitai bot mentioned this pull request Dec 31, 2025

dependencies update #58

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

dependencies updates #38

dependencies updates #38

Uh oh!

HardMax71 commented Dec 22, 2025 •

edited by coderabbitai bot

Loading

Uh oh!

coderabbitai bot commented Dec 22, 2025 •

edited

Loading

Uh oh!

coderabbitai bot left a comment

Uh oh!

Uh oh!

codecov-commenter commented Dec 22, 2025 •

edited

Loading

Uh oh!

sonarqubecloud bot commented Dec 22, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dependencies updates #38

dependencies updates #38

Uh oh!

Conversation

HardMax71 commented Dec 22, 2025 • edited by coderabbitai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

coderabbitai bot commented Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Pre-merge checks and finishing touches

Uh oh!

coderabbitai bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

codecov-commenter commented Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

sonarqubecloud bot commented Dec 22, 2025

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

HardMax71 commented Dec 22, 2025 •

edited by coderabbitai bot

Loading

coderabbitai bot commented Dec 22, 2025 •

edited

Loading

codecov-commenter commented Dec 22, 2025 •

edited

Loading