Skip to content

deps(deps): bump the vite-react-ecosystem group with 3 updates#20

Closed
dependabot[bot] wants to merge 4 commits intomainfrom
dependabot/npm_and_yarn/main/vite-react-ecosystem-a21679d681
Closed

deps(deps): bump the vite-react-ecosystem group with 3 updates#20
dependabot[bot] wants to merge 4 commits intomainfrom
dependabot/npm_and_yarn/main/vite-react-ecosystem-a21679d681

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 27, 2026

Bumps the vite-react-ecosystem group with 3 updates: @tanstack/react-query, vite and vite-plugin-checker.

Updates @tanstack/react-query from 5.62.1 to 5.90.20

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-persist-client@​5.90.20

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.91.17
    • @​tanstack/react-query@​5.90.18

@​tanstack/react-query@​5.90.20

Patch Changes

  • Updated dependencies [e7258c5]:
    • @​tanstack/query-core@​5.90.20

@​tanstack/react-query-persist-client@​5.90.19

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.91.16
    • @​tanstack/react-query@​5.90.17

@​tanstack/react-query@​5.90.19

Patch Changes

  • Updated dependencies [53fc74e]:
    • @​tanstack/query-core@​5.90.19

@​tanstack/react-query-persist-client@​5.90.18

Patch Changes

  • Updated dependencies [4be3ad7]:
    • @​tanstack/react-query@​5.90.16
    • @​tanstack/query-persist-client-core@​5.91.15

@​tanstack/react-query@​5.90.18

Patch Changes

  • Updated dependencies [dea1614]:
    • @​tanstack/query-core@​5.90.18

@​tanstack/react-query-persist-client@​5.90.17

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.91.14
    • @​tanstack/react-query@​5.90.15

@​tanstack/react-query@​5.90.17

Patch Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.90.20

Patch Changes

  • Updated dependencies [e7258c5]:
    • @​tanstack/query-core@​5.90.20

5.90.19

Patch Changes

  • Updated dependencies [53fc74e]:
    • @​tanstack/query-core@​5.90.19

5.90.18

Patch Changes

  • Updated dependencies [dea1614]:
    • @​tanstack/query-core@​5.90.18

5.90.17

Patch Changes

  • Updated dependencies [269351b]:
    • @​tanstack/query-core@​5.90.17

5.90.16

Patch Changes

  • fix(react-query): allow retryOnMount when throwOnError is function (#9338)

  • Updated dependencies [7f47906]:

    • @​tanstack/query-core@​5.90.16

5.90.15

Patch Changes

  • Updated dependencies [fccef79]:
    • @​tanstack/query-core@​5.90.15

5.90.14

Patch Changes

  • Updated dependencies [d576092]:
    • @​tanstack/query-core@​5.90.14

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​tanstack/react-query since your current version.


Updates vite from 7.2.2 to 7.3.1

Release notes

Sourced from vite's releases.

v7.3.1

Please refer to CHANGELOG.md for details.

v7.3.0

Please refer to CHANGELOG.md for details.

v7.2.7

Please refer to CHANGELOG.md for details.

v7.2.6

Please refer to CHANGELOG.md for details.

v7.2.5

Please refer to CHANGELOG.md for details.

Note: 7.2.5 failed to publish so it is skipped on npm

v7.2.4

Please refer to CHANGELOG.md for details.

v7.2.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.3.1 (2026-01-07)

Features

  • add ignoreOutdatedRequests option to optimizeDeps (#21364) (9d39d37)

7.3.0 (2025-12-15)

Features

  • deps: update esbuild from ^0.25.0 to ^0.27.0 (#21183) (cff26ec)

7.2.7 (2025-12-08)

Bug Fixes

7.2.6 (2025-12-01)

7.2.5 (2025-12-01)

Bug Fixes

Performance Improvements

Documentation

  • clarify manifest.json imports field is JS chunks only (#21136) (46d3077)

Miscellaneous Chores

7.2.4 (2025-11-20)

Bug Fixes

  • revert "perf(deps): replace debug with obug (#21107)" (2d66b7b)

7.2.3 (2025-11-20)

Bug Fixes

  • allow multiple bindCLIShortcuts calls with shortcut merging (#21103) (5909efd)
  • deps: update all non-major dependencies (#21096) (6a34ac3)
  • deps: update all non-major dependencies (#21128) (4f8171e)

Performance Improvements

... (truncated)

Commits

Updates vite-plugin-checker from 0.8.0 to 0.12.0

Release notes

Sourced from vite-plugin-checker's releases.

vite-plugin-checker@0.12.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

vite-plugin-checker@0.11.0

   🚨 Breaking Changes

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

vite-plugin-checker@0.10.3

   🐞 Bug Fixes

    View changes on GitHub

vite-plugin-checker@0.10.2

   🐞 Bug Fixes

    View changes on GitHub

... (truncated)

Commits
  • 88de310 v0.12.0
  • 49802a8 chore(deps): update dependency @​vue/language-core to ~3.1.7 (#619)
  • fee51fe chore(deps): update dependency @​vitejs/plugin-vue to ^6.0.2 (#618)
  • c05b1ad chore(deps): update dependency eslint to v9.39.1 (#609)
  • 8e73eaa chore(deps): update dependency @​tsconfig/node20 to ^20.1.8 (#613)
  • a719994 chore(deps): update dependency @​tsconfig/strictest to ^2.0.8 (#614)
  • 1c1ec15 chore(deps): update dependency @​tsconfig/node20 to ^20.1.7 (#612)
  • c4d014c chore(deps): update danielroe/provenance-action action to v0.1.1 (#611)
  • 8732c96 feat(biome): Add watchPath option (#590)
  • 9d906eb chore: revert pnpm trust policy and restore provenance action
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite-plugin-checker since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

dependabot bot and others added 4 commits January 27, 2026 22:10
Security fix: js-yaml 4.1.0 → 4.1.1 (prototype pollution fix)
…dates (#14)

Dependency updates with security fixes for glob, lodash (prototype pollution), qs, and tar
…ning (#13)

Portfolio redesign with CI/CD, Vercel fixes, and security hardening

Major changes:
- Complete UI/UX redesign with modern components
- GitHub Actions CI/CD pipeline (lint, build, security, lighthouse)
- Vercel deployment fixes (CORS, rate limiting, SPA routing)
- CodeQL security fixes (path traversal, rate limiting)
- Dependency updates and vulnerability fixes
Bumps the vite-react-ecosystem group with 3 updates: [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [vite-plugin-checker](https://github.com/fi3ework/vite-plugin-checker).


Updates `@tanstack/react-query` from 5.62.1 to 5.90.20
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.90.20/packages/react-query)

Updates `vite` from 7.2.2 to 7.3.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.1/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.1/packages/vite)

Updates `vite-plugin-checker` from 0.8.0 to 0.12.0
- [Release notes](https://github.com/fi3ework/vite-plugin-checker/releases)
- [Commits](https://github.com/fi3ework/vite-plugin-checker/compare/vite-plugin-checker@0.8.0...vite-plugin-checker@0.12.0)

---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.90.20
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vite-react-ecosystem
- dependency-name: vite
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vite-react-ecosystem
- dependency-name: vite-plugin-checker
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vite-react-ecosystem
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 27, 2026

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 27, 2026
@github-actions
Copy link

⚠️ Minor update - Manual review recommended

This is a minor version update for a runtime dependency.

Dependencies: @tanstack/react-query, vite, vite-plugin-checker
Update type: Minor

Please review:

  1. Check the changelog for new features
  2. Ensure backward compatibility
  3. Test locally if making significant changes

CI will run automatically. Merge manually after reviewing.

Xza85hrf added a commit that referenced this pull request Jan 28, 2026
* Delete docs/DEPLOYMENT.md

Old version of the docs

* Delete docs/ARCHITECTURE.md

Old version of the document

* Rename ARCHITECTURE.new.md to ARCHITECTURE.md

* Rename DEPLOYMENT.new.md to DEPLOYMENT.md

* feat(server): Implement dynamic port selection and conflict resolution

- Add support for PORT environment variable in Vite and Express configurations
- Implement `findAvailablePort` function to handle port conflicts
- Ensure server can start even if initial port is occupied
- Improve error handling and logging during server startup

* feat(theme, db): implement CSS variables and setup database migration

Added CSS variables for light and dark themes to improve styling flexibility. Updated the database configuration to use `pg` for better connection handling in a PostgreSQL environment. Introduced a new `migrate.ts` script to automate database initialization and table creation, ensuring necessary tables are created if they don't exist and adding a default admin user. Enhanced server startup logic to dynamically find an available port if the specified one is in use, using the PORT environment variable as a priority.

* docs: add missing newlines and improve code block clarity

This commit adds missing newlines before and after code blocks and section headings across several markdown files to enhance readability. These changes also include minor adjustments to example commands for clarity. This ensures consistent formatting and improves the visual structure of documentation, making it easier for users to follow instructions. No functional changes are involved, purely enhancing document presentation.

* docs(port-management): add comprehensive port configuration guidance

This update enhances the documentation across multiple guides, including ADMIN_GUIDE.md, ARCHITECTURE.md, DEPLOYMENT.md, DEVELOPMENT_GUIDE.md, and SETUP_GUIDE.md, to provide detailed instructions on managing server ports. Key additions include:

- Designating default port 5000 for development and deployment.
- Instructions on customizing the port using the `PORT` environment variable.
- Explanation of dynamic port allocation if the specified port is occupied.
- Examples for starting the server with both default and custom port settings.
- Emphasis on checking terminal outputs for verifying active port usage.

These changes aim to clarify port management, enhance flexibility in different environments, and prevent common conflicts associated with port assignments.

* Refactor: Improve authentication and database integration

* build(deps): bump @octokit/plugin-paginate-rest from 11.3.6 to 11.6.0

Bumps [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js) from 11.3.6 to 11.6.0.
- [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases)
- [Commits](octokit/plugin-paginate-rest.js@v11.3.6...v11.6.0)

---
updated-dependencies:
- dependency-name: "@octokit/plugin-paginate-rest"
  dependency-version: 11.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* build(deps): bump the npm_and_yarn group across 1 directory with 9 updates

Bumps the npm_and_yarn group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [esbuild](https://github.com/evanw/esbuild) | `0.24.0` | `0.27.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.11` | `7.2.2` |
| [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.26.0` | `7.28.4` |
| [@octokit/endpoint](https://github.com/octokit/endpoint.js) | `10.1.1` | `10.1.4` |
| [@octokit/request](https://github.com/octokit/request.js) | `9.1.3` | `9.2.4` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |
| [on-headers](https://github.com/jshttp/on-headers) | `1.0.2` | `1.1.0` |
| [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.10` | `0.1.12` |



Updates `esbuild` from 0.24.0 to 0.27.0
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md)
- [Commits](evanw/esbuild@v0.24.0...v0.27.0)

Updates `vite` from 5.4.11 to 7.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.2.2/packages/vite)

Updates `vite` from 5.4.11 to 7.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.2.2/packages/vite)

Updates `@babel/runtime` from 7.26.0 to 7.28.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.4/packages/babel-runtime)

Updates `@octokit/endpoint` from 10.1.1 to 10.1.4
- [Release notes](https://github.com/octokit/endpoint.js/releases)
- [Commits](octokit/endpoint.js@v10.1.1...v10.1.4)

Updates `@octokit/request` from 9.1.3 to 9.2.4
- [Release notes](https://github.com/octokit/request.js/releases)
- [Commits](octokit/request.js@v9.1.3...v9.2.4)

Updates `@octokit/request-error` from 6.1.5 to 6.1.8
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](octokit/request-error.js@v6.1.5...v6.1.8)

Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)

Updates `on-headers` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/jshttp/on-headers/releases)
- [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md)
- [Commits](jshttp/on-headers@v1.0.2...v1.1.0)

Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.10...v0.1.12)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.27.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 7.2.2
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 7.2.2
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@babel/runtime"
  dependency-version: 7.28.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/endpoint"
  dependency-version: 10.1.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request"
  dependency-version: 9.2.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request-error"
  dependency-version: 6.1.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 1.1.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: on-headers
  dependency-version: 1.1.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-version: 0.1.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

* feat: Complete portfolio redesign with modern UI/UX (Phases 1-7)

This commit includes a comprehensive redesign of the portfolio website:

**Phase 1-2: Foundation & Navigation**
- Modern glassmorphism design system with GlassCard components
- Responsive navigation with mobile hamburger menu
- Theme system with dark/light mode support
- Smooth scroll and page transitions

**Phase 3-4: Homepage & About**
- Hero section with 3D animated background (Three.js)
- Particle effects with reduced motion support
- Service cards with tilt interactions
- Skills visualization and journey timeline
- Stats counter with animated numbers

**Phase 5: Portfolio & Projects**
- Project grid with category filtering
- TiltCard 3D hover effects
- Animated project cards with technology badges

**Phase 6: Blog & Contact**
- Blog listing with featured posts
- Rich text rendering for blog content
- Reading progress indicator
- Contact form with validation
- Social links section

**Phase 7: Polish & Optimization**
- React.lazy/Suspense for code splitting
- Error boundaries with fallback UI
- Performance optimizations (React.memo, useCallback)
- Accessibility fixes (WCAG 2.1 AA compliance)
- Fixed nested interactive elements (buttons inside links)
- Reduced motion support throughout

* feat: Redesign journey timeline + update project index

Timeline redesign:
- Unique icons per event (Users, Code2, Rocket, GraduationCap)
- Clean circular icons with gradient backgrounds and glow
- Glassmorphism cards with hover effects
- Animated gradient timeline line
- Year badges with calendar icon

Index updates:
- Updated project status to Phase 7 complete
- Added error boundary components
- Added PageLoader, errorLogger
- Added troubleshooting for Vite cache (WSL)
- Documented Phase 7 optimizations

* feat: Production-ready portfolio with security hardening

- JWT authentication replacing static tokens
- Zod validation schemas for all API inputs
- Rate limiting (100/15min API, 5/15min auth)
- Path traversal protection
- Vercel deployment configuration
- Credential setup automation script
- Source maps disabled in production
- CORS configuration for custom domain

Admin: admin / [env:ADMIN_PASSWORD]
Domain: ravinduportfolio.dev

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Vercel serverless configuration

- Create api/index.ts as serverless function entry
- Update vercel.json to use rewrites instead of routes
- Add security headers
- Configure @vercel/node runtime

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Use relative imports for Vercel serverless compatibility

- Change @db/schema to relative paths in server/routes.ts and db/index.ts
- Add api folder to tsconfig include
- Path aliases don't resolve in Vercel serverless functions

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Install devDependencies for Vite build on Vercel

@vitejs/plugin-react is a devDependency needed for build

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Move build dependencies to dependencies for Vercel

Build tools (vite, typescript, postcss, tailwindcss, esbuild) must be in
dependencies, not devDependencies, for Vercel production builds.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Simplify output directory to 'dist' for Vercel

Changed from dist/public to dist to avoid path resolution issues

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Use 'build' as output directory to avoid conflicts

- 'public' conflicts with Vite's static assets folder
- 'dist' wasn't recognized properly by Vercel
- 'build' is a clean, unambiguous output directory

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Use relative output path for Vercel compatibility

- Changed Vite outDir to relative path '../dist'
- Updated vercel.json outputDirectory to 'dist'
- Fixes ESM __dirname resolution issue on Vercel

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Remove explicit runtime for Vercel auto-detection

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Remove dotenv from db module for Vercel compatibility

Environment variables are injected directly in Vercel serverless

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* debug: Add startup logging to API function

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Add lazy initialization and health check for API

- Health check endpoint at /api/health
- Lazy route initialization with error handling
- Better error logging

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Include server and db files in serverless function

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Use array format for includeFiles

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Use glob brace pattern for includeFiles

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* feat: Bundle API with esbuild for Vercel serverless

- Create esbuild config for API bundling
- Update build command to bundle API first
- All dependencies bundled into single file

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Remove functions config for auto-detection

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Rename API source to prevent TS/JS conflict

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Move API source to api-src to avoid Vercel auto-compile

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Include bundled API file in repo for Vercel detection

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* Add global error handling, database retry logic, and improve response encoding

- Implement global error handlers for uncaught exceptions and unhandled rejections to prevent server crashes.
- Introduce `db-utils.ts` for transient error handling and retry logic on database operations.
- Update routes to utilize retry logic for critical database queries, ensuring resilience against transient errors.
- Ensure UTF-8 encoding for all JSON responses to support Polish characters.
- Enhance repo name formatting to be Unicode-aware for better readability.

* chore: Normalize db-utils.ts formatting

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Resolve Vercel deployment issues

- Fix CORS to allow *.vercel.app origins automatically
- Add trust proxy and custom keyGenerator for rate limiter
- Add SPA fallback rewrite for client-side routes (/about, /portfolio, etc.)
- Add favicon.svg for browser tab icon

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Update dependencies and fix security vulnerabilities

- Update bcrypt 5.1.1 → 6.0.0 (removes deprecated @mapbox/node-pre-gyp)
- Update drizzle-kit 0.31.6 → 0.31.8
- Fix eslint, glob, js-yaml, lodash, qs/express vulnerabilities
- Pin Node engine to 20.x to prevent Vercel auto-upgrade warnings
- Add .node-version file for Vercel deployment

Remaining @esbuild-kit warning is from drizzle-kit (dev-time only tool)
and will be resolved when drizzle updates their dependencies.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Eliminate all deprecated dependencies and vulnerabilities

- Update drizzle-kit to 1.0.0-beta.9 (uses tsx instead of @esbuild-kit)
- Add npm override for node-domexception (replaced with empty-npm-package)
- All deprecation warnings resolved:
  - @esbuild-kit/esm-loader: FIXED (drizzle-kit beta uses tsx)
  - @esbuild-kit/core-utils: FIXED (drizzle-kit beta uses tsx)
  - node-domexception: FIXED (overridden, Node 18+ has native DOMException)
- 0 vulnerabilities remaining

Sources:
- drizzle-team/drizzle-orm#4430
- drizzle-team/drizzle-orm#3067

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Resolve TypeScript errors in admin Projects page

Replace drizzle-zod insertProjectSchema with custom projectFormSchema
that properly types technologies as string[] array. The drizzle-zod
generated schema had type inference issues causing build failures.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* feat: Add animated GitHub icon using Lottie animation

- Install lottie-react library for Lottie animations
- Add AnimatedGithubIcon component with hover-to-play feature
- Download GitHub logo animation from LottieFiles
- Add animated GitHub icon to:
  - Desktop navigation (next to "Let's Talk" CTA)
  - Mobile menu footer
  - Contact page social links section
- Add TypeScript declaration for JSON imports

Source: https://lottiefiles.com/free-animation/github-logo-xHNxgSNZIw

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Resolve build warnings for chunk size and lottie-web eval

- Add lottie-react and lottie-web to manual chunks for code splitting
- Increase chunkSizeWarningLimit to 600KB
- Suppress lottie-web eval warning (known issue, safe in this context)
- Main bundle reduced from 544KB to 200KB

Note: Vercel Node.js version warning is informational - Vercel correctly
uses 20.x from package.json. To silence it, update Vercel project
settings from 24.x to 20.x in the dashboard.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* chore: Update Node.js version to support >=20.0.0

- Change engines to ">=20.0.0" to support Node 20, 22, and 24
- Update .node-version to 22 for Vercel deployment
- Allows using latest Node features while maintaining compatibility

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Resolve Vercel runtime errors and warnings

- Fix CORS by allowing *.vercel.app domains in production API
- Add trust proxy setting for rate limiter
- Add custom keyGenerator to use X-Forwarded-For header
- Switch vercel.json from rewrites to routes for better SPA support
- Add filesystem handle to properly serve static files before SPA fallback
- Add favicon.ico → favicon.svg rewrite

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Resolve TypeScript and HTML linting warnings

- Remove deprecated baseUrl option (TS 7.0 compatibility)
- Add forceConsistentCasingInFileNames for cross-OS consistency
- Remove duplicate charset meta element from index.html

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Use modern Vercel config format (no mixed routing)

- Switch from routes (legacy) to rewrites (modern) format
- Add trailingSlash: false for cleaner URLs
- Use :path* syntax for rewrite patterns
- Vercel checks static files before applying rewrites

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* ci: Configure GitHub Actions workflows for portfolio project

- ci.yml: Lint, type check, and build pipeline for Vite + Express
- dependabot.yml: Dependency groups for Vite/React/Express ecosystem
- dependabot-auto-merge.yml: Auto-approve safe patch/minor updates
- dependabot-security.yml: Priority handling for security updates
- lighthouse-ci.yml: Performance testing with static server
- security-audit.yml: Weekly npm audit with auto-fix PRs
- Remove test-branch.yml (not used in this project)

All workflows use secure patterns with environment variables
for potentially untrusted inputs (PR titles, etc.)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* build(deps-dev): bump js-yaml (#12)

Security fix: js-yaml 4.1.0 → 4.1.1 (prototype pollution fix)

* build(deps): bump the npm_and_yarn group across 1 directory with 4 updates (#14)

Dependency updates with security fixes for glob, lodash (prototype pollution), qs, and tar

* fix(security): Address CodeQL path traversal and rate limiting alerts

- Add path.basename() sanitization for /api/docs/:filename route
- Use path.join instead of path.resolve for safer path construction
- Add rate limiting to static file serving in production
- Skip rate limit for /assets/* (CDN cached)

Addresses CodeQL alerts:
- Path traversal vulnerability in docs route
- Missing rate limiting on static file serving

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: Resolve Neon serverless API breaking change and update repo refs

- Downgrade @neondatabase/serverless from 0.10.4 to 0.9.5
  (0.10.x requires tagged template syntax that drizzle-orm 0.36.4
  doesn't support, causing 500 errors on all DB queries)
- Update vercel.json SPA routing to exclude static assets
- Update documentation to reference correct repo (ravinduportfolio)

Fixes: 500 errors on /api/projects and /api/analytics/pageview

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: srudeshan <srudeshan@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 28, 2026

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Jan 28, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/main/vite-react-ecosystem-a21679d681 branch January 28, 2026 16:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant