Skip to content

Conversation

@sam-mfb
Copy link
Owner

@sam-mfb sam-mfb commented Aug 7, 2025

Summary

  • Updated all minor version dependencies to their latest versions
  • Updated major versions for Jest (v30), webpack-cli (v6), and @types/node (v24)
  • Removed deprecated @types/eslint__js package
  • Fixed security vulnerability CVE-2025-5889 in brace-expansion (Dependabot alert New release with dep updates #10)

Changes

Minor Updates

  • @eslint/js: 9.9.0 → 9.32.0
  • eslint: 9.9.0 → 9.32.0
  • prettier: 3.5.3 → 3.6.2
  • ts-jest: 29.3.2 → 29.4.1
  • typescript: 5.8.3 → 5.9.2
  • typescript-eslint: 8.0.1 → 8.39.0
  • webpack: 5.99.7 → 5.101.0

Major Updates

  • jest: 29.7.0 → 30.0.5
  • @types/jest: 29.5.14 → 30.0.0
  • webpack-cli: 5.1.4 → 6.0.1
  • @types/node: 20.17.32 → 24.2.0

Security Fix

Test Plan

  • Run pnpm install to verify dependencies install correctly
  • Run pnpm test to ensure tests still pass
  • Run pnpm build to verify build process works
  • Run pnpm audit to confirm no security vulnerabilities

@sam-mfb sam-mfb requested a review from Copilot August 7, 2025 15:58
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates project dependencies to their latest versions and addresses a security vulnerability. The changes include both minor version updates for existing dependencies and major version updates for testing and build tools.

  • Updated minor versions for ESLint, Prettier, TypeScript, and webpack
  • Upgraded major versions for Jest (v30), webpack-cli (v6), and @types/node (v24)
  • Removed deprecated @types/eslint__js package and fixed CVE-2025-5889 in brace-expansion

@sam-mfb sam-mfb merged commit bff091b into main Aug 7, 2025
2 checks passed
@sam-mfb sam-mfb deleted the dep-updates branch August 7, 2025 16:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants