Skip to content

chore: upgrade and pin dependencies to fix dependabot alerts#30

Merged
pandeymangg merged 4 commits intomainfrom
chore/upgrade-deps
Jan 26, 2026
Merged

chore: upgrade and pin dependencies to fix dependabot alerts#30
pandeymangg merged 4 commits intomainfrom
chore/upgrade-deps

Conversation

@mattinannt
Copy link
Member

@mattinannt mattinannt commented Jan 22, 2026

This PR pins all dependencies to the exact version to satisfy enterprise requirements and upgrades all dependencies in the repository to the latest version to solve the dependabot alerts.

[x] build working
[x] playground working properly showing a survey

@CLAassistant
Copy link

CLAassistant commented Jan 22, 2026

CLA assistant check
All committers have signed the CLA.

@coderabbitai
Copy link

coderabbitai bot commented Jan 22, 2026

Walkthrough

This change updates dependencies across three package.json files in the project. The root package.json updates dev dependencies prettier and turbo, and bumps the package manager from pnpm@10.25.0 to pnpm@10.28.1. The apps/playground/package.json updates runtime dependencies for lucide-react and next, plus dev dependencies for Tailwind and ESLint configuration. The packages/js/package.json updates ten dev dependencies including ESLint, Vitest, TypeScript-ESLint, Vite, and related tools. No changes were made to public APIs, scripts, or runtime logic.

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Title check ✅ Passed The title accurately describes the main purpose of the changeset: upgrading dependencies across multiple package.json files to resolve dependabot alerts.
Description check ✅ Passed The pull request description clearly relates to the changeset, describing dependency version upgrades to address dependabot alerts and enterprise requirements.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Fix all issues with AI agents
In `@apps/playground/package.json`:
- Around line 14-28: Update package dependencies and migrate code for Next.js
16.1.4: run the official codemod (npx `@next/codemod`@canary upgrade latest) to
start automated changes, set Node engine to >=20.9.0 in package.json, and keep
React/react-dom at 19.2.3; then manually rename middleware.ts to proxy.ts,
update all uses of cookies(), headers(), params, and searchParams to be awaited
(await cookies(), await headers(), etc.), audit and convert cache/revalidation
logic to the new "use cache" model, remove any AMP usage and stop relying on
removed runtimeConfig APIs, and eliminate reliance on build-time linting if
present; after changes run full test suite and manual smoke tests to validate
behavior.

@mattinannt mattinannt changed the title chore: upgrade dependencies to fix dependabot alerts chore: upgrade and pin dependencies to fix dependabot alerts Jan 22, 2026
@sonarqubecloud
Copy link

Copy link
Contributor

@pandeymangg pandeymangg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! 🚀

@pandeymangg pandeymangg added this pull request to the merge queue Jan 26, 2026
Merged via the queue into main with commit d2c848e Jan 26, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants