chore(deps): bump the build-tools group across 1 directory with 5 updates - #19
Conversation
There was a problem hiding this comment.
Dependency bump MR; the TypeScript major version jump (5.9 → 7.0.2, skipping 6.x) stands out and should be verified against actual TS release history/compatibility since it's a large jump within a routine build-tools group update.
Verdict: ✅ approve · 1 inline, 0 ohne Position
Gate: blockt ab High + Medium-Confidence.
🤖 Naudit-Kommandos
Antworte im Thread eines Inline-Kommentars — erste Zeile der Antwort:
@naudit fp <grund>— Fehlalarm. Naudit merkt sich das für dieses Projekt und meidet den Fund künftig.@naudit ok <text>— Finding angenommen/umgesetzt.
Nur Repo-Mitglieder (Developer/Collaborator aufwärts) sind autorisiert. Ein neuer Top-Level-Kommentar wird nicht ausgewertet, es muss eine Antwort auf den Kommentar sein.
| "globals": "^16.4.0", | ||
| "tailwindcss": "^4.1.16", | ||
| "typescript": "~5.9.3", | ||
| "typescript": "~7.0.2", |
There was a problem hiding this comment.
🟡 Medium · confidence medium
TypeScript is being bumped from ~5.9.3 to ~7.0.2, skipping an entire major version. Combined with vite (7→8) and @vitejs/plugin-react (5→6) major bumps in the same group, this warrants a full build/type-check/test run before merging — grouped dependabot updates can pull in breaking changes across major versions that aren't caught by a diff review alone.
…ates Bumps the build-tools group with 4 updates in the /src/frontend directory: [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite), [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react), [typescript](https://github.com/microsoft/TypeScript) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `@tailwindcss/vite` from 4.1.16 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-vite) Updates `@vitejs/plugin-react` from 5.1.0 to 6.0.5 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react) Updates `tailwindcss` from 4.1.16 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss) Updates `typescript` from 5.9.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `vite` from 7.2.0 to 8.2.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.1/packages/vite) --- updated-dependencies: - dependency-name: "@tailwindcss/vite" dependency-version: 4.3.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: build-tools - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: build-tools - dependency-name: tailwindcss dependency-version: 4.3.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: build-tools - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: build-tools - dependency-name: vite dependency-version: 8.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: build-tools ... Signed-off-by: dependabot[bot] <support@github.com>
f901fe5 to
2eb3912
Compare
There was a problem hiding this comment.
Dependency-only bump; several packages jump major versions (vite 7→8, @vitejs/plugin-react 5→6, typescript 5→7) which merits verifying the build/tooling still works, but no code-level bugs are introduced.
Verdict: ✅ approve · 3 inline, 0 ohne Position
Gate: blockt ab High + Medium-Confidence.
ℹ️ Roundtrip-Limit erreicht (2/2) — weitere Pushes an diesem PR werden nicht mehr automatisch reviewt.
🤖 Naudit-Kommandos
Antworte im Thread eines Inline-Kommentars — erste Zeile der Antwort:
@naudit fp <grund>— Fehlalarm. Naudit merkt sich das für dieses Projekt und meidet den Fund künftig.@naudit ok <text>— Finding angenommen/umgesetzt.
Nur Repo-Mitglieder (Developer/Collaborator aufwärts) sind autorisiert. Ein neuer Top-Level-Kommentar wird nicht ausgewertet, es muss eine Antwort auf den Kommentar sein.
| "typescript": "~7.0.2", | ||
| "typescript-eslint": "^8.45.0", | ||
| "vite": "^7.1.7", | ||
| "vite": "^8.2.1", |
There was a problem hiding this comment.
🟡 Medium · confidence medium
Vite is bumped across a major version (7→8). This is more than a routine patch/minor bump and could introduce breaking changes for plugins like vite-plugin-mkcert and @tailwindcss/vite. Confirm the build/dev server still works and CI passes before merging.
| "@types/react": "^19.1.16", | ||
| "@types/react-dom": "^19.1.9", | ||
| "@vitejs/plugin-react": "^5.0.4", | ||
| "@vitejs/plugin-react": "^6.0.5", |
There was a problem hiding this comment.
🟡 Medium · confidence medium
@vitejs/plugin-react major bump (5→6) alongside the Vite 8 bump — verify compatibility since plugin major versions are often tied to specific Vite major versions.
| "globals": "^16.4.0", | ||
| "tailwindcss": "^4.1.16", | ||
| "typescript": "~5.9.3", | ||
| "typescript": "~7.0.2", |
There was a problem hiding this comment.
🟡 Medium · confidence low
TypeScript major bump (5.9→7.0) skipping v6 entirely — this is a large jump for a 'build-tools' chore PR and may surface new type-checking errors across the codebase. Ensure tsc build passes.
Bumps the build-tools group with 4 updates in the /src/frontend directory: @tailwindcss/vite, @vitejs/plugin-react, typescript and vite.
Updates
@tailwindcss/vitefrom 4.1.16 to 4.3.3Release notes
Sourced from @tailwindcss/vite's releases.
... (truncated)
Changelog
Sourced from @tailwindcss/vite's changelog.
... (truncated)
Commits
c2b24dd4.3.3 (#20334)bdcd708Don't trigger a full page reload for scanned files that Vite processes as mod...056a1554.3.2 (#20281)bb6a109use.tsinstead of.css8a14a714.3.1 (#20226)73983e1Fix 'Sourcemap is likely to be incorrect' warnings when using `@tailwindcss/v...588bd734.3.0 (#20023)d194d4cdocs: fix various typos in comments and documentation (#19878)db27049fix(@tailwindcss/vite): include@variantin feature detection (#19966)5a79990Always resolve relative files, relative to the current .css file (#19965)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@tailwindcss/vitesince your current version.Updates
@vitejs/plugin-reactfrom 5.1.0 to 6.0.5Release notes
Sourced from @vitejs/plugin-react's releases.
... (truncated)
Changelog
Sourced from @vitejs/plugin-react's changelog.
... (truncated)
Commits
68c0cb8release: plugin-react@6.0.5 (#1362)555cdbcfix(react): make the react compiler preset filter linear (#1353)a00a9f8fix(deps): update all non-major dependencies (#1327)f4b5498release: plugin-react@6.0.47a40659fix(react):$RefreshSig$ is not definedwith NODE_ENV=production vite dev ...98b32d4fix(deps): update react 19.2.8 (#1298)8ae5449fix: babel-plugin-react-compiler cannot be imported when used in a framework ...f09ea01fix(deps): update all non-major dependencies (#1282)640fd35release: plugin-react@6.0.3889efb0fix(deps): update all non-major dependencies (#1249)Updates
tailwindcssfrom 4.1.16 to 4.3.3Release notes
Sourced from tailwindcss's releases.
... (truncated)
Changelog
Sourced from tailwindcss's changelog.
... (truncated)
Commits
c2b24dd4.3.3 (#20334)e48c5e8Fix weird character rendering on Windows with Japanese locale (#20318)35a3e9cAlways produce\<length>value when optimizing--spacing(0)(#20319)4af47fbFix hues in achromatic theme colors to benone(#20314)5835691Handle CSS nesting natively (#20124)67c745eFix bug in attribute selector parsing (#20303)2683903Support fractional opacity modifiers for named shadow sizes (#20302)04588b1Fix theme() in JS plugins returning unresolved object instead of DEFAULT valu...b53fa09fix: exclude iframes from focus-visible auto outline in Preflight (#20292)ef79119Bump dependencies (#20300)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for tailwindcss since your current version.
Updates
typescriptfrom 5.9.3 to 7.0.2Release notes
Sourced from typescript's releases.
Commits
Maintainer changes
This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.
Updates
vitefrom 7.2.0 to 8.2.1Release notes
Sourced from vite's releases.
... (truncated)
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
4216158release: v8.2.1fddf4eafix(server): use a random port when port is 0 (#23158)de041a7fix(css): don't re-run lightningcss visitor during minify (fix #23146) (#23147)15f0307fix(build): make client chunkImportMap work withsharedPlugins: true(#23184)c2155fetest(bundled-dev): enable sourcemap playgrounds (#23080)ef02435docs(build): fix incomplete@defaultfor build.minify (#23177)eac0cc8fix(bundled-dev): inject client script tag before chunk scripts (#23161)23b8a08refactor(bundled-dev): avoid injecting server values in the bundle (#22967)e72036erefactor(bundled-dev): remove rolldown lazy stub module workaround (#23129)14454fdfix(deps): update all non-major dependencies (#23136)