Skip to content

chore: dependabot batch 2 — web deps safe + major bumps #2178

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
andrew-bierman merged 5 commits into from
Apr 15, 2026
Merged

chore: dependabot batch 2 — web deps safe + major bumps #2178

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
8716d8a
chore(deps): batch safe bumps — sonner 2, cmdk 1.1, postcss-import 16…
andrew-bierman Apr 14, 2026
62b8665
chore(deps): bump recharts 2.15.0 → 3.8.1 (guides/landing/admin/web-u…
andrew-bierman Apr 14, 2026
cbbd952
chore(deps): bump lucide-react 0.454.0 → 1.8.0 #2139
andrew-bierman Apr 14, 2026
46990e4
chore(deps): bump react-resizable-panels 2.1.9 → 4.10.0 #2143
andrew-bierman Apr 14, 2026
362d8da
chore(deps): bump react-day-picker 8.10.1 → 9.14.0 #2140
andrew-bierman Apr 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions apps/admin/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,13 +26,13 @@
"@tanstack/react-query": "^5.70.0",
"class-variance-authority": "^0.7.1",
"clsx": "^2.1.1",
"lucide-react": "^0.454.0",
"lucide-react": "^1.8.0",
"next": "^15.3.4",
"next-themes": "^0.4.6",
"react": "catalog:",
"react-dom": "catalog:",
"recharts": "2.15.0",
"sonner": "^1.7.4",
"recharts": "3.8.1",
"sonner": "^2.0.7",
"tailwind-merge": "^2.5.5",
"zod": "catalog:"
},
Expand All @@ -41,7 +41,7 @@
"@types/react": "~19.1.10",
"@types/react-dom": "^19.1.6",
"postcss": "^8.5.6",
"postcss-import": "^15.1.0",
"postcss-import": "^16.1.1",
"tailwindcss": "catalog:",
"typescript": "catalog:"
}
Expand Down
14 changes: 7 additions & 7 deletions apps/guides/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -56,29 +56,29 @@
"chalk": "catalog:",
"class-variance-authority": "^0.7.1",
"clsx": "^2.1.1",
"cmdk": "1.0.4",
"cmdk": "1.1.1",
"date-fns": "^4.1.0",
"embla-carousel-react": "8.5.1",
"fs": "^0.0.1-security",
"gray-matter": "^4.0.3",
"input-otp": "1.4.1",
"lucide-react": "^0.454.0",
"lucide-react": "^1.8.0",
"mdx": "^0.3.1",
"next": "^15.3.4",
"next-themes": "^0.4.6",
"path": "^0.12.7",
"react": "catalog:",
"react-day-picker": "8.10.1",
"react-day-picker": "9.14.0",
"react-dom": "catalog:",
"react-hook-form": "^7.58.1",
"react-resizable-panels": "^2.1.9",
"recharts": "2.15.0",
"react-resizable-panels": "^4.10.0",
"recharts": "3.8.1",
"remark": "^15.0.1",
"remark-gfm": "^4.0.1",
"remark-html": "^16.0.1",
"remark-parse": "^11.0.0",
"slugify": "^1.6.6",
"sonner": "^1.7.4",
"sonner": "^2.0.7",
"tailwind-merge": "^2.5.5",
"unified": "^11.0.0",
"vaul": "^1.1.2",
Expand All @@ -90,7 +90,7 @@
"@types/react": "~19.1.10",
"@types/react-dom": "^19.1.6",
"postcss": "^8.5.6",
"postcss-import": "^15.1.0",
"postcss-import": "^16.1.1",
"tailwindcss": "catalog:",
"typescript": "catalog:"
}
Expand Down
14 changes: 7 additions & 7 deletions apps/landing/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,21 +43,21 @@
"autoprefixer": "^10.4.21",
"class-variance-authority": "^0.7.1",
"clsx": "^2.1.1",
"cmdk": "1.0.4",
"cmdk": "1.1.1",
"date-fns": "^4.1.0",
"embla-carousel-react": "8.5.1",
"framer-motion": "^12.19.1",
"input-otp": "1.4.1",
"lucide-react": "^0.454.0",
"lucide-react": "^1.8.0",
"next": "^15.3.4",
"next-themes": "^0.4.6",
"react": "catalog:",
"react-day-picker": "8.10.1",
"react-day-picker": "9.14.0",
"react-dom": "catalog:",
"react-hook-form": "^7.58.1",
"react-resizable-panels": "^2.1.9",
"recharts": "2.15.0",
"sonner": "^1.7.4",
"react-resizable-panels": "^4.10.0",
"recharts": "3.8.1",
"sonner": "^2.0.7",
"tailwind-merge": "^2.5.5",
"vaul": "^1.1.2",
"zod": "catalog:"
Expand All @@ -67,7 +67,7 @@
"@types/react": "~19.1.10",
"@types/react-dom": "^19.1.6",
"postcss": "^8.5.6",
"postcss-import": "^15.1.0",
"postcss-import": "^16.1.1",
"tailwindcss": "catalog:",
"typescript": "catalog:"
}
Expand Down
146 changes: 87 additions & 59 deletions bun.lock
View file
Open in desktop

Large diffs are not rendered by default.

6 changes: 3 additions & 3 deletions docs/plans/2026-04-14-chore-narrow-pr-2170-spike-scope-plan.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,8 +65,9 @@ git commit -m "docs: add consolidation plan for #2118"
# 4. Elysia plan — put where #2083 lives, or propose a tiny PR to development
# (needs confirmation which PR/branch)

# 5. Push. Force-push the spike ONLY with explicit user approval, using:
# git push --force-with-lease --force-if-includes origin spike/align-test-db-with-prod
# 5. Push — fast-forward, no force needed
git push origin spike/align-test-db-with-prod
cd ~/Code/PackRat && git push origin chore/all-dependabot-updates
```

## Out of scope
Expand All @@ -91,4 +92,3 @@ Root cause of the original contamination was the absence of a rule about where s
- bun#6608, bun#14774 — open issues confirming nested override limitation
- [Pacheco 2025 — stacked PRs on GitHub](https://www.davepacheco.net/blog/2025/stacked-prs-on-github/)
- [Google eng-practices — small CLs](https://google.github.io/eng-practices/review/developer/small-cls.html)
- Memory: `feedback_no_force_push.md` — force-push requires explicit user permission
2 changes: 1 addition & 1 deletion packages/api/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@
"@mozilla/readability": "^0.6.0",
"@neondatabase/serverless": "^1.0.0",
"@packrat/guards": "workspace:*",
"@scalar/hono-api-reference": "^0.8.0",
"@scalar/hono-api-reference": "^0.10.7",
Copy link

Copilot AI Apr 14, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@scalar/hono-api-reference@0.10.7 has a peer dependency on hono ^4.12.5 (see bun.lock entry), but this package still depends on hono ^4.7.5. This peer mismatch may become a hard install/runtime problem depending on tooling. Recommended: bump hono to ^4.12.5+ (and validate /scalar), or keep Scalar on 0.8.x until hono is upgraded.

Copilot uses AI. Check for mistakes.
"@types/nodemailer": "^6.4.17",
"ai": "catalog:",
"bcryptjs": "^3.0.2",
Expand Down
10 changes: 5 additions & 5 deletions packages/web-ui/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,15 +46,15 @@
"@radix-ui/react-tooltip": "catalog:",
"class-variance-authority": "^0.7.1",
"clsx": "^2.1.1",
"cmdk": "1.0.4",
"cmdk": "1.1.1",
"embla-carousel-react": "8.5.1",
"input-otp": "1.4.1",
"lucide-react": "^0.454.0",
"lucide-react": "^1.8.0",
"next-themes": "^0.4.6",
"react-day-picker": "8.10.1",
"react-day-picker": "9.14.0",
Copy link

Copilot AI Apr 14, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

react-day-picker is being bumped to v9 here, but packages/web-ui/src/components/calendar.tsx still uses v8 classNames keys (e.g. day_selected, day_today, caption_label) and v8 component slots (IconLeft/IconRight). In v9 these keys/slots were renamed, so the exported Calendar component will silently lose its intended styling/behavior at runtime. Either migrate the Calendar component to v9’s new classNames/slot API in this PR, or keep react-day-picker pinned to v8 until the migration lands.

Suggested change
"react-day-picker": "9.14.0",
"react-day-picker": "8.10.1",

Copilot uses AI. Check for mistakes.
"react-hook-form": "^7.58.1",
"react-resizable-panels": "^2.1.9",
"sonner": "^1.7.4",
"react-resizable-panels": "^4.10.0",
"sonner": "^2.0.7",
"tailwind-merge": "^2.5.5",
"tailwindcss-animate": "^1.0.7",
"vaul": "^1.1.2"
Expand Down
Loading