Skip to content

Dependency updates: Node 26, Python 3.14, and what Dependabot skips - #12

Merged
palecobalt merged 1 commit into
mainfrom
dependency-updates
Oct 2, 2026
Merged

palecobalt merged 1 commit into
mainfrom
dependency-updates

Conversation

@palecobalt

Copy link
Copy Markdown
Owner

Takes Node 26 and Python 3.14 from Dependabot's Docker update (#5), and tells Dependabot what to leave alone: CUDA 13 (ONNX Runtime's GPU build needs CUDA 12), the later alpha versions of the original author's npm packages (npm ci refuses them together, #6), and MediatR 13+ (no longer Apache-licensed). New major versions of NuGet packages come as separate pull requests from now on (#8 and #10 bundled five of them and can't build). CI now builds the status page.

From Dependabot's Docker update: the status page is built with Node 26
(the built files are identical to the Node 22 build) and the video
service runs on Python 3.14 (a test clip is censored identically). The
release workflow and CI use the same versions.

Not taken, and ignored from now on:
- CUDA 13 for the GPU image: ONNX Runtime's GPU build is made for CUDA 12.
- The later alpha versions of the original author's npm packages: they ask
  for different versions of each other and `npm ci` refuses them.
- MediatR 13 and later, which are no longer under the Apache licence.

New major versions of NuGet packages now come as separate pull requests
instead of one that can't build. CI builds the status page, so an npm
update that doesn't install fails there instead of at the next release.

Co-Authored-By: Claude <noreply@anthropic.com>
@palecobalt
palecobalt merged commit 133553d into main Oct 2, 2026
7 checks passed
@palecobalt
palecobalt deleted the dependency-updates branch October 2, 2026 15:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant