chore(deps): bump simplewebauthn 14, nodemailer 10, plaid 47, googleapis 178, otpauth, vitest 5 - #277
Conversation
…pis 178, otpauth 9.5.2, vitest 5
Dependency updates that were already applied to the working tree
(node_modules installed at these versions). No source changes were needed
alongside them.
Majors: @simplewebauthn/{browser,server} 13->14, nodemailer 9->10,
plaid 46->47, vitest + @vitest/coverage-v8 4->5.
Minors: googleapis 176->178, otpauth 9.5.1->9.5.2.
github-actions
Bot
added
the
dependencies
There was a problem hiding this comment.
🟡 Changes recommended
vitest@5 raises the effective minimum Node requirement (per its engines field) beyond the repo’s currently declared supported Node version, creating a real compatibility risk for CI/production/dev environments pinned to the lower bound.
Once you've addressed the issues Copilot identified, you can request another Copilot review.
Pull request overview
This PR updates several major and minor JavaScript dependencies (passkeys/WebAuthn, email, Plaid, Google APIs, OTP, and test tooling) while keeping application source unchanged, aiming to stay current on upstream releases.
Changes:
- Bump major dependencies:
@simplewebauthn/*13→14,nodemailer9→10,plaid46→47,vitest(+ coverage) 4→5. - Bump minor dependencies:
googleapis176→178,otpauth9.5.1→9.5.2. - Update lockfiles (
package-lock.json,bun.lock) to reflect the new resolved dependency graph.
File summaries
| File | Description |
|---|---|
| package.json | Updates dependency and devDependency version ranges to the new major/minor releases. |
| package-lock.json | Updates resolved versions/metadata for npm installs consistent with the new dependency set. |
| bun.lock | Updates Bun lockfile to keep Bun installs aligned with the new dependency set. |
Review details
- Files reviewed: 1/3 changed files
- Comments generated: 1
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| "tailwindcss": "^4.3.3", | ||
| "vite": "^8.2.2", | ||
| "vitest": "^4.1.11" | ||
| "vitest": "^5.0.0" |
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
Dependency updates already applied to the working tree (node_modules installed at these versions); no source changes were needed alongside them.
Majors:
@simplewebauthn/{browser,server}13→14 ·nodemailer9→10 ·plaid46→47 ·vitest+@vitest/coverage-v84→5Minors:
googleapis176→178 ·otpauth9.5.1→9.5.2Validation
vitest run— 98 files / 1304 tests greenvite build— ok:appdebug+release compile,:app:testDebugUnitTest,:core:test— okReview notes
Passkey (simplewebauthn) and bank-linking (plaid) crypto paths aren't exercised end-to-end by the integration suite — worth a manual pass of a passkey enrol/login and a Plaid Link before this hits production.