Overview
Several Dependabot PRs (#3–#12) are intentionally held pending a coordinated upgrade pass. This issue tracks that work.
Package group
| Package |
Current |
Target |
Why batched |
react |
18.3.1 |
19.2.5 |
Pair with @types/react-dom |
react-dom |
18.3.1 |
19.2.5 |
Pair with @types/react-dom |
@types/react-dom |
18.3.7 |
19.2.3 |
Must move with react-dom |
typescript |
5.9.3 |
6.0.2 |
Strict mode changes affect dashboard type assertions |
tailwindcss |
3.4.19 |
4.2.2 |
Drops config file format — breaking |
recharts |
2.15.4 |
3.8.1 |
Breaking API changes on chart components |
framer-motion |
11.18.2 |
12.38.0 |
Motion component API changes |
lucide-react |
0.294.0 |
1.8.0 |
Icon name changes |
stripe |
20.4.1 |
22.0.1 |
API version bump |
@types/node |
20.19.39 |
25.6.0 |
Node types alignment |
Why not merge individually
react 19 + @types/react-dom 19 must move as a pair. Tailwind 4 changes the config format (no more tailwind.config.js in the same shape). TS 6 strict mode changes will surface type errors in the dashboard that need fixing before the build passes. Doing these incrementally risks a broken intermediate state.
Scope
Dashboard only. The REST API, SDK (tap-sdk/), and all agent endpoints have zero dependency on any of these packages. API consumers and integrating agents are completely unaffected regardless of when this lands.
Timeline
No hard date. Blocked on: dedicated upgrade branch + test pass against the dashboard UI.
Dependabot PRs
#3 #4 #5 #6 #7 #8 #9 #10 #11 #12
Overview
Several Dependabot PRs (#3–#12) are intentionally held pending a coordinated upgrade pass. This issue tracks that work.
Package group
reactreact-dom@types/react-domtypescripttailwindcssrechartsframer-motionlucide-reactstripe@types/nodeWhy not merge individually
react 19 + @types/react-dom 19 must move as a pair. Tailwind 4 changes the config format (no more
tailwind.config.jsin the same shape). TS 6 strict mode changes will surface type errors in the dashboard that need fixing before the build passes. Doing these incrementally risks a broken intermediate state.Scope
Dashboard only. The REST API, SDK (
tap-sdk/), and all agent endpoints have zero dependency on any of these packages. API consumers and integrating agents are completely unaffected regardless of when this lands.Timeline
No hard date. Blocked on: dedicated upgrade branch + test pass against the dashboard UI.
Dependabot PRs
#3 #4 #5 #6 #7 #8 #9 #10 #11 #12