Skip to content

build(deps): post-flip dependency triage batch - #48

Merged
wms2537 merged 1 commit into
mainfrom
deps/triage-post-flip
Jul 31, 2026
Merged

build(deps): post-flip dependency triage batch#48
wms2537 merged 1 commit into
mainfrom
deps/triage-post-flip

Conversation

@wms2537

@wms2537 wms2537 commented Jul 31, 2026

Copy link
Copy Markdown
Collaborator

First dependency batch actioned here as the source of truth (the equivalents opened against the old private monorepo targeted code that has since moved, and were closed).

Applied — Actions: setup-node 6→7, docker metadata 5→6 / login 3→4 / build-push 6→7. Rust: tokio 1.53.1, anyhow 1.0.104, wat 1.254.0, and base64 0.22→0.23 (major — trialled, compiles clean). Web: react + react-dom 19.2.8, react-router-dom 7.18.2, vite 8.1.5, @playwright/test 1.62.0, @tailwindcss/vite 4.3.3, and typescript 6→7 (major — the Go-compiler rewrite; trialled, tsc --noEmit exits 0 unmodified). Caret convention preserved.

Declined: md-5 0.11 — part of the digest-trait strand (sha1/hmac/argon2's password-hash still on 0.10-era traits) that must move as one; same standing rationale as sha2 0.11 and rand_core 0.9.

Gate: fmt + clippy -D warnings + 15 test suites + open build + web build, all green.

🤖 Generated with Claude Code


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

The first dependency batch actioned in this repo as the source of truth.
Applied: GitHub Actions (setup-node 6->7, docker metadata 5->6, login 3->4,
build-push 6->7); Rust tokio 1.53.1, anyhow 1.0.104, wat 1.254.0, and
base64 0.22->0.23 (major, trialled: compiles clean); web react/react-dom
19.2.8, react-router-dom 7.18.2, vite 8.1.5, @playwright/test 1.62.0,
@tailwindcss/vite 4.3.3, and typescript 6->7 (major, trialled: tsc --noEmit
exits 0 on the existing codebase). Caret ranges preserved.

Declined: md-5 0.11 — it belongs to the digest-trait strand (sha1/hmac/
argon2 password-hash are still on the 0.10-era traits) which must move
together; bumping one crate alone fragments the tree for no gain. Same
rationale as the standing sha2 0.11 / rand_core 0.9 holds.

Gate: fmt + clippy -D warnings + 15 test suites + open build + web build.
Signed-off-by: Heldar <noreply@heldar.dev>
@wms2537
wms2537 force-pushed the deps/triage-post-flip branch from 4858fff to 36a328b Compare July 31, 2026 04:20
@wms2537
wms2537 merged commit ccd034f into main Jul 31, 2026
5 checks passed
@wms2537
wms2537 deleted the deps/triage-post-flip branch July 31, 2026 04:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant