Skip to content

[GIT-84] Refresh dependencies - #85

Open
itsryanarmani wants to merge 1 commit into
mainfrom
git-84-refresh-deps
Open

itsryanarmani wants to merge 1 commit into
mainfrom
git-84-refresh-deps

Conversation

@itsryanarmani

@itsryanarmani itsryanarmani commented Nov 4, 2026 •

Copy link
Copy Markdown
Owner

Closes #84

What

Refresh every direct dependency to its latest published release across the root package and the promo-video app, and regenerate both package-lock files with npm.

held back:

  • typescript 5.9.3->6.0.3, typescript-eslint does not support TS 7 yet
  • ai 6.0.73->6.0.322, @ai-sdk/react 3.0.75->3.0.325, @ai-sdk/anthropic 3.0.37->3.0.138, @ai-sdk/openai 3.0.25->3.0.136, ai 7/@ai-sdk 4 remove LanguageModelUsage.reasoningTokens used in src/components/ai-elements/context.tsx
  • lucide-react 0.563.0->0.577.0, lucide 1.x removed the Github brand icon imported in 3 files
  • shiki 3.22.0->3.22.0, shiki 3.23+ drop bundledLanguagesInfo re-exported by src/lib/shiki-server.ts
  • @streamdown/code 1.0.1->1.0.1, 2.0.0 pulls @shikijs/core 4.x and breaks the shiki 3.22 pin
  • @pierre/diffs 1.0.10->1.0.10, newer versions pull @pierre/theming which imports @shikijs/themes/horizon-bright, requiring shiki>=3.23 (mutually exclusive with the shiki 3.22 pin)
  • eslint 9->9.39.5, eslint 10 changes lint behavior (baseline already has the same findings; CI lint gate is oxlint)
  • @tiptap/extension-collaboration-cursor 3.0.0->3.0.0, its published maximum is 3.0.0
  • @playwright/test 1.63.0->1.64.1 (latest; lockfile resolves 1.64.1)

Why

Cut dependency drift by moving to the latest versions while keeping the verified builds and lockfiles consistent, so dependabot and future feature work build on current releases.

How I verified

npm run build:vinext -> build complete
npx tsc --noEmit -> passed
bunx oxlint -> passed
The root and promo-video lockfiles resolve the held versions.

Proof: n/a - dependency-only change, no visible output change.

Review

Reviewed-by: claude-hub:claude-sonnet-5-5
Verdict: 0 major

Assisted-by: pi:deepseek-v4-flash-0731

@coderabbitai

coderabbitai Bot commented Nov 4, 2026

Copy link
Copy Markdown

Important

  • Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 7308e7e4-3f33-4dcd-ba02-230328b75db3
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@pooriaarab-grokbot pooriaarab-grokbot Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not merging yet: the CI build job fails before running anything (checkout of the private repo via the SSH deploy key returns 'Repository not found', same on main and every other open PR), so the several runtime majors here (firebase 13, firebase-admin 14, mermaid 12, diff 9, vinext beta->1.4, typescript 6) have no CI build signal. Once the deploy key/secret is fixed, rerun build and this can go.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Refresh dependencies

1 participant