Skip to content

chore: bump all dependencies — 0 vulnerabilities#95

Merged
arediss merged 1 commit intomainfrom
chore/bump-dependencies
Apr 7, 2026
Merged

chore: bump all dependencies — 0 vulnerabilities#95
arediss merged 1 commit intomainfrom
chore/bump-dependencies

Conversation

@arediss
Copy link
Copy Markdown
Owner

@arediss arediss commented Apr 7, 2026

Summary

Full dependency upgrade across backend and frontend.

Major upgrades

Package Before After
typescript 5.9.3 6.0.2
lucide-react 0.475.0 1.7.0
i18next 25.10.5 26.0.3
dotenv 16.6.1 17.4.1
@fastify/static 8.3.0 9.1.0
fast-jwt 6.1.0 6.2.0 (fixes CVE-2023-48223 + GHSA-hm7r-c7qw-ghp6)

Minor/patch upgrades

Package Before After
axios 1.13.6 1.14.0
fastify 5.8.3 5.8.4
resend 6.9.4 6.10.0
react-router-dom 7.13.1 7.14.0
react-i18next 16.6.2 16.6.6
prisma 6.19.2 6.19.3

Config changes

  • ignoreDeprecations: "6.0" in both tsconfig.json (TS6 deprecates baseUrl)
  • New vite-env.d.ts for CSS module declarations (TS6 stricter checks)

Security

0 vulnerabilities (was 1 critical from fast-jwt)

Test plan

  • Backend compiles (tsc)
  • Frontend compiles (tsc -b && vite build)
  • npm audit returns 0 vulnerabilities
  • Dev server + HMR works
  • All pages functional

Major upgrades:
- typescript 5.9 → 6.0.2
- lucide-react 0.475 → 1.7.0
- i18next 25.x → 26.0.3
- dotenv 16.x → 17.4.1
- @fastify/static 8.x → 9.1.0
- fast-jwt 6.1.0 → 6.2.0 (fixes CVE-2023-48223 and GHSA-hm7r-c7qw-ghp6)

Minor/patch upgrades:
- axios 1.13.6 → 1.14.0
- fastify 5.8.3 → 5.8.4
- resend 6.9.4 → 6.10.0
- react-router-dom 7.13 → 7.14.0
- react-i18next 16.6.2 → 16.6.6
- prisma 6.19.2 → 6.19.3

Config changes:
- Add ignoreDeprecations: "6.0" to both tsconfig.json (TS6 baseUrl deprecation)
- Add vite-env.d.ts for CSS module declarations (TS6 stricter checks)

Result: 0 vulnerabilities (was 1 critical)
@arediss arediss merged commit 3a19cf9 into main Apr 7, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant