Skip to content

Resolve all open Dependabot dependency updates#187

Merged
1um merged 1 commit intomainfrom
chore/resolve-dependabot-updates
Mar 27, 2026
Merged

Resolve all open Dependabot dependency updates#187
1um merged 1 commit intomainfrom
chore/resolve-dependabot-updates

Conversation

@1um
Copy link
Copy Markdown
Contributor

@1um 1um commented Mar 27, 2026

Summary

Resolves all 22 open Dependabot PRs in a single consolidated update.

npm apps (shadcn_ui_app, jsx-app, sample_app_nextjs)

  • Next.js 14.0.x → 15.5.14 (latest stable, patched for CVE-2025-66478)
  • React & React DOM ^18 → ^19 (major)
  • @types/react & @types/react-dom ^18 → ^19
  • ESLint ^8 → ^9 (major)
  • eslint-config-next 14.0.x → 15.5.14
  • nanoid resolved transitively at 3.3.11 (via postcss)

Docker base images

  • Python 3.8 → 3.13 (react/, _roastery/latte/, _roastery/browser_extension/server/)
  • Node.js 20 → 23 (_roastery/sample_app_nextjs/)

Dependabot PRs resolved

#68, #69, #70, #73, #76, #77, #81, #143, #144, #145, #146, #147, #148, #164, #165, #166, #167, #168, #169, #176, #177, #178

Test plan

  • npm install succeeds for all 3 apps with no critical vulnerabilities
  • Python requirements are unpinned and compatible with 3.13
  • Next.js configs are minimal and compatible with v15
  • CI passes on this branch

Made with Cursor

npm apps (shadcn_ui_app, jsx-app, sample_app_nextjs):
- next 14.0.x → 15.5.14 (latest stable, patched for CVE-2025-66478)
- react & react-dom ^18 → ^19
- @types/react & @types/react-dom ^18 → ^19
- eslint ^8 → ^9
- eslint-config-next 14.0.x → 15.5.14
- nanoid resolved transitively (3.3.11 via postcss)

Docker base images:
- python 3.8 → 3.13 (react/, latte/, browser_extension/server/)
- node 20 → 23 (sample_app_nextjs/)

Resolves #68, #69, #70, #73, #76, #77, #81, #143, #144, #145, #146, #147,

Made-with: Cursor
#148, #164, #165, #166, #167, #168, #169, #176, #177, #178.
@1um 1um merged commit 7855587 into main Mar 27, 2026
1 check passed
@1um 1um deleted the chore/resolve-dependabot-updates branch March 27, 2026 17:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant