Repository navigation
chore(deps): update all dependencies - #1231
Conversation
Client, Keycloakify, server, webhook-listener, docs, Docker images and GitHub Actions. Patches the two minimatch Dependabot alerts via overrides. PrimeNG 22, primeicons 8, TypeScript 7 and docutils 0.23 are intentionally held back.
There was a problem hiding this comment.
Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota. Try requesting a review at a lower effort level.
An organization owner can choose the repository organization as the billing source for reviews requested by members with a paid Copilot license. Learn about Copilot code review billing.
Not up to standards ⛔🟢 Issues
|
| Metric | Results |
|---|---|
| Complexity | ✅ 0 (≤ 20 complexity) |
🔴 Coverage ∅ diff coverage · -6.17% coverage variation
Metric Results Coverage variation ❌ -6.17% coverage variation (-1.00%) Diff coverage ✅ ∅ diff coverage Coverage variation details
Coverable lines Covered lines Coverage Common ancestor commit (489e32c) 6649 4505 67.75% Head commit (d614891) 16141 (+9492) 9940 (+5435) 61.58% (-6.17%) Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch:
<coverage of head commit> - <coverage of common ancestor commit>Diff coverage details
Coverable lines Covered lines Diff coverage Pull request (#1231) 0 0 ∅ (not applicable) Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified:
<covered lines added or modified>/<coverable lines added or modified> * 100%
NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.
github-actions
Bot
added
documentation
Claudia-Anthropica
left a comment
Claudia-Anthropica
left a comment
There was a problem hiding this comment.
@krusche This looks good to me; I found no issues that need changes. Both lockfiles match their manifests and overrides, and the Node/pnpm pins agree across CI and Docker. CI is still unfinished, including tests, the client build, linting, OpenAPI and migration validation, and Java CodeQL analysis; I haven't run builds or tests locally.
Resolve conflicts with the dependency update (#1231): keep renovate.yml, Sentry and confetti removed, take the new client versions and regenerate the client lockfile.
Motivation
Nine Renovate PRs and two Dependabot alerts were open, and most of them touched the same lockfiles. This combines them into one update so they can be tested and deployed together.
Description
@angular/*kept in step), vitest 5.1.0, eslint 10.14.0, TanStack Query 5.105.3, tailwindcss 4.3.4, typescript-eslint 8.72.1, keycloak-js 26.2.5, marked 18.1.3, tslib 2.9.1 and smaller patches. All pinned exactly (no caret).@vitejs/plugin-react6.2.1, lucide-react 1.66.0, tailwindcss 4.3.4, eslint 10.14.0 and smaller patches..nvmrc), nats 2.15.2, python 3.15.2.package.json, Dockerfiles, CI, docs),actions/*updates from the open Renovate PR (checkstyle action 4.5.0, renovate action 46.3.12).minimatch@3and@10in the client and@10in keycloakify. Lint passes with minimatch 11, includingeslint-plugin-import, which calls minimatch 3 directly.Intentionally held back:
sphinx-rtd-theme3.1.0 requiresdocutils<0.23.This supersedes the open Renovate PRs #1169, #1184, #1222, #1224, #1225, #1227 and #1228.
Not included, and those PRs stay open: #1218 (
@babel/core@7to v8), #1223 (fast-uri@3to v4) and #1226 (brace-expansion@1to v5). They move transitive override pins across a major version and are better reviewed on their own.Testing Instructions
Verified locally on this branch:
./gradlew testpasses (544 tests, 2 skipped as before),generateOpenApiDocsleaves the spec unchangedpnpm install --frozen-lockfileis up to date in both appsNot run locally: the Docker image builds, the docs build and the webhook-listener. CI and the staging deploy cover these.
Checklist
General