chore: Update deps#5773
Open
tung2744 wants to merge 11 commits into
Open
Conversation
Upgraded vite 7 → 8 and storybook 9 → 10 to fix esbuild vulnerability GHSA-gv7w-rqvm-qjhr / GHSA-g7r4-m6w7-qqqr (esbuild < 0.28.1 serving files from the network that bypass browser security). - vite: ^7.3.2 → ^8.0.0 (uses Rolldown/Oxc instead of esbuild) - storybook: ^9.0.14 → ^10.4.4 - @storybook/addon-docs, addon-onboarding, addon-vitest, @storybook/react-vite: ^9 → ^10.4.4 - @chromatic-com/storybook: ^4 → ^5.2.1 - @vitejs/plugin-react: ^5.1.1 → ^5.2.0 - Added esbuild: ^0.28.1 global override for residual transitive dep - Removed build.rollupOptions.maxParallelFileOps (Rolldown not Rollup) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Upgraded vite 7 → 8 to fix esbuild vulnerability GHSA-gv7w-rqvm-qjhr / GHSA-g7r4-m6w7-qqqr (esbuild < 0.28.1 serving files from network bypassing browser security). - vite: ^7.3.2 → ^8.0.0 (uses Rolldown/Oxc instead of esbuild) - Added esbuild: ^0.28.1 global override for residual transitive dep - rollupOptions → rolldownOptions; removed maxParallelFileOps (Rolldown) - format: "module" → "es" (Rolldown canonical name) - tsconfig.json: exclude vite.config.ts (moduleResolution: node is incompatible with Vite 8 ESM exports) - tsconfig.vite.json: added for type-checking vite.config.ts with moduleResolution: bundler; typecheck script runs both Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Upgraded vite 7 → 8 to fix esbuild vulnerability GHSA-gv7w-rqvm-qjhr / GHSA-g7r4-m6w7-qqqr (esbuild < 0.28.1 serving files from network bypassing browser security). - vite: ^7.3.2 → ^8.0.0 (uses Rolldown/Oxc instead of esbuild) - @vitejs/plugin-react: ^5.1.1 → ^5.2.0 - vite-plugin-singlefile: ^2.3.0 → ^2.3.3 - Added esbuild: ^0.28.1 global override for residual transitive dep - tsconfig.json: exclude vite.config.ts from main check (graphql-ws lacks "types" in exports field, incompatible with bundler resolution) - tsconfig.vite.json: added for type-checking vite.config.ts with moduleResolution: bundler; typecheck script runs both Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
close-dark.svg was byte-for-byte identical to close.svg (same path data, same fill color). The .dark .close-btn override in close-btn.css had no visual effect. Rolldown's asset deduplication under Vite 8 non-deterministically picked one filename over the other, causing ensure-reproducible-build to fail. Remove close-dark.svg and drop the no-op .dark override so only one asset is emitted. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
graphiql.generated.html: rebuilt from portalgraphiql with Vite 8 / Rolldown (was Vite 7 / Rollup). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
… upgrade Added eslint-disable-next-line comments for rules introduced by the @oursky/eslint-plugin 17.0.0→17.1.0 upgrade (react-hooks v7 compiler rules and @typescript-eslint/strict-void-return). These are suppressed for now and will be fixed properly in a follow-up. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
schema.graphql files are generated by make export-schemas — they should not be formatted by prettier. Revert them to canonical generated form and regenerate globalTypes.generated.ts from the correct schema. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Remove unused @ts-expect-error in ThemePreviewWidget (the underlying error was resolved by the @types upgrade) - Cast CSS custom property map to CSSProperties in SquareIcon Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
ref DEV-3645