Skip to content

chore: update dependencies - #413

Merged
malte-b merged 37 commits into
stagingfrom
chore/update-dependencies
Aug 4, 2026
Merged

malte-b merged 37 commits into
stagingfrom
chore/update-dependencies

Conversation

@malte-b

@malte-b malte-b commented Jul 29, 2026 •

Copy link
Copy Markdown
Contributor

This PR does the following:

  • updates all dependencies that have vulnerabilities (found by renovate, dependabot and npm audit), so now we have 0 vulnerabilities
  • overrite Dependabot rules, so minor updates get auto-merged after 2 weeks of release and security vulnerability patches get immediately auto-merged. Both merge to staging, so a manual Hotfix Release to prod is still necessary. This alleviates a lot of manual work for us.
  • Vite update to version 8 should lead to some performance gains for build and run times

Summary by CodeRabbit

  • New Features
    • Expanded automation for security and dependency updates, including auto-labeling and auto-merge for patch/minor changes.
  • Bug Fixes
    • Improved local Supabase startup and readiness checks with clearer timeout diagnostics.
    • Updated telemetry handling and test compatibility.
  • Build
    • Enhanced production builds with conditional error monitoring, refined vendor chunking, and improved CSS minification compatibility.
  • Documentation
    • Updated local email-testing guidance and workflows for Mailpit.
  • Chores
    • Upgraded React, routing, tooling, monitoring, and development libraries across applications.
    • Refreshed local configuration, database migrations, and generated database types.

@malte-b
malte-b requested a review from tsboter as a code owner July 29, 2026 12:58
@vercel

vercel Bot commented Jul 29, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
baergpt-admin-panel Ready Ready Preview Aug 4, 2026 8:10am
baergpt-frontend Ready Ready Preview Aug 4, 2026 8:10am
baergpt-maintenance-mode Ready Ready Preview Aug 4, 2026 8:10am

Request Review

@coderabbitai

coderabbitai Bot commented Jul 29, 2026 •

Copy link
Copy Markdown

Review Change Stack

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review

Walkthrough

The PR updates dependency policies, application runtimes, routing imports, Vite and Sentry build behavior, OpenTelemetry setup, database types, and Supabase workflows. It also changes end-to-end email confirmation from Inbucket to Mailpit.

Changes

Runtime modernization

Layer / File(s) Summary
Dependency policy and workspace package updates
.github/renovate.json, package.json, apps/*/package.json, infra/.../package.json, libs/eslint/package.json, .tool-versions
Renovate rules, dependency overrides, Supabase tooling, and package versions are updated.
Frontend routing and build integration
apps/frontend/src/..., apps/frontend/vite.config.ts
Routing imports and Sentry browser-router wrapping use newer APIs. Vite conditionally enables Sentry and creates vendor chunks.
Admin routing and CSS build configuration
apps/admin-panel/src/..., apps/admin-panel/vite.config.ts
Admin routing imports use react-router. Vite selects esbuild CSS minification.
Backend instrumentation and validation
apps/backend/src/...
Explicit HTTP and Undici instrumentations replace auto-discovery. The Mistral mock supports Vitest 4 constructors.
Database type and migration updates
libs/db-schema/index.ts, apps/backend/supabase/...
Generated database types change nullability and zero-argument RPC definitions. Supabase migrations and analytics settings are updated.
Supabase startup, readiness, and email-test workflow
.github/actions/..., apps/frontend/tests/fixtures/..., README*
Supabase startup and readiness checks report detailed state. End-to-end email confirmation uses Mailpit APIs.

Estimated code review effort: 4 (Complex) | ~45 minutes

Possibly related PRs

Suggested reviewers: nlspnsgen, tsboter

Poem

A rabbit updates routes with care,
And sends new messages through the air.
Mailpit holds each code in place,
While Supabase logs reveal its trace.
Fresh builds hop through chunks everywhere.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Docstring Coverage ⚠️ Warning Docstring coverage is 20.00% which is insufficient. The required threshold is 80.00%. Write docstrings for the functions missing them to satisfy the coverage threshold.
✅ Passed checks (4 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately identifies dependency updates, which are the primary changes in the pull request.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches 💡 1
📝 Generate docstrings 💡
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/update-dependencies

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 3

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/renovate.json:
- Around line 14-19: Update the Renovate packageRules configuration so ordinary
minor updates use minimumReleaseAge of "14 days" instead of automerging
immediately; split the patch and minor rules if necessary to keep patches
immediate, while preserving vulnerability alerts as the explicit security
exception.

In `@apps/admin-panel/vite.config.ts`:
- Around line 14-19: Update the comment above the cssMinify setting in the Vite
build configuration to accurately describe the installed Tailwind CSS 3.4.13
pipeline, removing references to Tailwind v4 at-rules unless the dependency is
intentionally upgraded. Keep cssMinify set to esbuild and align the rationale
with the chosen Tailwind version.

In `@apps/frontend/src/index.tsx`:
- Line 4: Update the RouterProvider import in the frontend entrypoint to use the
DOM-specific react-router/dom entrypoint instead of react-router, preserving the
existing RouterProvider usage.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: d9b2200f-4e09-4c4c-969c-9661a43129f4

📥 Commits

Reviewing files that changed from the base of the PR and between b110511 and 0e3b944.

⛔ Files ignored due to path filters (2)
  • infra/backups/scripts/prompts/package-lock.json is excluded by !**/package-lock.json
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (24)
  • .github/renovate.json
  • apps/admin-panel/package.json
  • apps/admin-panel/src/components/admin-sidebar/admin-sidebar.tsx
  • apps/admin-panel/src/hooks/use-session-redirect.tsx
  • apps/admin-panel/src/index.tsx
  • apps/admin-panel/vite.config.ts
  • apps/backend/package.json
  • apps/backend/src/integration/document-extraction-service.test.ts
  • apps/backend/src/monitoring/instrumentation.ts
  • apps/backend/supabase/migrations/20260622120000_normalize_personal_system_prompt.sql
  • apps/frontend/package.json
  • apps/frontend/src/components/main.tsx
  • apps/frontend/src/components/profile/back-to-chats-link.tsx
  • apps/frontend/src/components/profile/delete-account/delete-account-dialog.tsx
  • apps/frontend/src/hooks/use-session-redirect.tsx
  • apps/frontend/src/index.tsx
  • apps/frontend/src/monitoring/sentry.ts
  • apps/frontend/src/routes/account-deleted/index.tsx
  • apps/frontend/src/routes/confirm-otp/index.tsx
  • apps/frontend/vite.config.ts
  • apps/maintenance-mode/package.json
  • infra/backups/scripts/prompts/package.json
  • libs/eslint/package.json
  • package.json

Comment thread .github/renovate.json
Comment thread apps/admin-panel/vite.config.ts
Comment thread apps/frontend/src/index.tsx Outdated
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
@vercel
vercel Bot temporarily deployed to Preview – baergpt-admin-panel July 31, 2026 13:30 Inactive
@vercel
vercel Bot temporarily deployed to Preview – baergpt-maintenance-mode July 31, 2026 13:30 Inactive

@raphael-arce raphael-arce left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One more thing 👍 otherwise good to go

Comment thread .github/actions/setup/action.yml
Comment thread .github/actions/wait-for-supabase/action.yml
Comment thread apps/frontend/tests/fixtures/test-with-registered-user.ts
Comment thread apps/frontend/tests/fixtures/test-with-registered-user.ts Outdated
@vercel
vercel Bot temporarily deployed to Preview – baergpt-maintenance-mode August 4, 2026 07:55 Inactive
@vercel
vercel Bot temporarily deployed to Preview – baergpt-admin-panel August 4, 2026 07:55 Inactive
@vercel
vercel Bot temporarily deployed to Preview – baergpt-maintenance-mode August 4, 2026 08:08 Inactive
@vercel
vercel Bot temporarily deployed to Preview – baergpt-admin-panel August 4, 2026 08:08 Inactive

@raphael-arce raphael-arce left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm 👍 great job, thanks!

@malte-b
malte-b merged commit 4da6f8f into staging Aug 4, 2026
21 of 24 checks passed
@malte-b
malte-b deleted the chore/update-dependencies branch August 4, 2026 09:46

This branch was successfully deployed

3 active deployments
Preview – baergpt-frontend — 1f636b33 Deployed Aug 4, 2026 by vercel[bot]
Preview – baergpt-admin-panel — 1f636b33 Deployed Aug 4, 2026 by vercel[bot]
Preview – baergpt-maintenance-mode — 1f636b33 Deployed Aug 4, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants