Skip to content

Bump patched audit pins and except zod for 14 days #562

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
leynos merged 6 commits into from
Oct 24, 2026
Merged

Bump patched audit pins and except zod for 14 days #562

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
e144210
Bump patched audit pins and except zod for 14 days
leynos Oct 24, 2026
c8b1d65
Pin the workspaces that declare zod in the zod exception contract
leynos Oct 24, 2026
888a017
Wrap the zod exception contract docstring to the line limit
leynos Oct 24, 2026
120108f
Update ctutils, rustls-webpki and webpki-roots for their advisories
leynos Oct 24, 2026
bfa83d7
Read the zod exception's files through the repository boundary
leynos Oct 24, 2026
eab3845
Cast the narrowed manifest object for the type checker
leynos Oct 24, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 9 additions & 9 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

50 changes: 25 additions & 25 deletions bun.lock
View file
Open in desktop

Large diffs are not rendered by default.

4 changes: 2 additions & 2 deletions docs/developers-guide.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -581,9 +581,9 @@ make test
enabled so `pnpm` is available locally and in CI, and it requires `cargo-audit`
for the Rust dependency check.

The front-end package uses Bun-compatible workspace scripts, Vite `^7.3.5`,
The front-end package uses Bun-compatible workspace scripts, Vite `^7.3.7`,
React 19, React DOM 18, TanStack Query 5, Tailwind CSS `^3`, DaisyUI `^4`, Zod
3, TypeScript 5, Vitest `^4.1.8`, and Orval 8. TanStack Router, Radix UI,
3, TypeScript 5, Vitest `^4.1.12`, and Orval 8. TanStack Router, Radix UI,
i18next, Fluent, MapLibre GL JS, Dexie, Tailwind CSS v4, and DaisyUI v5 are
target-stack items until a roadmap task adds them to
`frontend-pwa/package.json` and the lockfile.
Expand Down
8 changes: 4 additions & 4 deletions docs/v2a-front-end-stack.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ family would need them.
The current `frontend-pwa/package.json` declares:

- Bun,
- Vite `^7.3.5`,
- Vite `^7.3.7`,
- React 19,
- React DOM 18,
- TanStack Query 5,
Expand All @@ -44,7 +44,7 @@ The current `frontend-pwa/package.json` declares:
- Zod 3,
- clsx 2,
- TypeScript 5,
- Vitest 3,
- Vitest `^4.1.12`,
- Orval 8, and
- the current build, linting, token generation, and type checking toolchain
described below.
Expand All @@ -69,7 +69,7 @@ state architecture.

- **Package manager and runner:** Bun drives local scripts, tests, and token
generation via `package.json` and `bunfig.toml`.
- **Bundler and dev server:** Vite `^7.3.5` is the application bundler and
- **Bundler and dev server:** Vite `^7.3.7` is the application bundler and
development server.
- **React integration:** `@vitejs/plugin-react` handles JSX and React Fast
Refresh.
Expand Down Expand Up @@ -323,7 +323,7 @@ For the shortest accurate summary of the checked-in mockup, the current
front-end stack is:

- Bun for scripts and package-manager-adjacent tooling,
- Vite `^7.3.5` for bundling and development,
- Vite `^7.3.7` for bundling and development,
- React 19 for the SPA runtime,
- React DOM 18 for rendering,
- TanStack Query 5 for server-state caching,
Expand Down
4 changes: 2 additions & 2 deletions frontend-pwa/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,8 +27,8 @@
"orval": "~8.27.0",
"tailwindcss": "^3",
"typescript": "^5",
"vite": "^7.3.5",
"vitest": "^4.1.11"
"vite": "^7.3.7",
"vitest": "^4.1.12"
},
"dependencies": {
"@app/types": "workspace:*",
Expand Down
22 changes: 11 additions & 11 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,8 +10,8 @@
"typedoc": "0.28.20",
"typescript": "5.9.2",
"validator": "^13.15.23",
"vite": "^7.3.5",
"vitest": "^4.1.11"
"vite": "^7.3.7",
Comment thread
coderabbitai[bot] marked this conversation as resolved.
"vitest": "^4.1.12"
},
"name": "myapp",
"private": true,
Expand Down Expand Up @@ -43,15 +43,15 @@
"basic-ftp": "6.2.1",
"brace-expansion": "5.0.12",
"browserslist": "4.28.7",
"dompurify": "3.4.16",
"dompurify": "3.4.17",
"esbuild": "0.28.1",
"fast-uri": "3.1.8",
"fast-uri": "3.1.9",
"glob": "13.0.6",
"ip-address": "10.7.2",
"ip-address": "10.7.4",
"js-yaml": "4.3.2",
"katex": "0.18.2",
"linkify-it": "5.0.2",
"markdown-it": "14.3.2",
"markdown-it": "14.3.3",
"mermaid": "11.16.1",
"nanoid": "3.3.18",
"postcss": "8.5.23",
Expand All @@ -66,7 +66,7 @@
"overrides": {
"@isaacs/brace-expansion": "5.0.1",
"brace-expansion@<5.0.12": "5.0.12",
"fast-uri": "3.1.8",
"fast-uri": "3.1.9",
"ajv": "8.20.0",
"glob": "13.0.6",
"@babel/core": "7.29.7",
Expand All @@ -75,7 +75,7 @@
"katex": "0.18.2",
"linkify-it": "5.0.2",
"lodash": "4.18.1",
"markdown-it": "14.3.2",
"markdown-it": "14.3.3",
"mermaid": "11.16.1",
"minimatch": "10.2.3",
"lodash-es": "4.18.1",
Expand All @@ -85,8 +85,8 @@
"browserslist": "4.28.7",
"postcss-selector-parser": "7.1.6",
"basic-ftp": "6.2.1",
"dompurify": "3.4.16",
"ip-address": "10.7.2",
"dompurify": "3.4.17",
"ip-address": "10.7.4",
"nanoid@<3.3.18": "3.3.18",
"tar-fs": "3.1.1",
"validator": "13.15.23",
Expand All @@ -102,7 +102,7 @@
"uuid": "14.0.0",
"postcss": "8.5.23",
"launch-editor": "2.14.1",
"vite": "7.3.5"
"vite": "7.3.7"
}
}
}
Loading
Loading