Skip to content

deps-dev: bump the desenvolvimento group with 3 updates - #3

Closed
dependabot[bot] wants to merge 9 commits into
mainfrom
dependabot/npm_and_yarn/desenvolvimento-c76a9f862b
Closed

deps-dev: bump the desenvolvimento group with 3 updates#3
dependabot[bot] wants to merge 9 commits into
mainfrom
dependabot/npm_and_yarn/desenvolvimento-c76a9f862b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown

Bumps the desenvolvimento group with 3 updates: @types/pg, @lhci/cli and @eslint/eslintrc.

Updates @types/pg from 8.21.0 to 8.23.1

Commits

Updates @lhci/cli from 0.14.0 to 0.15.1

Release notes

Sourced from @​lhci/cli's releases.

v0.15.1

What's Changed

New Contributors

Full Changelog: GoogleChrome/lighthouse-ci@v0.15.0...v0.15.1

v0.15.0

v0.15.0 (2025-06-09)

BREAKING CHANGE

  • upgrade to lighthouse 12.6.1
Commits
  • 76a49c7 fix: use viewer origin as string instead of object (#1109)
  • 602bf7d chore: bump lhci references to 0.15
  • d2cdea9 chore: update docker images with latest version
  • 6b3b50e feat: upgrade to lighthouse 12.6.1 (#1103)
  • 912d985 chore: update versions in ci (#1104)
  • e83b2f6 fix(cli): improve filename sanitization for hash routes (#1084)
  • d04aba1 feat(cli): change wizard default branch to main (#1069)
  • 115818a chore: Heroku Postgres Hobby plan doesn't exist anymore (#1077)
  • ef83477 chore: update versions in heroku-server recipe (#1078)
  • 3cac9eb docs: update GitHub Actions versions in README.md (#1086)
  • Additional commits viewable in compare view

Updates @eslint/eslintrc from 3.2.0 to 3.3.7

Release notes

Sourced from @​eslint/eslintrc's releases.

eslintrc: v3.3.7

3.3.7 (2026-09-01)

Bug Fixes

  • Bump js-yaml to 4.3.1 (#239) (f27e7c9)
  • update js-yaml to 4.3.2 to address security vulnerability (#243) (bb0d97a)

eslintrc: v3.3.6

3.3.6 (2026-07-10)

Bug Fixes

  • update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

eslintrc: v3.3.5

3.3.5 (2026-03-04)

Bug Fixes

  • update dependency minimatch to ^3.1.5 (#227) (3dc2381)

eslintrc: v3.3.4

3.3.4 (2026-02-22)

Bug Fixes

  • update ajv to 6.14.0 to address security vulnerabilities (#221) (9139140)
  • update minimatch to 3.1.3 to address security vulnerabilities (#224) (30339d0)

eslintrc: v3.3.3

3.3.3 (2025-11-28)

Bug Fixes

  • release v3.3.3 because publishing v3.3.2 failed (#211) (8aa555a)

eslintrc: v3.3.2

3.3.2 (2025-11-25)

Bug Fixes

  • Remove name property from all and recommended configs (#200) (344da49)

... (truncated)

Changelog

Sourced from @​eslint/eslintrc's changelog.

3.3.7 (2026-09-01)

Bug Fixes

  • Bump js-yaml to 4.3.1 (#239) (f27e7c9)
  • update js-yaml to 4.3.2 to address security vulnerability (#243) (bb0d97a)

3.3.6 (2026-07-10)

Bug Fixes

  • update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

3.3.5 (2026-03-04)

Bug Fixes

  • update dependency minimatch to ^3.1.5 (#227) (3dc2381)

3.3.4 (2026-02-22)

Bug Fixes

  • update ajv to 6.14.0 to address security vulnerabilities (#221) (9139140)
  • update minimatch to 3.1.3 to address security vulnerabilities (#224) (30339d0)

3.3.3 (2025-11-28)

Bug Fixes

  • release v3.3.3 because publishing v3.3.2 failed (#211) (8aa555a)

3.3.2 (2025-11-25)

Bug Fixes

  • Remove name property from all and recommended configs (#200) (344da49)

3.3.1 (2025-03-11)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​eslint/eslintrc since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

nerdresolve and others added 9 commits September 7, 2026 15:18
@nerdresolve @claude
Estrutura inicial da plataforma
a27f86e 
Monorepo em tres camadas, com a direcao das dependencias verificada por
portao automatico (frontend -> backend -> core):

- packages/core   regra de dominio pura, sem framework e sem SQL
- apps/backend    casos de uso, repositorios e integracoes
- apps/frontend   Next.js 15 e React 19: telas e rotas HTTP
- infra           compose, migracoes do Postgres, proxy e ferramentas

Design system proprio em tokens: paleta violeta, tipografia e espacamento
num lugar so', com tema claro e escuro que passam em contraste WCAG AA.

Nenhum .env e' versionado. O .gitignore recusa qualquer um que nao seja
.example, e a documentacao manda gerar segredo proprio por instalacao.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@nerdresolve @claude
Nucleo funcional da plataforma
7b7186b 
Aluno assiste, faz prova e recebe certificado. A conclusao exige 90% de
cobertura do video COM tempo de sessao compativel: arrastar a barra nao
conta. O avanco para trecho nao assistido e' bloqueado por curso.

Prova com banco de questoes, correcao por rubrica e reteste PEDIDO ao
instrutor, que libera ou recusa com comentario obrigatorio. Certificado
em PDF com assinatura do instrutor e codigo conferivel, que reavalia
matricula, conclusao e nota em vez de confiar no codigo sozinho.

Tambem entram: biblioteca de conteudos, plano de formacao por cargo,
trilha por funcao e local, avaliacao de eficacia do treinamento, corte
automatico de video, LDAP como fonte de identidade, exclusao de conta
(LGPD), cifra de segredos em repouso, H5P e rigor de leitura.

Multi-tenant desde o schema: toda consulta filtra por tenant_id, e ha
teste automatizado cobrindo o isolamento entre clientes.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@nerdresolve @claude
Automacao de CI e deploy, e o ponto unico de personalizacao
2f96c94 
- CI com typecheck, lint, testes, build, imagem Docker e compose validado
- Deploy por tag: publica no GHCR e atualiza o servidor por SSH, migrando
  antes de trocar o container e esperando o healthcheck. Sem os secrets
  de SSH a Action publica a imagem e pula o deploy, sem falhar
- CodeQL, npm audit e Gitleaks em cada PR e semanalmente
- Dependabot agrupado, templates de issue e de PR

brand.config.ts reune nome, cor e caminhos das imagens num arquivo so':
trocar a marca do produto e' editar dois valores e substituir quatro
imagens.

O nome que aparece na aba, no certificado e nas telas publicas sai do
tenant que atende a requisicao, com o nome do produto como reserva.
Nenhum nome fica fixo em codigo.

README, CONTRIBUTING, SECURITY e DEPLOY escritos para quem chega de fora.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@nerdresolve @claude
Reduz o peso do repositorio e completa o .env.example
34e935f 
- o prototipo gerado deixa de ser versionado: os .template.html sao a
  fonte, e a CI roda npm run preview antes dos portoes
- documenta HTTP_PORT, HTTPS_PORT, STORAGE_PUBLIC_ENDPOINT e TZ, que o
  compose ja lia sem estarem declaradas em lugar nenhum
- remove assets que nenhum codigo referenciava

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@nerdresolve @claude
Tipografia sob licenca aberta e ajustes de contraste
cc772bf 
Manrope, sob SIL Open Font License: pode ser redistribuida, inclusive
num fork comercial. Por ser variavel, um arquivo de 24 kB cobre os pesos
200-800 onde uma familia estatica levaria oito arquivos e 215 kB.

Auditoria visual das telas nos dois temas ajustou:
- o gradiente de marca e a arte da landing no tema escuro
- tres cores da sidebar no tema claro, com os contrastes que os
  comentarios documentam
- o hover do botao primario no escuro, que dava 3.96:1 com texto branco

Corrige tambem width/height de imagem que nao batiam com os arquivos e
causavam layout shift, e o alvo de toque do .link (WCAG 2.5.8).

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@nerdresolve @claude
Corrige achados da auditoria de acessibilidade
230bc3c 
`.sr-only` usava margem negativa e `position: absolute` sem ancestral
posicionado, entao um rotulo dentro de `<th>` se ancorava na pagina e
reaparecia como 8px de rolagem horizontal a 1024px. Agora recorta por
`clip-path` e quem o envolve vira o bloco de contencao.

Tres campos do prototipo nao tinham nome acessivel: o `<label
class="sr-only">` ao lado deles nao tinha `for` nem envolvia o campo, o
que faz dele texto solto. Como os formularios sao clonados por modulo,
`id` colidiria; ficou `aria-label`.

As quatro capas de curso eram degrades do mesmo violeta variando so' o
angulo, e numa grade liam como um retangulo so'. Cada uma passa a puxar
para um acento da marca, que a personalizacao por cliente ja deriva.

Alinha as acoes de linha da tabela com o botao que o app React usa.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@nerdresolve @claude
Alinha o prototipo com o app e aperta o orcamento de peso
9b23780 
O prototipo usava `.studio` e `.studio__head` como container de pagina,
e nenhuma folha define as duas. O app React usa `.page` e `.page-head`
nos mesmos lugares. Oito paginas renderizavam sem o container que o
codigo pedia.

O defeito estava escondido porque o portao que compara classes usadas
com classes definidas varria o `<style>` inteiro, comentarios inclusive
— e um comentario que menciona `.studio` contava como definicao. Tirar
os comentarios do CSS gerado revelou o buraco e, de quebra, cortou 39 kB
de cada uma das 21 paginas. Com elas mais leves, o orcamento por pagina
cai para 200 kB.

Na tabela em tela estreita, um e-mail longo nao quebrava e encostava na
borda do cartao. A barra de QA do prototipo media 426px numa tela de
390px e tapava o conteudo que se estava conferindo.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@nerdresolve @claude
Tira o nome do produto do rotulo da moeda
f595a33 
A moeda da gamificacao e' do cliente que instala, nao do produto: um
nome fixo apareceria na tela de quem usa outra marca.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@dependabot
deps-dev: bump the desenvolvimento group with 3 updates
6bd691e 
Bumps the desenvolvimento group with 3 updates: [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg), [@lhci/cli](https://github.com/GoogleChrome/lighthouse-ci) and [@eslint/eslintrc](https://github.com/eslint/eslintrc).


Updates `@types/pg` from 8.21.0 to 8.23.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg)

Updates `@lhci/cli` from 0.14.0 to 0.15.1
- [Release notes](https://github.com/GoogleChrome/lighthouse-ci/releases)
- [Commits](GoogleChrome/lighthouse-ci@v0.14.0...v0.15.1)

Updates `@eslint/eslintrc` from 3.2.0 to 3.3.7
- [Release notes](https://github.com/eslint/eslintrc/releases)
- [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md)
- [Commits](eslint/eslintrc@v3.2.0...eslintrc-v3.3.7)

---
updated-dependencies:
- dependency-name: "@types/pg"
  dependency-version: 8.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: desenvolvimento
- dependency-name: "@lhci/cli"
  dependency-version: 0.15.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: desenvolvimento
- dependency-name: "@eslint/eslintrc"
  dependency-version: 3.3.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: desenvolvimento
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026
@nerdresolve nerdresolve closed this Sep 7, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/desenvolvimento-c76a9f862b branch September 7, 2026 22:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@nerdresolve