chore(deps): weekly dependency update to latest pinned versions - #365
Draft
jimmydjabali wants to merge 2 commits into
Draft
chore(deps): weekly dependency update to latest pinned versions#365jimmydjabali wants to merge 2 commits into
jimmydjabali wants to merge 2 commits into
Conversation
Bump 58 dependencies to their latest published versions (exact pins). All patch/minor updates within the same major line, plus text-encoding-polyfill pinned exact. Verified: npm install resolves, all 19 patch-package patches apply, tsc introduces no new type errors vs. the pre-existing baseline, and the production web build succeeds. Adapt webpack config for react-router-dom 7.18: add resolve.fullySpecified=false for .mjs so react-router's extension-less "process/browser" import resolves. Held back (see PR description) 45 packages: the React Native 0.81 toolchain, packages carrying version-pinned patch-package patches, native/build-toolchain major upgrades, styled-components 6.4 and @yudiel/react-qr-scanner 2.6 (type/API regressions), and the bitcoinjs-lib pre-release pin. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TfjnEKb2TT2HE1AoynE9Ko
Continues the weekly dependency refresh (supersedes #364, whose branch was not mergeable to). Bumps 8 same-major dependencies to versions published since last week's snapshot: - @fortawesome/{fontawesome-svg-core,free-brands,free-regular,free-solid}-* 7.3.0 -> 7.3.1 - @lottiefiles/dotlottie-react 0.19.9 -> 0.19.10 - react-hook-form 7.81.0 -> 7.82.0 - @typescript-eslint/{eslint-plugin,parser} 8.63.0 -> 8.64.0 All patch/minor within the same major line, no code changes required. All 19 patch-package patches still apply; tsc introduces 0 new errors vs. the pre-existing baseline (382). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01JwCkenvrPSNFud1kqKpXB2
✅ Deploy Preview for swissbitcoinpayapp ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview for app-swiss-bitcoin-pay-ch ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Weekly dependency refresh, continuing the work from #364 (still open/unmerged; its branch could not be pushed to, so this supersedes it on a fresh branch). All updated deps are pinned exact and stay within the same major line.
text-encoding-polyfillwas also converted from a caret range to an exact pin (^0.6.7→0.6.7).This week (2026-07-18) added 8 further same-major bumps on top of last week's snapshot:
@fortawesome/{fontawesome-svg-core,free-brands-svg-icons,free-regular-svg-icons,free-solid-svg-icons}7.3.0 → 7.3.1@lottiefiles/dotlottie-react0.19.9 → 0.19.10react-hook-form7.81.0 → 7.82.0@typescript-eslint/{eslint-plugin,parser}8.63.0 → 8.64.0Validation
npm installresolves cleanly (--legacy-peer-deps). The only install failure is the transitivesharpbinary download (403 through the sandbox proxy) — an environment limitation, not a resolution problem.patch-packagepatches still apply cleanly.tsc --noemit: 0 new type errors vs. the pre-existing baseline (382; the typecheck is already red onmain, independent of this change).Code change required by an update
webpack.config.ts— added{ test: /\.m?js$/, resolve: { fullySpecified: false } }.react-router-dom 7.18 imports
process/browser(extension-less) from its.mjsbuild; webpack 5 rejects that under fully-specified ESM resolution, breaking the web build. This rule relaxes extension resolution for.mjsdependencies (the standard RN-web + webpack fix) and restores the build.Held back (not updated) and why
React Native 0.81 toolchain — version-locked, needs a native migration
react-native(0.81.4 → 0.86.0),@react-native/assets-registry,@react-native/babel-preset,@react-native/eslint-config,@react-native/metro-config,@react-native/typescript-config,@react-native-community/cli(+-platform-android/-platform-ios). RN 0.81 → 0.86 is 5 breaking RN releases touching iOS/Android native code; not validatable here.Carry a version-pinned patch-package patch (bumping silently drops the patch)
react-native-web(0.21.1; latest 0.21.2),babel-plugin-react-native-web(kept aligned at 0.21.1),react-native-ble-plx(3.4.0; latest 3.5.1),lottie-react-native(7.3.4; latest 7.3.8),@ledgerhq/react-native-hid(6.32.10; latest 6.39.5). (react-native-webviewand@sentry/react-nativealso carry patches and are majors — listed below.)Major bumps held — native / build-toolchain / broad surface, unvalidatable unattended
@fortawesome/react-native-fontawesome0.3→1.0,@ledgerhq/hw-app-btc10→11,@react-native-async-storage/async-storage2→3,@react-native-community/slider4→5,@sentry/react-native7→8,@sentry/webpack-plugin4→5,react-native-bootsplash6→7,react-native-device-info14→15,react-native-error-boundary2→3,react-native-get-random-values1→2,react-native-screenguard1→2,react-native-vision-camera4→5,react-native-webview13→14,i18next25→26 +react-i18next15→17 (paired; broadt()type surface),@babel/*7→8,eslint9→10 +@eslint/js9→10 +@eslint/compat1→2 +eslint-plugin-react-hooks5→7,typescript5.9→7.0,@types/node24→26,webpack-cli6→7,webpack-dev-server5→6,uuid13→14,locale-currency0.0.4→1.0.0.Same-major bumps that regress in this repo — held to keep the change zero-regression
tscerrors (asprop /onPress/disabled/ prop-existence on styled RN-web components). Needs a focused typing pass.audiokey was removed from thecomponentsprop (IScannerComponents), breakingQRCamera.tsx. Payment-critical scanner; not bumped without runtime validation.Intentional pins left as-is
react-native-nyx-printer— deliberate github fork pin.bitcoinjs-lib7.0.0-rc.0 — deliberate pre-release pin; rc → 7.0.1 on a wallet-signing core lib not done without runtime validation.react-native-text-size4.0.0-rc.1 — already latest, patched.Generated by Claude Code
Generated by Claude Code