mirrors/remark42
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update frontend dependencies to latest, bump pnpm to 10, clear all npm audit alerts

Browse Source 
pnpm 8.15.9 -> 10.10.0 (packageManager + lockfile regenerated to v9). Frontend
CI (ci-frontend.yml, ci-frontend-api.yml, release.yml) and the production
Dockerfile bumped from node 16 + pnpm 8 to node 20 + pnpm 10 (pnpm 10 requires
node 18+). pnpm audit: no known vulnerabilities (was 63 alerts).

packages/api: bumped to latest including the major test stack - vitest 4, jsdom
29, @vitest/coverage-v8 4, @typescript-eslint 8.62, typescript 5.9, prettier
3.9, @types/node 26, and msw 1 -> 2. Migrated tests/test-utils.ts to the msw 2
http/HttpResponse API (capturing a compatible request shape) and made test base
URLs absolute so node 20's native fetch is intercepted; added the jsdom base
URL. type-check:api, lint:api and coverage:api (45 tests) all pass.

apps/remark42: safe in-major bumps (webpack 5.108, postcss, mini-css-extract,
html-webpack-plugin, ts-loader, webpack-dev-server 5.2.5, core-js, clsx 2,
lodash-es 4.18, dotenv 17, @types/*). Transitive vulns patched via
pnpm.overrides. type-check, lint, build, jest coverage (299 tests) and
translations all pass.

pnpm 10's stricter layout required a few pins to keep the app's preact-compat
setup compiling: preact 10.6.2 (override), react-intl 6.0.5 and
@testing-library/preact 3.2.2 (newer types break the build), tsconfig paths for
preact, @types/minimatch 5.1.2 (6.x is an empty stub) and cheerio 1.0.0-rc.12
(1.2 is ESM and breaks jest 28). Held: react/react-dom (preact compat alias),
babel 7, eslint 8, stylelint 14, jest 28, typescript 4.7 (app),
redux/react-redux - majors that change the bundle or need a config migration.

Build output verified against a clean master build: apps/remark42 output is
functionally identical (the only diffs are webpack module-id numbering and
css-module class tokens from the webpack/css-loader bump; all HTML, CSS values
and translations byte-identical).
This commit is contained in:
Dmitry Verkhoturov
2026-06-30 19:47:25 +01:00
parent c8832e708c
commit f5ccfaa0e1
19 changed files with 11538 additions and 9998 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/ci-frontend-api.yml
+6 -6
View File
@@ -22,7 +22,7 @@ jobs:
contents: read
strategy:
matrix:
node: [ 16 ]
node: [ 20 ]
steps:
- name: Checkout
@@ -33,7 +33,7 @@ jobs:
- name: Install pnpm
uses: pnpm/action-setup@v6.0.4
with:
version: 8
version: 10
run_install: false
- name: Install node
@@ -58,7 +58,7 @@ jobs:
contents: read
strategy:
matrix:
node: [ 16 ]
node: [ 20 ]
steps:
- name: Checkout
@@ -69,7 +69,7 @@ jobs:
- name: Install pnpm
uses: pnpm/action-setup@v6.0.4
with:
version: 8
version: 10
run_install: false
- name: Install node
@@ -94,7 +94,7 @@ jobs:
contents: read
strategy:
matrix:
node: [ 16 ]
node: [ 20 ]
steps:
- name: Checkout
@@ -105,7 +105,7 @@ jobs:
- name: Install pnpm
uses: pnpm/action-setup@v6.0.4
with:
version: 8
version: 10
run_install: false
- name: Install node
.github/workflows/ci-frontend.yml
+9 -9
View File
@@ -22,7 +22,7 @@ jobs:
contents: read
strategy:
matrix:
node: [16]
node: [20]
steps:
- name: Checkout
@@ -33,7 +33,7 @@ jobs:
- name: Install pnpm
uses: pnpm/action-setup@v6.0.4
with:
version: 8
version: 10
run_install: false
- name: Install node
@@ -58,7 +58,7 @@ jobs:
contents: read
strategy:
matrix:
node: [16]
node: [20]
steps:
- name: Checkout
@@ -69,7 +69,7 @@ jobs:
- name: Install pnpm
uses: pnpm/action-setup@v6.0.4
with:
version: 8
version: 10
run_install: false
- name: Install node
@@ -94,7 +94,7 @@ jobs:
contents: read
strategy:
matrix:
node: [16]
node: [20]
steps:
- name: Checkout
@@ -105,7 +105,7 @@ jobs:
- name: Install pnpm
uses: pnpm/action-setup@v6.0.4
with:
version: 8
version: 10
run_install: false
- name: Install node
@@ -141,7 +141,7 @@ jobs:
- name: Install pnpm
uses: pnpm/action-setup@v6.0.4
with:
version: 8
version: 10
run_install: false
- name: Check bundle size
@@ -158,7 +158,7 @@ jobs:
contents: read
strategy:
matrix:
node: [16]
node: [20]
steps:
- name: Checkout
@@ -169,7 +169,7 @@ jobs:
- name: Install pnpm
uses: pnpm/action-setup@v6.0.4
with:
version: 8
version: 10
run_install: false
- name: Install node
.github/workflows/release.yml
+4 -4
View File
@@ -38,13 +38,13 @@ jobs:
- name: install pnpm
uses: pnpm/action-setup@v6.0.4
with:
version: 8
version: 10
run_install: false
- name: install node
uses: actions/setup-node@v6
with:
node-version: 16
node-version: 20
cache: "pnpm"
cache-dependency-path: frontend/pnpm-lock.yaml
@@ -113,13 +113,13 @@ jobs:
- name: install pnpm
uses: pnpm/action-setup@v6.0.4
with:
version: 8
version: 10
run_install: false
- name: install node
uses: actions/setup-node@v6
with:
node-version: 16
node-version: 20
cache: "pnpm"
cache-dependency-path: frontend/pnpm-lock.yaml