deps

[damongolding]

Summary by CodeRabbit

• Chores
  • Updated build system dependencies to the latest version
  • Refreshed multiple runtime dependencies to their latest stable versions for improved performance and stability

[coderabbitai]

Walkthrough

Bumps three Go module dependencies (charm.land/lipgloss/v2, github.com/labstack/echo/v5, golang.org/x/sys) in go.mod, and updates the allowScripts whitelist entry for esbuild from 0.28.0 to 0.28.1 in frontend/package.json.

Changes

Dependency version bumps

Layer / File(s)	Summary
Go module version bumps go.mod	charm.land/lipgloss/v2 bumped v2.0.3 → v2.0.4, github.com/labstack/echo/v5 bumped v5.1.1 → v5.2.0, and golang.org/x/sys (indirect) bumped v0.44.0 → v0.45.0.
Frontend esbuild allowScripts bump frontend/package.json	allowScripts whitelist key updated from esbuild@0.28.0 to esbuild@0.28.1.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• damongolding/immich-kiosk#685: Also updates charm.land/lipgloss/v2 as part of the broader migration to the lipgloss v2 module.
• damongolding/immich-kiosk#672: Bumps github.com/labstack/echo/v5 in go.mod, the same dependency updated here.
• damongolding/immich-kiosk#363: Modifies frontend/package.json to bump the esbuild version, the same file and package touched here.

Suggested labels

maintenance

🐇 A hop, a skip, a version new,
Lipgloss shines with a brighter hue,
Echo calls on v5.2,
esbuild scripts get a bump too —
The warren's deps are fresh and true! ✨

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title 'deps' is overly vague and generic, failing to meaningfully describe the dependency updates made in the changeset.	Revise the title to be more specific about the updates, such as 'Update frontend and Go dependencies' or 'Bump esbuild, lipgloss, echo, and sys versions'.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/deps

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@go.mod`:
- Line 6: The github.com/labstack/echo/v5 dependency in go.mod is pinned to
version v5.2.0, which does not exist as a released version and will cause build
failures. Locate the Echo v5 dependency line and downgrade it from v5.2.0 to
v5.1.1, which is the latest stable released version. The lipgloss dependency at
v2.0.4 shown in the diff is valid and does not require changes.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: e71516c9-1d8c-400f-b682-38ec11271566

📥 Commits

Reviewing files that changed from the base of the PR and between 07a21df and 15e0d74.

⛔ Files ignored due to path filters (2)

• frontend/package-lock.json is excluded by !**/package-lock.json
• go.sum is excluded by !**/*.sum

📒 Files selected for processing (2)

• frontend/package.json
• go.mod