Skip to content

Bump package versions#86

Merged
jldeen merged 3 commits intomainfrom
jldeen/dependabot-fixes
Apr 29, 2026
Merged

Bump package versions#86
jldeen merged 3 commits intomainfrom
jldeen/dependabot-fixes

Conversation

@jldeen
Copy link
Copy Markdown
Collaborator

@jldeen jldeen commented Apr 27, 2026

This pull request updates several dependencies in the package.json file to their latest patch or minor versions. These updates help ensure the project benefits from the latest features, bug fixes, and security improvements.

Dependency updates:

  • Updated core dependencies: @astrojs/preact, @primer/react-brand, @tailwindcss/vite, astro, react, react-social-icons, and tailwindcss to newer versions for improved stability and features.
  • Updated development dependencies: baseline-browser-mapping and vite to newer versions for better development tooling and compatibility.
  • Updated actions/deploy-pages and actions/upload-pages from 4 to 5

Fixes #85, #84, #83, #82 #81, #80, #75

@jldeen jldeen requested a review from Damovisa as a code owner April 27, 2026 15:54
Copilot AI review requested due to automatic review settings April 27, 2026 15:54
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates npm dependencies (runtime + dev) and refreshes the GitHub Pages deployment workflow actions to newer versions, aiming to pick up upstream fixes and improvements.

Changes:

  • Bump core web/app dependencies including Astro, React, Tailwind, and related integrations.
  • Bump dev tooling dependencies (notably Vite and baseline-browser-mapping) and update package-lock.json accordingly.
  • Update GitHub Pages workflow actions from v4 to v5.
Show a summary per file
File Description
package.json Updates declared dependency and devDependency version ranges.
package-lock.json Updates the resolved dependency graph to match the new versions.
.github/workflows/deploy.yml Updates GitHub Pages upload/deploy actions to v5.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comments suppressed due to low confidence (2)

package.json:26

  • vite is bumped to ^8.0.10, but astro@6.1.9 still depends on vite@7.3.x (package-lock shows a separate node_modules/astro/node_modules/vite@7.3.2). This can lead to two Vite versions being installed and the project importing Vite APIs (e.g., loadEnv in astro.config.mjs) from a different major than the one Astro uses internally. Consider removing the direct vite devDependency (letting Astro’s Vite be hoisted), or pinning vite to the major that matches Astro until Astro supports Vite 8.
    "vite": "^8.0.10"

package.json:13

  • @primer/react-brand is bumped to ^0.67.0, but the resolved package declares engines.node >=24.0.0 (see package-lock). The deploy workflow currently builds with Node 22, so this upgrade may be unsupported and can break installs/builds in environments that enforce engines (or if the package actually relies on Node 24 features). Consider either pinning @primer/react-brand to a version that supports Node 22, or updating CI/local Node requirements to Node 24+ (and documenting it).
    "@primer/react-brand": "^0.67.0",
  • Files reviewed: 2/3 changed files
  • Comments generated: 1

Comment thread package.json Outdated
Comment on lines +12 to +26
"@astrojs/preact": "^5.1.2",
"@primer/react-brand": "^0.67.0",
"@tailwindcss/vite": "^4.2.4",
"astro": "^6.1.9",
"framer-motion": "^12.38.0",
"html2canvas": "^1.4.1",
"preact": "^10.29.1",
"react": "^19.2.4",
"react-social-icons": "^6.25.0",
"tailwindcss": "^4.2.2"
"react": "^19.2.5",
"react-social-icons": "^6.26.0",
"tailwindcss": "^4.2.4"
},
"devDependencies": {
"@playwright/test": "^1.59.1",
"baseline-browser-mapping": "^2.10.16",
"vite": "^8.0.5"
"baseline-browser-mapping": "^2.10.23",
"vite": "^8.0.10"
@jldeen jldeen merged commit 35919e8 into main Apr 29, 2026
5 checks passed
@jldeen jldeen deleted the jldeen/dependabot-fixes branch April 29, 2026 19:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants