Skip to content

Conversation

@tom2drum
Copy link
Collaborator

Description and Related Issue(s)

This PR updates dev dependencies to resolve security alerts and removes unused packages. It also updates GitHub Actions workflow permissions to follow best practices.

Proposed Changes

  • Dependency updates: Bumped dev dependencies to their latest minor versions:
    • @tanstack/eslint-plugin-query: 5.60.1 → 5.91.2
    • eslint: 9.14.0 → 9.39.2
    • eslint-config-next: 15.0.3 → 15.4.10
    • eslint-plugin-react: 7.37.2 → 7.37.5
  • Security overrides: Added security overrides for transitive dependencies:
    • eslint/**/brace-expansion: 1.1.12
    • swagger-ui-react/**/js-yaml: 4.1.1
  • Package cleanup: Removed unused packages from dependencies
  • Workflow permissions: Added explicit contents: read permission to the version job in the pre-release workflow

No environment variable changes were made in this PR.

Breaking or Incompatible Changes

None. All updates are minor version bumps that maintain backward compatibility.

Additional Information

These updates address security vulnerabilities identified in dev dependencies while maintaining compatibility with the existing codebase.

Checklist for PR author

  • I have tested these changes locally.
  • I added tests to cover any new functionality, following this guide
  • Whenever I fix a bug, I include a regression test to ensure that the bug does not reappear silently.
  • If I have added, changed, renamed, or removed an environment variable
    • I updated the list of environment variables in the documentation
    • I made the necessary changes to the validator script according to the guide
    • I added "ENVs" label to this pull request

@tom2drum tom2drum added the dependencies Pull requests that update a dependency file label Dec 16, 2025
@tom2drum tom2drum merged commit 0435eab into main Dec 16, 2025
11 checks passed
@tom2drum tom2drum deleted the tom2drum/minor-packages-bump branch December 16, 2025 18:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants