Skip to content

Conversation

@babcs2035
Copy link
Collaborator

This pull request updates the frontend dependencies and configuration to use newer versions of Node.js, Next.js, and several related packages. It also adds security-focused overrides and makes minor workflow and script adjustments. The most significant changes are grouped below.

Dependency and Tooling Upgrades:

  • Updated major dependencies in package.json and pnpm-lock.yaml, including next (15.5.4 → 16.0.10), react/react-dom (19.1.0 → 19.2.3), lucide-react, maplibre-gl, recharts, and redis, as well as dev dependencies like @biomejs/biome and @types/node. This ensures compatibility with the latest features and bug fixes. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12]

  • Increased the required Node.js version for the frontend by removing the .node-version file specifying 22.16.0, and updating engine requirements in dependencies. [1] [2]

Security and Maintenance:

  • Added a pnpm override for the tar package (to version >=7.5.2) in both package.json and pnpm-lock.yaml to address known vulnerabilities. [1] [2] [3]

Build and Script Changes:

  • Removed the --turbopack flag from the dev and build scripts in package.json, reverting to the standard Next.js build process.

Workflow and Metadata:

  • Renamed the deployment workflow in .github/workflows/deploy.yml from "Deploy to VPS" to "Deploy" for clarity.

These updates collectively modernize the project's dependencies, improve security, and streamline development and deployment processes.

@babcs2035 babcs2035 self-assigned this Dec 15, 2025
Copilot AI review requested due to automatic review settings December 15, 2025 05:39
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR attempts to update frontend dependencies and configuration to use newer versions of Node.js, Next.js, React, and related packages. However, there are critical issues with the version numbers specified - several of the versions do not exist as they refer to unreleased software.

Key intended changes:

  • Upgrade Node.js from v22.16.0 to v24.10.0
  • Upgrade Next.js from 15.5.4 to 16.0.10
  • Upgrade React/React-dom from 19.1.0 to 19.2.3
  • Add security override for tar package (>=7.5.2)
  • Update TypeScript JSX configuration from "preserve" to "react-jsx"
  • Remove Biome ignore comments from ElevationChart.tsx

Reviewed changes

Copilot reviewed 7 out of 9 changed files in this pull request and generated no comments.

Show a summary per file
File Description
mise.toml Updates Node.js version to 24.10.0 (non-existent version) and pnpm to 10.24.0
frontend/package.json Upgrades Next.js to 16.0.10, React to 19.2.3, and other dependencies; adds tar security override (multiple non-existent versions)
frontend/pnpm-lock.yaml Lock file reflecting the updated dependency versions
package.json Updates root workspace dependencies (Biome, lint-staged, pnpm)
pnpm-lock.yaml Lock file for root workspace dependencies
frontend/tsconfig.json Changes JSX setting to "react-jsx" and adds dev types path
frontend/src/components/ElevationChart.tsx Removes Biome ignore comments for resolved linting issues
frontend/.node-version Removes file (Node version now managed in mise.toml)
.github/workflows/deploy.yml Renames workflow from "Deploy to VPS" to "Deploy"
Files not reviewed (2)
  • frontend/pnpm-lock.yaml: Language not supported
  • pnpm-lock.yaml: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@babcs2035 babcs2035 merged commit 3a4c3d9 into jphacks:main Dec 15, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant