Skip to content

chore: upgrade dependencies (Chunks 1–7) - #69

Open
AzraelSec wants to merge 7 commits into
mainfrom
modernize-dependencies
Open

AzraelSec wants to merge 7 commits into
mainfrom
modernize-dependencies

Conversation

@AzraelSec

Copy link
Copy Markdown
Collaborator

What

Upgrade all production and development dependencies to their latest compatible versions.

Changes

  • Chunk 1 — Safe cleanup & security patches: remove unused react-query v3, replace node-fetch with native fetch, fix build, drop vulnerabilities 25→4
  • Chunk 2 — Next.js 13→14.2.35, React 18.3.1, next-auth 4.24.14, remove @next/font
  • Chunk 3 — TypeScript 5.8.3, Prettier 3.8.4, ESLint 8.57.1, @types/node 24.13.2
  • Chunk 4 — tRPC 10→11.18.0, TanStack Query 4→5.101.1, createTRPCNextcreateTRPCReact+TRPCProvider, isLoadingisPending, createProxySSGHelperscreateServerSideHelpers
  • Chunk 5 — Prisma 5.12.1→6.19.3
  • Chunk 6 — Tailwind CSS 3.4.19, Headless UI 2.2.10, Heroicons 2.2.1, react-markdown 10.1.1
  • Chunk 7 — zod 3.24.4, victory 37.3.6, react-hook-form 7.79.0, superjson 2.2.6, and remaining patches

Notes

  • 7 npm audit vulnerabilities remain (all tied to Next.js 14 / next-auth v4; will be resolved by upgrading to Next.js 15+ / next-auth v5)
  • Build and lint pass

- Add build-placeholder NEXTAUTH_SECRET to .env.production to fix local builds
- Remove dead react-query v3 dependency
- Remove node-fetch and use native fetch (Node 18+)
- Fix ESLint alt-text warnings in OG image generator
- Add NEXTAUTH_SECRET to .env-example
- Update browserslist database
- Run npm audit fix (25 -> 4 vulnerabilities remaining)
- Regenerate package-lock.json
- next: ^13.2.4 → ^14.2.35
- react: ^18.2.0 → ^18.3.1
- react-dom: ^18.2.0 → ^18.3.1
- eslint-config-next: ^13.2.4 → ^14.2.35
- next-auth: ^4.19.0 → ^4.24.14
- next-plausible: ^3.7.2 → ^3.12.5 (v4 has breaking proxy API)
- Remove @next/font (deprecated, now built into next/font)
- Build and lint pass successfully
- typescript: 4.7.4 -> 5.8.3
- @types/node: 18.0.0 -> 24.13.2 (matches Node.js 24 runtime)
- @types/react: 18.0.14 -> 18.3.31
- @types/react-dom: 18.0.5 -> 18.3.7
- eslint: 8.18.0 -> 8.57.1
- prettier: 2.7.1 -> 3.8.4
- prettier-plugin-tailwindcss: 0.2.4 -> 0.8.0
- Run prettier --write to fix formatting changes from v2->v3
- @trpc/*: 10.12.0 → 11.18.0
- Add @tanstack/react-query 5.101.0 as explicit peer dependency
- Move transformer config to top-level createTRPCNext + link-level for v11
- SSG helpers: createProxySSGHelpers → createServerSideHelpers from @trpc/react-query/server
- Query hooks: isLoading → isPending (TanStack Query v5)
- Mutations: isLoading → isPending
- cacheTime → gcTime
- Build and lint pass
- prisma: 5.12.1 → 6.19.3
- @prisma/client: 5.12.1 → 6.19.3
- @prisma/adapter-pg: 5.12.1 → 6.19.3
- No code changes needed — client auto-generated via postinstall
- Build and lint pass
- tailwindcss: 3.2.7 → 3.4.19
- @tailwindcss/forms: 0.5.3 → 0.5.11
- @tailwindcss/typography: 0.5.9 → 0.5.20
- @headlessui/react: 1.6.5 → 2.2.10
- @heroicons/react: 1.0.6 → 2.2.0
- @fontsource/inter → @fontsource-variable/inter 5.2.8
- react-markdown: 8.0.3 → 10.1.0
- Fix heroicons v2 import paths (24/outline, 24/solid)
- Fix icon names (MenuIcon→Bars3Icon, XIcon→XMarkIcon)
- Fix react-markdown className prop (wrap in div)
- @vercel/og: 0.4.0 → 0.11.1
- dayjs: 1.11.5 → 1.11.21
- pg: 8.11.5 → 8.21.0
- react-confetti: 6.1.0 → 6.4.0
- react-hook-form: 7.43.5 → 7.79.0
- react-icons: 4.4.0 → 5.6.0
- react-infinite-scroll-component: 6.1.0 → 7.2.1
- superjson: 1.9.1 → 2.2.6
- usehooks-ts: 2.6.0 → 3.1.1
- victory: 36.5.3 → 37.3.6
- zod: 3.21.4 → 3.24.4 (stayed on v3 to avoid breaking changes)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant