Skip to content

chore(deps): update all dependencies and resolve Dependabot alerts - #191

Merged
markwylde merged 1 commit into
mainfrom
chore/update-deps
Sep 23, 2026
Merged

markwylde merged 1 commit into
mainfrom
chore/update-deps

Conversation

@markwylde

Copy link
Copy Markdown
Member

Updates every workspace dependency to latest and clears all 34 open Dependabot alerts (pnpm audit: no known vulnerabilities).

  • Removed stale pnpm-workspace.yaml overrides that were pinning vulnerable undici/fast-uri/etc.; kept only esbuild (needed for drizzle-kit's deprecated @esbuild-kit)
  • TypeScript 7 everywhere except docs (astro check), opaque-ts (typescript-eslint) and user-ui (test uses TS transpile API) which use TS 6.0.3
  • @simplewebauthn/server 14: AuthenticatorTransportFuture → AuthenticatorTransport
  • Removed baseUrl from tsconfigs (removed in TS 7); demo-app now declares @types/node/@types/pg
  • Biome 2.5 config migration + fixes for new useOptionalChain / noUnsafeOptionalChaining errors
  • Fixed pre-existing opaque-ts eslint failures

Verified locally: pnpm tidy, lint, typecheck, build, and unit tests (api 342, user-ui 81, opaque-ts 34, mock 9) all pass.

Bump every workspace to latest, drop stale pnpm overrides, move to
TypeScript 7 where tooling supports it (docs, opaque-ts and user-ui stay
on TS 6 for astro check, typescript-eslint and the TS transpile API),
adapt to @simplewebauthn/server 14 and Biome 2.5 lint rules.
@markwylde
markwylde merged commit 38b879c into main Sep 23, 2026
37 of 38 checks passed
@markwylde
markwylde deleted the chore/update-deps branch September 23, 2026 08:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant