Skip to content

Upgrade NodeJS dependencies#327

Draft
data-douser wants to merge 1 commit into
mainfrom
dd/dep-upgrades/23-july-2026
Draft

Upgrade NodeJS dependencies#327
data-douser wants to merge 1 commit into
mainfrom
dd/dep-upgrades/23-july-2026

Conversation

@data-douser

Copy link
Copy Markdown
Collaborator

This pull request updates various dependencies across the project to their latest versions, focusing on both production and development packages. These updates help ensure compatibility, improved security, and access to new features.

Dependency updates:

Production dependencies:

  • Updated adm-zip to ^0.6.0 and js-yaml to ^5.2.1 in server/package.json for improved stability and security.

Development dependencies:

  • Updated @types/node, @vitest/coverage-v8, eslint, eslint-plugin-prettier, prettier, typescript-eslint, and vitest to their latest versions in extensions/vscode/package.json and server/package.json to ensure compatibility and access to the latest linting and testing features. [1] [2]
  • Updated @vscode/test-cli, @vscode/test-electron, and @vscode/vsce in extensions/vscode/package.json to improve VS Code extension testing and publishing workflows.
  • Updated markdownlint-cli in package.json to ^0.49.1 for improved markdown linting support.

These updates are routine maintenance to keep the codebase up to date and reduce technical debt.

@data-douser data-douser self-assigned this Jul 24, 2026
Copilot AI review requested due to automatic review settings July 24, 2026 02:38
@data-douser
data-douser requested review from a team and enyil as code owners July 24, 2026 02:38
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:

  • ❌ 1 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.

View full job summary

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR performs routine maintenance dependency upgrades across the monorepo (root workspace, server package, and VS Code extension package) to keep runtime and tooling dependencies current.

Changes:

  • Upgraded server production deps (adm-zip, js-yaml) and several dev tooling deps (eslint, prettier, typescript-eslint, vitest, etc.).
  • Upgraded root-level dev tooling deps (including markdownlint-cli) to newer versions.
  • Updated the lockfile to reflect the new dependency graph (including updated transitive dependencies and engine constraints).
Show a summary per file
File Description
server/package.json Bumps server runtime and dev dependencies (notably adm-zip and js-yaml).
extensions/vscode/package.json Updates VS Code extension dev tooling/testing dependencies.
package.json Updates root workspace dev tooling versions.
package-lock.json Regenerates lockfile to reflect updated direct/transitive dependency versions and metadata.

Review details

  • Files reviewed: 3/6 changed files
  • Comments generated: 0
  • Review effort level: Low

@data-douser
data-douser marked this pull request as draft July 24, 2026 02:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants