Skip to content

chore: update dependencies and Playwright to 1.60.0#303

Merged
mxschmitt merged 1 commit into
mainfrom
chore/update-dependencies
May 29, 2026
Merged

chore: update dependencies and Playwright to 1.60.0#303
mxschmitt merged 1 commit into
mainfrom
chore/update-dependencies

Conversation

@mxschmitt

Copy link
Copy Markdown
Owner

Summary

Routine dependency refresh + Playwright bump to 1.60.0 (from 1.57.0).

Ran node update_pw.mjs (the project's helper) plus go get -u ./... for the Go modules.

npm

  • Playwright 1.60.0 across all four workers (js/java/python/csharp), @playwright/test, @playwright/experimental-ct-react, README badge, and regenerated editor type definitions (types.txt).
  • frontend: vite 7→8, typescript 5→6, @vitejs/plugin-react 5→6, react 19.2.3→19.2.6, @sentry/browser 10.34→10.55, rsuite 6.1.1→6.1.3.
  • e2e: @playwright/test 1.60.0, @flakiness/playwright 1.0→1.10.

Go modules (go get -u ./...)

echo v4.15.2, etcd v3.6.11, k8s v0.36.1, minio v7.2.0, amqp 1.11.0, and golang.org/x/* bumps.

⚠️ Pinned getsentry/sentry-go[/echo] to v0.44.1 — v0.45+ migrated to echo v5, which broke sentryecho.New() (returns a v5 MiddlewareFunc, app uses echo v4). v0.44.1 is the last release targeting echo v4. Migrating the app to echo v5 is out of scope for a dependency refresh.

Other changes

  • Added "ignoreDeprecations": "6.0" to frontend/tsconfig.json — TypeScript 6 now hard-errors on the deprecated esModuleInterop/moduleResolution=node options. This is TS's own recommended, non-behavior-changing fix.
  • Fixed update_pw.mjs's Java version lookup to query central.sonatype.com instead of search.maven.org. The old solr endpoint returned a stale latestVersion (1.52.0), which is why worker-java had been lagging the other bindings.

Verification

  • go build ./..., go vet ./..., go test ./...
  • npm run build (frontend)
  • ✅ 15/15 Playwright component tests

Not addressed (deliberately)

  • npm audit: dompurify (via monaco — already on monaco's latest 0.55.1; advisory's suggested fix is stale) and lodash 4.17.21 (transitive via rsuite — already final 4.x, no upstream fix). Both would require breaking --force changes with no real remediation.
  • The go 1.25.0 directive is kept as-is; bumping the language version is a separate decision.

Ran update_pw.mjs to bump npm deps (frontend + e2e), regenerate editor
type definitions, and update worker Playwright versions + README badge:
- Playwright 1.57.0 -> 1.60.0 across all four workers (js/java/python/csharp)
- frontend: vite 7->8, typescript 5->6, @vitejs/plugin-react 5->6,
  react 19.2.3->19.2.6, @sentry/browser, rsuite 6.1.1->6.1.3
- e2e: @playwright/test 1.60.0, @flakiness/playwright 1.10.0

Go modules updated via go get -u ./... (echo v4.15.2, etcd v3.6,
k8s v0.36.1, minio v7.2, amqp 1.11, golang.org/x/* bumps). Pinned
getsentry/sentry-go[/echo] to v0.44.1 (last release targeting echo v4;
v0.45+ moved to echo v5, which the app does not use).

k8s v0.36.1 requires Go >= 1.26, so bump the go directive to 1.26.0 and
all builder Dockerfiles to golang:1.26-alpine (and update AGENTS.md).

Added tsconfig ignoreDeprecations: "6.0" for the TS6 deprecation of
esModuleInterop/moduleResolution=node.

Fixed the Java version lookup in update_pw.mjs to use central.sonatype.com
instead of search.maven.org, whose solr index was stale and reported
1.52.0 (causing worker-java to lag behind the other bindings).

Verified: go build/vet/test pass, frontend builds, 15 component tests pass,
control-service image builds on golang:1.26-alpine (go1.26.3).
@mxschmitt mxschmitt force-pushed the chore/update-dependencies branch from 1e806a8 to 52ede1b Compare May 29, 2026 22:36
@mxschmitt mxschmitt merged commit 9911a68 into main May 29, 2026
12 checks passed
@mxschmitt mxschmitt deleted the chore/update-dependencies branch May 29, 2026 23:00
mxschmitt added a commit that referenced this pull request May 29, 2026
PR #303 pinned getsentry/sentry-go[/echo] to v0.44.1 because v0.45+
moved to echo v5, which broke sentryecho.New() against the app's echo v4.
This migrates the app to echo v5 so we can take the latest sentry-go
(v0.46.2) without pinning.

echo v5 API changes handled:
- HandlerFunc/Context: handlers now take *echo.Context (pointer)
- HTTPErrorHandler signature is func(*echo.Context, error); the default
  is now a factory, echo.DefaultHTTPErrorHandler(false)
- e.Logger is now *slog.Logger (Error takes a message + key/value args)
- echo.Map removed -> use map[string]any
- c.Response() returns http.ResponseWriter directly (drop .Writer)
- Echo.Start/Shutdown removed -> wrap *echo.Echo (an http.Handler) in a
  standard http.Server to preserve the existing graceful-shutdown lifecycle

Verified: go build/vet/test pass, and ./... compiles inside the CI base
image golang:1.26-alpine (go1.26.3).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant