Skip to content

chore: refresh dependencies and infrastructure pins - #151

Merged
95gabor merged 1 commit into
mainfrom
cursor/dependency-and-infrastructure-security-3087
Jul 20, 2026
Merged

chore: refresh dependencies and infrastructure pins#151
95gabor merged 1 commit into
mainfrom
cursor/dependency-and-infrastructure-security-3087

Conversation

@cursor

@cursor cursor Bot commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Update compatible pnpm dependencies and refresh the lockfile for Supabase JS, Lucide, Tailwind, semantic-release, tsx, lint-staged, and Percy Playwright.
  • Bump pnpm pins to 11.15.1 and update the composite Node bootstrap action to actions/setup-node@v7.
  • Refresh the nginx runtime base image to nginx:1.31.3-alpine3.24-slim while keeping Node on latest LTS node:24.18.0-alpine3.24.

Verification

  • pnpm install --frozen-lockfile
  • pnpm audit --audit-level low — no known vulnerabilities
  • pnpm run lint — passed with existing warnings in .commitlintrc.js and release.config.mjs
  • pnpm run typecheck
  • pnpm run build — blocked locally because SUPABASE_URL is not set in this runner; Docker is also unavailable for local Supabase setup

Notes

  • Kept @percy/cli pinned at 1.31.14 because newer Percy packages still pull the previously vulnerable fast-xml-parser path.
  • Kept @types/node on Node 24, and did not cross ESLint 10 / TypeScript 7 major lines in this maintenance pass.
Open in Web View Automation 

@github-actions

github-actions Bot commented Jul 20, 2026

Copy link
Copy Markdown

Lighthouse results

URL Performance Accessibility Best Practices SEO
http://127.0.0.1:4173/ 49% 99% 96% 100%

Updated automatically by CI.

@95gabor
95gabor marked this pull request as ready for review July 20, 2026 07:10
@95gabor
95gabor self-requested a review as a code owner July 20, 2026 07:10
@cursor

cursor Bot commented Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

github-actions Bot added a commit that referenced this pull request Jul 20, 2026
@github-actions

Copy link
Copy Markdown

Latest full-page screenshot

Full-page PR screenshot

@95gabor
95gabor merged commit 68d4f81 into main Jul 20, 2026
20 checks passed
@95gabor
95gabor deleted the cursor/dependency-and-infrastructure-security-3087 branch July 20, 2026 07:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants