chore(deps): wave 2 toolchain dependency updates #40
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "deps/wave-2-toolchain"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Wave 2 of the Renovate dependency dashboard (#30) — moderate-risk toolchain majors, each verified individually.
Changes
typescriptmarkedmarked.parse(src, { gfm: false })useddiffdiffWords()used@types/diffTypeScript 6 migration (app)
TS6 surfaced two things that TS5 silently tolerated; fixed properly rather than suppressed:
baseUrldeprecated (TS5101) — droppedbaseUrlfromapp/tsconfig.jsonand made the@/*path target relative (./src/*) so it still resolves. Vite's own alias config is unaffected.vite-env.d.ts, soimport './index.css'and@xyflow/react/dist/style.csshad no type declarations. Addedapp/src/vite-env.d.tswith the standard/// <reference types="vite/client" />.The API needed no config changes.
Verification (dev server, Node 24 / npm 11)
tscbuild clean ✅ · 148/148 vitest tests pass ✅tsc+vite buildclean ✅ · vitest pass ✅@types/difffully removed from the tree;npm audit: API 0 vulns.Remaining dashboard items deferred to Wave 3 (coupled clusters): redis-client stack (redis v6 + connect-redis v9 + rate-limit-redis v5 + express-rate-limit v8), react-router v8, tiptap v3.
🤖 Generated with Claude Code
- typescript v5 → v6 (api + app) - marked v15 → v18 (api) — only marked.parse({gfm}) used - diff v7 → v9 (app), drop @types/diff (diff v9 ships its own types) Lockfiles refreshed on the dev server in a follow-up commit. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>