dependabot[bot]
ee3600a697
chore(deps)(deps): bump lru-cache from 11.5.2 to 11.5.3 in /gitnexus-web ( #3360 )
...
Bumps [lru-cache](https://github.com/isaacs/node-lru-cache ) from 11.5.2 to 11.5.3.
- [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md )
- [Commits](https://github.com/isaacs/node-lru-cache/compare/v11.5.2...v11.5.3 )
---
updated-dependencies:
- dependency-name: lru-cache
dependency-version: 11.5.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-24 06:18:55 +01:00
dependabot[bot]
9a68183c99
chore(deps)(deps): bump react and @types/react in /gitnexus-web ( #3299 )
...
* chore(deps)(deps): bump react and @types/react in /gitnexus-web
Bumps [react](https://github.com/react/react/tree/HEAD/packages/react ) and [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react ). These dependencies needed to be updated together.
Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases )
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md )
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react )
Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react )
---
updated-dependencies:
- dependency-name: "@types/react"
dependency-version: 19.3.0
dependency-type: direct:development
update-type: version-update:semver-minor
- dependency-name: react
dependency-version: 19.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore(deps): align react-dom and @types/react-dom to 19.3.0
react-dom@19.2.8 peers react@^19.2.8, which excludes 19.3.0. Pair the remaining packages so the Dependabot bump is installable.
Co-authored-by: Cursor <cursoragent@cursor.com>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
Co-authored-by: Gergo Magyar <gergomagyar0@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-18 07:43:50 +01:00
dependabot[bot]
e3f8fefd5f
chore(deps)(deps-dev): bump vite from 8.1.5 to 8.3.0 in /gitnexus-web ( #3320 )
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 8.1.5 to 8.3.0.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 8.3.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-09-18 06:10:05 +01:00
dependabot[bot]
9a692d4957
chore(deps)(deps): bump lucide-react in /gitnexus-web ( #3319 )
...
Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react ) from 1.31.0 to 1.44.0.
- [Release notes](https://github.com/lucide-icons/lucide/releases )
- [Commits](https://github.com/lucide-icons/lucide/commits/1.44.0/packages/lucide-react )
---
updated-dependencies:
- dependency-name: lucide-react
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-09-18 06:09:53 +01:00
dependabot[bot]
4efe3e34f5
chore(deps)(deps-dev): bump @testing-library/jest-dom in /gitnexus-web ( #3318 )
...
Bumps [@testing-library/jest-dom](https://github.com/testing-library/jest-dom ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/testing-library/jest-dom/releases )
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md )
- [Commits](https://github.com/testing-library/jest-dom/compare/v7.0.0...v7.0.1 )
---
updated-dependencies:
- dependency-name: "@testing-library/jest-dom"
dependency-version: 7.0.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-18 06:09:21 +01:00
dependabot[bot]
4fd0e8c5d1
chore(deps)(deps-dev): bump @playwright/test in /gitnexus-web ( #3317 )
2026-09-18 05:30:49 +01:00
Gergő Magyar
56feb85c97
chore: compile first-party packages with TypeScript 7 ( #3311 )
...
CodeQL / Analyze (python) (push) Waiting to run
Publish / RC guard (marker + release-PR skip) (push) Blocked by required conditions
Trivy Image Scan / Trivy (gitnexus-web) (push) Waiting to run
CodeQL / Analyze (javascript-typescript) (push) Waiting to run
Gitleaks / gitleaks (push) Waiting to run
Publish / Classify release event (push) Waiting to run
Publish / ci (push) Blocked by required conditions
Publish / Publish to npm (push) Blocked by required conditions
Publish / Build & Push RC Docker images (push) Blocked by required conditions
Scorecard / Scorecard analysis (push) Waiting to run
Trivy Image Scan / Trivy (gitnexus-cli) (push) Waiting to run
* fix(web): drop TypeScript 7-incompatible tsconfig paths
Remove baseUrl and the dead ../shared include so web project references typecheck under TypeScript 7.
Co-authored-by: Cursor <cursoragent@cursor.com>
* test(cli): parse TypeScript with a TypeScript 6 API package
Keep AST guards working after the named typescript package becomes 7, which no longer ships the Compiler API.
Co-authored-by: Cursor <cursoragent@cursor.com>
* chore(lint): pin root TypeScript to the 6 API package
Give typescript-eslint a TypeScript 6 peer so syntax-only lint still installs after CLI and web move to TypeScript 7.
Co-authored-by: Cursor <cursoragent@cursor.com>
* chore(deps): compile first-party packages with TypeScript 7.0.2
Unify CLI and web on the same native compiler line as gitnexus-shared so typecheck and emit no longer split 5.x versus 7.x.
Co-authored-by: Cursor <cursoragent@cursor.com>
* docs(ci): describe parent TypeScript 7 as the shared compiler
Stop saying web compiles shared with TypeScript 5 now that the parent lockfile is 7.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(ci): compile shared from parent TypeScript on Vercel and skill-evolution
Stop isolated npm installs in gitnexus-shared so those paths do not pull a second TypeScript 7 optional-platform tree.
Co-authored-by: Cursor <cursoragent@cursor.com>
* docs: record TypeScript 7 typecheck and Dependabot major-split policy
Keep contributor typecheck commands, and stop Dependabot from bumping shared onto a different TypeScript major than CLI and web.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(lint): pin root TypeScript to 5.9 so npm ci satisfies eslint peers
typescript-eslint 8 peers typescript below 6.0.0, so the typescript6 alias made quality lint npm ci fail with ERESOLVE.
Co-authored-by: Cursor <cursoragent@cursor.com>
* test(cli): drop the TypeScript 6 Compiler API package
TypeScript 7.0 has no classic createProgram surface, so parse-only
guards now use Babel and Mode 4 uses the TypeScript 7 Checker.
Co-authored-by: Cursor <cursoragent@cursor.com>
* docs: align contributor setup with parent TypeScript 7 compile
Stop telling clones to npm-install gitnexus-shared; CI and Vercel already emit that package from a parent lib/tsc.js shim.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(web): typecheck React JSX on TypeScript 7 with explicit DOM libs
TypeScript 7 no longer implies DOM or auto-includes @types, so the web app must declare React/JSX settings while Vite keeps plugin-react.
Co-authored-by: Cursor <cursoragent@cursor.com>
* test: pin Vercel --include=dev and share parse-only string helpers
Production npm ci omits the web TypeScript unless --include=dev is on that install. Move staticStringValue next to the other Babel walk helpers so CLI help and contract tests share one source.
Co-authored-by: Cursor <cursoragent@cursor.com>
* chore(autofix): apply prettier + eslint fixes via /autofix command
---------
Co-authored-by: Gergo Magyar <gergomagyar0@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-17 22:16:00 +01:00
dependabot[bot]
f90ae7dcb2
chore(deps)(deps): bump @langchain/google-genai in /gitnexus-web ( #3303 )
...
Bumps [@langchain/google-genai](https://github.com/langchain-ai/langchainjs ) from 2.2.0 to 2.3.1.
- [Release notes](https://github.com/langchain-ai/langchainjs/releases )
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/google-genai@2.2.0...@langchain/google-genai@2.3.1 )
---
updated-dependencies:
- dependency-name: "@langchain/google-genai"
dependency-version: 2.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-17 07:05:46 +01:00
dependabot[bot]
a7606021c9
chore(deps)(deps): bump @langchain/openai in /gitnexus-web ( #3302 )
...
Bumps [@langchain/openai](https://github.com/langchain-ai/langchainjs ) from 1.5.3 to 1.5.13.
- [Release notes](https://github.com/langchain-ai/langchainjs/releases )
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/openai@1.5.3...@langchain/openai@1.5.13 )
---
updated-dependencies:
- dependency-name: "@langchain/openai"
dependency-version: 1.5.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-17 07:05:30 +01:00
dependabot[bot]
d2f10f3924
chore(deps)(deps-dev): bump @types/node in /gitnexus-web ( #3300 )
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 26.0.1 to 26.5.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 26.5.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-17 07:05:13 +01:00
dependabot[bot]
72556b0f79
chore(deps)(deps-dev): bump @babel/types in /gitnexus-web ( #3298 )
2026-09-17 05:53:32 +01:00
dependabot[bot]
41fa74cd84
chore(deps)(deps): bump zod from 4.4.3 to 4.5.4 in /gitnexus-web ( #3282 )
...
CodeQL / Analyze (javascript-typescript) (push) Waiting to run
CodeQL / Analyze (python) (push) Waiting to run
Gitleaks / gitleaks (push) Waiting to run
Publish / Classify release event (push) Waiting to run
Publish / RC guard (marker + release-PR skip) (push) Blocked by required conditions
Publish / ci (push) Blocked by required conditions
Publish / Publish to npm (push) Blocked by required conditions
Publish / Build & Push RC Docker images (push) Blocked by required conditions
Scorecard / Scorecard analysis (push) Waiting to run
Trivy Image Scan / Trivy (gitnexus-cli) (push) Waiting to run
Trivy Image Scan / Trivy (gitnexus-web) (push) Waiting to run
Bumps [zod](https://github.com/colinhacks/zod ) from 4.4.3 to 4.5.4.
- [Release notes](https://github.com/colinhacks/zod/releases )
- [Commits](https://github.com/colinhacks/zod/compare/v4.4.3...v4.5.4 )
---
updated-dependencies:
- dependency-name: zod
dependency-version: 4.5.4
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-09-14 13:19:45 +01:00
dependabot[bot]
9ac303ad14
chore(deps)(deps): bump dompurify from 3.4.13 to 3.4.15 in /gitnexus-web ( #3280 )
...
Bumps [dompurify](https://github.com/cure53/DOMPurify ) from 3.4.13 to 3.4.15.
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.13...3.4.15 )
---
updated-dependencies:
- dependency-name: dompurify
dependency-version: 3.4.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-14 10:57:03 +01:00
dependabot[bot]
57e36560af
chore(deps)(deps): bump react-zoom-pan-pinch in /gitnexus-web ( #3279 )
...
Bumps [react-zoom-pan-pinch](https://github.com/BetterTyped/react-zoom-pan-pinch ) from 4.0.3 to 4.2.0.
- [Release notes](https://github.com/BetterTyped/react-zoom-pan-pinch/releases )
- [Changelog](https://github.com/BetterTyped/react-zoom-pan-pinch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/BetterTyped/react-zoom-pan-pinch/compare/v4.0.3...v4.2.0 )
---
updated-dependencies:
- dependency-name: react-zoom-pan-pinch
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-14 10:56:48 +01:00
dependabot[bot]
fd270fdbf5
chore(deps)(deps-dev): bump jsdom from 29.1.1 to 30.0.1 in /gitnexus-web ( #3277 )
...
Bumps [jsdom](https://github.com/jsdom/jsdom ) from 29.1.1 to 30.0.1.
- [Release notes](https://github.com/jsdom/jsdom/releases )
- [Commits](https://github.com/jsdom/jsdom/compare/v29.1.1...v30.0.1 )
---
updated-dependencies:
- dependency-name: jsdom
dependency-version: 30.0.1
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-14 10:56:34 +01:00
dependabot[bot]
ed2dd6b0ad
chore(deps)(deps): bump langchain from 1.5.4 to 1.5.11 in /gitnexus-web ( #3276 )
...
Bumps [langchain](https://github.com/langchain-ai/langchainjs ) from 1.5.4 to 1.5.11.
- [Release notes](https://github.com/langchain-ai/langchainjs/releases )
- [Commits](https://github.com/langchain-ai/langchainjs/compare/langchain@1.5.4...langchain@1.5.11 )
---
updated-dependencies:
- dependency-name: langchain
dependency-version: 1.5.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-14 10:56:17 +01:00
dependabot[bot]
420306233b
chore(deps)(deps-dev): bump @testing-library/user-event in /gitnexus-web ( #3246 )
...
Bumps [@testing-library/user-event](https://github.com/testing-library/user-event ) from 14.6.6 to 14.6.7.
- [Release notes](https://github.com/testing-library/user-event/releases )
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md )
- [Commits](https://github.com/testing-library/user-event/compare/v14.6.6...v14.6.7 )
---
updated-dependencies:
- dependency-name: "@testing-library/user-event"
dependency-version: 14.6.7
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-09-10 12:24:37 +01:00
dependabot[bot]
579a438761
chore(deps)(deps-dev): bump @types/react in /gitnexus-web ( #3245 )
...
Bumps [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react ) from 19.2.14 to 19.2.18.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react )
---
updated-dependencies:
- dependency-name: "@types/react"
dependency-version: 19.2.18
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-09-10 07:18:33 +01:00
dependabot[bot]
565cc22d18
chore(deps)(deps-dev): bump @vitejs/plugin-react in /gitnexus-web ( #3247 )
...
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react ) from 6.0.5 to 6.1.1.
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases )
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react )
---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
dependency-version: 6.1.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-10 05:59:58 +01:00
dependabot[bot]
43d1d3e35b
chore(deps)(deps): bump @langchain/langgraph in /gitnexus-web ( #3244 )
...
Bumps [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core ) from 1.4.9 to 1.4.14.
- [Release notes](https://github.com/langchain-ai/langgraphjs/releases )
- [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md )
- [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.4.14/libs/langgraph-core )
---
updated-dependencies:
- dependency-name: "@langchain/langgraph"
dependency-version: 1.4.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-10 05:59:44 +01:00
dependabot[bot]
eafcf82a14
chore(deps)(deps): bump react-i18next in /gitnexus-web ( #3243 )
...
Bumps [react-i18next](https://github.com/i18next/react-i18next ) from 17.0.12 to 17.0.13.
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md )
- [Commits](https://github.com/i18next/react-i18next/compare/v17.0.12...v17.0.13 )
---
updated-dependencies:
- dependency-name: react-i18next
dependency-version: 17.0.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-10 05:59:19 +01:00
dependabot[bot]
4b0a78c5bc
chore(deps)(deps-dev): bump @testing-library/react in /gitnexus-web ( #3143 )
...
Bumps [@testing-library/react](https://github.com/testing-library/react-testing-library ) from 16.3.2 to 16.3.3.
- [Release notes](https://github.com/testing-library/react-testing-library/releases )
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md )
- [Commits](https://github.com/testing-library/react-testing-library/compare/v16.3.2...v16.3.3 )
---
updated-dependencies:
- dependency-name: "@testing-library/react"
dependency-version: 16.3.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-03 06:20:05 +01:00
dependabot[bot]
2e3b6b7e08
chore(deps)(deps): bump axios from 1.19.0 to 1.20.0 in /gitnexus-web ( #3150 )
...
Bumps [axios](https://github.com/axios/axios ) from 1.19.0 to 1.20.0.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.19.0...v1.20.0 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.20.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-03 06:19:39 +01:00
dependabot[bot]
f7041f304d
chore(deps)(deps-dev): bump @playwright/test in /gitnexus-web ( #3148 )
...
Bumps [@playwright/test](https://github.com/microsoft/playwright ) from 1.62.0 to 1.62.1.
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.62.0...v1.62.1 )
---
updated-dependencies:
- dependency-name: "@playwright/test"
dependency-version: 1.62.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-03 06:19:25 +01:00
dependabot[bot]
eefeb3607c
chore(deps)(deps-dev): bump @vitest/coverage-v8 in /gitnexus-web ( #3146 )
...
Bumps [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 ) from 4.1.10 to 4.1.11.
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/coverage-v8 )
---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
dependency-version: 4.1.11
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-03 06:19:13 +01:00
dependabot[bot]
ff8312f0e2
chore(deps)(deps): bump mermaid from 11.16.1 to 11.17.2 in /gitnexus-web ( #3142 )
...
Bumps [mermaid](https://github.com/mermaid-js/mermaid ) from 11.16.1 to 11.17.2.
- [Release notes](https://github.com/mermaid-js/mermaid/releases )
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.16.1...mermaid@11.17.2 )
---
updated-dependencies:
- dependency-name: mermaid
dependency-version: 11.17.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-03 06:18:47 +01:00
svector
4e51213c82
fix(deps): bump transitive packages to patch disclosed CVEs ( #3095 )
...
* fix(deps): bump transitive packages to patch disclosed CVEs
Automated dependency bumps addressing already-disclosed advisories in
gitnexus and gitnexus-web lockfiles.
- undici 6.24.0 → 6.28.0 (@vercel/node override) — GHSA-vxpw-j846-p89q / CVE-2026-12151
- undici 7.25.0 → 7.29.0 (jsdom override) — GHSA-4cwx-7wf7-3272, GHSA-hm92-r4w5-c3mj, GHSA-vmh5-mc38-953g, GHSA-vxpw-j846-p89q
- js-yaml 4.1.1 → 4.3.1 — GHSA-52cp-r559-cp3m / CVE-2026-59869, GHSA-5p4m-2wfm-xmqj
- nanoid 3.3.16 → 3.3.18 — GHSA-2v37-7h3g-55p8 / CVE-2026-67213
- tar 7.5.20 → 7.5.22 — GHSA-r292-9mhp-454m / CVE-2026-73566
- protobufjs 7.6.4 → 7.6.6 (gitnexus override) — GHSA-j3f2-48v5-ccww / CVE-2026-59877
No application code changes. npm audit and osv-scanner report 0 remaining
vulnerabilities on these two lockfiles after the bump.
* fix(deps): prefer root bump and lockfile refresh
---------
Co-authored-by: Svector-anu <anu@svector.xyz>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-08-30 08:03:05 +00:00
dependabot[bot]
f1b8faec93
chore(deps)(deps): bump uuid from 14.0.1 to 14.0.2 in /gitnexus-web ( #3055 )
...
Bumps [uuid](https://github.com/uuidjs/uuid ) from 14.0.1 to 14.0.2.
- [Release notes](https://github.com/uuidjs/uuid/releases )
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md )
- [Commits](https://github.com/uuidjs/uuid/compare/v14.0.1...v14.0.2 )
---
updated-dependencies:
- dependency-name: uuid
dependency-version: 14.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-08-27 13:29:37 +01:00
dependabot[bot]
3113803c8b
chore(deps)(deps-dev): bump @testing-library/user-event in /gitnexus-web ( #3054 )
...
Bumps [@testing-library/user-event](https://github.com/testing-library/user-event ) from 14.6.1 to 14.6.6.
- [Release notes](https://github.com/testing-library/user-event/releases )
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md )
- [Commits](https://github.com/testing-library/user-event/compare/v14.6.1...v14.6.6 )
---
updated-dependencies:
- dependency-name: "@testing-library/user-event"
dependency-version: 14.6.6
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-08-27 13:29:24 +01:00
dependabot[bot]
15274029aa
chore(deps)(deps-dev): bump @vercel/node in /gitnexus-web ( #3052 )
...
Bumps [@vercel/node](https://github.com/vercel/vercel/tree/HEAD/packages/node ) from 5.9.9 to 5.10.1.
- [Release notes](https://github.com/vercel/vercel/releases )
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/node/CHANGELOG.md )
- [Commits](https://github.com/vercel/vercel/commits/@vercel/fs-detectors@5.10.1/packages/node )
---
updated-dependencies:
- dependency-name: "@vercel/node"
dependency-version: 5.10.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-27 08:43:17 +01:00
dependabot[bot]
c34468f0f2
chore(deps)(deps): bump react-i18next in /gitnexus-web ( #3051 )
...
Bumps [react-i18next](https://github.com/i18next/react-i18next ) from 17.0.11 to 17.0.12.
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md )
- [Commits](https://github.com/i18next/react-i18next/compare/v17.0.11...v17.0.12 )
---
updated-dependencies:
- dependency-name: react-i18next
dependency-version: 17.0.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-27 08:43:01 +01:00
dependabot[bot]
35591b22d0
chore(deps)(deps-dev): bump @testing-library/jest-dom in /gitnexus-web ( #3050 )
...
Bumps [@testing-library/jest-dom](https://github.com/testing-library/jest-dom ) from 6.9.1 to 7.0.0.
- [Release notes](https://github.com/testing-library/jest-dom/releases )
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md )
- [Commits](https://github.com/testing-library/jest-dom/compare/v6.9.1...v7.0.0 )
---
updated-dependencies:
- dependency-name: "@testing-library/jest-dom"
dependency-version: 7.0.0
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-27 08:42:29 +01:00
dependabot[bot]
e7b096a231
chore(deps)(deps): bump @langchain/anthropic in /gitnexus-web ( #3004 )
...
Bumps [@langchain/anthropic](https://github.com/langchain-ai/langchainjs ) from 1.5.1 to 1.5.8.
- [Release notes](https://github.com/langchain-ai/langchainjs/releases )
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/anthropic@1.5.1...@langchain/anthropic@1.5.8 )
---
updated-dependencies:
- dependency-name: "@langchain/anthropic"
dependency-version: 1.5.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-24 12:17:45 +01:00
dependabot[bot]
ab9c5f9196
chore(deps)(deps): bump @langchain/core in /gitnexus-web ( #3000 )
...
Bumps [@langchain/core](https://github.com/langchain-ai/langchainjs ) from 1.2.3 to 1.2.8.
- [Release notes](https://github.com/langchain-ai/langchainjs/releases )
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.3...@langchain/core@1.2.8 )
---
updated-dependencies:
- dependency-name: "@langchain/core"
dependency-version: 1.2.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-08-24 09:45:18 +01:00
dependabot[bot]
dce3e00adb
chore(deps)(deps): bump lucide-react in /gitnexus-web ( #2998 )
...
Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react ) from 1.28.0 to 1.31.0.
- [Release notes](https://github.com/lucide-icons/lucide/releases )
- [Commits](https://github.com/lucide-icons/lucide/commits/1.31.0/packages/lucide-react )
---
updated-dependencies:
- dependency-name: lucide-react
dependency-version: 1.31.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-24 08:25:02 +01:00
dependabot[bot]
6993d8248b
chore(deps)(deps): bump axios from 1.18.1 to 1.19.0 in /gitnexus-web ( #2999 )
...
Bumps [axios](https://github.com/axios/axios ) from 1.18.1 to 1.19.0.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.18.1...v1.19.0 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.19.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-24 08:24:51 +01:00
dependabot[bot]
f27a3188c1
chore(deps)(deps-dev): bump @vercel/node in /gitnexus-web ( #3003 )
...
Bumps [@vercel/node](https://github.com/vercel/vercel/tree/HEAD/packages/node ) from 5.8.23 to 5.9.9.
- [Release notes](https://github.com/vercel/vercel/releases )
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/node/CHANGELOG.md )
- [Commits](https://github.com/vercel/vercel/commits/HEAD/packages/node )
---
updated-dependencies:
- dependency-name: "@vercel/node"
dependency-version: 5.9.9
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-24 08:24:29 +01:00
dependabot[bot]
9fa39bad53
chore(deps)(deps): bump lucide-react in /gitnexus-web ( #2946 )
...
Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react ) from 1.23.0 to 1.28.0.
- [Release notes](https://github.com/lucide-icons/lucide/releases )
- [Commits](https://github.com/lucide-icons/lucide/commits/1.28.0/packages/lucide-react )
---
updated-dependencies:
- dependency-name: lucide-react
dependency-version: 1.28.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-08-13 07:28:40 +01:00
dependabot[bot]
56d9003fe3
chore(deps)(deps): bump react-dom and @types/react-dom in /gitnexus-web ( #2944 )
...
Bumps [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom ) and [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom ). These dependencies needed to be updated together.
Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases )
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md )
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom )
Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom )
---
updated-dependencies:
- dependency-name: react-dom
dependency-version: 19.2.8
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: "@types/react-dom"
dependency-version: 19.2.4
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-08-13 07:15:26 +01:00
dependabot[bot]
25e51eac96
chore(deps)(deps): bump @langchain/langgraph in /gitnexus-web ( #2940 )
...
Bumps [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core ) from 1.4.8 to 1.4.9.
- [Release notes](https://github.com/langchain-ai/langgraphjs/releases )
- [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md )
- [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.4.9/libs/langgraph-core )
---
updated-dependencies:
- dependency-name: "@langchain/langgraph"
dependency-version: 1.4.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-13 06:23:31 +01:00
dependabot[bot]
9237ad4a75
chore(deps)(deps): bump langchain from 1.4.6 to 1.5.4 in /gitnexus-web ( #2942 )
...
Bumps [langchain](https://github.com/langchain-ai/langchainjs ) from 1.4.6 to 1.5.4.
- [Release notes](https://github.com/langchain-ai/langchainjs/releases )
- [Commits](https://github.com/langchain-ai/langchainjs/compare/langchain@1.4.6...langchain@1.5.4 )
---
updated-dependencies:
- dependency-name: langchain
dependency-version: 1.5.4
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-13 06:22:47 +01:00
dependabot[bot]
b3d2809c51
chore(deps)(deps-dev): bump @vitejs/plugin-react in /gitnexus-web ( #2943 )
...
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react ) from 6.0.4 to 6.0.5.
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases )
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react )
---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
dependency-version: 6.0.5
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-13 06:22:35 +01:00
dependabot[bot]
23f527dd16
chore(deps)(deps): bump dompurify ( #2893 )
...
Bumps the npm_and_yarn group with 1 update in the /gitnexus-web directory: [dompurify](https://github.com/cure53/DOMPurify ).
Updates `dompurify` from 3.4.12 to 3.4.13
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.12...3.4.13 )
---
updated-dependencies:
- dependency-name: dompurify
dependency-version: 3.4.13
dependency-type: direct:production
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-08 09:59:39 +01:00
dependabot[bot]
162cfb49a1
chore(deps)(deps): bump mermaid ( #2892 )
...
Bumps the npm_and_yarn group with 1 update in the /gitnexus-web directory: [mermaid](https://github.com/mermaid-js/mermaid ).
Updates `mermaid` from 11.15.0 to 11.16.1
- [Release notes](https://github.com/mermaid-js/mermaid/releases )
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.15.0...mermaid@11.16.1 )
---
updated-dependencies:
- dependency-name: mermaid
dependency-version: 11.16.1
dependency-type: direct:production
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-08 08:16:30 +01:00
dependabot[bot]
a55763feb3
chore(deps)(deps): bump @tailwindcss/vite in /gitnexus-web ( #2845 )
...
Bumps [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite ) from 4.3.2 to 4.3.3.
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases )
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-vite )
---
updated-dependencies:
- dependency-name: "@tailwindcss/vite"
dependency-version: 4.3.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Abhigyan Patwari <126312502+abhigyanpatwari@users.noreply.github.com>
2026-08-06 09:24:16 +01:00
dependabot[bot]
817893df97
chore(deps)(deps-dev): bump wait-on in /gitnexus-web ( #2844 )
...
Bumps [wait-on](https://github.com/jeffbski/wait-on ) from 9.0.10 to 9.1.0.
- [Release notes](https://github.com/jeffbski/wait-on/releases )
- [Commits](https://github.com/jeffbski/wait-on/compare/v9.0.10...v9.1.0 )
---
updated-dependencies:
- dependency-name: wait-on
dependency-version: 9.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-06 08:20:57 +01:00
dependabot[bot]
3e959aefcf
chore(deps)(deps-dev): bump @playwright/test in /gitnexus-web ( #2846 )
...
Bumps [@playwright/test](https://github.com/microsoft/playwright ) from 1.61.1 to 1.62.0.
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.61.1...v1.62.0 )
---
updated-dependencies:
- dependency-name: "@playwright/test"
dependency-version: 1.62.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-06 08:20:40 +01:00
dependabot[bot]
c99ed24aed
chore(deps)(deps): bump react-i18next in /gitnexus-web ( #2847 )
...
Bumps [react-i18next](https://github.com/i18next/react-i18next ) from 17.0.10 to 17.0.11.
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md )
- [Commits](https://github.com/i18next/react-i18next/compare/v17.0.10...v17.0.11 )
---
updated-dependencies:
- dependency-name: react-i18next
dependency-version: 17.0.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-06 08:20:19 +01:00
dependabot[bot]
b529e65b98
chore(deps)(deps): bump tailwindcss from 4.3.2 to 4.3.3 in /gitnexus-web ( #2849 )
...
Bumps [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss ) from 4.3.2 to 4.3.3.
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases )
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss )
---
updated-dependencies:
- dependency-name: tailwindcss
dependency-version: 4.3.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-06 08:20:02 +01:00
dependabot[bot]
e8e572fbff
chore(deps)(deps): bump i18next from 26.3.0 to 26.3.6 in /gitnexus-web ( #2751 )
...
Bumps [i18next](https://github.com/i18next/i18next ) from 26.3.0 to 26.3.6.
- [Release notes](https://github.com/i18next/i18next/releases )
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md )
- [Commits](https://github.com/i18next/i18next/compare/v26.3.0...v26.3.6 )
---
updated-dependencies:
- dependency-name: i18next
dependency-version: 26.3.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-07-31 10:34:16 +01:00