External/card-drop
Watch
5
0
Fork
You've already forked card-drop
 0
Code Issues 60 Pull requests 1 Projects 1 Releases 37 Packages Wiki Activity Actions

0.11.0 Dependency Updates #531

New issue
Open
opened 2026-09-15 18:29:20 +01:00 by Vylpes · 1 comment
Vylpes commented 2026-09-15 18:29:20 +01:00
Owner
Copy link

Investigate what dependencies need updating, update the non-breaking changes, create new tickets for breaking changes and milestone to this release. yarn audit should return 0 vulnerabilities`

Investigate what dependencies need updating, update the non-breaking changes, create new tickets for breaking changes and milestone to this release. `yarn audit` should return 0 vulnerabilities`
Vylpes added this to the 0.11.0 milestone 2026-09-15 18:29:20 +01:00
Vylpes added this to the 0.10 Sprint 4 project 2026-09-23 18:40:18 +01:00
Vylpes self-assigned this 2026-10-04 18:16:53 +01:00
Smithy-bot commented 2026-10-04 18:22:31 +01:00
Member
Copy link

Update

Non-breaking dependency updates are ready on branch feature/531-dependency-updates (commit pending local GPG signing).

Done

  • Upgraded non-breaking deps within current majors (discord.js, axios, jest, typescript-eslint, etc.)
  • Patched typeorm 0.3.28 → 0.3.31 (security)
  • Added/updated yarn resolutions for transitive advisories
  • Vendored temporary [email protected] backport (CVE-2026-93687 / GHSA-vfj7-8cjw-p6xm) until upstream publishes
  • yarn audit → 0 vulnerabilities
  • yarn build, yarn test, yarn lint pass

Breaking-change tickets (milestone 0.11.0)

  • #556 Upgrade dotenv v16 → v18
  • #557 Upgrade eslint v9 → v10
  • #558 Upgrade np v10 → v12
  • #559 Upgrade TypeScript v5 → v7
  • #560 Upgrade @types/node v24 → v26
  • #561 Upgrade @types/uuid v10 → v11
  • #562 Upgrade TypeORM 0.3.x → 1.x
  • #563 Remove vendored braces once upstream publishes a patched release
## Update Non-breaking dependency updates are ready on branch `feature/531-dependency-updates` (commit pending local GPG signing). ### Done - Upgraded non-breaking deps within current majors (discord.js, axios, jest, typescript-eslint, etc.) - Patched `typeorm` `0.3.28` → `0.3.31` (security) - Added/updated yarn resolutions for transitive advisories - Vendored temporary `[email protected]` backport (CVE-2026-93687 / GHSA-vfj7-8cjw-p6xm) until upstream publishes - `yarn audit` → **0 vulnerabilities** - `yarn build`, `yarn test`, `yarn lint` pass ### Breaking-change tickets (milestone **0.11.0**) - #556 Upgrade dotenv v16 → v18 - #557 Upgrade eslint v9 → v10 - #558 Upgrade np v10 → v12 - #559 Upgrade TypeScript v5 → v7 - #560 Upgrade @types/node v24 → v26 - #561 Upgrade @types/uuid v10 → v11 - #562 Upgrade TypeORM 0.3.x → 1.x - #563 Remove vendored braces once upstream publishes a patched release
Vylpes stopped working 2026-10-04 18:31:23 +01:00
14 minutes 24 seconds
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
feature/531-dependency-updates
release/0.12.0
release/0.11.0
develop
v0.10.1
v0.10.0
v0.9.4
v0.9.3
v0.9.2
v0.9.1
v0.9.0
v0.8.4
v0.8.3
v0.8.2
v0.8.1
v0.8.0
v0.7.0
v0.6.4
v0.6.3
v0.6.2
v0.6.1
v0.6.0
v0.5.2
v0.5.1
v0.5.0
v0.4.2
v0.4.1
v0.4.0
v0.3.1
v0.3.0
v0.2.1
v0.2.0
v0.1.8
v0.1.7
v0.1.6
v0.1.5
v0.1.4
v0.1.3
v0.1.2
v0.1.1
v0.1.0
Labels
Clear labels   
question
More information is needed

  
blocked

   
duplicate
This issue or pull request already exists

  
needs
approval

  
needs
criteria

  
needs
estimate

  
needs
tests

  
question
More information is needed

  
step
doing

  
step
review

  
step
testing

  
step
todo

  
step
uat

  
type
admin

  
type
alert

  
type
bug

  
type
change

  
type
defect

  
type
dependencies

  
type
epic

  
type
idea

  
type
incident

  
type
investigation

  
type
spike

  
type
story

  
wontfix
This won't be fixed

No labels
question
blocked
duplicate
needs
approval
needs
criteria
needs
estimate
needs
tests
question
step
doing
step
review
step
testing
step
todo
step
uat
type
admin
type
alert
type
bug
type
change
type
defect
type
dependencies
type
epic
type
idea
type
incident
type
investigation
type
spike
type
story
wontfix
Milestone
Clear milestone
No items
No milestone
0.11.0
Projects
Clear projects
No items
No project
0.10 Sprint 4
Assignees
Clear assignees
No assignees
Vylpes
2 participants
Notifications
Total time spent: 14 minutes 24 seconds
Vylpes
14 minutes 24 seconds
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
External/card-drop#531
No description provided.