Skip to content

chore(deps): upgraded to latest dependencies#162

Open
vinaygupta-sourcefuse wants to merge 1 commit intomasterfrom
GH-161
Open

chore(deps): upgraded to latest dependencies#162
vinaygupta-sourcefuse wants to merge 1 commit intomasterfrom
GH-161

Conversation

@vinaygupta-sourcefuse
Copy link
Copy Markdown
Collaborator

Description

This issue tracks upgrading all project dependencies to their latest stable versions.

Changes

  • Updated all dependencies and devDependencies to latest versions
  • Resolved version conflicts and peer dependency issues
  • Fixed breaking changes introduced by major version upgrades

Checklist:

  • Performed a self-review of my own code
  • npm test passes on your machine
  • New tests added or existing tests modified to cover all changes
  • Code conforms with the style guide
  • API Documentation in code was updated
  • Any dependent changes have been merged and published in downstream modules

Build Passed:

Screenshot 2026-04-10 at 11 39 12 AM

Test Passed:

Screenshot 2026-04-10 at 11 39 52 AM

@vinaygupta-sourcefuse vinaygupta-sourcefuse self-assigned this Apr 10, 2026
upgraded to latest dependencies

GH-161
@sonarqubecloud
Copy link
Copy Markdown

SonarQube reviewer guide

Summary: Dependency updates across the project, including Trivy security scanner, LoopBack framework packages, Casbin, TypeScript, and various development tools, bumped to newer minor/patch versions.

Review Focus: Pay close attention to:

  • Casbin dependency update from 5.32.0 to 5.49.0 - verify no breaking changes in the API or behavior
  • LoopBack package updates (multiple packages) - ensure compatibility across the ecosystem
  • TypeScript update from 5.2.2 to 5.5.4 - check for any type-checking regressions
  • Lodash version constraint change from ^4.17.21 to ^4.18.1 - this is a notable downgrade, verify it's intentional
  • ESLint and Prettier formatting changes applied to provider files

Start review at: package.json - This is the single source of truth for all dependency versions. Cross-reference the changes here with package-lock.json to understand the full transitive dependency tree, especially for the Casbin and LoopBack updates which may have cascading impacts.

💬 Please send your feedback

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant