Skip to content

chore(deps): upgrade G6 — heavy UI / data viz / markdown - #52

Closed
bravew wants to merge 10 commits into
mainfrom
chore/upgrade-G6-heavy-ui-2026-09-27
Closed

bravew wants to merge 10 commits into
mainfrom
chore/upgrade-G6-heavy-ui-2026-09-27

Conversation

@bravew

@bravew bravew commented Sep 27, 2026

Copy link
Copy Markdown
Owner

Summary

Group 6 of the 2026-09-27 dependency sweep (dev-doc/plan/_module-lib-upgrade.md rev 4).

Package Workspaces Before After
mermaid root ^11.17.0 ^11.17.2
react-pdf root ^10.5.0 ^11.0.0
motion root ^13.1.1 ^13.4.4
streamdown root ^2.5.0 ^2.6.0
katex root ^0.18.4 ^0.18.9
dompurify root ^3.4.14 ^3.4.16
cron-parser root, src-api ^5.10.0 ^5.10.1
cronstrue root ^3.24.0 ^3.27.0
jszip root, src-api ^3.10.1 ^3.10.2
react-resizable-panels root ^4.12.3 ^4.14.1
react-virtuoso root ^4.18.12 ^4.18.15
@tanstack/react-virtual root ^3.14.10 ^3.14.13
pdfjs-dist src-api ^6.2.108 ^6.3.289
yaml src-api ^2.9.0 ^2.9.1

Held: mermaid 12. @streamdown/[email protected] depends on mermaid@^11.12.2, so the streamdown family cannot follow this run.

react-pdf 11 CHANGELOG: Suspense/Error Boundaries are on by default. Document now takes suspense={false} so the existing loading / onLoadError path stays. React 19 is required (already on 19.2/19.3). https://github.com/wojtekmaj/react-pdf/releases/tag/v11.0.0

Test plan

Checks that already fail on main (typecheck 1, format 3 fixtures, API lint 4) produce identical results here.

  • pnpm install: clean, 0 peer warnings
  • pnpm typecheck:all, lint, API lint, format:check: same as baseline
  • pnpm test:fast: 1453 frontend + 3533 API tests passed (7 skipped)
  • pnpm build: green; PWA precache 26,836.92 → 27,096.36 KiB (+0.97%)
  • pnpm audit --audit-level moderate: 7, unchanged; signatures 2152/2152 verified
  • Browser/UI smoke: not re-run here. Isolated HOME-based smoke is the only safe method after the earlier ~/.neumar incident.

@playwright/test and playwright 1.62.1 → 1.63.0, @testing-library/react
16.3.2 → 16.3.3, @testing-library/user-event 14.6.5 → 14.6.7, jsdom
30.0.1 → 30.1.1. Refreshes the transitive
@csstools/css-parser-algorithms to 4.0.1 so jsdom's css-calc peer is met.

Held: vitest 5. @testing-library/jest-dom 7.0.1 still augments
Assertion<T>, which no longer merges with Vitest 5's Assertion<R, T>, so
~680 jest-dom matcher type errors appear (jest-dom #738, fix PR #742
open). @copilotkit/channels-core's latest release also peers vitest ^4.

Gate: install clean, no peer warnings; typecheck/lint/format identical
to the main baseline; test:fast 1453 + 3533 passed; browser and API e2e
failures identical to the baseline (23 and 1, pre-existing); audit
unchanged at 7; signatures 2148/2148 verified.
vite 8.2.2 → 8.3.1, @vitejs/plugin-react 6.1.0 → 6.1.1.
vite-plugin-pwa has no newer release, so the workbox-* override stays.

Gate: install clean, no peer warnings; typecheck/lint/format identical
to the main baseline; test:fast 1453 + 3533 passed; pnpm build green,
precache 26836.92 → 26836.04 KiB (540 entries, unchanged); preview
serves index and sw.js; audit unchanged at 7; signatures 2150/2150.
lucide-react 1.33.0 → 1.48.0, tailwind-merge 3.6.0 → 3.7.0.

Gate: install clean, no peer warnings; typecheck/lint/format identical
to the main baseline (no removed-icon type errors); test:fast 1453 +
3533 passed; check:design-system-flags passed; build precache
26836.92 → 26852.13 KiB (+0.06%); headless smoke of 8 routes against
an isolated API renders without crashes; audit unchanged at 7;
signatures 2148/2148.
react and react-dom 19.2.8 → 19.3.0 (root caret, src-api exact pin),
@types/react 19.2.18 → 19.3.0, @types/react-dom 19.2.4 → 19.3.0,
react-router-dom 7.18.2 → 7.18.4, react-error-boundary 6.1.3 → 6.1.6.
The lockfile resolves a single React 19.3.0 copy.

Gate: install clean, no peer warnings; typecheck/lint/format identical
to the main baseline; test:fast 1453 + 3533 passed; build precache
26836.92 → 26867.38 KiB (+0.11%); isolated headless smoke of 8 routes
without crashes or page errors; audit unchanged at 7; signatures
2148/2148.
react-pdf 10.5 → 11.0 (Suspense default; keep existing viewer via
suspense={false} on Document), motion 13.1 → 13.4, streamdown 2.5 → 2.6,
katex 0.18.9, plus patch/minor bumps for mermaid 11.17.2, dompurify,
cron-parser, cronstrue, jszip, react-resizable-panels, react-virtuoso,
@tanstack/react-virtual, pdfjs-dist 6.3.289, yaml.

Held: mermaid 12. @streamdown/mermaid still depends on mermaid ^11.12.2,
so the streamdown family cannot follow this run.

Gate: install clean; typecheck/lint/format identical to main baseline;
test:fast 1453 + 3533 passed; build precache +0.97%; audit unchanged at 7;
signatures 2152/2152 verified.
@coderabbitai

coderabbitai Bot commented Sep 27, 2026 •

Copy link
Copy Markdown

Warning

Review limit reached

Next included review available in 59 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 5bdf30de-4a78-4e29-9159-6c3ffaa6a54b

📥 Commits

Reviewing files that changed from the base of the PR and between 7b26dc2 and 16ce331.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (5)
  • package.json
  • pnpm-workspace.yaml
  • src-api/package.json
  • src-video/package.json
  • src/components/artifacts/PdfPreview.tsx

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

…3-bundler-2026-09-27

# Conflicts:
#	pnpm-lock.yaml
…-G4-design-system-2026-09-27

# Conflicts:
#	pnpm-lock.yaml
…pgrade-G5-react-core-2026-09-27

# Conflicts:
#	pnpm-lock.yaml
#	src-api/package.json
…ade-G6-heavy-ui-2026-09-27

# Conflicts:
#	package.json
#	pnpm-lock.yaml
#	src-api/package.json
@bravew bravew mentioned this pull request Sep 27, 2026
2 of 3 tasks
@bravew

bravew commented Sep 27, 2026

Copy link
Copy Markdown
Owner Author

Superseded by #61, which lands G2–G14 as one commit.

@bravew bravew closed this Sep 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant