Repository navigation
Conversation
Dependencies - NestJS 11 -> 12 (+ @nestjs/config 4 -> 12). The packages now ship as ESM, so Jest runs with --experimental-vm-modules and no longer transforms node_modules; that also drops the hand-maintained ESM allowlist from transformIgnorePatterns. Requires Node >= 22.12 to run, >= 24.9 to run the tests. - ioredis 5 -> 6 (RESP3 by default), verified against a live Redis: the rate limiter's consume/reject semantics are unchanged, no protocol: 2 fallback needed. - framer-motion 12 -> motion 13 (package renamed; imports moved to 'motion/react'). - googleapis 173 -> 176, next 16.3.3, lucide-react 1.38, plus in-range patch bumps. - Dropped eslint-plugin-import: it declares no ESLint 10 support and backed a single low-value warning. Shared contract - The API now depends on @dropto/types and its Swagger entities `implements` the shared interfaces, so the two descriptions of the wire format cannot drift. This surfaced three places that typed createdAt as Date while the wire carries an ISO string, and a StorageBackend that was declared twice. - UploadStatus -> ResumableUploadStatus, freeing the name from Prisma's enum. Performance - The Drive ancestor walk memoizes the parents of intermediate folders (60s, in-process). The target item is always re-read, so a deleted item still 404s. - The file list filter is debounced, so a keystroke no longer re-filters, re-sorts and re-renders the whole list in both panes. Cleanup - Removed docker-compose.infra.yml: it duplicated the pg/redis services verbatim; `docker compose up -d dropto-pg dropto-redis` builds no app image either way. - Removed the no-op Prisma seed script and unexported an internal JWT helper. - Added apps/api/.env.test.example, without which the e2e suite could not run from a fresh clone. - tsBuildInfoFile now lives inside dist, so wiping dist actually forces a rebuild instead of silently emitting nothing. - Typed the Google Picker globals, removing the last `any` in the repo.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Before deploying
https://<web origin>/api/oauth/google/callbackon the Google OAuth client — theAPI-hosted callback is gone. Existing connections keep working on their stored refresh token.
GOOGLE_REDIRECT_URI→ the URI above,COOKIE_DOMAIN→ unset,NEXT_PUBLIC_API_URL→removed from the web build args,
API_URL→http://dropto-api:4000/api/v1.>=24, pnpm pinned to 11.5.1. A migration drops the write-onlyupload_logstable.What's in it
it needs no public route.
sibling subdomain. The web app now forwards the API's cookie attributes instead of re-deriving them.
/storage/:backend/namesskipped the ancestor walk — it returned the name and Drive link ofany file id. Now authorized like every other id, and capped at 50.
past the login limiter.
/healthis rate limited (120/60s) instead of exempt — it reaches Postgres.inertnow, transitions intact.fetchthrows..github/workflows/ci.yml, Postman regression collection inpostman/.WorkspaceClient1580 → ~600 lines, state moved into hooks.Verification
pnpm build,pnpm lint, 234 unit and 96 e2e pass.docker compose up -d --buildcomes up healthy; migrations apply.