Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TDW: upgrade packages, remove unnecessary resolutions #1300

Merged
merged 7 commits into from
Nov 15, 2024

Conversation

jasonbasuil
Copy link
Collaborator

@jasonbasuil jasonbasuil commented Nov 15, 2024

  • ran yarn upgrade interactive and upgraded packages to latest
  • css-loader and eslint are the only remaining packages that need to be upgraded but weren't straightforward
  • removed resolutions that Yarn should be able to resolve now and not include version mismatches 🤞
  • removed the Layout component sub directory since we never used it and removed react-router-dom as a dependency

@@ -178,14 +178,14 @@ function DateTimePicker({
adjustDateOnChange
allowSameDay
className={showPickerEnforcedInput ? '' : 'date-time-picker__input-group'}
customInput={showPickerEnforcedInput && (
customInput={showPickerEnforcedInput ? (
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

addresses this
Screenshot 2024-11-15 at 11 37 12 AM

@@ -130,18 +129,18 @@
"babel-plugin-transform-react-remove-prop-types": "^0.4.24",
"babel-preset-react": "^6.24.1",
"bootstrap": "5.1.3",
"chromatic": "^6.24.1",
"chromatic": "^11.18.1",
"classnames": "^2.5.1",
"css-loader": "^6.11.0",
"eslint": "^8.57.1",
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

wish I could get eslint 9 in here. Seems like @brianCollinsUI you have experience with this upgrade? 👀 https://github.com/user-interviews/rails-server/pull/27389

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah happy to help out here- is there an issue to track or can I make one? 👍

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Collaborator

@kyleshike kyleshike left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice

Comment on lines 169 to 171
"istanbul-lib-instrument": "^6.0.0",
"jackspeak": "2.1.1",
"micromatch": "^4.0.8",
"normalize-package-data": "^3.0.0",
"path-to-regexp@npm:^1.7.0": "^1.9.0",
"semver": "^7.5.3"
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

are these 3 still stuck? think these were ones I recently fixed (micromatch and semver at least)

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I can double check, but I tried removing these and ran yarn why for them and saw some packages resolved to versions lower than what's set as the resolution

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I assume if these resolutions come from dependabot security updates, we could remove them all and see if any pop back up again? Not sure if that's the right approach tho?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

no if they are resolving to lower then we still need these for sure

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the older versions don't get patched for the fixes

@@ -19,19 +19,18 @@
"@tiptap/pm": "^2.7.4",
"@tiptap/react": "^2.7.4",
"@tiptap/suggestion": "^2.7.4",
"date-fns": "^3.6.0",
"date-fns": "^4.1.0",
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we'll have to update rails server to match these when we release the new DS

Copy link
Collaborator

@jeffbax jeffbax left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM but will defer to Kyle

@jasonbasuil jasonbasuil merged commit 560c5bd into main Nov 15, 2024
4 checks passed
@jasonbasuil jasonbasuil deleted the tdw/upgrade-packages branch November 15, 2024 20:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants