Skip to content

build(deps): update dependencies and fix security advisories - #15

Merged
mvantellingen merged 6 commits into
mainfrom
modernize
Oct 26, 2026
Merged

mvantellingen merged 6 commits into
mainfrom
modernize

Conversation

@mvantellingen

@mvantellingen mvantellingen commented Oct 26, 2026 •

Copy link
Copy Markdown
Member

Summary

  • build(deps): update all dependencies, resolving the open security advisories (@graphql-tools/utils 12, @graphql-codegen/plugin-helpers 7, visitor-plugin-common 7, vitest 5, immutable 5 via the relay compiler). Test against graphql 17, peer range ^16 || ^17; vitest workspace -> test.projects; TypeScript 7 typecheck through turbo; fix bruno test importing afterEach from node:test; drop vite-tsconfig-paths
  • style: migrate to biome 2 and format
  • ci: run checks on pull requests, labd pnpm-install action
  • build: bruno and k6 did not declare files, so the published tarball could miss dist; declare files, add types to exports maps, run publint via tsdown on every build (publint: true + failOnWarn: true, so package and build warnings fail pnpm build)
  • docs: npm badges
  • changesets (minor)

Update all dependencies to their latest versions, which resolves the open
security advisories (@graphql-tools/utils 12, @graphql-codegen/plugin-helpers
7, @graphql-codegen/visitor-plugin-common 7, vitest 5, immutable 5 via the
relay compiler).

- test against graphql 17 and accept graphql ^16 || ^17 as peer dependency
- replace the vitest workspace file with `test.projects`
- add typecheck scripts (TypeScript 7) and run them through turbo
- fix the bruno test importing afterEach from node:test
- drop vite-tsconfig-paths (no path aliases are configured)
bruno and k6 did not declare files, so pnpm pack left out the gitignored dist folder. Declare files, add types to the exports maps and run publint in CI.
@mvantellingen
mvantellingen merged commit 1e3ab5a into main Oct 26, 2026
6 checks passed
@mvantellingen
mvantellingen deleted the modernize branch October 26, 2026 05:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant