From 605867de2dd7586bc17ad94a36b70eaf456b0cf1 Mon Sep 17 00:00:00 2001 From: "google-labs-jules[bot]" <161369871+google-labs-jules[bot]@users.noreply.github.com> Date: Fri, 30 Jan 2026 09:09:58 +0000 Subject: [PATCH 1/4] chore(ai): dependency scan and upgrade analysis Co-authored-by: PR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com> --- issues/upgrade-cross-env.md | 18 +++++++++++---- issues/upgrade-esbuild.md | 18 +++++++++++---- issues/upgrade-nostr-tools.md | 23 +++++++++++++++---- issues/upgrade-pixelmatch.md | 18 +++++++++++---- issues/upgrade-prettier-plugin-tailwindcss.md | 18 +++++++++++---- issues/upgrade-stylelint.md | 18 +++++++++++---- issues/upgrade-tailwindcss.md | 20 ++++++++++++---- issues/upgrade-webtorrent.md | 19 +++++++++++++++ 8 files changed, 123 insertions(+), 29 deletions(-) create mode 100644 issues/upgrade-webtorrent.md diff --git a/issues/upgrade-cross-env.md b/issues/upgrade-cross-env.md index 0ba4f14d..fb076ffe 100644 --- a/issues/upgrade-cross-env.md +++ b/issues/upgrade-cross-env.md @@ -1,7 +1,17 @@ # Upgrade cross-env -- **Current Version:** 7.0.3 -- **Latest Version:** 10.1.0 +## Status +- **Current:** `7.0.3` +- **Latest:** `10.1.0` -**Status:** Major Upgrade Required -**Reason:** Major version bump available. v10 requires Node >= 20, which may break CI/CD or local environments running older Node versions (e.g. Node 18). Requires explicit environment verification and separate PR. +## Details +Major version upgrade. +Used in npm scripts to set environment variables. + +## Plan +1. Update `cross-env`. +2. Check if node version requirements changed (v10+ required likely). +3. Run all npm scripts to verify `cross-env` invocations work. + +## Guardrails +- Major upgrade. diff --git a/issues/upgrade-esbuild.md b/issues/upgrade-esbuild.md index 20bf8c46..c619800d 100644 --- a/issues/upgrade-esbuild.md +++ b/issues/upgrade-esbuild.md @@ -1,7 +1,17 @@ # Upgrade esbuild -- **Current Version:** 0.25.12 -- **Latest Version:** 0.27.2 +## Status +- **Current:** `0.25.12` +- **Latest:** `0.27.2` -**Status:** Major Upgrade Required -**Reason:** 0.x version bump may contain breaking changes. Requires strict testing and separate PR. +## Details +`esbuild` 0.x versions may have breaking changes between minor versions. +Used for build scripts (`scripts/build-dist.mjs`, `scripts/build-beacon.mjs`). + +## Plan +1. Update `esbuild`. +2. Run build scripts: `npm run build`, `npm run build:beacon`. +3. Verify output bundles work correctly. + +## Guardrails +- Build tool upgrade. diff --git a/issues/upgrade-nostr-tools.md b/issues/upgrade-nostr-tools.md index 3a0c2ba6..d57dccbe 100644 --- a/issues/upgrade-nostr-tools.md +++ b/issues/upgrade-nostr-tools.md @@ -1,8 +1,21 @@ # Upgrade nostr-tools -- **Current Version:** 2.19.4 -- **Wanted Version:** 2.20.0 -- **Latest Version:** 2.20.0 +## Status +- **Current (Package):** `^2.19.4` +- **Current (Vendor):** `2.17.0` (found in `vendor/nostr-tools.bundle.min.js`) +- **Latest:** `2.21.0` -**Status:** Skipped (Risky/Protocol) -**Reason:** This is a cryptographic/protocol library. As per security guardrails, manual review is required before upgrading. +## Details +`nostr-tools` is a core protocol library. +There is a discrepancy between `package.json` (2.19.4) and the vendored bundle (2.17.0). +The latest version 2.21.0 is available. + +## Plan +1. Review changelogs for breaking changes between 2.17.0/2.19.4 and 2.21.0. +2. Update `package.json` to `2.21.0`. +3. Update `vendor/nostr-tools.bundle.min.js` to match the new version. +4. Verify `js/nostr/client.js` and other consumers work correctly. +5. Run full E2E and Unit tests. + +## Guardrails +- Protocol library: Requires manual review. diff --git a/issues/upgrade-pixelmatch.md b/issues/upgrade-pixelmatch.md index cb90bc4c..1db90ce1 100644 --- a/issues/upgrade-pixelmatch.md +++ b/issues/upgrade-pixelmatch.md @@ -1,7 +1,17 @@ # Upgrade pixelmatch -- **Current Version:** 5.3.0 -- **Latest Version:** 7.1.0 +## Status +- **Current:** `5.3.0` +- **Latest:** `7.1.0` -**Status:** Major Upgrade Required -**Reason:** Major version bump available. Requires strict testing and separate PR. +## Details +Major version upgrade. +Used in visual tests. + +## Plan +1. Update `pixelmatch`. +2. Run `npm run test:visual`. +3. Check if image comparison logic needs adjustment (sensitivity, anti-aliasing handling). + +## Guardrails +- Major upgrade. diff --git a/issues/upgrade-prettier-plugin-tailwindcss.md b/issues/upgrade-prettier-plugin-tailwindcss.md index 6195f39f..79702503 100644 --- a/issues/upgrade-prettier-plugin-tailwindcss.md +++ b/issues/upgrade-prettier-plugin-tailwindcss.md @@ -1,7 +1,17 @@ # Upgrade prettier-plugin-tailwindcss -- **Current Version:** 0.6.14 -- **Latest Version:** 0.7.2 +## Status +- **Current:** `0.6.14` +- **Latest:** `0.7.2` -**Status:** Major Upgrade Required -**Reason:** 0.x version bump may contain breaking changes. Requires strict testing and separate PR. +## Details +0.x minor version upgrade, potential breaking changes. +Depends on `prettier` and `tailwindcss` versions. + +## Plan +1. Update `prettier-plugin-tailwindcss`. +2. Run `npm run format`. +3. Check for formatting changes. + +## Guardrails +- Dev tool upgrade. diff --git a/issues/upgrade-stylelint.md b/issues/upgrade-stylelint.md index d7362336..0408be8a 100644 --- a/issues/upgrade-stylelint.md +++ b/issues/upgrade-stylelint.md @@ -1,7 +1,17 @@ # Upgrade stylelint -- **Current Version:** 16.26.1 -- **Latest Version:** 17.0.0 +## Status +- **Current:** `16.26.1` +- **Latest:** `17.0.0` -**Status:** Major Upgrade Required -**Reason:** Major version bump available. Requires strict testing and separate PR. +## Details +Major version upgrade. +May require updating rules in `stylelint.config.cjs`. + +## Plan +1. Update `stylelint`. +2. Run `npm run lint:css` to identify config errors or new violations. +3. Fix config/violations. + +## Guardrails +- Major upgrade. diff --git a/issues/upgrade-tailwindcss.md b/issues/upgrade-tailwindcss.md index 0ba3a4fb..47ce1a5d 100644 --- a/issues/upgrade-tailwindcss.md +++ b/issues/upgrade-tailwindcss.md @@ -1,7 +1,19 @@ # Upgrade tailwindcss -- **Current Version:** 3.4.19 -- **Latest Version:** 4.1.18 +## Status +- **Current:** `3.4.19` +- **Latest:** `4.1.18` -**Status:** Major Upgrade Required -**Reason:** Major version bump available (v4). Requires strict testing, migration guide adherence, and separate PR. +## Details +Major version upgrade from v3 to v4. +This likely includes breaking changes in configuration, class names, or build process. + +## Plan +1. Review Tailwind CSS v4 migration guide. +2. Update `tailwindcss`, `postcss`, `autoprefixer`. +3. Check `tailwind.config.cjs` compatibility. +4. Run `npm run build:css` and verify output. +5. Visual regression testing (`npm run test:visual`). + +## Guardrails +- Major upgrade: Requires separate PR and thorough testing. diff --git a/issues/upgrade-webtorrent.md b/issues/upgrade-webtorrent.md new file mode 100644 index 00000000..5d3956f3 --- /dev/null +++ b/issues/upgrade-webtorrent.md @@ -0,0 +1,19 @@ +# Upgrade webtorrent + +## Status +- **Current:** `2.5.11` (vendored in `js/webtorrent.min.js`) +- **Latest:** `2.8.5` + +## Details +`webtorrent` is a core protocol library for video playback. +The current version is vendored and outdated. + +## Plan +1. Review changelogs for breaking changes between 2.5.11 and 2.8.5. +2. Download new release or build from source. +3. Replace `js/webtorrent.min.js`. +4. Verify playback and fallbacks. +5. Smoke test Upload Modal and Magnet parsing. + +## Guardrails +- Protocol library: Requires manual review. From f87c3bcffe501d97f38425b46449c906fbc21bad Mon Sep 17 00:00:00 2001 From: "google-labs-jules[bot]" <161369871+google-labs-jules[bot]@users.noreply.github.com> Date: Fri, 30 Jan 2026 09:13:37 +0000 Subject: [PATCH 2/4] fix(test): mock readRelays in batch-fetch-profiles test Co-authored-by: PR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com> --- tests/app-batch-fetch-profiles.test.mjs | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/tests/app-batch-fetch-profiles.test.mjs b/tests/app-batch-fetch-profiles.test.mjs index df90a4bc..f682cab3 100644 --- a/tests/app-batch-fetch-profiles.test.mjs +++ b/tests/app-batch-fetch-profiles.test.mjs @@ -52,12 +52,16 @@ test("batchFetchProfiles handles fast and failing relays", async () => { const originalWriteRelays = Array.isArray(nostrClient.writeRelays) ? [...nostrClient.writeRelays] : nostrClient.writeRelays; + const originalReadRelays = Array.isArray(nostrClient.readRelays) + ? [...nostrClient.readRelays] + : nostrClient.readRelays; const originalPool = nostrClient.pool; const poolListCalls = []; nostrClient.relays = [FAST_RELAY, FAIL_RELAY]; nostrClient.writeRelays = [FAST_RELAY, FAIL_RELAY]; + nostrClient.readRelays = [FAST_RELAY, FAIL_RELAY]; nostrClient.pool = { list: (relays, filters) => { poolListCalls.push({ relays, filters }); @@ -93,6 +97,7 @@ test("batchFetchProfiles handles fast and failing relays", async () => { } finally { nostrClient.relays = originalRelays; nostrClient.writeRelays = originalWriteRelays; + nostrClient.readRelays = originalReadRelays; nostrClient.pool = originalPool; } From f456a6d605147628237eee7b4df74595c42c609c Mon Sep 17 00:00:00 2001 From: "google-labs-jules[bot]" <161369871+google-labs-jules[bot]@users.noreply.github.com> Date: Fri, 30 Jan 2026 09:19:46 +0000 Subject: [PATCH 3/4] fix(test): mock hashtagPreferencesService.load in profile modal test Co-authored-by: PR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com> --- tests/profile-modal-controller.test.mjs | 1 + 1 file changed, 1 insertion(+) diff --git a/tests/profile-modal-controller.test.mjs b/tests/profile-modal-controller.test.mjs index f14c3730..4b8fbf7b 100644 --- a/tests/profile-modal-controller.test.mjs +++ b/tests/profile-modal-controller.test.mjs @@ -274,6 +274,7 @@ function createController(options = {}) { return hashtagStore.disinterests.delete(normalized); }, publish: async () => ({ ok: true }), + load: async () => {}, on: () => () => {}, }; From 4eec1e0ca372e9273532276fb0c2a1c59a3a6064 Mon Sep 17 00:00:00 2001 From: "google-labs-jules[bot]" <161369871+google-labs-jules[bot]@users.noreply.github.com> Date: Fri, 30 Jan 2026 09:24:39 +0000 Subject: [PATCH 4/4] fix(tests): mock missing dependencies in unit tests Co-authored-by: PR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com>