0 Fork 0

mirror of https://github.com/PR0M3TH3AN/bitvid.git synced 2026-10-27 07:52:24 +00:00

Files

T

google-labs-jules[bot]andPR0M3TH3AN 8a1d843c24 chore(audit): daily dependency scan and triage

- Generated artifacts/npm-audit.json, artifacts/npm-outdated.json, artifacts/deps-report.md
- Attempted esbuild upgrade (0.27.2 -> 0.27.3) but reverted due to E2E environment failure (see issues/upgrade-esbuild.md)
- Flagged nostr-tools for manual review (see issues/upgrade-nostr-tools.md)
- Updated DECISIONS.md and TODO.md

Co-authored-by: PR0M3TH3AN <[email protected]>

2026-02-12 14:49:04 +00:00

1.3 KiB

Raw Blame History

Decisions Log

2026-02-17: Dependency Audit & Upgrade

Context

Ran a daily dependency audit. Found esbuild (0.27.2 -> 0.27.3) as a safe candidate and nostr-tools (2.19.4 -> 2.23.0) as a risky candidate.

Decision: Revert `esbuild` Upgrade

Proposal: Upgrade esbuild to 0.27.3.
Outcome: FAILED (Reverted).
Reason: While npm run build and npm run test:unit passed, npm run test:e2e failed immediately with "Executable doesn't exist" (missing Playwright browsers).
Rationale: Strict adherence to "If tests fail, do not open the PR".
Action: Reverted changes to package.json / package-lock.json. Created issues/upgrade-esbuild.md to document the environment blocker.

Decision: Do Not Auto-Upgrade `nostr-tools`

Proposal: Upgrade nostr-tools.
Outcome: BLOCKED (By Policy).
Reason: AGENTS.md explicitly forbids auto-upgrading protocol/crypto libraries.
Action: Created issues/upgrade-nostr-tools.md with a test plan for manual review.

Decision: Do Not Auto-Upgrade `tailwindcss` (v4)

Proposal: Upgrade tailwindcss.
Outcome: BLOCKED (Major Version).
Reason: Major version bump (v3 -> v4) carries significant risk of breaking changes.
Action: Existing issue issues/upgrade-tailwindcss.md is sufficient.

1.3 KiB Raw Blame History