Skip to content

chore(deps): bump frontend deps, rebuild assets and group dependabot updates - #210

Merged
bobbyiliev merged 1 commit into
mainfrom
chore/deps-and-dependabot
Nov 8, 2026
Merged

bobbyiliev merged 1 commit into
mainfrom
chore/deps-and-dependabot

Conversation

@bobbyiliev

Copy link
Copy Markdown
Contributor

Rolls up the open dependabot PRs (#197, #199, #200, #201, #202) into one, since they all touch package-lock.json and vite 8 / laravel-vite-plugin 3 need to land together anyway.

deps

  • vite 7.3 → 8.3, laravel-vite-plugin 2.1 → 3.2, tailwindcss + @tailwindcss/postcss 4.1 → 4.3, axios 1.13 → 1.21
  • npm audit fix for picomatch, npm audit is clean now

assets
Rebuilt public/build. The file names stay assets/styles.css / assets/scripts.js so apps referencing them don't change. I diffed the CSS against a build with the old deps: the selector set is the same, tailwind 4.3 just writes some of them differently (e.g. :is(:where(.peer):checked~.x) instead of .x:is(:where(.peer):checked~*)) and adds spaces inside calc(). Size goes from 59.9 kB to 60.7 kB.

dependabot config
Added groups so we get one PR per ecosystem instead of a pile of conflicting ones:

  • npm: vite, laravel-vite-plugin and tailwind always grouped (majors included, since they depend on each other), everything else minor/patch grouped, security updates grouped
  • composer minor/patch grouped
  • github-actions grouped

…updates

- vite 8.3, laravel-vite-plugin 3.2, tailwindcss 4.3, axios 1.21
- npm audit fix (picomatch)
- rebuild public/build, output file names unchanged
- group dependabot updates so lockfile bumps stop conflicting with each other
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant