Skip to content

chore(deps): upgrade project dependencies to latest versions#13

Open
Sourav-kashyap wants to merge 1 commit intomasterfrom
GH-12
Open

chore(deps): upgrade project dependencies to latest versions#13
Sourav-kashyap wants to merge 1 commit intomasterfrom
GH-12

Conversation

@Sourav-kashyap
Copy link
Copy Markdown

Checklist:

  • Performed a self-review of my own code
  • npm test passes on your machine

Build Passed

Screenshot 2026-03-27 at 5 00 18 PM

Test Passed

Screenshot 2026-03-27 at 5 00 39 PM

@Sourav-kashyap Sourav-kashyap self-assigned this Mar 27, 2026
@Sourav-kashyap Sourav-kashyap force-pushed the GH-12 branch 4 times, most recently from f82b833 to db0a117 Compare April 2, 2026 09:56
@Sourav-kashyap Sourav-kashyap force-pushed the GH-12 branch 5 times, most recently from aec3056 to f8aa3f6 Compare April 14, 2026 09:21
upgrade project dependencies to latest versions

GH-12
@sonarqubecloud
Copy link
Copy Markdown

SonarQube reviewer guide

Summary: Upgrade GitHub Actions workflow files to use latest versions of checkout@v4 and setup-node@v4, plus update Trivy action configuration and modernize package dependencies.

Review Focus:

  • GitHub Actions version changes from v3 to v4 are generally safe but ensure all workflows still function correctly
  • Trivy action pinned to specific commit hash (v0.35.0) - verify this is the intended version
  • Large dependency updates across the entire codebase, particularly major version bumps for commitlint, husky, and semantic-release - test thoroughly to ensure no breaking changes
  • The test file change using z.object({}) instead of plain schema object needs validation

Start review at: .github/workflows/main.yaml. This file shows the pattern of changes applied across all workflow files and is the most frequently executed workflow, making it the best place to verify the GitHub Actions upgrades work correctly before checking the other workflow files.

💬 Please send your feedback

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants