chore: Update major deps + build tool - #494
Open
alexbass01 wants to merge 12 commits into
Open
Conversation
js-yaml v5 is a rewrite with flat named exports and no default export, so 'import yaml from "js-yaml"' breaks at runtime. Switch to a namespace import, which works with both v4 (CJS) and v5, unblocking renovate PR open-component-model#487. yaml.dump output was verified to be byte-identical to v4 for typical payloads (only whitespace-only strings are quoted differently). Signed-off-by: Alexander Bassmanow (AlexBass01) <alexander.bassmanow@sap.com>
Triage of the renovate Dependency Dashboard (open-component-model#486): disable these major updates via documented packageRules so renovate stops proposing them and autocloses the premature PRs (open-component-model#483, open-component-model#488, open-component-model#490), while minors keep flowing: - eslint 10: blocked upstream (eslint-plugin-jsx-a11y caps eslint at ^9 and appears abandoned; eslint-plugin-react caps at ^9.7) - react/react-dom 19: blocked by deprecated react-beautiful-dnd (src/landing.js, src/util/versionOverview.js); tracked in open-component-model#289 - react-router 8: peer deps require react >= 19.2.7, hence transitively blocked by the React 19 migration (open-component-model#289) - @mui/* 9: 2-4 majors behind with ~188 import sites and no tests; needs a dedicated migration (codemods + manual click-through) Signed-off-by: Alexander Bassmanow (AlexBass01) <alexander.bassmanow@sap.com>
Signed-off-by: Alexander Bassmanow (AlexBass01) <alexander.bassmanow@sap.com>
…ilities react-scripts@5.0.1 pins dozens of vulnerable transitive deps (webpack 4, old postcss, nth-check, svgo, serialize-javascript, etc.) that npm audit cannot fix without breaking CRA. Replacing it with Vite drops the package count from ~1627 to ~444 with 0 vulnerabilities. Changes: - Add vite@^6.3.5 + @vitejs/plugin-react@^4.5.2 as devDependencies - Add vite.config.js with esbuild.loader:jsx to handle .js files with JSX - Move index.html from public/ to project root (Vite entry point) - Rename REACT_APP_* env vars to VITE_* in .env files and 5 source files (process.env.REACT_APP_* -> import.meta.env.VITE_*) - Keep window.REACT_APP_DELIVERY_SERVICE_API_URL in api.js (runtime injection) - Add dist/ to .gitignore and eslint ignores (Vite outputs there, not build/) - Remove stale eslint-disable-next-line no-undef comments (no longer needed) Signed-off-by: Alexander Bassmanow (AlexBass01) <alexander.bassmanow@sap.com>
Signed-off-by: Alexander Bassmanow (AlexBass01) <alexander.bassmanow@sap.com>
… .js files Signed-off-by: Alexander Bassmanow (AlexBass01) <alexander.bassmanow@sap.com>
Signed-off-by: Alexander Bassmanow (AlexBass01) <alexander.bassmanow@sap.com>
…REACT_APP_BUILD_VERSION) Signed-off-by: Alexander Bassmanow (AlexBass01) <alexander.bassmanow@sap.com>
Signed-off-by: Alexander Bassmanow (AlexBass01) <alexander.bassmanow@sap.com>
|
Important
This repository does not receive automatic reviews because it has fewer than 10 stars. ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Team Run ID: Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
alexbass01
commented
Sep 7, 2026
| @@ -0,0 +1,134 @@ | |||
| # Dependency migration notes — DELETE BEFORE MERGE | |||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this PR does / why we need it:
It's a big pr, so I think manual testing would be best option. I tested locally as much as I know, but surely did not catch all paths and options. Let's do a test walkthrough together.
Also if you are curious, take a look at _Migration.md but needs to be deleted before merge.
Which issue(s) this PR fixes:
Fixes #491
Special notes for your reviewer:
Release note: