Skip to content

build(deps): update outdated dependencies - #97

Merged
ronload merged 2 commits into
mainfrom
build/update-outdated-deps
Oct 25, 2026
Merged

ronload merged 2 commits into
mainfrom
build/update-outdated-deps

Conversation

@ronload

@ronload ronload commented Oct 25, 2026

Copy link
Copy Markdown
Owner

Why

pnpm outdated -r listed eight packages behind their latest release. next 16.4.3 came out on 2026-10-23, after the last weekly Dependabot run, so main is still on 16.4.2.

Changes

  • next and @next/eslint-plugin-next 16.4.2 -> 16.4.3 (backported bug fixes)
  • maplibre-gl 6.14.0 -> 6.16.0
  • lucide-react 1.59.0 -> 1.61.0
  • typescript-eslint 8.71.2 -> 8.72.0
  • shadcn 4.22.0 -> 4.22.1
  • tsdown 0.23.1 -> 0.23.2, which brings in rolldown 1.2.15 and rolldown-plugin-dts 0.29.0-beta.2 through its own ranges. The built @zipkit/core code and type declarations match an earlier tsdown 0.23 build; only //#region comments differ.
  • Run pnpm dedupe, removing 16 stale duplicate transitive packages.

Verification

  • pnpm install --frozen-lockfile, pnpm check, pnpm test (29 passed) and pnpm build (379 static pages)
  • next start smoke test: address lookup, result card, map focus, theme switch and a district page, with no page errors
  • Built feat: redesign home hero with spotlight map #95 on top of these versions and checked the spotlight tour and theme switching with maplibre-gl 6.16.0

Not done

  • typescript stays on 6.0.3. typescript-eslint 8.72.0 still peer-requires <6.1.0, and next 16.4.3 still loads typescript/lib/typescript.js, which TS 7 does not export. This matches the ignore rule in .github/dependabot.yml.

Bump next and @next/eslint-plugin-next to 16.4.3, maplibre-gl to
6.16.0, lucide-react to 1.61.0, typescript-eslint to 8.72.0, shadcn
to 4.22.1 and tsdown to 0.23.2.

typescript stays on 6.0.3, the last 6.x release. typescript-eslint
8.72.0 still peer-requires typescript <6.1.0, and next 16.4.3 still
loads the compiler from typescript/lib/typescript.js, which TS 7 does
not export.
Run pnpm dedupe so transitive dependencies resolved at two versions
collapse onto the newer one already in the lockfile. Each replacement
stays inside the range its dependent declares.

This removes 16 stale copies, including older browserslist,
caniuse-lite, postcss, zod and @babel/parser/types versions.
@ronload ronload added the dependencies Pull requests that update a dependency file label Oct 25, 2026
@vercel

vercel Bot commented Oct 25, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
zipkit Ready Ready Preview Oct 25, 2026 2:13pm UTC

@ronload ronload self-assigned this Oct 25, 2026
@ronload
ronload merged commit 29e866e into main Oct 25, 2026
4 checks passed
@ronload
ronload deleted the build/update-outdated-deps branch October 25, 2026 14:28

This branch was successfully deployed

1 active deployment
Preview — 8f48c428 Deployed Oct 25, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant