Upgrade dependencies and local dev setup - #166
Merged
Merged
Conversation
Move the server to Mongoose 6.13.9 to clear the direct Mongoose audit findings. Remove obsolete Mongoose 5 connection options and set strictQuery explicitly to preserve existing query behavior.
Bumps [qs](https://github.com/ljharb/qs) to 6.15.3 and updates ancestor dependency [cypress](https://github.com/cypress-io/cypress). These dependencies need to be updated together. Updates `qs` from 6.14.2 to 6.15.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.14.2...v6.15.3) Updates `cypress` from 13.17.0 to 15.18.1 - [Release notes](https://github.com/cypress-io/cypress/releases) - [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md) - [Commits](cypress-io/cypress@v13.17.0...v15.18.1) --- updated-dependencies: - dependency-name: qs dependency-version: 6.15.3 dependency-type: indirect - dependency-name: cypress dependency-version: 15.18.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
…985356af' into dep-upgrade
Drop unused client and server package entries so deprecated and vulnerable packages are no longer installed directly. This removes the server socket.io-logger/flat audit path without changing application code.
Update Express, sessions, Passport, OAuth, fetch, Moment, and Morgan to reduce server production audit exposure. Adjust logout for Passport's callback-based API and remove unused direct cookie/semver dependencies.
Move server UUID imports off the removed uuid/v4 path and update the direct server dependency to uuid 11. Client UUID remains unchanged because uuid 11 syntax is not parseable by the current Jest/Webpack 4 setup.
Add a root compose file for MongoDB and Redis so contributors can start the backing services without installing them directly. Update the README development flow to use Compose and call out default-port conflicts.
Return an empty successful response when the optional server announcements file is absent. This prevents the client from showing a development error overlay during local startup.
Move the client CI job and local Node version to Node 16. Update node-sass and sass-loader for Node 16 compatibility, refresh the client lockfile with npm 8, and fix the stricter React lint findings exposed by the dependency update.
Add a test-only auth path guarded by LETSCUBE_TEST_AUTH so Cypress can log in without external WCA OAuth. Expand the Cypress CI job to boot MongoDB, Redis, the server, the socket server, and the client before running a browser test that creates a room through the frontend.
Move the local/client CI runtime to Node 18. Update node-sass and sass-loader for Node 18 compatibility, and run Webpack 4 start/build with the legacy OpenSSL provider required on Node 17+.
Replace npm lockfiles with Yarn classic locks across the root, client, and server package roots. Update CI, Netlify, and Husky commands to use Yarn, and pin Cheerio for Enzyme compatibility under Node 18.
Netlify is not part of the active deployment path for this app, but its deploy-preview checks still report on PRs. Skip deploy-preview builds in both Netlify configs so dependency upgrade PRs are gated by GitHub Actions instead, and ignore local Netlify link metadata.
Move client and server under root Yarn classic workspaces with a single lockfile. Add Turbo for root lint, test, and build orchestration, update CI to install once from the root, and document the new workspace commands.
Update local, CI, and Netlify Node pins to 22.17.0. Replace node-sass with Dart Sass so the client install and build work on Node 22 without engine ignores.
Expand Cypress full-stack checks for unauthenticated lobby/API behavior, login, room reload/listing, and chat socket roundtrips. Add a server unit test for socket room mapping.
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Verification