Skip to content

UPDATE: Upgrade dependencies to latest, migrate to Tailwind 4 and clear all audit vulnerabilities - #2318

Merged
NeoPlays merged 1 commit into
stereum-dev:mainfrom
NeoPlays:update-dependencies
Oct 8, 2026
Merged

NeoPlays merged 1 commit into
stereum-dev:mainfrom
NeoPlays:update-dependencies

Conversation

@NeoPlays

@NeoPlays NeoPlays commented Oct 8, 2026 •

Copy link
Copy Markdown
Member

Summary

Upgrades all launcher dependencies to their latest versions and brings npm audit from 41 vulnerabilities (8 high) to 0. The only exception is vite, which stays on 7 because electron-vite 5 does not support vite 8 yet.

Changes

  • Tailwind 3 to 4: braces has no patched release and only came in through Tailwind 3. Migrated with the official upgrade tool: tailwind.config.js moved into @theme in main.css, and utility classes were renamed across the templates (bg-gradient-* to bg-linear-*, shadow-sm to shadow-xs, rounded-sm to rounded-xs). Removed the unused @tailwindcss/typography and autoprefixer.
  • Overrides: global-agent ^4 (drops the unpatched sprintf-js), postcss-selector-parser ^7.1.6, and js-yaml ^4 under the jest nyc config loader and the notarize plugin.
  • Babel 8: removed the dropped helpers option. Babel 8 needs Node 22.18+, so test-jest.yml moves from Node 20 to 24.
  • electron-vite 5: externalizeDepsPlugin replaced by build.externalizeDeps (main bundle is byte-identical).
  • Electron 44, Pinia 4, js-yaml 5, uuid 14, swiper 14, vueuse 15: Jest now transforms the ESM-only Pinia, and ImportingList.vue uses a namespace import for js-yaml.

Tests

Build passes, all 308 unit tests pass, format:check is clean, and the built app starts on Electron 44 without errors. Needs a visual pass, since Tailwind 4 puts utilities in CSS layers and component <style> rules now win over them.

@NeoPlays
NeoPlays merged commit 90c6ef6 into stereum-dev:main Oct 8, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant