Skip to content

Dependency bump#4

Merged
AshDevFr merged 4 commits intomainfrom
dependency-bump
Feb 22, 2026
Merged

Dependency bump#4
AshDevFr merged 4 commits intomainfrom
dependency-bump

Conversation

@AshDevFr
Copy link
Owner

No description provided.

…s, and docs

Bump Rust toolchain from 1.92 to 1.93 in all Dockerfiles and docs.
Run cargo update for semver-compatible backend dependency updates.

Frontend (web):
- Update 25+ minor/patch deps (Mantine, TanStack, axios, react, msw,
  vite, zustand, biome, postcss, etc.)
- Major upgrades: vitest v2->v4, react-pdf v9->v10,
  vite-tsconfig-paths v5->v6, zod v3->v4, @types/node v24->v25
- Fix vitest v4 breaking changes: replace vi.fn() constructor mocks
  with class-based mocks for ResizeObserver/IntersectionObserver, fix
  mock isolation with vi.clearAllMocks() in hook tests
- Update react-pdf v10 CSS imports (remove /esm/ path segment)
- Move FIT_MODE_CYCLE to module scope to fix biome lint
- Exclude test files from tsconfig.app.json production build

Plugins (6 packages):
- Update biome, typescript, esbuild (0.24->0.27), vitest (v3->v4)

Docs & Screenshots:
- Update docusaurus plugins, react, typescript, playwright
…est majors

Bump major versions of core backend crates that required coordinated
migration due to breaking API changes:

- axum 0.7 -> 0.8: migrate route syntax from /:param to /{param},
  remove #[async_trait] from extractors (native async trait support)
- tower 0.4 -> 0.5, tower-http 0.5 -> 0.6 (axum ecosystem)
- openidconnect 3 -> 4: refactor OIDC service for type-state client API,
  oauth2 5.x token exchange, and new AsyncHttpClient trait
- jsonwebtoken 9 -> 10: switch to aws_lc_rs crypto provider, replace
  deprecated insecure_decode API
- reqwest 0.12 -> 0.13: rename rustls-tls feature to rustls, add
  opt-in form feature
- cron 0.12 -> 0.13, tokio-cron-scheduler 0.10 -> 0.15
- utoipa-scalar 0.2 -> 0.3 (required for axum 0.8 compatibility)
- Remove unused config crate (config loaded via serde_yaml)
Bump rand (0.8 → 0.10), resvg (0.44 → 0.47), lopdf (0.34 → 0.39),
and zip (2.1 → 8.1). resvg and zip were drop-in upgrades; rand required
mechanical renames (thread_rng → rng, gen → random, RngCore → Rng);
lopdf replaced as_name_str() with as_name() returning &[u8].
Bump thiserror 1.0→2.0, dirs 5.0→6.0, quick-xml 0.36→0.39, and
jxl-oxide 0.11→0.12. All are near drop-in replacements.

The only code change: quick-xml 0.37 split serialization errors into
a separate SeError type, so OPDS feed's to_xml() return type was
updated from DeError to SeError.
@cloudflare-workers-and-pages
Copy link

Deploying codex with  Cloudflare Pages  Cloudflare Pages

Latest commit: ca1dc74
Status: ✅  Deploy successful!
Preview URL: https://0bc16c50.codex-asm.pages.dev
Branch Preview URL: https://dependency-bump.codex-asm.pages.dev

View logs

@AshDevFr AshDevFr merged commit 48b2ab2 into main Feb 22, 2026
17 checks passed
@AshDevFr AshDevFr deleted the dependency-bump branch February 22, 2026 17:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant