Skip to content

Comments

Security: Update dependencies for CVE fixes and infrastructure improvements#102

Merged
chriswritescode-dev merged 3 commits intomainfrom
dev
Feb 1, 2026
Merged

Security: Update dependencies for CVE fixes and infrastructure improvements#102
chriswritescode-dev merged 3 commits intomainfrom
dev

Conversation

@chriswritescode-dev
Copy link
Owner

Summary

Security updates for dependency CVE fixes with infrastructure improvements.

Changes

Security Updates

  • Update hono from ^4.10.1 to ^4.11.7 - includes security patches
  • Update react-router-dom from ^7.9.4 to ^7.13.0 - includes security patches
  • All backend and frontend tests passing with new versions

Infrastructure

  • Updated docker-upgrade.sh to use --no-cache flag for reliable clean rebuilds
  • Ensures Docker images built with updated dependencies across all environments

Notes

  • Attempted SSE refactor to use Hono's built-in streamSSE for better maintainability
  • Reverted to manual streaming implementation due to incompatibility issues observed in production
  • Manual SSE implementation remains stable and production-tested

Testing

  • Backend: All tests passing (303 passed, 1 skipped)
  • Frontend: Typecheck and lint passing
  • Docker: Build successful with updated dependencies

Checklist

  • Code follows project style guidelines
  • Tests pass locally
  • No new linting errors introduced
  • Dependencies updated for security patches

- Update hono from ^4.10.1 to ^4.11.7
- Update react-router-dom from ^7.9.4 to ^7.13.0

All tests passing, no breaking changes detected
@chriswritescode-dev chriswritescode-dev merged commit 11eddb1 into main Feb 1, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant