sergehuber opened a new pull request, #36: URL: https://github.com/apache/unomi-tracker/pull/36
## Summary - `yarn upgrade`: every dependency moves to the latest version its current range allows (Babel 7.18→7.29, rollup 2.79→2.80, ESLint 8.23→8.57, TypeScript 5.8→5.9, rollup-plugin-license 2.9, browserslist 4.29, …). No range changes, except: - `@babel/runtime` now requires `^7.26.10`. It is a runtime dependency, so this keeps projects that use the tracker off the versions with a security advisory. - `yarn audit`: from 87 advisories (4 critical, 48 high) to 7 (1 high). The remaining ones (`lodash`, `moment` in rollup-plugin-license, `minimatch` in ESLint and the commonjs plugin, `deepmerge` with no fix) need major upgrades: UNOMI-1034. - Replaces the Dependabot PRs #32, #33, #34 and #35, which should close by themselves once this is merged. ## Effect on the published tracker - The code is the same: the syntax trees of the old and new bundles are identical, except for three Babel helpers (`_createForOfIteratorHelper`, `_unsupportedIterableToArray`, `_arrayLikeToArray`), now in their newer versions. About 700 bytes smaller. - The output still parses as ES2015, as before (it is not ES5 already in 1.5.0, see UNOMI-1033). - The generated types (`dist/*.d.ts`) are identical. - `dist` is not touched here: #31 stops committing it. ## Test plan - [x] `yarn lint`, `yarn test` - [x] `yarn test:servers`: the comparison with 1.5.0, `unomi2-legacy`, `unomi2`, `unomi3`, `unomi4`, `unomi4-compat` all pass - [ ] CI 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
