Dependency Dashboard #9

New Issue

2026-09-13T18:20:48+03:00

renovate-bot commented

2026-09-13 18:20:48 +03:00

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

⚠️ WARN: GitHub token is required for some dependencies
⚠️ WARN: No github.com token has been configured. Skipping release notes retrieval

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

chore(deps): update dependency @hookform/resolvers to v6
chore(deps): update dependency eslint-plugin-unicorn to v79
chore(deps): update dependency motion to v14
chore(deps): update dependency msw to v3
chore(deps): update dependency typescript to v7
chore(deps): update dependency vite-plugin-pwa to v2
🔐 Create all pending approval PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

chore(deps): update non-major dependencies (@babel/core, @commitlint/cli, @commitlint/config-conventional, @eslint-react/eslint-plugin, @hookform/resolvers, @mantine/charts, @mantine/core, @mantine/dates, @mantine/hooks, @mantine/notifications, @release-it/conventional-changelog, @storybook/addon-docs, @storybook/react-vite, @tanstack/eslint-plugin-query, @tanstack/react-query, @types/node, @vitejs/plugin-react, @vitest/eslint-plugin, basic-ftp, conventional-changelog-conventionalcommits, dependency-cruiser, eslint, eslint-plugin-perfectionist, eslint-plugin-security, eslint-plugin-sonarjs, eslint-plugin-storybook, globals, i18next, jsdom, knip, lint-staged, motion, nginx, playwright, react, react-dom, react-hook-form, react-i18next, react-is, react-router, release-it, typescript-eslint, undici)

Detected Dependencies

dockerfile (1)

Dockerfile (2)

node 24.22.1-bookworm-slim

nginx 1.28.0-alpine → [Updates: 1.31.8-alpine]

github-actions (3)

.gitea/workflows/image.yml

.gitea/workflows/pr-title.yml

.gitea/workflows/verify.yml

npm (4)

package.json (80)

@hookform/resolvers 5.9.1 → [Updates: 5.9.2, 6.0.0]

@mantine/charts 9.6.1 → [Updates: 9.7.3]

@mantine/core 9.6.1 → [Updates: 9.7.3]

@mantine/dates 9.6.1 → [Updates: 9.7.3]

@mantine/hooks 9.6.1 → [Updates: 9.7.3]

@mantine/notifications 9.6.1 → [Updates: 9.7.3]

@tanstack/react-query 5.102.8 → [Updates: 5.104.5]

dayjs 1.11.23

i18next 26.4.2 → [Updates: 26.5.10]

motion 13.2.0 → [Updates: 13.5.1, 14.6.0]

openapi-fetch 0.17.0

openapi-react-query 0.5.4

react 19.3.0 → [Updates: 19.3.1]

react-dom 19.3.0 → [Updates: 19.3.1]

react-hook-form 7.88.0 → [Updates: 7.91.0]

react-i18next 17.0.14 → [Updates: 17.1.8]

react-is 19.3.0 → [Updates: 19.3.1]

react-router 8.3.1 → [Updates: 8.5.0]

recharts 3.10.1

zod 4.6.7

@babel/core 8.0.5 → [Updates: 8.0.9]

@commitlint/cli 21.2.2 → [Updates: 21.2.4]

@commitlint/config-conventional 21.2.2 → [Updates: 21.2.4]

@eslint-react/eslint-plugin 5.21.0 → [Updates: 5.28.8]

@eslint/js 10.0.1

@release-it/conventional-changelog 12.0.0 → [Updates: 12.0.2]

@rolldown/plugin-babel 0.2.4

@storybook/addon-docs 10.6.0 → [Updates: 10.6.3]

@storybook/react-vite 10.6.0 → [Updates: 10.6.3]

@stylistic/eslint-plugin 5.10.0

@tanstack/eslint-plugin-query 5.104.0 → [Updates: 5.104.5]

@testing-library/jest-dom 7.0.1

@testing-library/react 16.3.3

@types/node 24.13.4 → [Updates: 24.19.2]

@types/react 19.3.0

@types/react-dom 19.3.0

@vitejs/plugin-react 6.1.1 → [Updates: 6.1.2]

@vitest/browser 5.0.5

@vitest/browser-playwright 5.0.5

@vitest/coverage-v8 5.0.5

@vitest/eslint-plugin 1.6.27 → [Updates: 1.6.28]

@vitest/ui 5.0.5

babel-plugin-react-compiler 1.0.0

conventional-changelog-conventionalcommits 10.4.0 → [Updates: 10.4.1]

dependency-cruiser 18.2.0 → [Updates: 18.7.0]

eslint 10.11.0 → [Updates: 10.13.0]

eslint-import-resolver-typescript 4.4.5

eslint-plugin-import-x 4.17.1

eslint-plugin-jest-dom 5.10.1

eslint-plugin-no-unsanitized 4.1.5

eslint-plugin-perfectionist 5.12.1 → [Updates: 5.13.0]

eslint-plugin-react-hooks 7.1.1

eslint-plugin-react-refresh 0.5.7

eslint-plugin-regexp 3.3.1

eslint-plugin-security 4.1.0 → [Updates: 4.2.0]

eslint-plugin-sonarjs 4.2.1 → [Updates: 4.2.2]

eslint-plugin-storybook 10.6.0 → [Updates: 10.6.3]

eslint-plugin-testing-library 7.16.2

eslint-plugin-unicorn 76.0.0 → [Updates: 79.0.0]

globals 17.12.0 → [Updates: 17.13.0]

husky 9.1.7

jsdom 30.0.1 → [Updates: 30.1.3]

knip 6.35.1 → [Updates: 6.43.0]

lint-staged 17.5.1 → [Updates: 17.6.0]

msw 2.15.0 → [Updates: 3.0.3]

openapi-typescript 7.13.0

playwright 1.63.0 → [Updates: 1.64.1]

release-it 21.0.2 → [Updates: 21.1.1]

storybook 10.6.3

typescript 5.9.3 → [Updates: 7.0.2]

typescript-eslint 8.70.1 → [Updates: 8.72.0]

vite 8.3.5

vite-plugin-pwa 1.3.0 → [Updates: 2.0.0]

vitest 5.0.5

node 24.22.1

basic-ftp 6.2.1 → [Updates: 6.2.3]

undici 7.30.1 → [Updates: 8.12.3]

@vitest/browser 5.0.5

@vitest/ui 5.0.5

@vitest/mocker 5.0.5

packages/icons/package.json (7)

@storybook/react-vite 10.6.0 → [Updates: 10.6.3]

@testing-library/react 16.3.3

@types/react 19.3.0

typescript 5.9.3 → [Updates: 7.0.2]

vite 8.3.5

vitest 5.0.5

react 19.3.0 → [Updates: 19.3.1]

packages/tokens/package.json

packages/ui/package.json (11)

@storybook/react-vite 10.6.0 → [Updates: 10.6.3]

@testing-library/react 16.3.3

@types/react 19.3.0

storybook 10.6.3

typescript 5.9.3 → [Updates: 7.0.2]

vite 8.3.5

vitest 5.0.5

@mantine/core 9.6.1 → [Updates: 9.7.3]

@mantine/hooks 9.6.1 → [Updates: 9.7.3]

react 19.3.0 → [Updates: 19.3.1]

react-dom 19.3.0 → [Updates: 19.3.1]

nvm (1)

.nvmrc (1)

node 24.22.1

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Repository Problems Renovate tried to run on this repository, but found these problems. - ⚠️ WARN: GitHub token is required for some dependencies - ⚠️ WARN: No github.com token has been configured. Skipping release notes retrieval ## Pending Approval The following branches are pending approval. To create them, click on a checkbox below. - [ ] chore(deps): update dependency @hookform/resolvers to v6 - [ ] chore(deps): update dependency eslint-plugin-unicorn to v79 - [ ] chore(deps): update dependency motion to v14 - [ ] chore(deps): update dependency msw to v3 - [ ] chore(deps): update dependency typescript to v7 - [ ] chore(deps): update dependency vite-plugin-pwa to v2 - [ ] 🔐 **Create all pending approval PRs at once** 🔐 ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [chore(deps): update non-major dependencies](pulls/52) (`@babel/core`, `@commitlint/cli`, `@commitlint/config-conventional`, `@eslint-react/eslint-plugin`, `@hookform/resolvers`, `@mantine/charts`, `@mantine/core`, `@mantine/dates`, `@mantine/hooks`, `@mantine/notifications`, `@release-it/conventional-changelog`, `@storybook/addon-docs`, `@storybook/react-vite`, `@tanstack/eslint-plugin-query`, `@tanstack/react-query`, `@types/node`, `@vitejs/plugin-react`, `@vitest/eslint-plugin`, `basic-ftp`, `conventional-changelog-conventionalcommits`, `dependency-cruiser`, `eslint`, `eslint-plugin-perfectionist`, `eslint-plugin-security`, `eslint-plugin-sonarjs`, `eslint-plugin-storybook`, `globals`, `i18next`, `jsdom`, `knip`, `lint-staged`, `motion`, `nginx`, `playwright`, `react`, `react-dom`, `react-hook-form`, `react-i18next`, `react-is`, `react-router`, `release-it`, `typescript-eslint`, `undici`) ## Detected Dependencies <details><summary>dockerfile (1)</summary> <blockquote> <details><summary>Dockerfile (2)</summary> - `node 24.22.1-bookworm-slim` - `nginx 1.28.0-alpine` → [Updates: `1.31.8-alpine`] </details> </blockquote> </details> <details><summary>github-actions (3)</summary> <blockquote> <details><summary>.gitea/workflows/image.yml</summary> </details> <details><summary>.gitea/workflows/pr-title.yml</summary> </details> <details><summary>.gitea/workflows/verify.yml</summary> </details> </blockquote> </details> <details><summary>npm (4)</summary> <blockquote> <details><summary>package.json (80)</summary> - `@hookform/resolvers 5.9.1` → [Updates: `5.9.2`, `6.0.0`] - `@mantine/charts 9.6.1` → [Updates: `9.7.3`] - `@mantine/core 9.6.1` → [Updates: `9.7.3`] - `@mantine/dates 9.6.1` → [Updates: `9.7.3`] - `@mantine/hooks 9.6.1` → [Updates: `9.7.3`] - `@mantine/notifications 9.6.1` → [Updates: `9.7.3`] - `@tanstack/react-query 5.102.8` → [Updates: `5.104.5`] - `dayjs 1.11.23` - `i18next 26.4.2` → [Updates: `26.5.10`] - `motion 13.2.0` → [Updates: `13.5.1`, `14.6.0`] - `openapi-fetch 0.17.0` - `openapi-react-query 0.5.4` - `react 19.3.0` → [Updates: `19.3.1`] - `react-dom 19.3.0` → [Updates: `19.3.1`] - `react-hook-form 7.88.0` → [Updates: `7.91.0`] - `react-i18next 17.0.14` → [Updates: `17.1.8`] - `react-is 19.3.0` → [Updates: `19.3.1`] - `react-router 8.3.1` → [Updates: `8.5.0`] - `recharts 3.10.1` - `zod 4.6.7` - `@babel/core 8.0.5` → [Updates: `8.0.9`] - `@commitlint/cli 21.2.2` → [Updates: `21.2.4`] - `@commitlint/config-conventional 21.2.2` → [Updates: `21.2.4`] - `@eslint-react/eslint-plugin 5.21.0` → [Updates: `5.28.8`] - `@eslint/js 10.0.1` - `@release-it/conventional-changelog 12.0.0` → [Updates: `12.0.2`] - `@rolldown/plugin-babel 0.2.4` - `@storybook/addon-docs 10.6.0` → [Updates: `10.6.3`] - `@storybook/react-vite 10.6.0` → [Updates: `10.6.3`] - `@stylistic/eslint-plugin 5.10.0` - `@tanstack/eslint-plugin-query 5.104.0` → [Updates: `5.104.5`] - `@testing-library/jest-dom 7.0.1` - `@testing-library/react 16.3.3` - `@types/node 24.13.4` → [Updates: `24.19.2`] - `@types/react 19.3.0` - `@types/react-dom 19.3.0` - `@vitejs/plugin-react 6.1.1` → [Updates: `6.1.2`] - `@vitest/browser 5.0.5` - `@vitest/browser-playwright 5.0.5` - `@vitest/coverage-v8 5.0.5` - `@vitest/eslint-plugin 1.6.27` → [Updates: `1.6.28`] - `@vitest/ui 5.0.5` - `babel-plugin-react-compiler 1.0.0` - `conventional-changelog-conventionalcommits 10.4.0` → [Updates: `10.4.1`] - `dependency-cruiser 18.2.0` → [Updates: `18.7.0`] - `eslint 10.11.0` → [Updates: `10.13.0`] - `eslint-import-resolver-typescript 4.4.5` - `eslint-plugin-import-x 4.17.1` - `eslint-plugin-jest-dom 5.10.1` - `eslint-plugin-no-unsanitized 4.1.5` - `eslint-plugin-perfectionist 5.12.1` → [Updates: `5.13.0`] - `eslint-plugin-react-hooks 7.1.1` - `eslint-plugin-react-refresh 0.5.7` - `eslint-plugin-regexp 3.3.1` - `eslint-plugin-security 4.1.0` → [Updates: `4.2.0`] - `eslint-plugin-sonarjs 4.2.1` → [Updates: `4.2.2`] - `eslint-plugin-storybook 10.6.0` → [Updates: `10.6.3`] - `eslint-plugin-testing-library 7.16.2` - `eslint-plugin-unicorn 76.0.0` → [Updates: `79.0.0`] - `globals 17.12.0` → [Updates: `17.13.0`] - `husky 9.1.7` - `jsdom 30.0.1` → [Updates: `30.1.3`] - `knip 6.35.1` → [Updates: `6.43.0`] - `lint-staged 17.5.1` → [Updates: `17.6.0`] - `msw 2.15.0` → [Updates: `3.0.3`] - `openapi-typescript 7.13.0` - `playwright 1.63.0` → [Updates: `1.64.1`] - `release-it 21.0.2` → [Updates: `21.1.1`] - `storybook 10.6.3` - `typescript 5.9.3` → [Updates: `7.0.2`] - `typescript-eslint 8.70.1` → [Updates: `8.72.0`] - `vite 8.3.5` - `vite-plugin-pwa 1.3.0` → [Updates: `2.0.0`] - `vitest 5.0.5` - `node 24.22.1` - `basic-ftp 6.2.1` → [Updates: `6.2.3`] - `undici 7.30.1` → [Updates: `8.12.3`] - `@vitest/browser 5.0.5` - `@vitest/ui 5.0.5` - `@vitest/mocker 5.0.5` </details> <details><summary>packages/icons/package.json (7)</summary> - `@storybook/react-vite 10.6.0` → [Updates: `10.6.3`] - `@testing-library/react 16.3.3` - `@types/react 19.3.0` - `typescript 5.9.3` → [Updates: `7.0.2`] - `vite 8.3.5` - `vitest 5.0.5` - `react 19.3.0` → [Updates: `19.3.1`] </details> <details><summary>packages/tokens/package.json</summary> </details> <details><summary>packages/ui/package.json (11)</summary> - `@storybook/react-vite 10.6.0` → [Updates: `10.6.3`] - `@testing-library/react 16.3.3` - `@types/react 19.3.0` - `storybook 10.6.3` - `typescript 5.9.3` → [Updates: `7.0.2`] - `vite 8.3.5` - `vitest 5.0.5` - `@mantine/core 9.6.1` → [Updates: `9.7.3`] - `@mantine/hooks 9.6.1` → [Updates: `9.7.3`] - `react 19.3.0` → [Updates: `19.3.1`] - `react-dom 19.3.0` → [Updates: `19.3.1`] </details> </blockquote> </details> <details><summary>nvm (1)</summary> <blockquote> <details><summary>.nvmrc (1)</summary> - `node 24.22.1` </details> </blockquote> </details>

ksv741 referenced this issue from a commit

2026-09-13 19:36:52 +03:00

chore: secure hooks and update dependencies #4 #9

codex-bot referenced this issue

2026-09-13 19:43:02 +03:00

[P0] 08.frontend. Проверить frontend secrets и dependency risks #4

codex-bot commented

2026-09-13 19:44:20 +03:00

Выполненные обновления из dashboard зафиксированы в main: 3be6e61.

@babel/core → 8.0.5
@testing-library/jest-dom → 7.0.1
jsdom → 30.0.1
lint-staged → 17.5.1
react-i18next → 17.0.14
react-router → 8.3.1
zod → 4.6.4; error callbacks мигрированы с сохранением правил валидации и локализованных сообщений.
vitest и @vitest/coverage-v8 → 5.0.0
TypeScript → 7: отложено. Последний openapi-typescript@7.13.0 требует peer typescript ^5.x; сохраняем 5.9.3 до совместимого релиза генератора, без --force/--legacy-peer-deps.

Non-major обновления уже включены в main commit 0c6bac8. Дополнительно исправлены security advisories в fast-uri, js-yaml и @redocly/openapi-core.

Проверки: npm ci, полный npm run verify (46 test files / 268 tests), npm ls --all — PASS; runtime/dev npm audit — 0 vulnerabilities. Security CI и verify CI — success. Подробный security baseline в #4.

Чекбоксы Pending Approval в основном тексте — команды Renovate на создание PR, а не отметки выполнения; их не переключали. Основной dashboard пока содержит устаревшие версии и должен обновиться при следующем успешном запуске Renovate. Этот комментарий фиксирует выполненное независимо от регенерации dashboard.

Выполненные обновления из dashboard зафиксированы в main: [3be6e61](https://git.personal.ksv741.ru/WealthLedger/frontend/commit/3be6e61b8fc85d4b16199dbe9910b38894159cb8). - [x] @babel/core → 8.0.5 - [x] @testing-library/jest-dom → 7.0.1 - [x] jsdom → 30.0.1 - [x] lint-staged → 17.5.1 - [x] react-i18next → 17.0.14 - [x] react-router → 8.3.1 - [x] zod → 4.6.4; error callbacks мигрированы с сохранением правил валидации и локализованных сообщений. - [x] vitest и @vitest/coverage-v8 → 5.0.0 - [ ] TypeScript → 7: отложено. Последний openapi-typescript@7.13.0 требует peer typescript ^5.x; сохраняем 5.9.3 до совместимого релиза генератора, без --force/--legacy-peer-deps. Non-major обновления уже включены в main commit 0c6bac8. Дополнительно исправлены security advisories в fast-uri, js-yaml и @redocly/openapi-core. Проверки: npm ci, полный npm run verify (46 test files / 268 tests), npm ls --all — PASS; runtime/dev npm audit — 0 vulnerabilities. [Security CI](https://git.personal.ksv741.ru/WealthLedger/frontend/actions/runs/13) и [verify CI](https://git.personal.ksv741.ru/WealthLedger/frontend/actions/runs/14) — success. Подробный [security baseline в #4](https://git.personal.ksv741.ru/WealthLedger/frontend/issues/4#issuecomment-127). Чекбоксы Pending Approval в основном тексте — команды Renovate на создание PR, а не отметки выполнения; их не переключали. Основной dashboard пока содержит устаревшие версии и должен обновиться при следующем успешном запуске Renovate. Этот комментарий фиксирует выполненное независимо от регенерации dashboard.

renovate-bot was assigned by hermes-agent

2026-10-12 00:04:30 +03:00

hermes-agent added this to the Инженерная основа и поставка milestone 2026-10-12 00:04:30 +03:00

hermes-agent added this to the WealthLedger — Delivery Board project 2026-10-12 00:04:30 +03:00

hermes-agent added the

Priority

Low

4

Kind/Dependencies labels 2026-10-12 00:04:30 +03:00

ksv741 referenced this issue from a commit

2026-10-24 18:01:40 +03:00

fix(deps): preserve compatible linting #9