chore: upgrade backend and frontend dependencies to latest#422
Conversation
Backend (composer): - Update all packages to the latest within existing constraints. - spatie/laravel-permission ^7.0 -> ^8.0 - symfony/http-client and symfony/yaml ^7.0 -> ^8.0, aligning them with the Symfony 8 components Laravel 13 already pulls in. - Full test suite passes (200 passed, 7 skipped). Frontend (npm): - Bump all upgradable packages to latest, including @inertiajs/vue3 3.5, vite 8.1, vue 3.5.39, tailwindcss 4.3, @tiptap/* 3.27, echarts 6.1, @vueuse/* 14.3, eslint 10.6 and a major bump of tsparticles / @tsparticles/vue3 to 4.x (API verified compatible). - v-calendar and vuedraggable left untouched: their npm "latest" dist-tag points to an older Vue 2 major, so bumping would be a downgrade. - Refresh the committed production build to match the upgraded packages. Fix a case-sensitive import in ButtonGroupSeparator.vue (@/components -> @/Components) that broke the production build on case-sensitive filesystems. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012Kgrtbx5Pdfr5cpja8FoGa
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
The previous commit was resolved on a PHP 8.4 host, which let composer lock the Symfony 8 components (they require php >=8.4.1). CI and the project's declared floor are PHP 8.3, so `composer install` failed on CI with "lock file does not contain a compatible set of packages". - Pin `config.platform.php` to 8.3.0 so the lock always resolves against the minimum supported PHP, regardless of the host running composer. - Revert symfony/http-client and symfony/yaml back to ^7.0 (Symfony 8 needs PHP 8.4+). The whole Symfony suite is back on 7.4.x. - spatie/laravel-permission ^8.0 is kept (it supports PHP 8.3). - laravel/framework resolves to 13.17.0. Full test suite still passes (200 passed, 7 skipped). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012Kgrtbx5Pdfr5cpja8FoGa
Revert the regenerated production build in public/build/default back to develop's committed state. The frontend bundle will be rebuilt separately; this PR keeps only the dependency upgrades and the source-level fixes. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012Kgrtbx5Pdfr5cpja8FoGa
PR Summary
|
Summary
Upgrades all upgradable backend (Composer) and frontend (npm) dependencies to their latest versions that are installable on the project's supported PHP (8.3).
Backend (Composer)
spatie/laravel-permission^7.0→^8.0(v8 supports PHP 8.3).laravel/frameworkresolves to 13.17.0.config.platform.phpto8.3.0so the lock always resolves against the minimum supported PHP. Without this, runningcomposer updateon a PHP 8.4 host pulls Symfony 8 (which requires PHP ≥ 8.4.1) into the lock and breakscomposer installon the 8.3 CI runner. The Symfony suite therefore stays on 7.4.x.Frontend (npm)
@inertiajs/vue3→ 3.5,vite→ 8.1,vue→ 3.5.39tailwindcss/@tailwindcss/*→ 4.3,@tiptap/*→ 3.27echarts→ 6.1,@vueuse/*→ 14.3,eslint→ 10.6,axios→ 1.18tsparticlesand@tsparticles/vue3to 4.x (API verified compatible with existingloadFull/plugin usage)v-calendarandvuedraggableare intentionally left as-is: their npmlatestdist-tag points to an older Vue 2 major, so bumping would actually be a downgrade. They remain at the newest version on their Vue 3 line.vite build+ SSR) compiles successfully.public/build/defaultis intentionally not included in this PR — it will be rebuilt separately.Other
ButtonGroupSeparator.vue(@/components→@/Components). It worked on case-insensitive filesystems (macOS) but broke the production build on case-sensitive ones (Linux/CI).Test plan
php artisan test— 200 passed, 7 skippednpm run build— client + SSR build succeed