Ship: Renovate onboarding + dependency modernization batches 1–3 #221

Merged

bvandeusen merged 20 commits from dev into main 2026-07-11 23:16:33 -04:00

Conversation 0 Commits 20 Files Changed 7

+46 -24

bvandeusen commented 2026-07-11 23:16:26 -04:00

Owner

Copy Link

Copy Source

Ships the first CI-validated chunk of the Renovate-driven dependency modernization campaign (milestone #156) from dev to main.

What's in this ship

Renovate infrastructure

• Onboarded self-hosted Renovate (renovate.json, config:recommended) — PR #211
• Pre-merge CI for renovate/* PRs: ci.yml now triggers pull_request on base dev (base main deliberately excluded → no duplicate dev→main runs)
• Grouped the interlocking frontend build/test toolchain into one PR

Dependency updates (batches 1–3, all CI-green on dev)

• Security-adjacent: cryptography → v49, nh3 → >=0.3,<0.4
• Backend: structlog → v26, gdown → v6, pgvector → >=0.5,<0.6
• Build/infra: docker/dockerfile tag → v1.25, Node.js → v24
• Frontend toolchain (grouped): vite → 8, vitest → 4, @vitejs/plugin-vue → 6, happy-dom → 20, @vue/test-utils → 2.4
• Dropped dead vue-tsc devDep + check script (frontend is pure JS)

Not in this ship (held for their own test surfaces)

Vuetify/router/pinia majors (batch 4, visual review), web-ext (batch 5), opencv/ML stack (batch 6, no CI coverage), redis-8 + cuda-13 (batch 7). See milestone #156's pre-test evaluation.

CI is green on dev head 0cf3a02.

🤖 Generated with Claude Code

Ships the first CI-validated chunk of the Renovate-driven dependency modernization campaign (milestone #156) from `dev` to `main`. ## What's in this ship **Renovate infrastructure** - Onboarded self-hosted Renovate (`renovate.json`, config:recommended) — PR #211 - Pre-merge CI for `renovate/*` PRs: `ci.yml` now triggers `pull_request` on base `dev` (base `main` deliberately excluded → no duplicate dev→main runs) - Grouped the interlocking frontend build/test toolchain into one PR **Dependency updates (batches 1–3, all CI-green on `dev`)** - Security-adjacent: `cryptography` → v49, `nh3` → >=0.3,<0.4 - Backend: `structlog` → v26, `gdown` → v6, `pgvector` → >=0.5,<0.6 - Build/infra: `docker/dockerfile` tag → v1.25, Node.js → v24 - Frontend toolchain (grouped): `vite` → 8, `vitest` → 4, `@vitejs/plugin-vue` → 6, `happy-dom` → 20, `@vue/test-utils` → 2.4 - Dropped dead `vue-tsc` devDep + `check` script (frontend is pure JS) ## Not in this ship (held for their own test surfaces) Vuetify/router/pinia majors (batch 4, visual review), web-ext (batch 5), opencv/ML stack (batch 6, no CI coverage), redis-8 + cuda-13 (batch 7). See milestone #156's pre-test evaluation. CI is green on `dev` head `0cf3a02`. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

bvandeusen added 20 commits 2026-07-11 23:16:27 -04:00

Add renovate.json af09bf58af

Merge pull request 'chore: Configure Renovate' (#211) from renovate/configure into dev 279b0560d9

chore(deps): update dependency nh3 to >=0.3,<0.4 ff9846ce64

chore(deps): update dependency cryptography to v49 ba2de60439

Merge pull request 'chore(deps): update dependency cryptography to v49' (#214) from renovate/cryptography-49.x into dev 3063af6a74

Merge pull request 'chore(deps): update dependency nh3 to >=0.3,<0.4' (#213) from renovate/nh3-0.x into dev 5010de6178

chore(deps): update dependency pgvector to >=0.5,<0.6 87d3198f89

chore(deps): update docker/dockerfile docker tag to v1.25 e00deee451

chore(deps): update dependency gdown to v6 466ee898ab

chore(deps): update dependency structlog to v26 b6c5638eab

Merge pull request 'chore(deps): update dependency pgvector to >=0.5,<0.6' (#215) from renovate/pgvector-0.x into dev 64053a5f57

Merge pull request 'chore(deps): update docker/dockerfile docker tag to v1.25' (#216) from renovate/docker-dockerfile-1.x into dev c17a6e6c40

Merge pull request 'chore(deps): update dependency gdown to v6' (#217) from renovate/gdown-6.x into dev b23b19bf58

Merge pull request 'chore(deps): update dependency structlog to v26' (#218) from renovate/structlog-26.x into dev 49f6765326

ci(renovate): pre-merge CI for renovate PRs + group FE toolchain ... 7f5e0603de

ci.yml: add pull_request trigger (base dev) so renovate/* PRs get validated before merge; dev→main flow unchanged (base main), no duplicate runs. renovate.json: group vite/vitest/plugin-vue/happy-dom/@vue-test-utils into one PR (version-coupled).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

chore(deps): update frontend build/test toolchain a2858892e9

Merge pull request 'chore(deps): update frontend build/test toolchain (major)' (#219) from renovate/major-frontend-buildtest-toolchain into dev 2d0fca8729

chore(frontend): drop dead vue-tsc devDep + check script ... c98db303d0

Frontend is pure JS (no .ts/JSDoc); CI never ran vue-tsc. Removed the devDep and its orphaned `check` script instead of bumping to v3, and updated the ci.yml comment to match.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

chore(deps): update node.js to v24 6ab495292a

Merge pull request 'chore(deps): update node.js to v24' (#220) from renovate/node-24.x into dev 0cf3a02797

bvandeusen merged commit d45ce5e426 into main 2026-07-11 23:16:33 -04:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

renovate-bot bvandeusen

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: bvandeusen/FabledCurator#221