Skip to content

Update 1.2 to 1.2.2#420

Merged
Doezer merged 17 commits intorelease/1.2from
main
Feb 26, 2026
Merged

Update 1.2 to 1.2.2#420
Doezer merged 17 commits intorelease/1.2from
main

Conversation

@Doezer
Copy link
Owner

@Doezer Doezer commented Feb 24, 2026

Deps & security fixes
Update to 1.2.2 on dev, tag release then merge into release branch

Doezer and others added 9 commits February 22, 2026 08:36
Co-authored-by: aikido-autofix[bot] <119856028+aikido-autofix[bot]@users.noreply.github.com>
Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.2.4 to 17.3.1.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.4...v17.3.1)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 17.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) from 5.90.20 to 5.90.21.
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.90.21/packages/react-query)

---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.90.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pino](https://github.com/pinojs/pino) from 10.3.0 to 10.3.1.
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v10.3.0...v10.3.1)

---
updated-dependencies:
- dependency-name: pino
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the dev-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.2` | `9.39.3` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.1.18` | `4.2.0` |
| [eslint](https://github.com/eslint/eslint) | `9.39.2` | `9.39.3` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.1.18` | `4.2.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.54.0` | `8.56.0` |


Updates `@eslint/js` from 9.39.2 to 9.39.3
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v9.39.3/packages/js)

Updates `@tailwindcss/vite` from 4.1.18 to 4.2.0
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.0/packages/@tailwindcss-vite)

Updates `eslint` from 9.39.2 to 9.39.3
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.2...v9.39.3)

Updates `tailwindcss` from 4.1.18 to 4.2.0
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.0/packages/tailwindcss)

Updates `typescript-eslint` from 8.54.0 to 8.56.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-version: 9.39.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eslint
  dependency-version: 9.39.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: tailwindcss
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.56.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the react group with 1 update: [react-hook-form](https://github.com/react-hook-form/react-hook-form).


Updates `react-hook-form` from 7.71.1 to 7.71.2
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.71.1...v7.71.2)

---
updated-dependencies:
- dependency-name: react-hook-form
  dependency-version: 7.71.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: react
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3.2.0 to 3.7.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@49b3bc8...c7c5346)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.18.0 to 6.19.2.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@2634353...10e90e3)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 6.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@gemini-code-assist
Copy link
Contributor

Summary of Changes

Hello @Doezer, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request systematically updates a wide array of project dependencies to their latest versions. The primary goal is to incorporate recent features, performance enhancements, and critical security fixes across the application's core libraries, development tools, and underlying native modules, ensuring the project remains robust and up-to-date.

Highlights

  • Project Version Update: The project's internal version has been updated from 1.2.0 to 1.2.1 in the lockfile.
  • Core Dependency Upgrades: Key dependencies such as @tanstack/react-query, dotenv, pino, and react-hook-form have been updated to their latest patch or minor versions.
  • ESLint and TypeScript ESLint Updates: All ESLint and TypeScript ESLint related packages have been upgraded, including adjustments to peer dependency ranges to support newer ESLint versions.
  • Tailwind CSS Ecosystem Updates: Tailwind CSS related packages (@tailwindcss/vite, @tailwindcss/node, @tailwindcss/oxide) and their native binaries have been updated, with some requiring a minimum Node.js version of 20.
Changelog
  • package-lock.json
    • Updated project version from 1.2.0 to 1.2.1.
    • Updated @tanstack/react-query from 5.90.20 to 5.90.21.
    • Updated dotenv from 17.2.4 to 17.3.1.
    • Updated pino from 10.3.0 to 10.3.1.
    • Updated react-hook-form from 7.71.1 to 7.71.2.
    • Updated @eslint/js from 9.39.2 to 9.39.3.
    • Updated @tailwindcss/vite from 4.1.18 to 4.2.0.
    • Updated eslint from 9.39.2 to 9.39.3.
    • Updated typescript-eslint from 8.54.0 to 8.56.0.
    • Updated @tailwindcss/node and @tailwindcss/oxide to 4.2.0, including their platform-specific binaries and adjusting their Node.js engine requirement to >= 20.
    • Updated various @emnapi and @napi-rs related dependencies within @tailwindcss/oxide-wasm32-wasi.
    • Updated enhanced-resolve from 5.18.4 to 5.19.0.
    • Updated lightningcss and its platform-specific binaries from 1.30.2 to 1.31.1.
    • Updated all @typescript-eslint/* packages from 8.54.0 to 8.56.0, and expanded the eslint peer dependency range to include ^10.0.0.
    • Updated minimatch and brace-expansion within @typescript-eslint/typescript-estree.
    • Updated eslint-visitor-keys within @typescript-eslint/visitor-keys.
  • package.json
    • Updated @tanstack/react-query from 5.90.20 to 5.90.21.
    • Updated dotenv from 17.2.4 to 17.3.1.
    • Updated pino from 10.3.0 to 10.3.1.
    • Updated react-hook-form from 7.71.1 to 7.71.2.
    • Updated @eslint/js from 9.39.2 to 9.39.3.
    • Updated @tailwindcss/vite from 4.1.18 to 4.2.0.
    • Updated eslint from 9.39.2 to 9.39.3.
    • Updated typescript-eslint from 8.54.0 to 8.56.0.
Ignored Files
  • Ignored by pattern: .github/workflows/** (2)
    • .github/workflows/ci.yml
    • .github/workflows/deploy.yml
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates several dependencies, which is great for keeping the project up-to-date with the latest features and security fixes. The changes look good overall.

I've added one comment regarding a significant change in the required Node.js version for some development dependencies. The update to @tailwindcss/vite and typescript-eslint now requires Node.js v20+, which could break builds on older environments. I've suggested adding an engines field to package.json to enforce this requirement and ensure a consistent development environment.

Also, I noticed a small discrepancy: the PR title mentions updating to version 1.2.2, but the version in package.json and package-lock.json is updated to 1.2.1. You might want to align these.

Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates several dependencies, including @tanstack/react-query, dotenv, pino, react-hook-form, @eslint/js, @tailwindcss/vite, eslint, and typescript-eslint. These updates primarily consist of patch and minor version bumps, which align with the pull request's description of 'Deps & security fixes'. A notable change is the increased minimum Node.js version requirement for some transitive dependencies, such as @tailwindcss/oxide and vitest, which now explicitly require Node.js >=20. It is important to ensure the project's engines.node field in package.json is updated to reflect this new minimum requirement for better compatibility and clarity.

Doezer and others added 2 commits February 24, 2026 11:37
…ade from 5.3.5 to 5.3.7 (#416)

* fix(security): update fast-xml-parser from 5.3.5 to 5.3.6

* package lock update

---------

Co-authored-by: aikido-autofix[bot] <119856028+aikido-autofix[bot]@users.noreply.github.com>
Co-authored-by: Doezer <doezerx@gmail.com>
aikido-autofix bot and others added 2 commits February 25, 2026 11:02
Co-authored-by: aikido-autofix[bot] <119856028+aikido-autofix[bot]@users.noreply.github.com>
* fix(security): autofix Docker container runs as default root user

* remove uid since used by alpine already

---------

Co-authored-by: aikido-autofix[bot] <119856028+aikido-autofix[bot]@users.noreply.github.com>
Co-authored-by: Doezer <doezerx@gmail.com>
 introducing a dedicated non-root user and supporting user/group ID overrides via environment variables. It also adds an entrypoint script to ensure mounted volumes have the correct file ownership, following best practices for containerized applications.
@Doezer Doezer deployed to production February 26, 2026 12:18 — with GitHub Actions Active
@Doezer Doezer merged commit 2f98a0f into release/1.2 Feb 26, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant