Skip to content

Upgrade deps for security, switch to pnpm, add Changesets#8

Merged
dillonstreator merged 2 commits into
mainfrom
chore/security-upgrade-pnpm-changesets
Jul 20, 2026
Merged

Upgrade deps for security, switch to pnpm, add Changesets#8
dillonstreator merged 2 commits into
mainfrom
chore/security-upgrade-pnpm-changesets

Conversation

@dillonstreator

Copy link
Copy Markdown
Member

Summary

  • Clear Dependabot advisories by upgrading Fastify 5, OpenTelemetry, and transitive deps; migrate from Yarn Classic to pnpm
  • Update app/telemetry code for Fastify 5 logger API and current OpenTelemetry resource/semconv APIs
  • Add CI (build/test/audit) and Changesets release workflow for GitHub Releases (no npm publish)

Test plan

  • pnpm install && pnpm build && pnpm test && pnpm audit locally
  • Confirm CI workflow passes on this PR
  • After merge, confirm Release workflow opens a Version Packages PR from the included changeset
  • Smoke-check /hi, /documentation, and optional OTEL with OTEL_ENABLED=true

dillonstreator and others added 2 commits July 20, 2026 15:31
Move off Yarn Classic and Fastify 4 to clear Dependabot advisories, and automate versioning with GitHub Releases.

Co-authored-by: Cursor <cursoragent@cursor.com>
Keeps Swagger docs in sync with Changesets version bumps.

Co-authored-by: Cursor <cursoragent@cursor.com>
@dillonstreator
dillonstreator merged commit b499471 into main Jul 20, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant