Attempted npm audit fix but encountered workspace conflicts:
1. eslint version conflict
- ^9.41.0 does not exist (valid: 9.28.0, 9.21.0)
- Fixed in: dbal/development/package.json
- Still need to fix: codegen/package.json (if present)
2. vite override conflict
- Override for vite@^7.4.0 conflicts with direct dependency
- Blocked npm install from completing
- Requires investigating workspace vite versions
Status:
✅ dbal/development: eslint updated to ^9.28.0
⏸️ vite conflict: needs investigation before npm install can complete
📋 Full fix plan documented in txt/DEPENDENCY_FIX_PLAN_2026-01-23.txt
Vulnerabilities status (verified):
- 7 moderate (lodash in dev chain only)
- 0 critical/high
- Risk: LOW (dev-only, no production impact)
Options:
A) Quick fix (1-2h): Fix versions, resolve vite, keep lodash
B) Full fix (4-8h): Fix + npm audit fix --force (breaking changes)
C) Defer: Document + monitor (current approach safe)
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
- Update React from 18.2.0 to 19.2.3 in workflowui
- Update Next.js to latest stable (15.1.3, 16.1.2)
- Update @reduxjs/toolkit to 1.9.7 and 2.5.2 across packages
- Update React-Redux to 9.2.0 for better React 19 compatibility
- Update TypeScript to 5.9.3 for latest language features
- Update testing libraries: Jest, Vitest, Playwright to latest
- Update build tools: Vite, ESLint to current versions
- Update @tanstack/react-query to 5.91.2
- Update Framer Motion to 13.0.3
- Update Three.js to 0.177.0
- Update Tailwind CSS to 4.1.18 (consistent across packages)
- Update Monaco Editor to 4.7.0
- Update React Router to 7.17.2
- Update date-fns to 3.6.0
- Update Dexie to 4.0.8
- Update Sass to 1.83.5
- Update type definitions (@types/node, @types/react, etc.)
- Update AWS SDK for S3 integration
- Add multi-version peer dependency support for gradual upgrades
- Ensure compatibility across monorepo workspaces
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
- codegen: Low-code React app with JSON-driven component system
- packagerepo: Schema-driven package repository with backend/frontend
- postgres: Next.js app with Drizzle ORM and PostgreSQL
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>