Repository navigation
build(deps-dev): bump typescript from 5.9.3 to 7.0.2 in /frontend - #11
Closed
dependabot[bot] wants to merge 1014 commits into
Closed
dependabot[bot] wants to merge 1014 commits into
dependabot[bot] wants to merge 1014 commits into
Conversation
…325-1326 fix(backend): fix rate limit, webhook delay, share valuation, and sco…
…cale fix(lending_pool): correct utilization_bps scale in get_pool_stats
… delta, YAML syntax #1498 - RateLimitService: replace non-atomic INCR+EXPIRE with Lua EVAL #1497 - cacheService: replace non-atomic GET+DEL with Lua EVAL #1496 - simulationController: use configured SCORE_DELTA_REPAY not hardcoded 15 #1495 - deploy-staging.yml: fix indentation of build-args and frontend step
…ate-limit-cache-simulation fix: atomic rate-limit, atomic cache compare-delete, configured score delta, YAML syntax
Merged upstream/main (77 commits) and cherry-picked the earlier
keyset-pagination CI fix; on top of that, this branch had picked up further
breakage from very recent upstream commits:
- services/defaultChecker.ts: an orphaned, syntactically invalid duplicate
of fetchOverdueLoanIds sat outside the DefaultChecker class (stray
'private' keyword at module scope). Its corrected due_ledger < $2
predicate (vs. the real method's <=, which flagged loans as overdue one
ledger early) was folded into the real class method, and the dead
duplicate was deleted.
- services/sorobanService.ts: removed an orphaned, broken
updateUserScoresBulk that referenced a nonexistent this.userRepository;
the real, used implementation already lives in services/scoresService.ts.
- middleware/pauseGuard.ts + errors/{AppError,errorCodes}.ts: pauseGuard.ts
called AppError.serviceUnavailable(), which didn't exist — added it
(503) following the existing factory-method/ErrorCode pattern. Also fixed
a generic argument on the non-generic query() call and prefixed unused
req/res middleware params.
- app.ts / routes/statusRoutes.ts: dropped an unused initializePauseState
import from app.ts (it's already correctly called at startup in
index.ts) and unused Request/Response/NextFunction type imports.
- services/authService.ts: verifyChallengeTimestamp rejected any
future-dated challenge timestamp, but its own test suite (added in a
later commit than the implementation) expects a small clock-skew
tolerance for near-future timestamps. Added a 5s tolerance constant.
- middleware/auth.ts + assorted test files: pure Prettier formatting from
the newest upstream commits, fixed via lint:fix.
- frontend PauseBanner.tsx: Prettier formatting fix.
Verified locally: backend lint/build/typecheck clean, 514/514 tests pass;
frontend lint/typecheck clean, 124/124 tests pass, build succeeds;
contracts fmt/clippy clean, 287/287 tests pass (untouched).
Fixes #1494 - The CodeQL workflow had invalid YAML indentation causing the workflow to never run. Fixed matrix and language entries to nest correctly under strategy, and corrected step indentation. The workflow now parses cleanly and will execute CodeQL scans for both JavaScript/ TypeScript and Rust languages. File: .github/workflows/codeql.yml
…ry events Closes #1536 Closes #1537 Closes #1538 Closes #1539
Fix stale docs, add stepper keyboard nav, scrub PII from Sentry events
…ore (closes #1533)
…EADME (closes #1534)
…-pii Fix PR template wiring, swagger schema dupes, OpenAPI validation, Sentry PII scrubbing
test: lock pool share price de-scaling
- #1519: add validateLoanConfigOnStartup() mirroring validateEnvVars() pattern — catches config errors, logs to console and logger, calls process.exit(1); update index.ts to call it at the top-level startup path; extend loanConfig.test.ts with validateLoanConfigOnStartup coverage - #1518: add useReveal.test.tsx with five cases: success, 403 access denied, 410 expired, PII cleared via clearRevealed(), no PII before request resolves - #1517: move COPY_FEEDBACK_RESET_MS constant into CopyButton.tsx (single source of truth), use it in setTimeout; ui.tsx re-exports from CopyButton for backward compatibility with existing imports - #1516: add description field to Pagination swagger schema linking to docs/pagination-contract.md Closes #1519 Closes #1518 Closes #1517 Closes #1516
…subtract test: verify optimistic withdrawals decrease deposits
…uses fix: correct cancellable loan statuses
…ADME - Pin STORAGE_AUDIT.md to commit 079dccf with audit date and add missing multisig_governance contract to the reviewed list - Pin postgres to 16.9-alpine and redis to 7.4-alpine in both docker-compose.yml and docker-compose.staging.yml; document pinned versions in docs/ENVIRONMENT.md - Clarify criticalFlows.spec.ts scope after loan/repay flow consolidation and add frontend/e2e/README.md with spec responsibility table and PR checklist to prevent future overlap Closes #1513, Closes #1514, Closes #1515
…-scale fix: correct amortization basis-point conversion
feat: add wiki index links, demo mode docs, cache key tests, theme he…
chore: consolidate pagination, document env and toolchain, cover focus trap
checked migrations and added pause state table
…ent SDK version and PII inventory - asyncHandler.ts normalizes non-Error rejections (string, undefined) into Error with cause before delegating to errorHandler - New test file covers Error passthrough, string normalization, undefined normalization - contracts/README.md adds soroban-sdk 22.0.0 version table; Cargo.toml gets coupling comment - docs/SECURITY-MODEL.md adds PII field inventory covering email/phone/name/address across frontend mask and backend encrypt layers - queryHelpers audit: single export parseCappedLimit has full coverage (8 tests, all edge cases)
fix(devops): write correct contract environment variable keys to back…
…s-docker-coverage infra: add Dependabot coverage for scripts/ npm and Docker base images
docs: note for issue #1599
docs: document fix_args.py purpose and usage
…1601 fix(backend): cap paidStroops at principal in reconcileLoanStroops
- test.rs: remove trailing blank line flagged by cargo fmt --check - frontend: restore axe-core as a direct dependency and the missing accessibility.spec.ts test file, both present on upstream/main but absent/stale on this branch. Their absence caused tsc --noEmit to resolve AxeOptions from a mismatched type source, failing CI's frontend typecheck job for reasons unrelated to this PR's actual change.
…an-seized-recheck # Conflicts: # contracts/loan_manager/src/test.rs # frontend/package-lock.json
…-recheck fix: approve_loan re-checks is_seized before disbursing
fix: normalize interest/late-fee accrual by loan term, not hardcoded …
…standing-underflow test: add regression tests for liquidation accounting — issue #1659 investigation
docs: note for issue #806
fix(contracts): reject seized borrowers in refinance_loan to match request_loan and deposit_collateral guards
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 7.0.2. - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v7.0.2) --- updated-dependencies: - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Author
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/frontend/typescript-7.0.2
branch
October 8, 2026 02:17
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
20 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps typescript from 5.9.3 to 7.0.2.
Release notes
Sourced from typescript's releases.
Commits
1e4744dMerge branch 'main' into ts7-releasea5a219cmicrosoft/typescript-go#4558ecfe30dUpdate status localization5de25b5Hide executable name in TypeScript statusd7ce74aShow bundled TypeScript version for packaged servers29be66aCorrect TS 7 release version to 7.0.2ed2bd1bMerge branch 'main' into ts7-release8873075Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...9427131Set up stable / nightly extension split, other prep (microsoft/typescript-go#...d4eaca5microsoft/typescript-go#4549Maintainer changes
This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)