Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
55 commits
Select commit Hold shift + click to select a range
3b24896
chore(deps): bump @radix-ui/react-context-menu from 2.2.10 to 2.2.11
dependabot[bot] Apr 21, 2025
edbf0dc
Merge pull request #274 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 21, 2025
5591b38
chore(deps): bump @radix-ui/react-toggle from 1.1.3 to 1.1.6
dependabot[bot] Apr 21, 2025
940e67f
Merge pull request #275 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 21, 2025
10ec670
chore(deps): bump @radix-ui/react-toggle-group from 1.1.6 to 1.1.7
dependabot[bot] Apr 21, 2025
d66d084
chore(deps): bump @radix-ui/react-separator from 1.1.3 to 1.1.4
dependabot[bot] Apr 21, 2025
3990650
Merge pull request #277 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 21, 2025
e78f8fa
chore(deps-dev): bump @vitejs/plugin-react from 4.4.0 to 4.4.1
dependabot[bot] Apr 21, 2025
8234f65
Merge pull request #278 from LGLabGreg/dependabot/npm_and_yarn/next/v…
github-actions[bot] Apr 21, 2025
e309cc1
chore(deps): bump @radix-ui/react-dropdown-menu from 2.1.7 to 2.1.11
dependabot[bot] Apr 21, 2025
41c8324
Merge pull request #279 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 21, 2025
3c8f418
chore(deps): bump @radix-ui/react-menubar from 1.1.7 to 1.1.11
dependabot[bot] Apr 21, 2025
014d6cf
Merge pull request #280 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 21, 2025
1a3de67
chore(deps): bump @radix-ui/react-toast from 1.2.7 to 1.2.10
dependabot[bot] Apr 21, 2025
d9f1859
chore(deps-dev): bump @eslint/js from 9.25.0 to 9.25.1
dependabot[bot] Apr 21, 2025
a1db17b
Merge pull request #282 from LGLabGreg/dependabot/npm_and_yarn/next/e…
github-actions[bot] Apr 21, 2025
e3f4149
chore(deps): bump @radix-ui/react-radio-group from 1.3.2 to 1.3.3
dependabot[bot] Apr 21, 2025
ea6a739
Merge pull request #283 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 21, 2025
2a59179
chore(deps): bump @radix-ui/react-tabs from 1.1.7 to 1.1.8
dependabot[bot] Apr 21, 2025
2c37de5
Merge pull request #284 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 21, 2025
68227bf
chore(deps): bump @radix-ui/react-tooltip from 1.2.0 to 1.2.3
dependabot[bot] Apr 21, 2025
9f96404
Merge pull request #286 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 21, 2025
0d28407
chore(deps): bump lucide-react from 0.488.0 to 0.503.0
dependabot[bot] Apr 21, 2025
9890506
Merge pull request #287 from LGLabGreg/dependabot/npm_and_yarn/next/l…
github-actions[bot] Apr 21, 2025
0385cbc
chore(deps): bump react-hook-form from 7.55.0 to 7.56.0
dependabot[bot] Apr 21, 2025
10ed56e
Merge pull request #288 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 21, 2025
3d6c56a
chore(deps): bump @radix-ui/react-collapsible from 1.1.4 to 1.1.7
dependabot[bot] Apr 21, 2025
d7d43de
chore(deps): bump @radix-ui/react-checkbox from 1.1.5 to 1.2.2
dependabot[bot] Apr 21, 2025
be0ad5f
Merge pull request #290 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 21, 2025
baf1a48
chore(deps-dev): bump typescript-eslint from 8.30.1 to 8.31.0
dependabot[bot] Apr 21, 2025
cdf0aaa
Merge pull request #291 from LGLabGreg/dependabot/npm_and_yarn/next/t…
github-actions[bot] Apr 21, 2025
3c3cf47
chore(deps): bump @radix-ui/react-label from 2.1.3 to 2.1.4
dependabot[bot] Apr 21, 2025
2af3fc5
Merge branch 'next' into dependabot/npm_and_yarn/next/radix-ui/react-…
LGLabGreg Apr 22, 2025
5b37973
Merge pull request #292 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 22, 2025
4eff106
Merge branch 'next' into dependabot/npm_and_yarn/next/radix-ui/react-…
LGLabGreg Apr 22, 2025
512014c
Merge pull request #289 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 22, 2025
b3f3ead
Merge branch 'next' into dependabot/npm_and_yarn/next/radix-ui/react-…
LGLabGreg Apr 22, 2025
224e517
Merge pull request #281 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 22, 2025
7370eb9
Merge branch 'next' into dependabot/npm_and_yarn/next/radix-ui/react-…
LGLabGreg Apr 22, 2025
b2f890e
Merge pull request #276 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] Apr 22, 2025
1e01f21
chore: dependabot groups
LGLabGreg Apr 22, 2025
dbdab40
chore: merge main
LGLabGreg May 3, 2025
a0fa4bc
chore: deps
LGLabGreg May 3, 2025
e7cdfe9
chore(deps): bump lucide-react from 0.503.0 to 0.507.0
dependabot[bot] May 3, 2025
9bfe159
Merge pull request #294 from LGLabGreg/dependabot/npm_and_yarn/next/l…
github-actions[bot] May 3, 2025
1d48bc9
chore(deps): bump @radix-ui/react-tooltip from 1.2.4 to 1.2.5
dependabot[bot] May 5, 2025
851c4b6
Merge pull request #296 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] May 5, 2025
d847524
chore(deps-dev): bump @vitest/coverage-v8 from 3.1.2 to 3.1.3
dependabot[bot] May 6, 2025
66849bc
Merge pull request #302 from LGLabGreg/dependabot/npm_and_yarn/next/v…
github-actions[bot] May 6, 2025
1a63651
chore(deps): bump @radix-ui/react-scroll-area from 1.2.7 to 1.2.8
dependabot[bot] May 6, 2025
cc46bb5
Merge branch 'next' into dependabot/npm_and_yarn/next/radix-ui/react-…
LGLabGreg May 7, 2025
9384e53
Merge pull request #307 from LGLabGreg/dependabot/npm_and_yarn/next/r…
github-actions[bot] May 7, 2025
6ae09da
chore(deps): merge main
LGLabGreg Nov 9, 2025
083f72c
chore: deps all
LGLabGreg Nov 9, 2025
fb20ec4
ci: changeset
LGLabGreg Nov 9, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions .changeset/true-peas-attack.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
'@lglab/react-qr-code': patch
'reactqrcode.com': patch
---

chore(deps)
24 changes: 24 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,3 +10,27 @@ updates:
target-branch: 'next'
schedule:
interval: 'daily'
groups:
react:
patterns:
- 'react*'
typescript:
patterns:
- '@types*'
- 'ts*'
- 'typescript*'
eslint:
patterns:
- 'eslint*'
- '@eslint*'
radix:
patterns:
- '@radix-ui*'
vite|vitest:
patterns:
- 'vite*'
- '@vite*'
tailwind:
patterns:
- 'tailwind*'
- '@tailwind*'
7 changes: 5 additions & 2 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,11 @@ on:

concurrency: ${{ github.workflow }}-${{ github.ref }}

permissions:
id-token: write
contents: write
pull-requests: write
Comment on lines +10 to +13
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

Verify npm publishing configuration after removing authentication tokens.

The addition of id-token: write permission alongside removal of NPM_TOKEN and NODE_AUTH_TOKEN suggests a migration to npm provenance/trusted publishing. Ensure that:

  1. The npm package is configured for trusted publishing, OR
  2. The GITHUB_TOKEN has been granted npm registry access

🏁 Script executed:

#!/bin/bash
# Verify npm publishing setup in the changesets action

# Check if setup-node configures npm registry authentication
rg -n "registry-url" .github/workflows/release.yml

# Check for npm provenance configuration in package.json files
fd package.json --exec jq -r 'select(.publishConfig != null) | .publishConfig' {}

# Look for any npm authentication configuration
rg -n "npmAuthToken|npm.*token|provenance" .github/workflows/

Length of output: 55



---

🏁 Script executed:

```shell
#!/bin/bash
# Get full setup-node and changesets action configuration context

# Show full setup-node action usage (lines 25-35)
sed -n '25,35p' .github/workflows/release.yml

# Show changesets action configuration
rg -n "changesets/action" -A 10 .github/workflows/release.yml

# Check if .npmrc exists in repo with auth config
find . -maxdepth 2 -name ".npmrc*" -type f 2>/dev/null

# Check package.json for node version or npm config
jq -r '.engines // .npm // empty' package.json 2>/dev/null || echo "No engines/npm config"

Length of output: 556



---

🏁 Script executed:

```shell
#!/bin/bash
# Check pnpm publish script and npm provenance configuration

# Search for ci:publish script definition in package.json
jq -r '.scripts["ci:publish"] // empty' package.json 2>/dev/null || echo "Script not found"

# Check for npm publishConfig or provenance settings in package.json
jq -r '.publishConfig // empty' package.json 2>/dev/null

# Verify pnpm version 10 supports provenance
# Check npm registry documentation reference if available
rg -n "provenance" . --type json

# Check if there's any .npmrc at repository root
cat .npmrc 2>/dev/null || echo "No .npmrc found"

Length of output: 71



---

🌐 Web query:

```web
npm provenance trusted publishing GitHub OIDC pnpm support 2024

💡 Result:

Short summary (2024 status + what changed afterward):

  • npm provenance existed in 2023+ (provenance requires public source repos; private-repo provenance was disabled July 2023). [1][2]
  • In 2024 npm had provenance and was piloting OIDC/trusted-publishing, but general availability of npm "trusted publishing" (OIDC publish + automatic provenance) was announced in 2025; npm docs describe trusted publishing and automatic provenance when publishing via OIDC. [3][4]
  • As of mid‑2025, pnpm did not yet implement OIDC/trusted-publishing; there is an open feature request in the pnpm repo to add OIDC publishing support. [5]

Sources

  1. GitHub changelog: publishing with provenance from private source repos no longer supported (July 2023). [turn0search3].
  2. GitHub changelog duplicate/related entry (July 2023). [turn0search5].
  3. npm Docs — Trusted publishing for npm packages (docs.npmjs.com). [turn0search0].
  4. GitHub Blog changelog — "npm trusted publishing with OIDC is generally available" (announcement). [turn0search1].
  5. pnpm GitHub issue requesting OIDC/trusted-publishing support (#9812). [turn0search2].

Restore NPM_TOKEN — pnpm does not yet support OIDC/trusted publishing.

pnpm as of mid-2025 does not implement OIDC/trusted publishing; an open feature request exists but remains unimplemented. The removal of NPM_TOKEN and NODE_AUTH_TOKEN without an alternative authentication method will cause pnpm publish to fail.

Restore NPM_TOKEN to the env section (line 47) until pnpm adds OIDC support, or migrate to npm/yarn if OIDC-based publishing is required.

🤖 Prompt for AI Agents
.github/workflows/release.yml lines 10-13: the workflow removed NPM_TOKEN (and
NODE_AUTH_TOKEN) but pnpm does not support OIDC/trusted publishing yet, causing
pnpm publish to fail; restore NPM_TOKEN to the env section (around line 47) by
adding NPM_TOKEN: ${{ secrets.NPM_TOKEN }} (and optionally NODE_AUTH_TOKEN: ${{
secrets.NPM_TOKEN }} for compatibility), so pnpm publish can authenticate until
OIDC is supported.


jobs:
release:
name: Release
Expand Down Expand Up @@ -40,5 +45,3 @@ jobs:
publish: pnpm ci:publish --no-git-checks
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
31 changes: 16 additions & 15 deletions apps/docs/eslint.config.mjs
Original file line number Diff line number Diff line change
@@ -1,23 +1,24 @@
import { FlatCompat } from '@eslint/eslintrc'
import { dirname } from 'path'
import { fileURLToPath } from 'url'
import { defineConfig, globalIgnores } from 'eslint/config';
import nextVitals from 'eslint-config-next/core-web-vitals';
import nextTs from 'eslint-config-next/typescript';

const __filename = fileURLToPath(import.meta.url)
const __dirname = dirname(__filename)

const compat = new FlatCompat({
baseDirectory: __dirname,
})

const eslintConfig = [
...compat.extends('next/core-web-vitals', 'next/typescript'),
const eslintConfig = defineConfig([
...nextVitals,
...nextTs,
// Override default ignores of eslint-config-next.
globalIgnores([
// Default ignores of eslint-config-next:
'.next/**',
'out/**',
'build/**',
'next-env.d.ts',
]),
{
rules: {
'@typescript-eslint/consistent-type-imports': 'error',
'no-console': 'error',
},
ignores: ['.next/*'],
},
]
]);

export default eslintConfig
export default eslintConfig;
1 change: 1 addition & 0 deletions apps/docs/next-env.d.ts
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
/// <reference types="next" />
/// <reference types="next/image-types/global" />
import './.next/dev/types/routes.d.ts'

// NOTE: This file should not be edited
// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.
95 changes: 47 additions & 48 deletions apps/docs/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -10,67 +10,66 @@
"lint": "next lint"
},
"dependencies": {
"@hookform/resolvers": "^4.1.3",
"@hookform/resolvers": "^5.2.2",
"@lglab/react-qr-code": "workspace:*",
"@radix-ui/react-accordion": "^1.2.7",
"@radix-ui/react-alert-dialog": "^1.1.10",
"@radix-ui/react-aspect-ratio": "^1.1.4",
"@radix-ui/react-avatar": "^1.1.6",
"@radix-ui/react-checkbox": "^1.1.5",
"@radix-ui/react-collapsible": "^1.1.4",
"@radix-ui/react-context-menu": "^2.2.10",
"@radix-ui/react-dialog": "^1.1.10",
"@radix-ui/react-dropdown-menu": "^2.1.7",
"@radix-ui/react-hover-card": "^1.1.10",
"@radix-ui/react-label": "^2.1.3",
"@radix-ui/react-menubar": "^1.1.7",
"@radix-ui/react-navigation-menu": "^1.2.9",
"@radix-ui/react-popover": "^1.1.10",
"@radix-ui/react-progress": "^1.1.4",
"@radix-ui/react-radio-group": "^1.3.2",
"@radix-ui/react-scroll-area": "^1.2.5",
"@radix-ui/react-select": "^2.2.2",
"@radix-ui/react-separator": "^1.1.3",
"@radix-ui/react-slider": "^1.3.2",
"@radix-ui/react-slot": "^1.2.0",
"@radix-ui/react-switch": "^1.2.2",
"@radix-ui/react-tabs": "^1.1.7",
"@radix-ui/react-toast": "^1.2.7",
"@radix-ui/react-toggle": "^1.1.3",
"@radix-ui/react-toggle-group": "^1.1.6",
"@radix-ui/react-tooltip": "^1.2.0",
"@uiw/react-color": "^2.5.0",
"@radix-ui/react-accordion": "^1.2.12",
"@radix-ui/react-alert-dialog": "^1.1.15",
"@radix-ui/react-aspect-ratio": "^1.1.8",
"@radix-ui/react-avatar": "^1.1.11",
"@radix-ui/react-checkbox": "^1.3.3",
"@radix-ui/react-collapsible": "^1.1.12",
"@radix-ui/react-context-menu": "^2.2.16",
"@radix-ui/react-dialog": "^1.1.15",
"@radix-ui/react-dropdown-menu": "^2.1.16",
"@radix-ui/react-hover-card": "^1.1.15",
"@radix-ui/react-label": "^2.1.8",
"@radix-ui/react-menubar": "^1.1.16",
"@radix-ui/react-navigation-menu": "^1.2.14",
"@radix-ui/react-popover": "^1.1.15",
"@radix-ui/react-progress": "^1.1.8",
"@radix-ui/react-radio-group": "^1.3.8",
"@radix-ui/react-scroll-area": "^1.2.10",
"@radix-ui/react-select": "^2.2.6",
"@radix-ui/react-separator": "^1.1.8",
"@radix-ui/react-slider": "^1.3.6",
"@radix-ui/react-slot": "^1.2.4",
"@radix-ui/react-switch": "^1.2.6",
"@radix-ui/react-tabs": "^1.1.13",
"@radix-ui/react-toast": "^1.2.15",
"@radix-ui/react-toggle": "^1.1.10",
"@radix-ui/react-toggle-group": "^1.1.11",
"@radix-ui/react-tooltip": "^1.2.8",
"@uiw/react-color": "^2.9.2",
"@vercel/analytics": "^1.5.0",
"class-variance-authority": "^0.7.1",
"clsx": "^2.1.1",
"cmdk": "1.1.1",
"date-fns": "^4.1.0",
"embla-carousel-react": "^8.6.0",
"eslint-config-next": "16.0.1",
"input-otp": "^1.4.2",
"lucide-react": "^0.488.0",
"next": "15.4.7",
"lucide-react": "^0.553.0",
"next": "16.0.1",
"next-themes": "^0.4.6",
"prism-react-renderer": "^2.4.1",
"react": "^19.1.0",
"react-dom": "^19.1.0",
"react-hook-form": "^7.55.0",
"react": "^19.2.0",
"react-dom": "^19.2.0",
"react-hook-form": "^7.66.0",
"react-icons": "^5.5.0",
"react-resizable-panels": "^2.1.7",
"recharts": "^2.15.3",
"sonner": "^2.0.3",
"tailwind-merge": "^3.2.0",
"react-resizable-panels": "^3.0.6",
"sonner": "^2.0.7",
"tailwind-merge": "^3.3.1",
"tailwindcss-animate": "^1.0.7",
"vaul": "^1.1.2",
"zod": "^3.24.3"
"vaul": "^1.1.2"
},
"devDependencies": {
"@tailwindcss/postcss": "^4.1.4",
"@trivago/prettier-plugin-sort-imports": "^5.2.2",
"@types/node": "^22.14.1",
"@types/react": "^19.1.2",
"@types/react-dom": "^19.1.2",
"postcss": "^8.5.3",
"tailwindcss": "^4.1.4",
"typescript": "^5.8.3"
"@tailwindcss/postcss": "^4.1.17",
"@trivago/prettier-plugin-sort-imports": "^6.0.0",
"@types/node": "^24.10.0",
"@types/react": "^19.2.2",
"@types/react-dom": "^19.2.2",
"postcss": "^8.5.6",
"tailwindcss": "^4.1.17",
Comment on lines +66 to +72
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

Critical: Tailwind CSS v4 requires comprehensive migration.

Tailwind CSS 4.1.17 has critical breaking changes that will break existing code:

  1. Important modifier: !text-3xltext-3xl! (moves to end)
  2. Opacity utilities removed: bg-opacity-20bg-blue-500/20
  3. CSS variables: bg-[--brand-color]bg-(--brand-color)
  4. Other changes: outline-none behavior, ring widths, flex utilities

Run comprehensive migration check:

#!/bin/bash
cd apps/docs

# Check for old important modifier syntax (most common)
echo "=== Checking important modifier syntax ==="
rg -n '!\w+-' src/ | head -20

# Check for removed opacity utilities
echo "=== Checking opacity utilities ==="
rg -n '(bg|text|border|ring)-opacity-' src/ | head -20

# Check for old CSS variable syntax
echo "=== Checking CSS variable syntax ==="
rg -n '\[--\w+\]' src/ | head -20

# Check for flex-grow/flex-shrink old syntax
echo "=== Checking flex utilities ==="
rg -n 'flex-(grow|shrink)-' src/ | head -10

Run the official Tailwind v4 migration codemod:

cd apps/docs && npx @tailwindcss/upgrade@latest

Based on learnings: As per Tailwind CSS v4 documentation, these are mandatory migrations.

"typescript": "^5.9.3"
}
}
Loading