Skip to content

2.4.5/dependency updates#1613

Merged
MyPyDavid merged 53 commits into
2.4.5/releasefrom
2.4.5/dependency-updates
Jun 2, 2026
Merged

2.4.5/dependency updates#1613
MyPyDavid merged 53 commits into
2.4.5/releasefrom
2.4.5/dependency-updates

Conversation

@MyPyDavid

@MyPyDavid MyPyDavid commented May 13, 2026

Copy link
Copy Markdown
Member

Description

Dependency and maintenance updates for 2.4.5/release.

This PR updates frontend, Python, CI, and pre-commit dependencies; pins GitHub Actions to full commit SHAs; and adds Dependabot constraints to keep ESLint on v8 and jQuery on v3.x for now.

It also includes compatibility fixes after the frontend dependency updates, especially around import diff rendering with react-diff-viewer-continued, plus styling improvements for field diffs.

The e2e test setup was refactored to share Playwright fixtures across test modules, improve live-server host handling, collect JavaScript errors more reliably, and make selected management/project e2e tests more robust.

Main areas changed:

  • JavaScript dependency updates in package.json / package-lock.json
  • Python dependency constraint updates in pyproject.toml
  • GitHub Actions pinning and workflow dependency updates
  • pre-commit hook updates
  • Dependabot rules for ESLint and jQuery major versions
  • import diff rendering/styling fixes
  • shared e2e fixture refactor and test robustness improvements
  • Ruff-compatible pytest.raises cleanup

dependabot Bot and others added 7 commits March 29, 2026 22:36
Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) from 7.0.4 to 7.0.5.
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v7.0.4...v7.0.5)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.0.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.23...4.18.1)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) from 7.27.1 to 7.29.4.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-modules-systemjs"
  dependency-version: 7.29.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.14.7 → v0.15.12](astral-sh/ruff-pre-commit@v0.14.7...v0.15.12)
- [github.com/pre-commit/mirrors-eslint: v9.39.1 → v10.3.0](pre-commit/mirrors-eslint@v9.39.1...v10.3.0)
- [github.com/crate-ci/typos: v1.40.0 → v1](crate-ci/typos@v1.40.0...v1)
- [github.com/zizmorcore/zizmor-pre-commit: v1.18.0 → v1.24.1](zizmorcore/zizmor-pre-commit@v1.18.0...v1.24.1)
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
…dash-4.18.1

build(deps): bump lodash from 4.17.23 to 4.18.1
MyPyDavid and others added 3 commits May 13, 2026 22:02
…bel/plugin-transform-modules-systemjs-7.29.4

build(deps-dev): bump @babel/plugin-transform-modules-systemjs from 7.27.1 to 7.29.4
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…st-uri-3.1.2

build(deps-dev): bump fast-uri from 3.1.0 to 3.1.2
@coveralls

coveralls commented May 13, 2026

Copy link
Copy Markdown

Coverage Status

Coverage is 95.064%2.4.5/dependency-updates into 2.4.5/release. No base build found for 2.4.5/release.

@jochenklar jochenklar added this to the RDMO 2.4.5 milestone May 15, 2026
dependabot Bot and others added 17 commits May 18, 2026 08:47
Bumps [yaml](https://github.com/eemeli/yaml) from 1.10.2 to 1.10.3.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v1.10.2...v1.10.3)

---
updated-dependencies:
- dependency-name: yaml
  dependency-version: 1.10.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [flatted](https://github.com/WebReflection/flatted) from 3.4.1 to 3.4.2.
- [Commits](WebReflection/flatted@v3.4.1...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps  and [picomatch](https://github.com/micromatch/picomatch). These dependencies needed to be updated together.

Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

Updates `picomatch` from 4.0.2 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
- dependency-name: picomatch
  dependency-version: 4.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…ml-1.10.3

build(deps): bump yaml from 1.10.2 to 1.10.3
…lti-bf05dc1ecf

build(deps): bump picomatch
…rialize-javascript-7.0.5

build(deps-dev): bump serialize-javascript from 7.0.4 to 7.0.5
…atted-3.4.2

build(deps-dev): bump flatted from 3.4.1 to 3.4.2
build(pre-commit): pre-commit autoupdate by ci
Updates the requirements on [packaging](https://github.com/pypa/packaging) to permit the latest version.
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@23.2...26.0)

---
updated-dependencies:
- dependency-name: packaging
  dependency-version: '26.0'
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
…ith 8 updates

Bumps the dev-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.28.0` | `7.29.0` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.28.0` | `7.29.5` |
| [babel-loader](https://github.com/babel/babel-loader) | `10.0.0` | `10.1.1` |
| [eslint](https://github.com/eslint/eslint) | `8.56.0` | `10.3.0` |
| [mini-css-extract-plugin](https://github.com/webpack/mini-css-extract-plugin) | `2.9.0` | `2.10.2` |
| [sass](https://github.com/sass/dart-sass) | `1.94.2` | `1.99.0` |
| [webpack](https://github.com/webpack/webpack) | `5.105.0` | `5.106.2` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `6.0.1` | `7.0.2` |



Updates `@babel/core` from 7.28.0 to 7.29.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-core)

Updates `@babel/preset-env` from 7.28.0 to 7.29.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.5/packages/babel-preset-env)

Updates `babel-loader` from 10.0.0 to 10.1.1
- [Release notes](https://github.com/babel/babel-loader/releases)
- [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md)
- [Commits](babel/babel-loader@v10.0.0...v10.1.1)

Updates `eslint` from 8.56.0 to 10.3.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v8.56.0...v10.3.0)

Updates `mini-css-extract-plugin` from 2.9.0 to 2.10.2
- [Release notes](https://github.com/webpack/mini-css-extract-plugin/releases)
- [Changelog](https://github.com/webpack/mini-css-extract-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/mini-css-extract-plugin@v2.9.0...v2.10.2)

Updates `sass` from 1.94.2 to 1.99.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.94.2...1.99.0)

Updates `webpack` from 5.105.0 to 5.106.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.105.0...v5.106.2)

Updates `webpack-cli` from 6.0.1 to 7.0.2
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@6.0.1...webpack-cli@7.0.2)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 7.29.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@babel/preset-env"
  dependency-version: 7.29.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: babel-loader
  dependency-version: 10.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eslint
  dependency-version: 10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: mini-css-extract-plugin
  dependency-version: 2.10.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: sass
  dependency-version: 1.99.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: webpack
  dependency-version: 5.106.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: webpack-cli
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
…dates

Updates the requirements on [pytest-github-actions-annotate-failures](https://github.com/pytest-dev/pytest-github-actions-annotate-failures), [django-allauth](https://github.com/sponsors/pennersr) and [gunicorn](https://github.com/benoitc/gunicorn) to permit the latest version.

Updates `pytest-github-actions-annotate-failures` to 0.4.0
- [Release notes](https://github.com/pytest-dev/pytest-github-actions-annotate-failures/releases)
- [Commits](pytest-dev/pytest-github-actions-annotate-failures@v0.2.0...v0.4.0)

Updates `django-allauth` to 65.16.1
- [Commits](https://github.com/sponsors/pennersr/commits)

Updates `gunicorn` to 26.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@23.0.0...26.0.0)

---
updated-dependencies:
- dependency-name: django-allauth
  dependency-version: 65.15.0
  dependency-type: direct:development
  dependency-group: optional
- dependency-name: gunicorn
  dependency-version: 25.2.0
  dependency-type: direct:development
  dependency-group: optional
- dependency-name: pytest-github-actions-annotate-failures
  dependency-version: 0.4.0
  dependency-type: direct:development
  dependency-group: optional
...

Signed-off-by: dependabot[bot] <support@github.com>
…updates

Bumps the github-actions group with 2 updates in the / directory: [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package) and [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish).


Updates `hynek/build-and-inspect-python-package` from 2.14.0 to 2.18.0
- [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases)
- [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md)
- [Commits](hynek/build-and-inspect-python-package@efb823f...d44ca7d)

Updates `pypa/gh-action-pypi-publish` from 6733eb7d741f0b11ec6a39b58540dab7590f9b7d to cef221092ed1bacb1cc03d23a2d87d1d172e277b
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@6733eb7...cef2210)

---
updated-dependencies:
- dependency-name: hynek/build-and-inspect-python-package
  dependency-version: 2.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: pypa/gh-action-pypi-publish
  dependency-version: cef221092ed1bacb1cc03d23a2d87d1d172e277b
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
…updates/optional-526a97c033

build(deps-dev): bump the optional group across 1 directory with 3 updates
…dependency-updates/github-actions-f20bb74b9c

build(deps): bump the github-actions group across 1 directory with 2 updates
Updates the requirements on [setuptools](https://github.com/pypa/setuptools) to permit the latest version.
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v73.0.0...v82.0.0)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-version: 82.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
…updates/setuptools-gte-73-and-lt-83

build(deps-dev): update setuptools requirement from <81,>=73 to >=73,<83
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
dependabot Bot and others added 16 commits May 21, 2026 14:51
… 6 updates

Bumps the prod-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [html-to-text](https://github.com/html-to-text/node-html-to-text) | `9.0.5` | `10.0.0` |
| [jquery](https://github.com/jquery/jquery) | `3.7.1` | `3.7.1` |
| [react-datepicker](https://github.com/Hacker0x01/react-datepicker) | `8.10.0` | `9.1.0` |
| [react-diff-viewer-continued](https://github.com/Aeolun/react-diff-viewer-continued) | `3.4.0` | `4.2.2` |
| [react-dropzone](https://github.com/react-dropzone/react-dropzone) | `14.3.8` | `15.0.0` |
| [use-debounce](https://github.com/xnimorz/use-debounce) | `10.0.3` | `10.1.1` |

Updates `html-to-text` from 9.0.5 to 10.0.0
- [Commits](html-to-text/node-html-to-text@9.0.5...10.0.0)

Updates `jquery` from 3.7.1 to 4.0.0
- [Release notes](https://github.com/jquery/jquery/releases)
- [Changelog](https://github.com/jquery/jquery/blob/main/changelog.md)
- [Commits](jquery/jquery@3.7.1...4.0.0)

Updates `react-datepicker` from 8.10.0 to 9.1.0
- [Release notes](https://github.com/Hacker0x01/react-datepicker/releases)
- [Commits](Hacker0x01/react-datepicker@v8.10.0...v9.1.0)

Updates `react-diff-viewer-continued` from 3.4.0 to 4.2.2
- [Release notes](https://github.com/Aeolun/react-diff-viewer-continued/releases)
- [Changelog](https://github.com/Aeolun/react-diff-viewer-continued/blob/main/CHANGELOG.md)
- [Commits](Aeolun/react-diff-viewer-continued@v3.4.0...v4.2.2)

Updates `react-dropzone` from 14.3.8 to 15.0.0
- [Release notes](https://github.com/react-dropzone/react-dropzone/releases)
- [Commits](react-dropzone/react-dropzone@v14.3.8...v15.0.0)

Updates `use-debounce` from 10.0.3 to 10.1.1
- [Release notes](https://github.com/xnimorz/use-debounce/releases)
- [Changelog](https://github.com/xnimorz/use-debounce/blob/master/CHANGELOG.md)
- [Commits](https://github.com/xnimorz/use-debounce/commits)

---
updated-dependencies:
- dependency-name: html-to-text
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: jquery
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: react-datepicker
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: react-diff-viewer-continued
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: react-dropzone
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: use-debounce
  dependency-version: 10.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
…pendency-updates/prod-dependencies-6cd3be3caa

build(deps): bump the prod-dependencies group across 1 directory with 6 updates
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
MyPyDavid and others added 3 commits June 1, 2026 16:09
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Updates the requirements on [django-allauth](https://github.com/sponsors/pennersr) and [pytest-playwright](https://github.com/microsoft/playwright-pytest) to permit the latest version.

Updates `django-allauth` to 65.17.0
- [Commits](https://github.com/sponsors/pennersr/commits)

Updates `pytest-playwright` to 0.8.0
- [Release notes](https://github.com/microsoft/playwright-pytest/releases)
- [Commits](microsoft/playwright-pytest@v0.7.2...v0.8.0)

---
updated-dependencies:
- dependency-name: django-allauth
  dependency-version: 65.17.0
  dependency-type: direct:development
  dependency-group: optional
- dependency-name: pytest-playwright
  dependency-version: 0.8.0
  dependency-type: direct:development
  dependency-group: optional
...

Signed-off-by: dependabot[bot] <support@github.com>
@MyPyDavid MyPyDavid self-assigned this Jun 1, 2026

@jochenklar jochenklar left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! The is only a tiny issue left. I was not sure how we update. I would just use pre-commit autoupdate --freeze locally. Up to you.

Comment thread .pre-commit-config.yaml Outdated
- react@18.3.1
- repo: https://github.com/crate-ci/typos
rev: v1.40.0
rev: v1

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This will cause a warning, lets use the --frozen version as discussed.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok, yes, I have added the frozen versions and also removed the autoupdate from the ci, so it needs to be done manually from now on.

vertical-align: top;
}

td[class*="marker"] {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I adjusted the styling here a bit.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

image

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok, thanks! Looks good and simple without the extra white blob around the +/-

MyPyDavid added 3 commits June 2, 2026 10:50
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
…al autoupdate

Signed-off-by: David Wallace <david.wallace@tu-darmstadt.de>
@MyPyDavid MyPyDavid merged commit 28f063a into 2.4.5/release Jun 2, 2026
19 checks passed
@MyPyDavid MyPyDavid mentioned this pull request Jun 2, 2026
@MyPyDavid MyPyDavid deleted the 2.4.5/dependency-updates branch June 2, 2026 12:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants