Skip to content

Revert breaking major version upgrades from Dependabot npm-all group bump#147

Merged
BENZOOgataga merged 2 commits intodependabot/npm_and_yarn/npm-all-25267a4d33from
copilot/sub-pr-144
Mar 9, 2026
Merged

Revert breaking major version upgrades from Dependabot npm-all group bump#147
BENZOOgataga merged 2 commits intodependabot/npm_and_yarn/npm-all-25267a4d33from
copilot/sub-pr-144

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Mar 9, 2026

Several packages in the Dependabot bump are major version upgrades requiring non-trivial migration work before they can safely land. This reverts the breaking ones while keeping the safe minor/patch updates.

Reverted packages

  • ESLint ^10.0.3^8.57.1: ESLint 9+ dropped legacy .eslintrc config support and the --ext CLI flag — both used throughout the project. Also pinned eslint: ^8.57.1 directly in apps/web/package.json to prevent auto-resolution to v10 via peer deps.
  • Tailwind CSS ^4.2.1^3.4.19: v4 is a full rewrite — drops JS config files, changes the PostCSS plugin to @tailwindcss/postcss, and replaces @tailwind directives with @import "tailwindcss". None of that migration has been done.
  • Next.js ^16.1.6^15.5.12 + eslint-config-next ^16.1.6^15.5.12: Next.js 16 requires flat ESLint config; the project uses .eslintrc.json.
  • Prisma ^7.4.2^6.19.2 (root + packages/db): Prisma 7 removes url from the datasource block in schema files — prisma generate hard-fails with P1012 against the existing schema.

pnpm-lock.yaml regenerated to reflect all reverted resolutions.


🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

Reverts breaking major version upgrades that require migration work before merging:
- ESLint ^10.0.3 → ^8.57.1 (project uses legacy .eslintrc.cjs)
- tailwindcss ^4.2.1 → ^3.4.19 (project uses v3-style config)
- next ^16.1.6 → ^15.5.12 (requires flat ESLint config migration)
- eslint-config-next ^16.1.6 → ^15.5.12
- @prisma/client ^7.4.2 → ^6.19.2 (Prisma 7 breaks schema url property)
- prisma ^7.4.2 → ^6.19.2
Updates pnpm-lock.yaml to reflect reverted versions

Co-authored-by: BENZOOgataga <50145143+BENZOOgataga@users.noreply.github.com>
Copilot AI changed the title [WIP] Update npm-all group with 32 package updates Revert breaking major version upgrades from Dependabot npm-all group bump Mar 9, 2026
@BENZOOgataga BENZOOgataga marked this pull request as ready for review March 9, 2026 13:04
@BENZOOgataga BENZOOgataga self-requested a review as a code owner March 9, 2026 13:04
@BENZOOgataga BENZOOgataga merged commit 9deef98 into dependabot/npm_and_yarn/npm-all-25267a4d33 Mar 9, 2026
1 check passed
@BENZOOgataga BENZOOgataga deleted the copilot/sub-pr-144 branch March 9, 2026 13:05
BENZOOgataga added a commit that referenced this pull request Mar 9, 2026
* chore(deps): bump the npm-all group with 32 updates

Bumps the npm-all group with 32 updates:

| Package | From | To |
| --- | --- | --- |
| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.1.14` | `11.1.16` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.1.14` | `11.1.16` |
| [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.1.14` | `11.1.16` |
| [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `6.19.2` | `7.4.2` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `17.3.1` |
| [@better-auth/cli](https://github.com/better-auth/better-auth/tree/HEAD/packages/cli) | `1.4.18` | `1.4.21` |
| [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.1.14` | `11.1.16` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.11` | `25.3.5` |
| [@types/supertest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/supertest) | `6.0.3` | `7.2.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.56.0` | `8.56.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.56.0` | `8.56.1` |
| [class-validator](https://github.com/typestack/class-validator) | `0.14.3` | `0.15.1` |
| [dotenv-cli](https://github.com/entropitor/dotenv-cli) | `8.0.0` | `11.0.0` |
| [eslint](https://github.com/eslint/eslint) | `8.57.1` | `10.0.3` |
| [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) | `6.19.2` | `7.4.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.4` | `4.0.18` |
| [@thallesp/nestjs-better-auth](https://github.com/thallesp/nestjs-better-auth) | `2.4.0` | `2.5.0` |
| [better-call](https://github.com/better-auth/better-call/tree/HEAD/packages/better-call) | `1.3.2` | `2.0.2` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.4.18` | `1.5.4` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.469.0` | `0.577.0` |
| [next](https://github.com/vercel/next.js) | `15.5.12` | `16.1.6` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.4` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.28` | `19.2.14` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.4` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.3.7` | `19.2.3` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `2.6.1` | `3.5.0` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.24` | `10.4.27` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `15.5.12` | `16.1.6` |
| [postcss](https://github.com/postcss/postcss) | `8.4.49` | `8.5.8` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `3.4.19` | `4.2.1` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.69.3` | `5.70.4` |
| [ioredis](https://github.com/luin/ioredis) | `5.9.3` | `5.10.0` |


Updates `@nestjs/common` from 11.1.14 to 11.1.16
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.16/packages/common)

Updates `@nestjs/core` from 11.1.14 to 11.1.16
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.16/packages/core)

Updates `@nestjs/platform-express` from 11.1.14 to 11.1.16
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.16/packages/platform-express)

Updates `@prisma/client` from 6.19.2 to 7.4.2
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.4.2/packages/client)

Updates `dotenv` from 16.6.1 to 17.3.1
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.6.1...v17.3.1)

Updates `@better-auth/cli` from 1.4.18 to 1.4.21
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.4.21/packages/cli)

Updates `@nestjs/testing` from 11.1.14 to 11.1.16
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.16/packages/testing)

Updates `@types/node` from 22.19.11 to 25.3.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/supertest` from 6.0.3 to 7.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/supertest)

Updates `@typescript-eslint/eslint-plugin` from 8.56.0 to 8.56.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.56.0 to 8.56.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/parser)

Updates `class-validator` from 0.14.3 to 0.15.1
- [Release notes](https://github.com/typestack/class-validator/releases)
- [Changelog](https://github.com/typestack/class-validator/blob/develop/CHANGELOG.md)
- [Commits](typestack/class-validator@v0.14.3...v0.15.1)

Updates `dotenv-cli` from 8.0.0 to 11.0.0
- [Release notes](https://github.com/entropitor/dotenv-cli/releases)
- [Commits](entropitor/dotenv-cli@v8.0.0...v11.0.0)

Updates `eslint` from 8.57.1 to 10.0.3
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v8.57.1...v10.0.3)

Updates `prisma` from 6.19.2 to 7.4.2
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.4.2/packages/cli)

Updates `vitest` from 3.2.4 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/vitest)

Updates `@thallesp/nestjs-better-auth` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/thallesp/nestjs-better-auth/releases)
- [Commits](ThallesP/nestjs-better-auth@v2.4.0...v2.5.0)

Updates `better-call` from 1.3.2 to 2.0.2
- [Release notes](https://github.com/better-auth/better-call/releases)
- [Commits](https://github.com/better-auth/better-call/commits/v2.0.2/packages/better-call)

Updates `better-auth` from 1.4.18 to 1.5.4
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.5.4/packages/better-auth)

Updates `lucide-react` from 0.469.0 to 0.577.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.577.0/packages/lucide-react)

Updates `next` from 15.5.12 to 16.1.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.5.12...v16.1.6)

Updates `react` from 18.3.1 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react)

Updates `@types/react` from 18.3.28 to 19.2.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 18.3.1 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react-dom)

Updates `@types/react-dom` from 18.3.7 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `tailwind-merge` from 2.6.1 to 3.5.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v2.6.1...v3.5.0)

Updates `@types/react` from 18.3.28 to 19.2.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 18.3.7 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `autoprefixer` from 10.4.24 to 10.4.27
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.24...10.4.27)

Updates `eslint-config-next` from 15.5.12 to 16.1.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/commits/v16.1.6/packages/eslint-config-next)

Updates `postcss` from 8.4.49 to 8.5.8
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.49...8.5.8)

Updates `tailwindcss` from 3.4.19 to 4.2.1
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.1/packages/tailwindcss)

Updates `bullmq` from 5.69.3 to 5.70.4
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.69.3...v5.70.4)

Updates `ioredis` from 5.9.3 to 5.10.0
- [Release notes](https://github.com/luin/ioredis/releases)
- [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md)
- [Commits](redis/ioredis@v5.9.3...v5.10.0)

---
updated-dependencies:
- dependency-name: "@nestjs/common"
  dependency-version: 11.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: "@nestjs/core"
  dependency-version: 11.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: "@nestjs/platform-express"
  dependency-version: 11.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: "@prisma/client"
  dependency-version: 7.4.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: dotenv
  dependency-version: 17.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: "@better-auth/cli"
  dependency-version: 1.4.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: "@nestjs/testing"
  dependency-version: 11.1.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: "@types/node"
  dependency-version: 25.3.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: "@types/supertest"
  dependency-version: 7.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.56.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.56.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: class-validator
  dependency-version: 0.15.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: dotenv-cli
  dependency-version: 11.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: eslint
  dependency-version: 10.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: prisma
  dependency-version: 7.4.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: vitest
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: "@thallesp/nestjs-better-auth"
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: better-call
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: better-auth
  dependency-version: 1.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: lucide-react
  dependency-version: 0.577.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: next
  dependency-version: 16.1.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: react
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: "@types/react"
  dependency-version: 19.2.14
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: react-dom
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: tailwind-merge
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: "@types/react"
  dependency-version: 19.2.14
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: autoprefixer
  dependency-version: 10.4.27
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: eslint-config-next
  dependency-version: 16.1.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: postcss
  dependency-version: 8.5.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: tailwindcss
  dependency-version: 4.2.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: bullmq
  dependency-version: 5.70.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: ioredis
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
...

Signed-off-by: dependabot[bot] <support@github.com>

* Revert breaking major version upgrades from Dependabot npm-all group bump (#147)

* Initial plan

* revert: ESLint 10→8, Tailwind 4→3, Next.js 16→15, Prisma 7→6

Reverts breaking major version upgrades that require migration work before merging:
- ESLint ^10.0.3 → ^8.57.1 (project uses legacy .eslintrc.cjs)
- tailwindcss ^4.2.1 → ^3.4.19 (project uses v3-style config)
- next ^16.1.6 → ^15.5.12 (requires flat ESLint config migration)
- eslint-config-next ^16.1.6 → ^15.5.12
- @prisma/client ^7.4.2 → ^6.19.2 (Prisma 7 breaks schema url property)
- prisma ^7.4.2 → ^6.19.2
Updates pnpm-lock.yaml to reflect reverted versions

Co-authored-by: BENZOOgataga <50145143+BENZOOgataga@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: BENZOOgataga <50145143+BENZOOgataga@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: BENZOOgataga <50145143+BENZOOgataga@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants