Skip to content

improvement(deps): harden dependency graph - #7343

Merged
waleedlatif1 merged 4 commits into
stagingfrom
codex/dependency-audit-hardening
Sep 1, 2026
Merged

improvement(deps): harden dependency graph#7343
waleedlatif1 merged 4 commits into
stagingfrom
codex/dependency-audit-hardening

Conversation

@waleedlatif1

@waleedlatif1 waleedlatif1 commented Sep 1, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • consolidate overlapping runtime dependencies and remove obsolete wrappers
  • upgrade coordinated dependency families while preserving application behavior
  • migrate React Flow, media parsing, public env, scheduler, and chart paths to leaner maintained implementations
  • add grouped Renovate updates for coordinated dependency families

Type of Change

  • Refactor

Testing

  • bun run test
  • bun run type-check
  • bun run lint
  • bun run check:audits
  • bun install --frozen-lockfile

Checklist

  • Code follows project style guidelines
  • Self-reviewed my changes
  • Tests added/updated and passing
  • No new warnings introduced
  • I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

@waleedlatif1
waleedlatif1 requested a review from a team as a code owner September 1, 2026 03:34
@vercel

vercel Bot commented Sep 1, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docs Ready Ready Preview Sep 1, 2026 5:35am UTC

Request Review

@waleedlatif1

Copy link
Copy Markdown
Collaborator Author

@greptile-apps

@greptile-apps

greptile-apps Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

The PR consolidates and upgrades dependency families while replacing obsolete wrappers with maintained implementations.

  • Migrates workflow rendering from reactflow to @xyflow/react.
  • Replaces scheduler, public-environment, media-parsing, and chart wrappers with direct implementations.
  • Aligns package manifests, lockfiles, deployment configuration, tests, and Renovate groups.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename Overview
apps/sim/app/layout.tsx The sidebar cookie-regex fix now emits the intended whitespace matcher, and the layout selects the appropriate hosted or runtime public-environment script.
apps/sim/app/_shell/public-env-script.tsx Replaces the runtime-env wrapper with escaped inline serialization and request-time environment loading for self-hosted deployments.
apps/sim/app/(landing)/demo/components/demo-scheduler/demo-scheduler.tsx Replaces the Cal React wrapper with a directly configured iframe and origin- and source-validated message handling.
apps/docs/components/workflow-preview/workflow-preview.tsx Migrates the documentation workflow preview to typed @xyflow/react nodes and edges.
apps/docs/app/global.css Contains formatting-only line wrapping with no styling behavior change.
bun.lock Updates the resolved dependency graph to match the coordinated manifest changes.

Reviews (4): Last reviewed commit: "fix(deps): address review edge cases" | Re-trigger Greptile

Comment thread apps/sim/app/layout.tsx Outdated
Comment thread apps/docs/app/global.css
@waleedlatif1

Copy link
Copy Markdown
Collaborator Author

@greptile-apps

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed

Heads up: you’re close to your included review allowance. Set a flex budget so reviews don’t pause.

Re-trigger cubic

Comment thread docker/realtime.Dockerfile
Comment thread apps/sim/lib/audio/extractor.ts
Comment thread apps/sim/hooks/use-canvas-viewport.ts Outdated
Comment thread apps/sim/package.json
Comment thread apps/sim/app/(landing)/demo/components/demo-scheduler/demo-scheduler.tsx Outdated
Comment thread packages/testing/package.json Outdated
@waleedlatif1
waleedlatif1 force-pushed the codex/dependency-audit-hardening branch from 0172374 to 29274cf Compare September 1, 2026 05:32
@waleedlatif1

Copy link
Copy Markdown
Collaborator Author

@greptile-apps

@waleedlatif1

Copy link
Copy Markdown
Collaborator Author

@greptile review

@waleedlatif1

Copy link
Copy Markdown
Collaborator Author

@cubic review

@cubic-dev-ai

cubic-dev-ai Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

@cubic review

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed across 185 files

Heads up: you’re close to your included review allowance. Set a flex budget so reviews don’t pause.

Fix all with cubic | Re-trigger cubic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant