mirror of
https://github.com/pgadmin-org/pgadmin4.git
synced 2026-08-17 16:34:44 -05:00
Ashesh Vashi
aad2dfd725
Python: - requirements.txt: google-auth-oauthlib 1.3.1 -> 1.4.0 (#9929 / #9931), gated so Python 3.9 stays on 1.3.1 (1.4.0 requires python_version >= 3.10). Mirrors the existing boto3 1.42.*/1.43.* split. - tools/requirements.txt: requests >=2.33.1 -> >=2.34.2 on python_version > '3.9' (#9943 / #9944). - web/regression/requirements.txt: selenium 4.43.0 -> 4.44.0 (#9946). The selenium pin already requires Python >=3.10 in master, so the bump introduces no new 3.9 gap. JavaScript (web/package.json, web/yarn.lock): - postcss 8.5.12 -> 8.5.14 (#9874 / #9889) - @tanstack/react-query 5.100.5 -> 5.100.9 (#9878) - ip-address 10.1.0 -> 10.1.1 (#9918) - packageManager pin yarn@4.14.0 -> yarn@4.15.0 and regenerate yarn.lock at lockfile __metadata.version 10. CI runs yarn 4.15.0 with hardened mode on public PRs and refuses to migrate the lockfile from version 9 (yarn 4.14.x) to 10; master passes today only because hardened mode is PR-only. Electron runtime (runtime/package.json, runtime/yarn.lock): - axios 1.16.0 -> 1.16.1 (#9948) - eslint 10.3.0 -> 10.4.0 (#9947) Skipped (genuine breaking changes, deferred to follow-up PRs): - @mui/material 7 -> 9 (#9843) - @mui/x-date-pickers 8 -> 9 (#9888) - cryptography 47.0.* -> 48.0.* (#9926 / #9932) - paramiko 3.5.1 -> 5.0.0 (#9927 / #9930) - electron 41.5.0 -> 42.1.0 (#9945) Verified in an isolated worktree: - jest: 140/0/0 suites, 824/0/0 tests - eslint: clean (web + runtime, both silent) - pycodestyle: 0 violations project-wide Each version was cross-checked against the corresponding dependabot PR diff via `gh pr diff`. Each Python bump was cross-checked against PyPI's requires_python so Python 3.9 support stays intact.