Page MenuHomePhabricator

🦠Merge all of the JavaScript Dependabot updates for Platform UI
Open, Needs TriagePublic

Description

Look at all of the open PRs in: https://github.com/wbstack/ui/pulls?q=is%3Apr+is%3Aopen+label%3Ajavascript

Each of these should be merged in turn. After all the changes have been successfully merged we'll deploy the latest image to staging, check it works and then deploy to production.

Once they are all merged check the wbaas-deploy repo. Close all but the most recent ui wmdebot automatic image updating PRs.

Ship this new image to staging. Check staging works and there isn't a spike in errors.

Ship this new image to production. Check this also works and there's no spike in errors.

Late Addition: Anything that can't me merged due to failing checks or complex additional dependencies we should open a ticket in the Engineering Backlog for and skip. If you see an easy, quick way to solve it go ahead and use your judgement though.

Event Timeline

Ollie.Shotton_WMDE renamed this task from Merge all of the GitHub Actions javascript Dependabot updates for Platform UI to Merge all of the JavaScript Dependabot updates for Platform UI.Tue, Jan 20, 1:39 PM
Ollie.Shotton_WMDE updated the task description. (Show Details)

All open green JS PRs from dependabot have been closed including the ones that needed git conflicts to be resolved. currently all the PRs left are red and failing due to a dependency conflicts.

For example while looking at https://github.com/wbstack/ui/pull/869 you will notice that it fails here https://github.com/wbstack/ui/actions/runs/21281834718/job/61253436697?pr=869 because we use @vue/cli-plugin-unit-jest@5.0.8 and Vue CLI5 does not support @vue/vue2-jest@29.2.6. So if we want to upgrade jest 27 to 29 we will need to drop Vue CLI. I think dropping/replacing packages we use is out of scope of this task.

The other PRs have very similar issues.

Tarrow subscribed.

We talked about this in the seniors round:

  • this is probably ready to pick up again
  • the remaining work to do is making the tickets in the engineering backlog to address the hard to merge PRs
  • the default assumption should be one PR per dependency that can't be updated but feel free to consolidate (merge together) dependencies that are coupled together.
Tarrow renamed this task from Merge all of the JavaScript Dependabot updates for Platform UI to 🦠Merge all of the JavaScript Dependabot updates for Platform UI.Thu, Feb 5, 9:56 AM