Skip to content

chore(deps): consolidate 15 Dependabot updates + Tailwind v4 migration#64

Merged
juliarvalenti merged 34 commits intomainfrom
chore/dependabot-bundle-test
Apr 6, 2026
Merged

chore(deps): consolidate 15 Dependabot updates + Tailwind v4 migration#64
juliarvalenti merged 34 commits intomainfrom
chore/dependabot-bundle-test

Conversation

@sfph
Copy link
Copy Markdown
Contributor

@sfph sfph commented Apr 3, 2026

Summary

GitHub Actions

Dependency Change
actions/upload-artifact 4 → 7
actions/download-artifact 4 → 8
actions/stale 9 → 10
astral-sh/setup-uv 4 → 7
docker/build-push-action 6 → 7

Backend (fastapi-backend/pyproject.toml)

Dependency Change
fastapi <0.116<0.136
litellm 1.82.31.82.6
sentence-transformers <3<6
transformers <4.40<5.5
ruff <0.12<0.16

Frontend (mycelium-frontend/package.json)

Dependency Change
next ^15.5.14^16.2.1
tailwind-merge ^2.6.1^3.5.0
typescript ^5.9.3^6.0.2
@types/node ^22.19.15^25.5.0
tailwindcss ^3.4.0^4.2.2

Tailwind v4 migration (fix for breaking change)

  • postcss.config.mjs: switched from tailwindcss plugin to @tailwindcss/postcss
  • globals.css: replaced @tailwind base/components/utilities with @import "tailwindcss" + @theme block for custom colors
  • Removed tailwind.config.ts (v4 uses CSS-first config; content paths are auto-detected)
  • Dropped autoprefixer (handled by @tailwindcss/postcss)
  • next build passes cleanly

Test plan

  • next build succeeds (verified locally)
  • Backend uv sync --group dev installs cleanly
  • ruff check . and ruff format --check . pass
  • Unit tests pass (pytest tests/ --ignore=tests/test_integration.py)
  • CI workflow runs with bumped action versions
  • Smoke test multi-agent memory, search, synthesis, and negotiation on oclw3

Closes #37, #38, #39, #40, #41, #42, #43, #44, #45, #46, #47, #48, #49, #50, #51

Made with Cursor

dependabot bot and others added 30 commits March 30, 2026 17:55
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/stale](https://github.com/actions/stale) from 9 to 10.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@v9...v10)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: '10'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [sentence-transformers](https://github.com/huggingface/sentence-transformers) to permit the latest version.
- [Release notes](https://github.com/huggingface/sentence-transformers/releases)
- [Commits](huggingface/sentence-transformers@v0.1.0...v5.3.0)

---
updated-dependencies:
- dependency-name: sentence-transformers
  dependency-version: 5.3.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 4 to 7.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@v4...v7)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6 to 7.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v6...v7)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [litellm](https://github.com/BerriAI/litellm) from 1.82.3 to 1.82.6.
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](https://github.com/BerriAI/litellm/commits)

---
updated-dependencies:
- dependency-name: litellm
  dependency-version: 1.82.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [fastapi](https://github.com/fastapi/fastapi) to permit the latest version.
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.0...0.135.2)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.135.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [ruff](https://github.com/astral-sh/ruff) to permit the latest version.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.11.0...0.15.8)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.8
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.19.15 to 25.5.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 25.5.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [transformers](https://github.com/huggingface/transformers) to permit the latest version.
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@0.1.2...v5.4.0)

---
updated-dependencies:
- dependency-name: transformers
  dependency-version: 5.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [tailwind-merge](https://github.com/dcastil/tailwind-merge) from 2.6.1 to 3.5.0.
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v2.6.1...v3.5.0)

---
updated-dependencies:
- dependency-name: tailwind-merge
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.2)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [next](https://github.com/vercel/next.js) from 15.5.14 to 16.2.1.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.5.14...v16.2.1)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) from 3.4.19 to 4.2.2.
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.2/packages/tailwindcss)

---
updated-dependencies:
- dependency-name: tailwindcss
  dependency-version: 4.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
sfph added 2 commits April 3, 2026 11:23
Tailwind v4 uses a CSS-first configuration model incompatible with the
v3 setup Dependabot left behind. Migrate postcss.config to use
@tailwindcss/postcss, replace @tailwind directives with @import and
@theme in globals.css, remove the now-unused tailwind.config.ts, and
add package-lock.json for reproducible installs.

Made-with: Cursor
@sfph sfph requested a review from juliarvalenti as a code owner April 3, 2026 16:12
…as with fastembed

sentence-transformers, transformers, and negmas were removed on main:
- sentence-transformers/PyTorch replaced with fastembed (ONNX) for embeddings
- negmas removed when coordination moved to CFN-only

Drop these deps from the dependabot bundle to match main.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants