Activity

Why

Follow-up to the Laravel 13.15 / MCP 0.8 update (#163) — catch the JS deps that update didn't touch.

What

npm update within existing package.json constraints — ~30 patch/minor bumps (react 19.2.7, @inertiajs/react 3.3.1, vite 8.0.16, radix-ui set, @types/*, prettier). Only package-lock.json changes.

Verification

• npm run build ✓ (the Docker frontend stage)
• npm audit → 0 vulnerabilities

Deliberately deferred (majors, outside constraints)

typescript 6, recharts 3, eslint 10, concurrently 10 — breaking changes against the now-orphaned frontend; pure risk for zero product value. Not worth it unless/until the frontend is rebuilt.

Composer

Nothing to do — composer outdated --direct is empty after #163.