Theme
Dependency hygiene
Problem
Remaining explorer/ JS Dependabot alerts (10 moderate/low) and open PRs are unmerged, including the risky Batch B ai 3.x -> 7.x migration (#28): the ai/@ai-sdk/openai majors plus the RSC streaming move to @ai-sdk/rsc (touches infer.ts + Graph.tsx), needing a real-OpenAI-key runtime test. Other open JS PRs: grouped minor/patch (#35), gpt-tokenizer (#32), eslint 10 (#31), @types/node 26 (#30), react-markdown (#27), neo4j-driver 6 (#26), @types/lowdb (#24).
Fix / acceptance
- Merge/supersede the safe grouped + minor PRs first; run the explorer suite after each.
- Perform the
ai 3->7 migration (RSC streaming -> @ai-sdk/rsc) with a runtime test of search + graph + node-inference streaming.
- Done when open JS Dependabot alerts reach 0 and the streaming path works against real services.
Blast radius
risky
Depends on
#38 (expanded explorer test coverage — the streaming path must be under test before this migration)
Theme
Dependency hygiene
Problem
Remaining
explorer/JS Dependabot alerts (10 moderate/low) and open PRs are unmerged, including the risky Batch Bai3.x -> 7.x migration (#28): theai/@ai-sdk/openaimajors plus the RSC streaming move to@ai-sdk/rsc(touchesinfer.ts+Graph.tsx), needing a real-OpenAI-key runtime test. Other open JS PRs: grouped minor/patch (#35), gpt-tokenizer (#32), eslint 10 (#31), @types/node 26 (#30), react-markdown (#27), neo4j-driver 6 (#26), @types/lowdb (#24).Fix / acceptance
ai3->7 migration (RSC streaming ->@ai-sdk/rsc) with a runtime test of search + graph + node-inference streaming.Blast radius
risky
Depends on
#38 (expanded explorer test coverage — the streaming path must be under test before this migration)