Sangeetha-Grantha

Metadata	Value
Status	Active
Version	1.1.0
Last Updated	2026-09-10
Author	Sangeetha Grantha Team
Document Type	Evidence record

Dependency Updates (Feb 2026) Implementation Summary

---

[!NOTE] Historical evidence: results, counts, commands, and observations below belong to the original work described here. The editorial update date is not a new test or corpus verification. For present behavior, use current feature map.

Overview

This document summarizes the changes applied during the February 2026 dependency update cycle (TRACK-038). The goal was to bring the stack to the latest stable versions, prioritizing security fixes and major platform upgrades.

Backend Changes (Kotlin/JVM)

• Koin: Upgraded from 3.5.6 to 4.1.1.
  • Migration Note: AppModule required explicit type declaration for single<PrometheusMeterRegistry> { metricsRegistry } due to stricter type inference.
• Micrometer: Upgraded from 1.12.3 to 1.15.2.
  • Breaking Change: Prometheus support moved to io.micrometer.prometheusmetrics package. Imports updated in MetricsRoutes.kt, Routing.kt, AppModule.kt, App.kt, Metrics.kt.
• Logback: Upgraded to 1.5.27 (Security fix).
• Dotenv: Fixed a variable shadowing issue in ApiEnvironment.kt (val cannot be reassigned) by using this.filename in the builder.

Frontend Changes (React/Vite)

• Vite: Upgraded from 6.2.0 to 7.3.1. Build verified.
• React: Upgraded to 19.2.4 (Security fix).
• React Router: Upgraded to 7.13.0 (Security fix).
• TypeScript: Upgraded to 5.9.3.

Tooling Changes (Rust/Bun)

• Rust CLI: Upgraded reqwest (0.13.1), tokio (1.49.0), clap (4.5.57).
  • Note: anyhow kept at/updated to 1.0.95 as 1.1.0 was not found.
• Bun: Upgraded to 1.3.7.

Verification

• Backend: ./gradlew test (compilation verified).
• Frontend: bun run build (successful).
• Rust: cargo build (successful).

---

Section index · Documentation home · Feature status