web: drop zod and @hookform/resolvers, which nothing imports; vite 7.3.7 (#63)

Neither package is imported anywhere in web/ or shared/. They reached the
production bundle only because vite.config.ts named them in the "forms"
manual chunk, which forces a module into the build whether or not any
code uses it. #61 moved zod to 4.6.7 to clear the advisory; removing it
takes the package out of the shipped bundle altogether (abitype declares
it as an optional peer, so nothing installs it). The "forms" chunk now
holds react-hook-form alone.

vite 7.3.7 (2026-10-06) closes the launch-editor advisories on 7.0.0-7.3.6
(Dependabot #313-#315). They reach only the dev server, but the alerts
are real. Typecheck ratchet 335/335, 32 tests, build green.
This commit is contained in:
SatoshiQaziMuhammed authored and GitHub committed 2026-10-26 17:45:44 +04:00
1 parent 03e6db8461
commit a1ad76e191
3 files changed
+8 -30

No files matched your search

+1 -1
View File
@@ -87,7 +87,7 @@ export default defineConfig(({ command }) => ({
'pezkuwi': ['@pezkuwi/api', '@pezkuwi/extension-dapp', '@pezkuwi/keyring', '@pezkuwi/util', '@pezkuwi/util-crypto'],
'vendor': ['react', 'react-dom', 'react-router-dom'],
'ui': ['@radix-ui/react-dialog', '@radix-ui/react-dropdown-menu', '@radix-ui/react-select', '@radix-ui/react-tabs', '@radix-ui/react-toast'],
'forms': ['react-hook-form', '@hookform/resolvers', 'zod'],
'forms': ['react-hook-form'],
'i18n': ['i18next', 'react-i18next', 'i18next-browser-languagedetector']
}
}