[Fix] Remove Neon CLI and Pin All JS Dependencies

.circleci/config.yml

@@ -3233,31 +3233,9 @@ jobs:
           name: Install Playwright Browsers
           command: |
             npx playwright install
-      - run:
-          name: Install Neon CLI
-          command: |
-            npm i -g neonctl
-      - run:
-          name: Create Neon branch
-          command: |
-            export EXPIRES_AT=$(date -u -d "+3 hours" +"%Y-%m-%dT%H:%M:%SZ")
-            echo "Expires at: $EXPIRES_AT"
-            neon branches create \
-              --project-id $NEON_PROJECT_ID \
-              --name preview/commit-${CIRCLE_SHA1:0:7}-<< parameters.browser >> \
-              --expires-at $EXPIRES_AT \
-              --parent br-fancy-paper-ad1olsb3 \
-              --api-key $NEON_API_KEY || true
       - run:
           name: Run Docker container
           command: |
-            E2E_UI_TEST_DATABASE_URL=$(neon connection-string \
-              --project-id $NEON_PROJECT_ID \
-              --api-key $NEON_API_KEY \
-              --branch preview/commit-${CIRCLE_SHA1:0:7}-<< parameters.browser >> \
-              --database-name yuneng-trial-db \
-              --role neondb_owner)
-            echo $E2E_UI_TEST_DATABASE_URL
             docker run -d \
               -p 4000:4000 \
               -e DATABASE_URL=$E2E_UI_TEST_DATABASE_URL \
@@ -3531,7 +3509,7 @@ workflows:
               only:
                 - main
                 - /litellm_.*/
-      # - e2e_ui_testing: # migrate to dynamic db - currently requires neon cli 
+      # - e2e_ui_testing:
       #     name: e2e_ui_testing_chromium
       #     browser: chromium
       #     context: e2e_ui_tests

ci_cd/security_scans.sh

@@ -160,7 +160,6 @@ run_grype_scans() {
         "CVE-2026-0775" # npm cli incorrect permission assignment - no fix available yet, npm is only used at build/prisma-generate time
         "GHSA-3ppc-4f35-3m26" # minimatch ReDoS via repeated wildcards - from nodejs_wheel bundled npm, not used in application runtime code
         "GHSA-83g3-92jg-28cx" # tar arbitrary file read/write via hardlink - from nodejs_wheel bundled npm, not used in application runtime code
-        "CVE-2026-25639" # axios DoS via __proto__ in mergeConfig - transitive dev dep via @neondatabase/api-client, not imported in application code
         "CVE-2026-2297" # Python 3.13 SourcelessFileLoader audit hook bypass - no fix available in base image
         "GHSA-qffp-2rhf-9h96" # tar hardlink path traversal - from nodejs_wheel bundled npm, not used in application runtime code
         "CVE-2026-2673" # OpenSSL 3.6.1 TLS 1.3 key exchange group negotiation issue - no fix available yet

docs/my-website/package.json

@@ -19,18 +19,18 @@
     "@docusaurus/plugin-ideal-image": "3.8.1",
     "@docusaurus/preset-classic": "3.8.1",
     "@docusaurus/theme-mermaid": "3.8.1",
-    "@inkeep/cxkit-docusaurus": "^0.5.89",
-    "@mdx-js/react": "^3.0.0",
-    "clsx": "^1.2.1",
-    "prism-react-renderer": "^1.3.5",
-    "react": "^18.0.0 || ^19.0.0",
-    "react-dom": "^18.0.0 || ^19.0.0",
-    "sharp": "^0.32.6",
-    "uuid": "^9.0.1"
+    "@inkeep/cxkit-docusaurus": "0.5.107",
+    "@mdx-js/react": "3.1.1",
+    "clsx": "1.2.1",
+    "prism-react-renderer": "1.3.5",
+    "react": "18.3.1",
+    "react-dom": "18.3.1",
+    "sharp": "0.32.6",
+    "uuid": "9.0.1"
   },
   "devDependencies": {
     "@docusaurus/module-type-aliases": "3.8.1",
-    "dotenv": "^16.4.5"
+    "dotenv": "16.6.1"
   },
   "browserslist": {
     "production": [

litellm-js/proxy/package.json

@@ -4,11 +4,11 @@
     "deploy": "wrangler deploy --minify src/index.ts"
   },
   "dependencies": {
-    "hono": "^4.1.4",
-    "openai": "^4.29.2"
+    "hono": "4.1.4",
+    "openai": "4.29.2"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^4.20240208.0",
-    "wrangler": "^3.32.0"
+    "@cloudflare/workers-types": "4.20240208.0",
+    "wrangler": "3.32.0"
   }
 }

litellm-js/spend-logs/package.json

@@ -3,11 +3,11 @@
     "dev": "tsx watch src/index.ts"
   },
   "dependencies": {
-    "@hono/node-server": "^1.10.1",
-    "hono": "^4.12.7"
+    "@hono/node-server": "1.19.6",
+    "hono": "4.12.7"
   },
   "devDependencies": {
-    "@types/node": "^20.11.17",
-    "tsx": "^4.7.1"
+    "@types/node": "20.19.25",
+    "tsx": "4.20.6"
   }
 }

package.json

@@ -1,14 +1,14 @@
 {
   "dependencies": {
-    "prism-react-renderer": "^2.4.1",
-    "prisma": "^5.17.0",
-    "react-copy-to-clipboard": "^5.1.0"
+    "prism-react-renderer": "2.4.1",
+    "prisma": "5.17.0",
+    "react-copy-to-clipboard": "5.1.0"
   },
   "devDependencies": {
-    "@testing-library/jest-dom": "^6.8.0",
-    "@testing-library/react": "^14.3.1",
-    "@types/react-copy-to-clipboard": "^5.0.7",
-    "jest": "^29.7.0"
+    "@testing-library/jest-dom": "6.8.0",
+    "@testing-library/react": "14.3.1",
+    "@types/react-copy-to-clipboard": "5.0.7",
+    "jest": "29.7.0"
   },
   "overrides": {
     "glob": "13.0.0",

tests/proxy_admin_ui_tests/package.json

@@ -8,7 +8,7 @@
   "author": "",
   "license": "ISC",
   "devDependencies": {
-    "@playwright/test": "^1.47.2",
-    "@types/node": "^22.5.5"
+    "@playwright/test": "1.56.1",
+    "@types/node": "22.19.1"
   }
 }

tests/proxy_admin_ui_tests/ui_unit_tests/package.json

@@ -6,22 +6,22 @@
         "test:watch": "jest --watch"
     },
     "devDependencies": {
-        "@testing-library/react": "^14.0.0",
-        "@testing-library/jest-dom": "^6.0.0",
-        "@types/jest": "^29.5.0",
-        "@types/react": "^18.2.0",
-        "@types/react-dom": "^18.2.0",
-        "identity-obj-proxy": "^3.0.0",
-        "jest": "^29.5.0",
-        "jest-environment-jsdom": "^29.5.0",
-        "ts-jest": "^29.1.0",
-        "typescript": "^5.0.0"
+        "@testing-library/react": "14.3.1",
+        "@testing-library/jest-dom": "6.9.1",
+        "@types/jest": "29.5.14",
+        "@types/react": "18.3.27",
+        "@types/react-dom": "18.3.7",
+        "identity-obj-proxy": "3.0.0",
+        "jest": "29.7.0",
+        "jest-environment-jsdom": "29.7.0",
+        "ts-jest": "29.4.5",
+        "typescript": "5.9.3"
     },
     "dependencies": {
-        "antd": "^5.12.5",
-        "@ant-design/icons": "^5.0.0",
-        "react": "^18.2.0",
-        "react-dom": "^18.2.0"
+        "antd": "5.29.1",
+        "@ant-design/icons": "5.6.1",
+        "react": "18.3.1",
+        "react-dom": "18.3.1"
     },
     "overrides": {
         "glob": "13.0.0",