Skip to content

chore: consolidate all dependabot dependency updates#2118

Merged
andrew-bierman merged 214 commits into
developmentfrom
chore/all-dependabot-updates
Apr 14, 2026
Merged

chore: consolidate all dependabot dependency updates#2118
andrew-bierman merged 214 commits into
developmentfrom
chore/all-dependabot-updates

Conversation

@andrew-bierman
Copy link
Copy Markdown
Collaborator

@andrew-bierman andrew-bierman commented Apr 12, 2026

Summary

Consolidates the Dependabot backlog (#2088#2148) into one cohesive branch and cleans up the test-runtime hack pile that accumulated along the way.

Key cleanups (root-cause fixes, not workarounds)

  • Aligned test DB with prod: tests now use @neondatabase/serverless via a local wsproxy (docker-compose.test.yml) — same driver as production. Removed:
    • patches/pg-protocol@1.13.0.patch
    • patches/pg-cloudflare@1.3.0.patch
    • packages/api/src/stubs/pg-cloudflare-stub.ts + wrangler alias
    • isStandardPostgresUrl branch in src/db/index.ts
    • pg.Client / drizzle-orm/node-postgres from test/setup.ts
  • Spike validated green in spike: align test DB with prod (drop pg-cloudflare hacks) #2170 before folding.

Remaining deliberate keeps (with justification)

  • workerd pinned to 1.20260310.1, wrangler 4.81.1, @cloudflare/vitest-pool-workers 0.14.3 — frozen triple required for miniflare compat. Exit criterion: revisit when vitest-pool-workers ≥ 0.15 ships.
  • @hono/sentry mock in test/setup.ts — toucan-js dual ESM/CJS bug (upstream unfixed at 1.2.2).
  • youtube-transcript mock — broken package.json in upstream.

Dependabot consolidation

Applied (via this branch / dev merge)

  • expo-sdk group, web app deps (sonner 2.0.7, cmdk 1.1.1, lucide-react 1.8.0, recharts 3.8.1, react-day-picker 9.14.0, react-resizable-panels 4.10.0, postcss-import 16.1.1, @types/react 19.2.14)
  • api deps (@ai-sdk/openai 3.0.52, @ai-sdk/google 3.0.62, @ai-sdk/perplexity 3.0.29, @scalar/hono-api-reference 0.10.7, resend 6.10.0, workers-ai-provider 3.1.10, vitest ~4.1.4, @vitest/coverage-v8 ~4.1.4)
  • CI action bumps (actions/checkout@6, actions/upload-artifact@7, actions/stale@10, actions/labeler@6, actions/setup-java@5, actions/github-script@9, android-emulator-runner@2.37.0)
  • Nativewindui stable: @packrat-ai/nativewindui ^2.0.1

Deferred (follow-up PRs needed)

Admin app integration

After merging latest development, new apps/admin + packages/api/src/routes/admin revealed gaps. Fixed here:

  • Added admin-app/* path alias to root tsconfig.json.
  • Aligned @types/react across admin (~19.2.14 → matches web-ui).
  • Narrowed createDb return type in src/db/index.ts (union collapse was hiding the .returning({fields}) overload).
  • Replaced hono/basic-auth with a manual check in routes/admin/index.ts — returns 401 responses instead of throwing HTTPExceptions so vitest-pool-workers stops surfacing expected auth failures as unhandled rejections.
  • Bumped admin's inherited deps to match other web apps (fixed 7 version mismatches flagged by no-duplicate-deps).
  • Handled nullable useSearchParams() / usePathname() in Next 16.

Test plan

  • api-tests green (with new wsproxy-backed test DB path)
  • check-types green
  • biome green
  • API Unit Tests green
  • Expo Unit Tests green
  • Cloudflare Pages previews (guides, landing) building
  • Expo Doctor — no new warnings (pre-existing SDK 54 version mismatches remain)

Android/iOS E2E failures are pre-existing and not blocking.

andrew-bierman and others added 30 commits April 11, 2026 09:36
Tests now properly skip with a message instead of silently registering 0 tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Only skip tests that truly require external API_URL. Unit tests and
tests using vitest global setup now run unconditionally.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Bumps [actions/labeler](https://github.com/actions/labeler) from 5 to 6.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](actions/labeler@v5...v6)

---
updated-dependencies:
- dependency-name: actions/labeler
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [vaul](https://github.com/emilkowalski/vaul) from 0.9.9 to 1.1.2.
- [Release notes](https://github.com/emilkowalski/vaul/releases)
- [Commits](https://github.com/emilkowalski/vaul/commits/v1.1.2)

---
updated-dependencies:
- dependency-name: vaul
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [reactivecircus/android-emulator-runner](https://github.com/reactivecircus/android-emulator-runner) from 2.34.0 to 2.37.0.
- [Release notes](https://github.com/reactivecircus/android-emulator-runner/releases)
- [Changelog](https://github.com/ReactiveCircus/android-emulator-runner/blob/main/CHANGELOG.md)
- [Commits](ReactiveCircus/android-emulator-runner@v2.34.0...v2.37.0)

---
updated-dependencies:
- dependency-name: reactivecircus/android-emulator-runner
  dependency-version: 2.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [tailwind-merge](https://github.com/dcastil/tailwind-merge) from 2.6.1 to 3.5.0.
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v2.6.1...v3.5.0)

---
updated-dependencies:
- dependency-name: tailwind-merge
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [input-otp](https://github.com/guilhermerodz/input-otp/tree/HEAD/packages/input-otp) from 1.4.1 to 1.4.2.
- [Changelog](https://github.com/guilhermerodz/input-otp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/guilhermerodz/input-otp/commits/HEAD/packages/input-otp)

---
updated-dependencies:
- dependency-name: input-otp
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [input-otp](https://github.com/guilhermerodz/input-otp/tree/HEAD/packages/input-otp) from 1.4.1 to 1.4.2.
- [Changelog](https://github.com/guilhermerodz/input-otp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/guilhermerodz/input-otp/commits/HEAD/packages/input-otp)

---
updated-dependencies:
- dependency-name: input-otp
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [embla-carousel-react](https://github.com/davidjerleke/embla-carousel) from 8.5.1 to 8.6.0.
- [Release notes](https://github.com/davidjerleke/embla-carousel/releases)
- [Commits](davidjerleke/embla-carousel@v8.5.1...v8.6.0)

---
updated-dependencies:
- dependency-name: embla-carousel-react
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [recharts](https://github.com/recharts/recharts) from 2.15.0 to 3.8.1.
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v2.15.0...v3.8.1)

---
updated-dependencies:
- dependency-name: recharts
  dependency-version: 3.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.4.6 to 2.4.11.
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.11/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [next](https://github.com/vercel/next.js) from 15.5.15 to 16.2.3.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.5.15...v16.2.3)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [workers-ai-provider](https://github.com/cloudflare/ai) from 0.7.5 to 3.1.10.
- [Release notes](https://github.com/cloudflare/ai/releases)
- [Commits](https://github.com/cloudflare/ai/compare/workers-ai-provider@0.7.5...workers-ai-provider@3.1.10)

---
updated-dependencies:
- dependency-name: workers-ai-provider
  dependency-version: 3.1.10
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) from 19.0.14 to 19.2.14.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

---
updated-dependencies:
- dependency-name: "@types/react"
  dependency-version: 19.2.14
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [react-day-picker](https://github.com/gpbl/react-day-picker) from 8.10.1 to 9.14.0.
- [Release notes](https://github.com/gpbl/react-day-picker/releases)
- [Changelog](https://github.com/gpbl/react-day-picker/blob/main/CHANGELOG.md)
- [Commits](gpbl/react-day-picker@v8.10.1...v9.14.0)

---
updated-dependencies:
- dependency-name: react-day-picker
  dependency-version: 9.14.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.19.17 to 25.6.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 25.6.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@react-native-picker/picker](https://github.com/react-native-picker/picker) from 2.11.1 to 2.11.4.
- [Release notes](https://github.com/react-native-picker/picker/releases)
- [Commits](react-native-picker/picker@v2.11.1...v2.11.4)

---
updated-dependencies:
- dependency-name: "@react-native-picker/picker"
  dependency-version: 2.11.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@ai-sdk/openai](https://github.com/vercel/ai) from 2.0.102 to 3.0.52.
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/openai@2.0.102...@ai-sdk/openai@3.0.52)

---
updated-dependencies:
- dependency-name: "@ai-sdk/openai"
  dependency-version: 3.0.52
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the expo-sdk group with 23 updates:

| Package | From | To |
| --- | --- | --- |
| [expo-apple-authentication](https://github.com/expo/expo/tree/HEAD/packages/expo-apple-authentication) | `8.0.8` | `55.0.13` |
| [expo-blur](https://github.com/expo/expo/tree/HEAD/packages/expo-blur) | `15.0.8` | `55.0.14` |
| [expo-clipboard](https://github.com/expo/expo/tree/HEAD/packages/expo-clipboard) | `8.0.8` | `55.0.13` |
| [expo-constants](https://github.com/expo/expo/tree/HEAD/packages/expo-constants) | `18.0.13` | `55.0.13` |
| [expo-dev-client](https://github.com/expo/expo/tree/HEAD/packages/expo-dev-client) | `6.0.20` | `55.0.27` |
| [expo-file-system](https://github.com/expo/expo/tree/HEAD/packages/expo-file-system) | `19.0.21` | `55.0.16` |
| [expo-glass-effect](https://github.com/expo/expo/tree/HEAD/packages/expo-glass-effect) | `0.1.9` | `55.0.10` |
| [expo-haptics](https://github.com/expo/expo/tree/HEAD/packages/expo-haptics) | `15.0.8` | `55.0.14` |
| [expo-image](https://github.com/expo/expo/tree/HEAD/packages/expo-image) | `3.0.11` | `55.0.8` |
| [expo-image-picker](https://github.com/expo/expo/tree/HEAD/packages/expo-image-picker) | `17.0.10` | `55.0.18` |
| [expo-linear-gradient](https://github.com/expo/expo/tree/HEAD/packages/expo-linear-gradient) | `15.0.8` | `55.0.13` |
| [expo-linking](https://github.com/expo/expo/tree/HEAD/packages/expo-linking) | `8.0.11` | `55.0.12` |
| [expo-localization](https://github.com/expo/expo/tree/HEAD/packages/expo-localization) | `17.0.8` | `55.0.13` |
| [expo-location](https://github.com/expo/expo/tree/HEAD/packages/expo-location) | `19.0.8` | `55.1.8` |
| [expo-navigation-bar](https://github.com/expo/expo/tree/HEAD/packages/expo-navigation-bar) | `5.0.10` | `55.0.12` |
| [expo-router](https://github.com/expo/expo/tree/HEAD/packages/expo-router) | `6.0.23` | `55.0.12` |
| [expo-secure-store](https://github.com/expo/expo/tree/HEAD/packages/expo-secure-store) | `15.0.8` | `55.0.13` |
| [expo-sqlite](https://github.com/expo/expo/tree/HEAD/packages/expo-sqlite) | `16.0.10` | `55.0.15` |
| [expo-status-bar](https://github.com/expo/expo/tree/HEAD/packages/expo-status-bar) | `3.0.9` | `55.0.5` |
| [expo-store-review](https://github.com/expo/expo/tree/HEAD/packages/expo-store-review) | `9.0.9` | `55.0.13` |
| [expo-system-ui](https://github.com/expo/expo/tree/HEAD/packages/expo-system-ui) | `6.0.9` | `55.0.15` |
| [expo-updates](https://github.com/expo/expo/tree/HEAD/packages/expo-updates) | `29.0.16` | `55.0.20` |
| [expo-web-browser](https://github.com/expo/expo/tree/HEAD/packages/expo-web-browser) | `15.0.10` | `55.0.14` |


Updates `expo-apple-authentication` from 8.0.8 to 55.0.13
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-apple-authentication/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-apple-authentication)

Updates `expo-blur` from 15.0.8 to 55.0.14
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-blur/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-blur)

Updates `expo-clipboard` from 8.0.8 to 55.0.13
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-clipboard/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-clipboard)

Updates `expo-constants` from 18.0.13 to 55.0.13
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-constants)

Updates `expo-dev-client` from 6.0.20 to 55.0.27
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-dev-client/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-dev-client)

Updates `expo-file-system` from 19.0.21 to 55.0.16
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-file-system)

Updates `expo-glass-effect` from 0.1.9 to 55.0.10
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-glass-effect)

Updates `expo-haptics` from 15.0.8 to 55.0.14
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-haptics/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-haptics)

Updates `expo-image` from 3.0.11 to 55.0.8
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-image/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-image)

Updates `expo-image-picker` from 17.0.10 to 55.0.18
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-image-picker)

Updates `expo-linear-gradient` from 15.0.8 to 55.0.13
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-linear-gradient/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-linear-gradient)

Updates `expo-linking` from 8.0.11 to 55.0.12
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-linking)

Updates `expo-localization` from 17.0.8 to 55.0.13
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-localization/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-localization)

Updates `expo-location` from 19.0.8 to 55.1.8
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-location/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-location)

Updates `expo-navigation-bar` from 5.0.10 to 55.0.12
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-navigation-bar/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-navigation-bar)

Updates `expo-router` from 6.0.23 to 55.0.12
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-router)

Updates `expo-secure-store` from 15.0.8 to 55.0.13
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-secure-store/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-secure-store)

Updates `expo-sqlite` from 16.0.10 to 55.0.15
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-sqlite/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-sqlite)

Updates `expo-status-bar` from 3.0.9 to 55.0.5
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-status-bar/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-status-bar)

Updates `expo-store-review` from 9.0.9 to 55.0.13
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-store-review/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-store-review)

Updates `expo-system-ui` from 6.0.9 to 55.0.15
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-system-ui/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-system-ui)

Updates `expo-updates` from 29.0.16 to 55.0.20
- [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-updates)

Updates `expo-web-browser` from 15.0.10 to 55.0.14
- [Changelog](https://github.com/expo/expo/blob/main/packages/expo-web-browser/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-web-browser)

---
updated-dependencies:
- dependency-name: expo-apple-authentication
  dependency-version: 55.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-blur
  dependency-version: 55.0.14
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-clipboard
  dependency-version: 55.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-constants
  dependency-version: 55.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-dev-client
  dependency-version: 55.0.27
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-file-system
  dependency-version: 55.0.16
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-glass-effect
  dependency-version: 55.0.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-haptics
  dependency-version: 55.0.14
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-image
  dependency-version: 55.0.8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-image-picker
  dependency-version: 55.0.18
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-linear-gradient
  dependency-version: 55.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-linking
  dependency-version: 55.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-localization
  dependency-version: 55.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-location
  dependency-version: 55.1.8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-navigation-bar
  dependency-version: 55.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-router
  dependency-version: 55.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-secure-store
  dependency-version: 55.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-sqlite
  dependency-version: 55.0.15
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-status-bar
  dependency-version: 55.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-store-review
  dependency-version: 55.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-system-ui
  dependency-version: 55.0.15
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-updates
  dependency-version: 55.0.20
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
- dependency-name: expo-web-browser
  dependency-version: 55.0.14
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: expo-sdk
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the drizzle group with 2 updates: [drizzle-kit](https://github.com/drizzle-team/drizzle-orm) and [drizzle-orm](https://github.com/drizzle-team/drizzle-orm).


Updates `drizzle-kit` from 0.30.6 to 0.31.10
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](https://github.com/drizzle-team/drizzle-orm/compare/drizzle-kit@0.30.6...drizzle-kit@0.31.10)

Updates `drizzle-orm` from 0.44.7 to 0.45.2
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.44.7...0.45.2)

---
updated-dependencies:
- dependency-name: drizzle-kit
  dependency-version: 0.31.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: drizzle
- dependency-name: drizzle-orm
  dependency-version: 0.45.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: drizzle
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [vaul](https://github.com/emilkowalski/vaul) from 0.9.9 to 1.1.2.
- [Release notes](https://github.com/emilkowalski/vaul/releases)
- [Commits](https://github.com/emilkowalski/vaul/commits/v1.1.2)

---
updated-dependencies:
- dependency-name: vaul
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Agent-Logs-Url: https://github.com/PackRat-AI/PackRat/sessions/4f289ff0-0950-4991-821e-2ad7eb638d04

Co-authored-by: andrew-bierman <94939237+andrew-bierman@users.noreply.github.com>
- @ai-sdk/google 2.0.62 → 3.0.62 (#2144)
- @ai-sdk/openai 2.0.11 → 3.0.52
- @ai-sdk/perplexity 2.0.1 → 3.0.29 (#2148)

Types may need adjustment in aiService/catalogService (next commit).
TS 5.9 (dev's catalog typescript ~5.9.2) rejects "6.0" as invalid.
Dev already removed this line in their tsconfig.json — my earlier commit
7e39be6 added it back assuming typescript catalog would bump to 6.x.
Aligning with dev: no ignoreDeprecations line, catalog stays at ~5.9.2.
- tsconfig: add module="esnext" (previously defaulted to ES2015 under
  target="ESNext" + moduleResolution="bundler", breaking dynamic imports)
- ai catalog: ^5.0.136 → ^6.0.160 (v2 LanguageModel → v3; required by
  @ai-sdk/* v3)
- web-ui calendar/resizable: revert to dev's v8/v2 compatible versions
  (dependabot bumps for react-day-picker v9 / react-resizable-panels v4
  will come in their own PRs with API migrations)

Remaining breakage from AI SDK v3 migration lands in next commits.
… PR)

The @ai-sdk/{google,openai,perplexity} v2→v3 bump (#2144, #2148) requires:
- Bumping 'ai' catalog to v6 (LanguageModelV3 replaces V2)
- Rewriting apps/expo CustomChatTransport (UIMessageChunk metadata shape)
- Awaiting convertToModelMessages() in 4 api routes (now async)
- Updating response schema types throughout aiService/chat/pack routes

This is effectively a standalone AI SDK v3 migration PR. Deferring.

Also reverting apps/guides/components/ui/chart.tsx to dev's state (recharts
v3 type imports TooltipContentProps/TooltipPayloadEntry were referenced but
recharts is pinned at 2.15.0 here — stale from earlier dependabot work).
Dev converged on @cloudflare/vitest-pool-workers@0.8.71 which works
with plain pg + drizzle-orm/node-postgres and no patches. Aligning
with dev means my spike (wsproxy docker service + neonConfig.wsProxy
in test/setup.ts + narrowed createDb return type) is no longer
necessary.

Restored from dev:
- packages/api/src/db/index.ts (isStandardPostgresUrl branching)
- packages/api/test/setup.ts (pg.Client)
- packages/api/docker-compose.test.yml (no wsproxy)
- packages/api/vitest.config.ts (new file from dev)

The spike is preserved in PR #2170 history if we need to revisit.
@github-actions github-actions Bot removed the database label Apr 14, 2026
andrew-bierman and others added 18 commits April 14, 2026 14:46
… blocks it)

Attempted bumping drizzle-orm to ^0.45.2 / drizzle-kit to ^0.31.10 per
dependabot #2127/#2145 group.

Blocked: drizzle-zod @ ^0.8.3 (latest) still types against drizzle-orm
<=0.44. Bumping drizzle-orm to 0.45 breaks drizzle-zod's
createSelectSchema/createInsertSchema overloads on all 15 schema
tables in packages/api/src/db/zod-schemas.ts.

Reverting. Re-attempt in a follow-up PR once drizzle-zod ships v0.9+ with
drizzle-orm 0.45 compat.
Dev pinned apps/expo and packages/api vitest at ~3.1.0 for
@cloudflare/vitest-pool-workers@0.8.71 compatibility. analytics was the
outlier at ~4.1.4. no-duplicate-deps flagged this as active drift.
Aligning with dev's pin; vitest 4 bump (#2128/#2147) deferred until
vitest-pool-workers supports it.
….2.0)

expo-doctor flags @sentry/react-native 8.7.0 as a major version mismatch
against Expo SDK 54's expected ~7.2.0. Reverting per "trust expo doctor".
Re-apply with the SDK 55 upgrade PR.
expo-doctor flags 1.27.2 as a minor version mismatch against SDK 54's
expected 1.20.1. Reverting per "trust expo doctor". Re-apply with SDK 55.
…on required

ESLint v9+ deprecated the legacy .eslintrc / package.json "eslintConfig"
format; v10 drops it entirely. apps/expo currently uses:

    "eslintConfig": { "extends": "universe/native", "root": true }

Bumping to v10 requires migrating to eslint.config.js (flat config) AND
adopting eslint-config-universe v15's flat-config export. That's a
standalone migration PR, not part of dependabot consolidation.

Tracked: #2121, #2124, #2130.
bun resolved our ^1.2.4 range to 1.3.0 (latest), but dev pinned 1.2.4.
1.3.0 causes 'Cannot read properties of undefined (reading parent)' at
$ZodRegistry.get during admin route import at test runtime. Dev passes
api-tests with 1.2.4 exact. Pinning to match.
packages/web-ui/src/components/* imports 28 packages (@radix-ui/react-*,
lucide-react, sonner, cmdk, next-themes, etc.) but the package.json
only declared 5. Monorepo hoisting makes it work locally, but CI's
fresh install doesn't hoist reliably — check-types fails with TS2307
for web-ui files. Latest dev check-types didn't catch this since it
only runs on PRs and none have merged since admin+analytics split.
apps/expo: @packrat-ai/nativewindui + nanoid (used in source, not declared)
packages/api: @types/ws (used in migrate.ts + seed.ts)
packages/cli: @duckdb/node-api (used in smoke-test.ts)
apps/guides: remark-parse + unified (used in build-content.ts)
global.d.ts: declare module '*.css' — root tsc doesn't load Next's plugin
  which normally handles side-effect CSS imports; next-env.d.ts only
  declares *.module.css.
Our lockfile regenerated slightly differently from dev's, and api-tests
on our branch fails with ZodRegistry 'Cannot read properties of undefined
(reading parent)' — dev with same package.jsons passes. Copying dev's
lockfile verbatim to match its resolution exactly.
biome's package.json ordering check failed after adding remark-parse
and unified out of alphabetical order. Ran bun format:package-json.

tsconfig: dev's lockfile resolved typescript to 5.9.x via catalog
~5.9.2 — TS 5.9 rejects ignoreDeprecations="6.0" (only valid: "5.0").
Dev's tsconfig doesn't have it either. Removing to align.
Dev's test/setup.ts references 4 tables that don't exist in schema.ts:
weather_cache, verification_codes, password_reset_codes, user_items.
DELETE fails on the first non-existent table, ROLLBACK cancels the
whole transaction, users table never gets cleaned. Next test's
seedTestUser() hits a duplicate-key constraint.

Replacing with the actual 16 tables from schema.ts in reverse FK order.
Dev's DELETE-based cleanup doesn't reset auto-increment sequences, so
user id=1 created in test A gets deleted but user id=2 is created in
test B — pack_templates that hardcode user_id=1 hit FK violations.

Tests like generate-from-online-content explicitly comment that they
'rely on global beforeEach truncates all tables'. Align the cleanup
with that assumption via TRUNCATE ... RESTART IDENTITY CASCADE.
Dev passes api-tests; our locally adapted copies don't. Reverting to
dev's files verbatim for:
- packages/api/test/setup.ts (DELETE+transaction cleanup)
- packages/api/test/generate-from-online-content.test.ts
- packages/api/test/pack-templates.test.ts
- packages/api/test/packs.test.ts

If dev's CI passes these, ours should too once files are identical.
…al.d.ts

Our tsconfig had inline options (module, moduleResolution, target, lib,
jsx, allowJs, esModuleInterop) that are all supplied by dev's
'expo/tsconfig.base' extend. Removing the duplication and the
global.d.ts '*.css' shim — expo's base provides what we need.

Local tsc passes clean; CI should match dev's green state.
@andrew-bierman andrew-bierman merged commit 660afa8 into development Apr 14, 2026
8 of 10 checks passed
@andrew-bierman andrew-bierman deleted the chore/all-dependabot-updates branch April 14, 2026 22:52
andrew-bierman added a commit that referenced this pull request Apr 15, 2026
PR #2118 resolved the same ZodRegistry runtime issue this way: bun's
fresh install on our branch produces a slightly different resolution
tree than dev's, even though package.json declarations are equivalent.
Copying dev's lockfile guarantees byte-identical install state.
andrew-bierman added a commit that referenced this pull request May 14, 2026
chore: consolidate all dependabot dependency updates
andrew-bierman added a commit that referenced this pull request May 14, 2026
PR #2118 resolved the same ZodRegistry runtime issue this way: bun's
fresh install on our branch produces a slightly different resolution
tree than dev's, even though package.json declarations are equivalent.
Copying dev's lockfile guarantees byte-identical install state.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

api ci/cd dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation mobile web

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants