Reviewing files that changed from the base of the PR and between d832f91 and 34d3222.

• apps/meteor/client/views/audit/components/__snapshots__/AppInfoField.spec.tsx.snap is excluded by !**/*.snap
• apps/meteor/client/views/audit/components/__snapshots__/SecurityLogDisplayModal.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-client/src/components/AnnouncementBanner/__snapshots__/AnnouncementBanner.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageComposer/__snapshots__/MessageComposer.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageComposer/__snapshots__/MessageComposerHint.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageFooterCallout/__snapshots__/MessageFooterCallout.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfButton/__snapshots__/VideoConfButton.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfController/__snapshots__/VideoConfController.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfMessage/__snapshots__/VideoConfMessage.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfPopup/__snapshots__/VideoConfPopup.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipActionButton/__snapshots__/VoipActionButton.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipActions/__snapshots__/VoipActions.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipContactId/__snapshots__/VoipContactId.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipPopup/__snapshots__/VoipPopup.spec.tsx.snap is excluded by !**/*.snap
• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

• apps/meteor/client/omnichannel/reports/components/BarChart.tsx (1 hunks)
• apps/meteor/ee/server/services/package.json (2 hunks)
• apps/meteor/package.json (15 hunks)
• apps/uikit-playground/package.json (2 hunks)
• ee/apps/account-service/package.json (1 hunks)
• ee/apps/authorization-service/package.json (1 hunks)
• ee/apps/ddp-streamer/package.json (2 hunks)
• ee/apps/omnichannel-transcript/package.json (2 hunks)
• ee/apps/presence-service/package.json (1 hunks)
• ee/apps/queue-worker/package.json (1 hunks)
• ee/apps/stream-hub-service/package.json (1 hunks)
• ee/packages/license/package.json (1 hunks)
• ee/packages/network-broker/package.json (1 hunks)
• ee/packages/omni-core-ee/package.json (1 hunks)
• ee/packages/omnichannel-services/package.json (2 hunks)
• ee/packages/pdf-worker/package.json (1 hunks)
• ee/packages/presence/package.json (1 hunks)
• ee/packages/ui-theming/package.json (1 hunks)
• package.json (1 hunks)
• packages/api-client/package.json (1 hunks)
• packages/apps-engine/package.json (2 hunks)
• packages/base64/package.json (1 hunks)
• packages/cas-validate/package.json (1 hunks)
• packages/core-services/package.json (2 hunks)
• packages/core-typings/package.json (1 hunks)
• packages/ddp-client/package.json (1 hunks)
• packages/eslint-config/package.json (1 hunks)
• packages/freeswitch/package.json (1 hunks)
• packages/fuselage-ui-kit/package.json (2 hunks)
• packages/gazzodown/package.json (3 hunks)
• packages/http-router/package.json (1 hunks)
• packages/i18n/package.json (1 hunks)
• packages/jest-presets/package.json (2 hunks)
• packages/jwt/package.json (1 hunks)
• packages/livechat/package.json (3 hunks)
• packages/message-parser/package.json (1 hunks)
• packages/message-types/package.json (1 hunks)
• packages/mock-providers/package.json (1 hunks)
• packages/models/package.json (1 hunks)
• packages/mongo-adapter/package.json (1 hunks)
• packages/omni-core/package.json (1 hunks)
• packages/password-policies/package.json (1 hunks)
• packages/patch-injection/package.json (1 hunks)
• packages/peggy-loader/package.json (1 hunks)
• packages/random/package.json (1 hunks)
• packages/release-action/package.json (1 hunks)
• packages/release-changelog/package.json (1 hunks)
• packages/rest-typings/package.json (1 hunks)
• packages/server-fetch/package.json (1 hunks)
• packages/sha256/package.json (1 hunks)
• packages/storybook-config/package.json (2 hunks)
• packages/tools/package.json (1 hunks)
• packages/tracing/package.json (1 hunks)
• packages/ui-avatar/package.json (1 hunks)
• packages/ui-client/package.json (2 hunks)
• packages/ui-composer/package.json (2 hunks)
• packages/ui-contexts/package.json (1 hunks)
• packages/ui-kit/package.json (1 hunks)
• packages/ui-video-conf/package.json (2 hunks)
• packages/ui-voip/package.json (2 hunks)
• packages/web-ui-registration/package.json (2 hunks)

packages/jwt/package.json (1)

10-10: All Jest presets updated to v30.1.3 across packages
Verified every package using @rocket.chat/jest-presets and the presets package itself pin Jest at ~30.1.3, so the upgrade to Jest 30 is fully supported.

packages/omni-core/package.json (1)

12-12: LGTM on Jest bump.

Matches repo-wide alignment to 30.1.3; no API impact here.

packages/tools/package.json (1)

10-10: Jest 30 patch bump approved.

Nothing else affected in this package.

packages/base64/package.json (2)

16-17: Babel toolchain bumps look safe.

Upgrading @babel/core/preset-env to 7.28.x is non-breaking for this package’s TS-based build; primarily affects test transforms.

---

24-24: Jest bump OK.

No runtime impact; keep an eye on snapshot updates due to Jest 30 changes. (jestjs.io, fossies.org)

Please run tests once to catch any snapshot formatting diffs introduced by Jest 30.

packages/random/package.json (2)

18-19: Babel version bumps approved.

No config changes required here given TS compile-first workflow.

---

26-26: Jest bump OK.

Same note as base64 on potential snapshot churn in 30.x. (fossies.org)

ee/apps/presence-service/package.json (1)

26-29: Node runtime confirmed (22.16.0 ≥ 22); verify string-helpers bump

• Node engine in root package.json is set to 22.16.0, satisfying Node ≥ 22.
• Review @rocket.chat/string-helpers@~0.32.0 for any minor breaking changes in dependent EE apps.

packages/freeswitch/package.json (1)

10-12: Single Jest version confirmed
All package.json references use jest "~30.1.3", ensuring a unified Jest resolution across the workspace.

packages/rest-typings/package.json (1)

9-11: Verify Jest presets and custom transformers compatibility

Run the full test suite with Jest ~30.1.3 and confirm no regressions, especially in packages using custom transformers (e.g. packages/message-parser’s .pegjs loader) and all @rocket.chat/jest-presets-based configurations still pass.

ee/apps/omnichannel-transcript/package.json (2)

54-58: @types/react → ~18.3.24 matches react ~18.3.1

Type/runtime alignment looks good.

---

31-31: Verify tsconfig inherit correct target and lib for Node 22
Local tsconfig.json extends @rocket.chat/tsconfig/server.json and doesn’t declare its own target or lib. Ensure the extended config sets compilerOptions.target ≥ "ES2022" and includes corresponding lib entries to match Node 22 types, and that CI is running Node 20/22.

packages/patch-injection/package.json (1)

10-12: Jest bump consistent with monorepo

No concerns.

ee/packages/license/package.json (1)

12-14: Verify jest-websocket-mock compatibility with Jest 30.1.3
Manually confirm that jest-websocket-mock@~2.5.0 supports Jest v30.x—either by inspecting its peerDependencies in npm or running the full test suite to catch any breakage.

ee/apps/account-service/package.json (1)

26-30: No direct usage in account-service—0.32.x bump is safe
No imports or requires of @rocket.chat/string-helpers exist in ee/apps/account-service, so the minor bump poses no risk here.

package.json (1)

24-24: @types/node ~22.16.5 aligns with engines/volta Node 22.16.0.

No action needed.

ee/apps/queue-worker/package.json (1)

27-27: Node types bump is safe.

Dev-only; no runtime impact.

packages/release-action/package.json (1)

13-15: Types bump OK; manually verify GitHub Action tsconfig build target. Unable to parse tsconfig JSON due to comments—please confirm compilerOptions.target (e.g. ES2022) and lib settings in packages/release-action/tsconfig*.json.

ee/apps/stream-hub-service/package.json (1)

25-27: Consistency confirmed for Node types and string-helpers versions across all workspaces
All package.json files use @types/node ~22.16.5 and @rocket.chat/string-helpers ~0.32.0.

packages/release-changelog/package.json (1)

13-13: Dev types bump is fine; keep Node types uniform across packages.

No functional impact here; just ensure repo-wide @types/node stays on ~22.16.5 to prevent type resolution drift.

Covered by the workspace-wide script shared in ee/apps/stream-hub-service/package.json.

packages/eslint-config/package.json (1)

6-7: No peer dependency issues: @babel/[email protected] supports eslint ^7.5.0 ‖ ^8.0.0 ‖ ^9.0.0 and @babel/core ^7.11.0 (matching our ~7.28.4), and [email protected] requires eslint >=7.0.0 (matching ~8.45.0); CI warnings are unlikely.

ee/packages/pdf-worker/package.json (1)

39-41: Jest/testing-library bumps look good; confirm React/testing-library compat in tests.

@testing-library/react ~16.3.0 with React 18.3.x and Jest ~30.1.3 should be compatible. Ensure snapshots and jsdom config still pass.

If failures appear, check for updated matchers or async wait utilities in tests.

Also applies to: 43-43, 48-48

packages/peggy-loader/package.json (1)

47-47: Types patch bump approved.

No runtime effect; aligns with repo target.

packages/cas-validate/package.json (1)

8-8: Jest 30.1.3 bump OK; no local Jest config detected
Tests will inherit the root/shared presets—manually verify those are updated for Jest 30.x to prevent snapshot churn.

packages/apps-engine/package.json (1)

78-78: No esbuild version divergence detected
Scanned all package.json files; only packages/apps-engine/package.json pins esbuild to ~0.25.9—no other workspaces declare esbuild.

ee/packages/ui-theming/package.json (1)

9-15: Patch bumps and tilde ranges for fuselage-hooks/icons/@types/react stabilize builds.

No API impact expected; alignment with other packages is good.

ee/packages/omnichannel-services/package.json (1)

11-28: Typecheck omnichannel-services: manual verification required

The provided script didn’t locate the local TS compiler in isolation; install the package’s dependencies (e.g., npm install or your monorepo’s workspace install) and rerun:

tsc -p ee/packages/omnichannel-services/tsconfig.json --noEmit --skipLibCheck

to confirm no type errors.

packages/storybook-config/package.json (2)

7-7: fuselage-hooks to ~0.37.2 (tilde): reproducible installs 👍

Keeps Storybook deps in a safe patch window.

---

26-26: icons to ~0.44.0: patch alignment matches the rest of the repo.

No peer range tightening needed given peer "*" here.

apps/meteor/client/omnichannel/reports/components/BarChart.tsx (1)

56-66: Fix: use valid SVG textAnchor='start' (not 'left').

Correct attribute improves rendering and RTL awareness.

ee/apps/ddp-streamer/package.json (3)

27-27: @rocket.chat/string-helpers → ~0.32.0: minor bump is fine; watch for type drift.

No runtime API changes expected; run TS checks as part of CI.

---

44-44: ws → ~8.18.3 (tilde): safer patch tracking for a network-critical dep.

Good move for stability.

---

51-51: @types/node → 22.16.5: matches broader repo; ensure Node toolchain parity.

Consistent with other EE apps.

apps/meteor/ee/server/services/package.json (4)

28-28: @rocket.chat/string-helpers → ~0.32.0: minor upgrade; low risk.

Recommend a quick typecheck run for this package.

---

48-48: ws → ~8.18.3: patch bump aligns with other services.

OK for server-side usage.

---

51-51: icons → ~0.44.0 in devDeps: patch alignment with UI packages.

No bundling impact expected for server package.

---

57-57: @types/node → 22.16.5: ensure CI uses Node 22 for type libs.

Matches the repo’s direction.

packages/mock-providers/package.json (1)

19-26: Jest + Testing Library bump looks good

Versions are compatible with React 18 and Jest 30. No concerns.

packages/core-services/package.json (1)

38-38: Icons range narrowed to ~0.44.x — confirm intended stability policy

Switching to tilde pins to patch-only within 0.44. If that’s the new policy repo-wide, proceed; otherwise consider caret for minor updates.

packages/message-parser/package.json (1)

51-71: Babel/Jest/Type tooling refresh LGTM

Babel 7.28.x, Jest 30.1.3, ts-loader 9.5.4, typedoc 0.28.12 are consistent with webpack 5.99.9. No action needed.

packages/ui-composer/package.json (1)

23-31: Tightening ranges to ~ for hooks/icons — confirm repo policy

Looks intentional and consistent with other packages; just confirming this is the desired update cadence.

packages/livechat/package.json (1)

63-67: mini-css-extract-plugin/html-webpack-plugin bumps are fine

Both versions are compatible with webpack 5.99.x.

packages/models/package.json (1)

11-19: Jest bump OK; manual smoke-test string-helpers 0.32.0 functions
Numerous imports of escapeRegExp, escapeHTML and capitalize across the repo—confirm their behavior remains unchanged.

apps/uikit-playground/package.json (2)

22-22: Tightening semver to tilde looks good; ensure policy is consistent repo-wide.

Locking @rocket.chat/fuselage-hooks and @rocket.chat/icons to ~ reduces accidental drift. If the goal is reproducible CI across all UI packages, consider standardizing this tilde policy for these two across the monorepo in this PR.

Do you want a script to scan for remaining carets on these two packages across workspaces?

Also applies to: 27-27

---

48-49: Types bump is safe; run typecheck in this app before merge.

@types/lodash and @types/react patch bumps can surface stricter types in TS 5.9. Please run yarn typecheck locally/CI to preempt surprises.

packages/ui-voip/package.json (2)

28-28: Babel core → 7.28.x: verify Storybook and Jest transforms still align.

Given Storybook uses the Babel compiler addon, ensure .babelrc/presets don’t rely on removed options between 7.26 → 7.28.

---

56-58: Jest/Test libs bumps: watch for minor breaking assertions.

Jest 30.1 + Testing Library minor bumps are usually safe, but please run this package’s tests and Storybook test-runner before merging.

Also applies to: 61-61, 68-68

packages/gazzodown/package.json (1)

31-31: Tooling bumps look fine; check Storybook build once.

Babel 7.28.x + Jest 30.1.x + Testing Library 16.3 should be compatible. Please verify storybook build and jest on CI for this package due to Babel/Storybook integration.

Also applies to: 36-36, 39-39, 55-56, 60-60, 72-72

packages/http-router/package.json (1)

11-15: Verify Jest preset’s ts-jest usage and compatibility
packages/http-router/jest.config.ts relies solely on @rocket.chat/jest-presets/server and contains no direct transform or ts-jest entries. Confirm whether that preset applies ts-jest under the hood and supports Jest v30; if not, upgrade ts-jest to a v30-compatible release or adjust the preset accordingly.

ee/packages/presence/package.json (1)

6-9: Aligned Babel toolchain + Jest 30: OK; ensure Babel/Jest configs are in sync.

With [email protected] and Babel 7.28.x, confirm no deprecated Babel options remain in config.

Also applies to: 12-12, 15-15

apps/meteor/package.json (5)

69-74: Babel toolchain → 7.28.x: confirm Meteor build still respects custom Babel hooks.

Meteor can wire its own Babel; ensure these bumps don’t conflict with Meteor’s transpilation pipeline.

---

89-91: Testing Library minor bumps: re-run client Jest tests.

Some queries and timers got minor behavior tweaks between 16.0 → 16.3.

---

125-138: Types updates: safe; watch for stricter Node 22 types.

Patch bumps to Node/Nodemailer types can surface new overloads. Please ensure tsc --noEmit passes for server and client.

Also applies to: 146-147, 154-155

---

178-183: Lint/Test infra bumps: OK; check Jest + Supertest combo.

[email protected] and supertest@~7.1.4 are fine, but ensure your Jest env for HTTP tests (JSDOM vs node) matches expectations.

Also applies to: 190-190, 197-197, 211-211, 217-217

---

225-225: Runtime deps bumped; verify critical paths (auth, XML, editors, UA parse).

• @babel/runtime ~7.28.4, @node-oauth/oauth2-server 5.2.1, @xmldom/xmldom ~0.8.11, codemirror ~5.65.20, mailparser ~3.7.4, meteor-node-stubs ~1.2.24, typia ~9.7.2, ua-parser-js ~1.0.41, zustand ~5.0.8.
  Run smoke tests for login/OAuth, XML parsing/signing flows, email ingestion, and editors. No API changes expected, but these areas are sensitive.

Also applies to: 235-235, 258-259, 266-266, 296-297, 310-311, 314-314, 331-331, 391-391, 396-396, 450-452, 461-461

packages/ui-video-conf/package.json (3)

24-24: Babel core sync to 7.28.x: LGTM.

---

28-29: Tilde pinning for fuselage/icons: good consistency with other packages.

Also applies to: 31-31

---

47-47: Types/Jest bumps: re-run unit and a11y tests.

jest-axe + Jest 30 should remain compatible; still, run jest to confirm.

Also applies to: 53-53

packages/ui-client/package.json (1)

31-31: Verify Jest 30 preset compatibility

All packages now use Jest ~30.1.3 with @rocket.chat/jest-presets and there are no remaining Jest 29 references. Validate that your packages/jest-presets export and any root-level Jest configs align with Jest 30’s configuration schema in CI.

packages/ui-avatar/package.json (2)

6-16: Babel/React types bumps look safe

The patch/minor bumps here are low risk and align with other packages. No action.

---

30-33: tsconfig references valid
Found both packages/ui-avatar/tsconfig-build.json and packages/ui-avatar/tsconfig.json, so the build/dev scripts will resolve correctly.

packages/web-ui-registration/package.json (1)

20-23: Babel/testing library bumps are coherent

Patch/minor upgrades across Babel and Testing Library are consistent with the monorepo sweep. LGTM.

Also applies to: 47-51

packages/fuselage-ui-kit/package.json (2)

7-14: Repository/bugs metadata points to Fuselage repo—confirm intent

This package lives in Rocket.Chat monorepo but links to github.com/RocketChat/fuselage. If intentional (shared package published from here), ignore; otherwise update to this repo to help contributors.

---

48-61: Storybook/Jest/Babel upgrades look consistent

SB 8.6 + webpack 5 + Babel 7.28 and Jest 30 are aligned. No further changes requested, pending preset compatibility checks.

Also applies to: 76-87

packages/ui-kit/package.json (2)

38-44: Babel/typia bumps OK

Babel 7.28.x and typia ~9.7.2 with ts-patch are consistent with the existing build steps. LGTM.

Also applies to: 57-58

---

48-55: [email protected] supports TS 5.9 and Jest 30: its peerDependencies include typescript: ">=4.3 <6" and jest: "^29.0.0 || ^30.0.0", so no upgrade is needed.

Reviewing files that changed from the base of the PR and between 34d3222 and fc8451e.

• apps/meteor/client/views/audit/components/__snapshots__/AppInfoField.spec.tsx.snap is excluded by !**/*.snap
• apps/meteor/client/views/audit/components/__snapshots__/SecurityLogDisplayModal.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-client/src/components/AnnouncementBanner/__snapshots__/AnnouncementBanner.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageComposer/__snapshots__/MessageComposer.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageComposer/__snapshots__/MessageComposerHint.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageFooterCallout/__snapshots__/MessageFooterCallout.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfButton/__snapshots__/VideoConfButton.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfController/__snapshots__/VideoConfController.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfMessage/__snapshots__/VideoConfMessage.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipActionButton/__snapshots__/VoipActionButton.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipActions/__snapshots__/VoipActions.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipContactId/__snapshots__/VoipContactId.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipPopup/__snapshots__/VoipPopup.spec.tsx.snap is excluded by !**/*.snap
• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

• apps/meteor/client/omnichannel/reports/components/BarChart.tsx (1 hunks)
• apps/meteor/ee/server/services/package.json (2 hunks)
• apps/meteor/package.json (15 hunks)
• apps/uikit-playground/package.json (2 hunks)
• ee/apps/account-service/package.json (1 hunks)
• ee/apps/authorization-service/package.json (1 hunks)
• ee/apps/ddp-streamer/package.json (2 hunks)
• ee/apps/omnichannel-transcript/package.json (2 hunks)
• ee/apps/presence-service/package.json (1 hunks)
• ee/apps/queue-worker/package.json (1 hunks)
• ee/apps/stream-hub-service/package.json (1 hunks)
• ee/packages/license/package.json (1 hunks)
• ee/packages/network-broker/package.json (1 hunks)
• ee/packages/omni-core-ee/package.json (1 hunks)
• ee/packages/omnichannel-services/package.json (2 hunks)
• ee/packages/pdf-worker/package.json (1 hunks)
• ee/packages/presence/package.json (1 hunks)
• ee/packages/ui-theming/package.json (1 hunks)
• package.json (1 hunks)
• packages/api-client/package.json (1 hunks)
• packages/apps-engine/package.json (2 hunks)
• packages/base64/package.json (1 hunks)
• packages/cas-validate/package.json (1 hunks)
• packages/core-services/package.json (2 hunks)
• packages/core-typings/package.json (1 hunks)
• packages/ddp-client/package.json (1 hunks)
• packages/eslint-config/package.json (1 hunks)
• packages/freeswitch/package.json (1 hunks)
• packages/fuselage-ui-kit/package.json (2 hunks)
• packages/gazzodown/package.json (3 hunks)
• packages/http-router/package.json (1 hunks)
• packages/i18n/package.json (1 hunks)
• packages/jest-presets/package.json (2 hunks)
• packages/jwt/package.json (1 hunks)
• packages/livechat/package.json (3 hunks)
• packages/message-parser/package.json (1 hunks)
• packages/message-types/package.json (1 hunks)
• packages/mock-providers/package.json (1 hunks)
• packages/models/package.json (1 hunks)
• packages/mongo-adapter/package.json (1 hunks)
• packages/omni-core/package.json (1 hunks)
• packages/password-policies/package.json (1 hunks)
• packages/patch-injection/package.json (1 hunks)
• packages/peggy-loader/package.json (1 hunks)
• packages/random/package.json (1 hunks)
• packages/release-action/package.json (1 hunks)
• packages/release-changelog/package.json (1 hunks)
• packages/rest-typings/package.json (1 hunks)
• packages/server-fetch/package.json (1 hunks)
• packages/sha256/package.json (1 hunks)
• packages/storybook-config/package.json (2 hunks)
• packages/tools/package.json (1 hunks)
• packages/tracing/package.json (1 hunks)
• packages/ui-avatar/package.json (1 hunks)
• packages/ui-client/package.json (2 hunks)
• packages/ui-composer/package.json (2 hunks)
• packages/ui-contexts/package.json (1 hunks)
• packages/ui-kit/package.json (1 hunks)
• packages/ui-video-conf/package.json (2 hunks)
• packages/ui-voip/package.json (2 hunks)
• packages/web-ui-registration/package.json (2 hunks)

• ee/apps/omnichannel-transcript/package.json
• packages/jwt/package.json
• packages/tools/package.json
• packages/ui-avatar/package.json

• packages/peggy-loader/package.json
• packages/release-action/package.json
• packages/tracing/package.json
• packages/freeswitch/package.json
• packages/apps-engine/package.json
• ee/apps/queue-worker/package.json
• apps/uikit-playground/package.json
• ee/apps/presence-service/package.json
• packages/server-fetch/package.json
• packages/ddp-client/package.json
• packages/ui-contexts/package.json
• packages/ui-client/package.json
• packages/storybook-config/package.json
• ee/apps/stream-hub-service/package.json
• ee/packages/omni-core-ee/package.json
• packages/core-typings/package.json
• packages/i18n/package.json
• packages/ui-composer/package.json
• ee/packages/ui-theming/package.json
• packages/message-parser/package.json
• packages/release-changelog/package.json
• package.json
• ee/packages/presence/package.json
• packages/omni-core/package.json
• ee/apps/ddp-streamer/package.json
• packages/core-services/package.json
• packages/web-ui-registration/package.json
• apps/meteor/client/omnichannel/reports/components/BarChart.tsx
• packages/http-router/package.json
• packages/cas-validate/package.json
• packages/mongo-adapter/package.json
• packages/base64/package.json
• packages/message-types/package.json
• packages/livechat/package.json
• ee/packages/license/package.json
• packages/random/package.json
• packages/ui-kit/package.json
• packages/password-policies/package.json
• packages/patch-injection/package.json
• packages/mock-providers/package.json
• packages/rest-typings/package.json
• apps/meteor/ee/server/services/package.json
• packages/ui-voip/package.json
• packages/api-client/package.json
• ee/apps/authorization-service/package.json
• packages/fuselage-ui-kit/package.json
• packages/jest-presets/package.json

• GitHub Check: 📦 Build Packages
• GitHub Check: CodeQL-Build
• GitHub Check: CodeQL-Build

ee/packages/omnichannel-services/package.json (1)

11-11: Jest bump: watch for config/test-env regressions.

Upgrading to ~30.1.3 can surface subtle preset/env changes. Run the package tests locally and in CI to validate snapshot and timers behavior.

packages/models/package.json (1)

11-11: Jest 30 alignment looks good.

No conflicting test tooling here; version aligns with repo-wide bump. Consider running this package’s test suite once CI engines are updated.

packages/gazzodown/package.json (6)

36-36: Pinned ~0.37.2 for fuselage-hooks is consistent with the tilt to tilde; LGTM.
No peer conflicts expected with React 18 here.

---

60-60: @types/react 18.3.24 aligns with react 18.3.x; good.
Keep @types/react-dom in lockstep (it’s already 18.3.7).

---

31-31: Verify Storybook Babel integration after bump.
packages/gazzodown/package.json contains @babel/core "~7.28.4" and @storybook/addon-webpack5-compiler-babel "^3.0.6" — run Storybook dev/build to confirm no TS/JS compilation regressions; if issues appear, inspect the @storybook/*-babel compiler plugin config.

---

55-56: @testing-library/dom/react bumps — verify test helpers and jest preset jsdom env

• packages/gazzodown/package.json (lines 55–56) lists @testing-library/dom ~10.4.1 and @testing-library/react ~16.3.0 — RTL 16 tightened types and async utils; verify your test helpers (types, waitFor/async utilities) for minor breakages.
• rg shows @rocket.chat/jest-presets referenced across many packages (including packages/gazzodown). The earlier script failed to extract RTL versions (jq/column), so confirm @rocket.chat/jest-presets still sets testEnvironment: "jsdom" or explicitly set it in affected package.json files.

---

39-39: Verify Storybook runtime: @rocket.chat/icons ~0.44.0 vs @rocket.chat/fuselage-tokens ~0.33.2 (mismatch detected)
Run a Storybook smoke test in packages/gazzodown, exercise components using tokens and icons, and check the console for token/icon warnings and any visual regressions.
If breakage appears, align versions: either upgrade @rocket.chat/fuselage-tokens to ~0.44.x or revert @rocket.chat/icons to ~0.33.x and document the decision in the PR.

---

72-72: Jest 30.1.3 — verify @rocket.chat/jest-presets compatibility with Jest v30 APIs

Legacy timers (fakeTimers), ESM transform/transformIgnorePatterns, and resolver defaults commonly break on v30.

• Evidence: presets/configs at packages/jest-presets/src/client/jest-preset.ts, packages/jest-presets/src/server/jest-preset.ts and package config at packages/gazzodown/jest.config.ts.
• Action: run: pnpm --filter @rocket.chat/gazzodown test
• If tests fail: update presets for v30 — migrate fakeTimers usage, adjust ESM/transformIgnorePatterns, and revise resolver settings.

ee/packages/pdf-worker/package.json (3)

43-43: Types bump is safe with TS 5.9.
No action needed.

---

39-41: Testing Library bumps look fine — verify peerDependencies & Jest jsdom env (manual verification required)

Automated check failed (curl/jq returned non-JSON). These versions should work with React 18.3.x; confirm peerDependencies for @testing-library/[email protected] and @testing-library/[email protected] and ensure your Jest 30 config/preset still sets testEnvironment to jsdom.

Location: ee/packages/pdf-worker/package.json (lines 39–41)

Run locally:
npm view @testing-library/[email protected] peerDependencies --json
npm view @testing-library/[email protected] peerDependencies --json
rg -nP --glob '!/node_modules/' -C2 '"testEnvironment"\s*:\s*"[^"]+"' || true
rg -n 'jest-environment-jsdom' -g '!/node_modules/' || true

---

48-48: No change needed — preset already provides jsdom for Jest 30.
packages/jest-presets/package.json includes "jest-environment-jsdom": "~30.1.2" and devDependency "jest": "~30.1.3"; the client preset sets testEnvironment: 'jsdom' (packages/jest-presets/src/client/jest-preset.ts). ee/packages/pdf-worker does not need an explicit jest-environment-jsdom devDependency.

packages/sha256/package.json (2)

17-18: Babel bump looks consistent; repo-wide verification required

packages/sha256/package.json sets @babel/core and @babel/preset-env to ~7.28.x (lines 17–18). Automated repo-wide scan failed in the sandbox (/dev/fd error). Verify no other package.json pins @babel/core or @babel/preset-env to a different major/minor.

---

25-25: Jest 30 upgrade — verify preset/transformer compatibility

packages/sha256/package.json sets jest to ~30.1.3 — ensure @rocket.chat/jest-presets resolves babel-jest or ts-jest versions compatible with Jest 30 to avoid runtime transform errors. Repo-wide verification scripts errored; run a repo-wide check of devDependencies (jest, babel-jest, ts-jest, @rocket.chat/jest-presets) and fix any mismatches.

packages/ui-video-conf/package.json (5)

24-24: Babel core bump: confirm preset/plugin compatibility.

Ensure presets/plugins (including @rocket.chat/jest-presets and Storybook’s Babel compiler) are compatible with @babel/core ~7.28.4 (packages/ui-video-conf/package.json). Previous verification script failed with a jq quoting error — run this from the repo root and paste the output:

#!/bin/bash
set -euo pipefail
printf "file\traw_version\tnormalized\n"
find . -name package.json -not -path "*/node_modules/*" -print | while IFS= read -r f; do
  ver=$(jq -r '.devDependencies["@babel/core"] // .dependencies["@babel/core"] // empty' "$f" 2>/dev/null || true)
  if [ -n "$ver" ]; then
    norm=${ver#workspace:}
    norm=${norm#^}
    norm=${norm#~}
    printf "%s\t%s\t%s\n" "$f" "$ver" "$norm"
  fi
done

---

31-31: icons: bump to @rocket.chat/icons ~0.44.0 — verify renamed/removed glyphs or export-path changes

packages/ui-video-conf/package.json (devDependencies) sets "@rocket.chat/icons": "~0.44.0". Automated search failed to confirm imports (ripgrep skipped files), so manually check for renamed/removed glyph names or changed export paths and run a full typecheck/build to surface compile-time breakages.

---

53-53: Confirm Jest 30 compatibility and remove cross-major pins.

packages/ui-video-conf/package.json (line 53) pins "jest": "~30.1.3" — confirm @rocket.chat/jest-presets and any runners/presets resolve to a Jest 30-compatible stack, that no other package.json pins Jest 29.x (including @types/jest), and that test-related deps share the same major across the workspace. If the workspace should enforce a single Jest runner, hoist jest to the workspace root and update the lockfile.

---

28-28: Verify compatibility: @rocket.chat/fuselage-hooks@~0.37.2 ⇄ @rocket.chat/fuselage@^0.66.3

Repo scan shows most UI packages already use ^0.66.3 and ~0.37.2 (no version drift). Upstream @rocket.chat/fuselage-hooks lists peer deps @rocket.chat/emitter, @rocket.chat/fuselage-tokens and react (no direct @rocket.chat/fuselage peerDep). (npmjs.com) @rocket.chat/fuselage itself lists fuselage-hooks as a peer dependency. (npmjs.com)

Action: run CI/Storybook + smoke tests across UI packages to confirm runtime/API compatibility; if you need stronger guarantees, pin both packages together and standardize tilde vs caret across UI packages.

---

47-47: Validate @types/react bump — run repo-wide typecheck

Verification failed here: tsc not found; Node v24.3.0 (repo requires 22.16.0); node_modules missing.

Change: packages/ui-video-conf/package.json — "@types/react": "~18.3.24".

Action: Use Node 22.16.0 and install deps (e.g., nvm use 22.16.0 && pnpm -w install), then run the repo typecheck (pnpm -w run typecheck or per-package tsc --noEmit). Confirm no new TS JSX / StrictMode / startTransition type errors; if errors occur, fix types or revert the bump.

apps/meteor/package.json (17)

69-74: Babel toolchain bump looks good; ensure lockfile dedup and config compatibility.

Nice move to align to ~7.28.x. Please double‑check there aren’t mixed Babel majors/presets in the workspace and that Meteor’s build uses these versions.

Consider validating with CI: yarn dedupe && yarn eslint && yarn typecheck && yarn testunit.

---

89-91: Testing Library updates LGTM.

Versions align with React 18.3; no concerns spotted.

---

178-178: ESLint + plugins compatibility check.

eslint is ~8.45.0 while plugins are fairly new. Ensure no peer‑dep warnings or rule failures due to min‑version expectations.

Run: eslint --version && node -v and check plugin peer ranges in lockfile.

Also applies to: 182-182

---

211-211: source-map bump acknowledged.

No issues expected; keep an eye on devtool compatibility in Storybook/Webpack.

---

225-225: @babel/runtime aligned with Babel core—LGTM.

---

235-235: OAuth2 server minor bump—run auth flows in CI.

Minor releases sometimes tweak token validation. Please run E2E covering authorization code, refresh, and revocation.

---

258-258: Internal Fuselage/string-helpers/icon packages: check cross‑package compatibility.

These patch bumps look safe; verify peer ranges across @rocket.chat/* remain satisfied to avoid multiple version trees at runtime.

Also applies to: 266-266, 296-297

---

310-310: Slack RTM API bump—LGTM.

Node 18+ required; consistent with toolchain.

---

314-314: xmldom patched—good security hygiene.

0.8.11 includes fixes for prior CVEs; approve.

---

331-332: CodeMirror pin—LGTM.

No breaking changes expected within 5.65.x.

---

391-392: mailparser patch—LGTM.

---

396-397: meteor-node-stubs patch—LGTM.

Helps with Node polyfills under Meteor.

---

450-451: typia/ua-parser-js patches—LGTM.

---

461-462: Zustand 5.x: verify migration status.

If you recently moved from 4.x, confirm middleware (persist/devtools) and store typing updates are accounted for. If already on 5.x, this is a safe patch bump.

---

135-135: Verify Meteor's bundled Node and align @types/node to that major.

Root Volta pins Node = 22.16.0 (apps/meteor extends root), so @types/node "~22.16.5" matches the dev pin; [email protected] may bundle a different Node for runtime — confirm and adjust.
apps/meteor/package.json — "@types/node": "~22.16.5"

• Run: cd apps/meteor && meteor node --version (or meteor node -e "console.log(process.version)")
• If Meteor bundles Node 20 → change @types/node to ^20.x; if Meteor bundles Node 22 → leave as-is.

---

190-190: Jest 30 upgrade — transform config verified: presets use @swc/jest; no babel-jest found.

Quick scan shows packages/jest-presets/src/server/jest-preset.ts and packages/jest-presets/src/client/jest-preset.ts define "transform" -> ['@swc/jest', ...], and consumer jest.config.ts files extend those presets (setupFilesAfterEnv spread); no occurrences of "babel-jest" were found. (jestjs.io)

---

154-154: Keep @types/supertest — supertest v7 does not bundle its own types.

NPM shows supertest v7 relies on DefinitelyTyped (don't remove @types); the published typings are @types/[email protected] — keep (or update) that devDependency if you see type errors. (npmjs.com)

Likely an incorrect or invalid review comment.

Reviewing files that changed from the base of the PR and between fc8451e and 32b6d35.

• apps/meteor/client/views/audit/components/__snapshots__/AppInfoField.spec.tsx.snap is excluded by !**/*.snap
• apps/meteor/client/views/audit/components/__snapshots__/SecurityLogDisplayModal.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-client/src/components/AnnouncementBanner/__snapshots__/AnnouncementBanner.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageComposer/__snapshots__/MessageComposer.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageComposer/__snapshots__/MessageComposerHint.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageFooterCallout/__snapshots__/MessageFooterCallout.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfButton/__snapshots__/VideoConfButton.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfController/__snapshots__/VideoConfController.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfMessage/__snapshots__/VideoConfMessage.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipActionButton/__snapshots__/VoipActionButton.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipActions/__snapshots__/VoipActions.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipContactId/__snapshots__/VoipContactId.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipPopup/__snapshots__/VoipPopup.spec.tsx.snap is excluded by !**/*.snap
• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

• apps/meteor/client/omnichannel/reports/components/BarChart.tsx (1 hunks)
• apps/meteor/ee/server/services/package.json (2 hunks)
• apps/meteor/package.json (15 hunks)
• apps/uikit-playground/package.json (2 hunks)
• ee/apps/account-service/package.json (1 hunks)
• ee/apps/authorization-service/package.json (1 hunks)
• ee/apps/ddp-streamer/package.json (2 hunks)
• ee/apps/omnichannel-transcript/package.json (2 hunks)
• ee/apps/presence-service/package.json (1 hunks)
• ee/apps/queue-worker/package.json (1 hunks)
• ee/apps/stream-hub-service/package.json (1 hunks)
• ee/packages/license/package.json (1 hunks)
• ee/packages/network-broker/package.json (1 hunks)
• ee/packages/omni-core-ee/package.json (1 hunks)
• ee/packages/omnichannel-services/package.json (2 hunks)
• ee/packages/pdf-worker/package.json (1 hunks)
• ee/packages/presence/package.json (1 hunks)
• ee/packages/ui-theming/package.json (1 hunks)
• package.json (1 hunks)
• packages/api-client/package.json (1 hunks)
• packages/apps-engine/package.json (2 hunks)
• packages/base64/package.json (1 hunks)
• packages/cas-validate/package.json (1 hunks)
• packages/core-services/package.json (2 hunks)
• packages/core-typings/package.json (1 hunks)
• packages/ddp-client/package.json (1 hunks)
• packages/eslint-config/package.json (1 hunks)
• packages/freeswitch/package.json (1 hunks)
• packages/fuselage-ui-kit/package.json (2 hunks)
• packages/gazzodown/package.json (3 hunks)
• packages/http-router/package.json (1 hunks)
• packages/i18n/package.json (1 hunks)
• packages/jest-presets/package.json (2 hunks)
• packages/jwt/package.json (1 hunks)
• packages/livechat/package.json (3 hunks)
• packages/message-parser/package.json (1 hunks)
• packages/message-types/package.json (1 hunks)
• packages/mock-providers/package.json (1 hunks)
• packages/models/package.json (1 hunks)
• packages/mongo-adapter/package.json (1 hunks)
• packages/omni-core/package.json (1 hunks)
• packages/password-policies/package.json (1 hunks)
• packages/patch-injection/package.json (1 hunks)
• packages/peggy-loader/package.json (1 hunks)
• packages/random/package.json (1 hunks)
• packages/release-action/package.json (1 hunks)
• packages/release-changelog/package.json (1 hunks)
• packages/rest-typings/package.json (1 hunks)
• packages/server-fetch/package.json (1 hunks)
• packages/sha256/package.json (1 hunks)
• packages/storybook-config/package.json (2 hunks)
• packages/tools/package.json (1 hunks)
• packages/tracing/package.json (1 hunks)
• packages/ui-avatar/package.json (1 hunks)
• packages/ui-client/package.json (2 hunks)
• packages/ui-composer/package.json (2 hunks)
• packages/ui-contexts/package.json (1 hunks)
• packages/ui-kit/package.json (1 hunks)
• packages/ui-video-conf/package.json (2 hunks)
• packages/ui-voip/package.json (2 hunks)
• packages/web-ui-registration/package.json (2 hunks)

• ee/apps/queue-worker/package.json
• packages/jwt/package.json
• packages/mongo-adapter/package.json

• packages/peggy-loader/package.json
• packages/tools/package.json
• packages/tracing/package.json
• ee/packages/license/package.json
• ee/packages/omnichannel-services/package.json
• packages/cas-validate/package.json
• packages/ui-client/package.json
• packages/ui-composer/package.json
• packages/eslint-config/package.json
• ee/packages/pdf-worker/package.json
• packages/message-types/package.json
• packages/i18n/package.json
• package.json
• packages/base64/package.json
• packages/api-client/package.json
• ee/apps/authorization-service/package.json
• ee/packages/network-broker/package.json
• ee/packages/omni-core-ee/package.json
• ee/apps/presence-service/package.json
• packages/ui-contexts/package.json
• packages/random/package.json
• packages/password-policies/package.json
• packages/ddp-client/package.json
• ee/apps/omnichannel-transcript/package.json
• packages/sha256/package.json
• apps/meteor/ee/server/services/package.json
• packages/mock-providers/package.json
• packages/release-changelog/package.json
• packages/release-action/package.json
• apps/meteor/client/omnichannel/reports/components/BarChart.tsx
• packages/server-fetch/package.json
• packages/livechat/package.json
• packages/ui-avatar/package.json
• packages/models/package.json
• packages/freeswitch/package.json
• ee/packages/presence/package.json
• packages/fuselage-ui-kit/package.json
• apps/uikit-playground/package.json
• ee/packages/ui-theming/package.json
• packages/storybook-config/package.json
• packages/rest-typings/package.json
• packages/ui-video-conf/package.json
• packages/core-services/package.json
• packages/ui-kit/package.json
• packages/http-router/package.json
• packages/apps-engine/package.json
• packages/omni-core/package.json
• packages/web-ui-registration/package.json
• packages/message-parser/package.json
• packages/gazzodown/package.json
• apps/meteor/package.json
• ee/apps/ddp-streamer/package.json
• packages/jest-presets/package.json
• packages/core-typings/package.json
• packages/ui-voip/package.json

• GitHub Check: 📦 Build Packages
• GitHub Check: CodeQL-Build
• GitHub Check: CodeQL-Build

ee/apps/stream-hub-service/package.json (1)

25-25: Verify @rocket.chat/string-helpers 0.32.x compatibility.
0.x minor bumps can be breaking — run typecheck in every package that imports it.

• Location: ee/apps/stream-hub-service/package.json — " @rocket.chat/string-helpers": "~0.32.0".
• Verify locally:
  • Find usages: rg -n -uu --hidden --glob '!/dist/' "@rocket.chat/string-helpers" -C1
  • Typecheck affected packages: yarn workspace typecheck (e.g. yarn workspace @rocket.chat/stream-hub-service typecheck)
  • Run tests for any packages that import it (stream-hub-service has no tests; its "test" script exits).
• Attempted pnpm-based checks failed in the sandbox — this repo uses yarn (packageManager: [email protected]).

ee/apps/account-service/package.json (1)

26-26: Confirm @rocket.chat/string-helpers 0.32.x has no breaking changes for this service.

ee/apps/account-service/package.json contains "@rocket.chat/string-helpers": "~0.32.0"; repo search returned no import hits here and pnpm typecheck couldn't be run in the sandbox — run locally and report results:

• rg -n "@rocket.chat/string-helpers" -S --glob '!/dist/' -C2
• pnpm --filter "@rocket.chat/account-service" run typecheck
• pnpm --filter "@rocket.chat/account-service" test -- --reporters=default

Reviewing files that changed from the base of the PR and between 32b6d35 and da3a907.

• apps/meteor/client/views/audit/components/__snapshots__/AppInfoField.spec.tsx.snap is excluded by !**/*.snap
• apps/meteor/client/views/audit/components/__snapshots__/SecurityLogDisplayModal.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-client/src/components/AnnouncementBanner/__snapshots__/AnnouncementBanner.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageComposer/__snapshots__/MessageComposer.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageComposer/__snapshots__/MessageComposerHint.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageFooterCallout/__snapshots__/MessageFooterCallout.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfButton/__snapshots__/VideoConfButton.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfController/__snapshots__/VideoConfController.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfMessage/__snapshots__/VideoConfMessage.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipActionButton/__snapshots__/VoipActionButton.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipActions/__snapshots__/VoipActions.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipContactId/__snapshots__/VoipContactId.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipPopup/__snapshots__/VoipPopup.spec.tsx.snap is excluded by !**/*.snap
• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

• apps/meteor/client/omnichannel/reports/components/BarChart.tsx (1 hunks)
• apps/meteor/ee/server/services/package.json (2 hunks)
• apps/meteor/package.json (15 hunks)
• apps/uikit-playground/package.json (2 hunks)
• ee/apps/account-service/package.json (1 hunks)
• ee/apps/authorization-service/package.json (1 hunks)
• ee/apps/ddp-streamer/package.json (2 hunks)
• ee/apps/omnichannel-transcript/package.json (2 hunks)
• ee/apps/presence-service/package.json (1 hunks)
• ee/apps/queue-worker/package.json (1 hunks)
• ee/apps/stream-hub-service/package.json (1 hunks)
• ee/packages/license/package.json (1 hunks)
• ee/packages/network-broker/package.json (1 hunks)
• ee/packages/omni-core-ee/package.json (1 hunks)
• ee/packages/omnichannel-services/package.json (2 hunks)
• ee/packages/pdf-worker/package.json (1 hunks)
• ee/packages/presence/package.json (1 hunks)
• ee/packages/ui-theming/package.json (1 hunks)
• package.json (1 hunks)
• packages/api-client/package.json (1 hunks)
• packages/apps-engine/package.json (2 hunks)
• packages/base64/package.json (1 hunks)
• packages/cas-validate/package.json (1 hunks)
• packages/core-services/package.json (2 hunks)
• packages/core-typings/package.json (1 hunks)
• packages/ddp-client/package.json (1 hunks)
• packages/eslint-config/package.json (1 hunks)
• packages/freeswitch/package.json (1 hunks)
• packages/fuselage-ui-kit/package.json (2 hunks)
• packages/gazzodown/package.json (3 hunks)
• packages/http-router/package.json (1 hunks)
• packages/i18n/package.json (1 hunks)
• packages/jest-presets/package.json (2 hunks)
• packages/jwt/package.json (1 hunks)
• packages/livechat/package.json (3 hunks)
• packages/message-parser/package.json (1 hunks)
• packages/message-types/package.json (1 hunks)
• packages/mock-providers/package.json (1 hunks)
• packages/models/package.json (1 hunks)
• packages/mongo-adapter/package.json (1 hunks)
• packages/omni-core/package.json (1 hunks)
• packages/password-policies/package.json (1 hunks)
• packages/patch-injection/package.json (1 hunks)
• packages/peggy-loader/package.json (1 hunks)
• packages/random/package.json (1 hunks)
• packages/release-action/package.json (1 hunks)
• packages/release-changelog/package.json (1 hunks)
• packages/rest-typings/package.json (1 hunks)
• packages/server-fetch/package.json (1 hunks)
• packages/sha256/package.json (1 hunks)
• packages/storybook-config/package.json (2 hunks)
• packages/tools/package.json (1 hunks)
• packages/tracing/package.json (1 hunks)
• packages/ui-avatar/package.json (1 hunks)
• packages/ui-client/package.json (2 hunks)
• packages/ui-composer/package.json (2 hunks)
• packages/ui-contexts/package.json (1 hunks)
• packages/ui-kit/package.json (1 hunks)
• packages/ui-video-conf/package.json (2 hunks)
• packages/ui-voip/package.json (2 hunks)
• packages/web-ui-registration/package.json (2 hunks)

• packages/ddp-client/package.json

• packages/password-policies/package.json
• packages/message-types/package.json
• packages/omni-core/package.json
• packages/release-action/package.json
• packages/random/package.json
• packages/i18n/package.json
• ee/apps/stream-hub-service/package.json
• ee/apps/presence-service/package.json
• packages/eslint-config/package.json
• packages/freeswitch/package.json
• packages/mongo-adapter/package.json
• ee/apps/authorization-service/package.json
• packages/ui-video-conf/package.json
• packages/cas-validate/package.json
• packages/ui-contexts/package.json
• package.json
• packages/rest-typings/package.json
• packages/server-fetch/package.json
• packages/release-changelog/package.json
• packages/api-client/package.json
• packages/patch-injection/package.json
• ee/packages/omnichannel-services/package.json
• packages/apps-engine/package.json
• packages/ui-composer/package.json
• packages/jwt/package.json
• ee/packages/license/package.json
• ee/apps/ddp-streamer/package.json
• packages/peggy-loader/package.json
• packages/base64/package.json
• apps/meteor/ee/server/services/package.json
• ee/packages/omni-core-ee/package.json
• ee/apps/omnichannel-transcript/package.json
• packages/sha256/package.json
• packages/tracing/package.json
• apps/uikit-playground/package.json
• ee/apps/queue-worker/package.json
• packages/models/package.json
• packages/core-typings/package.json
• ee/apps/account-service/package.json
• packages/livechat/package.json
• packages/ui-kit/package.json
• packages/core-services/package.json
• ee/packages/pdf-worker/package.json
• ee/packages/ui-theming/package.json
• packages/gazzodown/package.json
• packages/message-parser/package.json
• ee/packages/presence/package.json
• packages/http-router/package.json
• packages/storybook-config/package.json
• packages/ui-voip/package.json
• ee/packages/network-broker/package.json
• packages/ui-client/package.json

• GitHub Check: 📦 Build Packages
• GitHub Check: CodeQL-Build
• GitHub Check: CodeQL-Build

packages/tools/package.json (1)

10-10: Confirm monorepo-wide Jest compatibility before merging.

Automated repo scan failed here (shell /dev/fd error). Confirm across the monorepo:

• All packages use compatible majors of jest, @types/jest, and ts-jest (if present).
• @rocket.chat/jest-presets supports Jest 30.x.
• Volta.node / engines.node pins (or root engines) align with Node versions supported by Jest 30.

packages/jest-presets/package.json (2)

32-32: Jest 30.1.3 — confirm Node versions in CI/tooling meet new minimums.

Root package.json Volta pin: node 22.16.0 — satisfies Jest 30 requirement. Still verify per-package package.json engines and CI matrices (.github/workflows, .nvmrc/.node-version, CircleCI, etc.); run:

#!/bin/bash
set -euo pipefail
mapfile -t files < <(find . -name package.json -not -path '*/node_modules/*')
for f in "${files[@]}"; do
  engine=$(jq -r '.engines.node // empty' "$f")
  if [ -n "$engine" ]; then
    printf '%s: %s\n' "$f" "$engine"
  fi
done | sort
jq -r '.volta? // empty' package.json || true

---

16-18: Approve — SWC + jest-dom look correct; confirm remaining ts-jest usages.

• packages/jest-presets/package.json has @swc/core ~1.13.5, @swc/jest ~0.2.39 and @testing-library/jest-dom ~6.8.0.
• packages/jest-presets/src/{client,server}/jest-preset.ts use '@swc/jest' as the transform; no .swcrc files were found.
• packages/jest-presets/src/client/jest-setup.ts imports "import '@testing-library/jest-dom'"; no uses of '@testing-library/jest-dom/extend-expect' were found and many tests import the modern form.
• ts-jest remains as a devDependency in several package.json files (e.g., packages/http-router, packages/ui-kit, packages/tracing) — verify those packages are not still configured to use ts-jest transforms or migrate/remove them if you intend to standardize on @swc/jest.

packages/web-ui-registration/package.json (5)

20-23: Validate Babel 7.28 bump with TS 5.9 & Storybook — run local build & Storybook

Sandbox verification failed (pnpm workspace not available; .storybook / babel configs not found). Inspect packages/web-ui-registration/package.json (lines 20–23) and run locally from the repo workspace root or from the package dir:

From repo root:

pnpm -w -r --filter @rocket.chat/web-ui-registration build
pnpm -w -r --filter @rocket.chat/web-ui-registration typecheck
pnpm -w -r --filter @rocket.chat/web-ui-registration storybook

Or from the package folder:

cd packages/web-ui-registration
pnpm build
pnpm typecheck
pnpm storybook

Check for deprecated/impactful Babel options:

rg -nP --glob '!**/dist/**' -C2 'useBuiltIns|assumptions|loose|runtime' .storybook babel* packages/web-ui-registration || true

If build or Storybook fails, attach the error output and the .storybook / babel config snippets for follow-up.

---

32-32: Icons 0.44.0: watch for renamed/removed glyphs.

Typecheck should surface missing exports/usages. Location: packages/web-ui-registration/package.json ('@rocket.chat/icons': '~0.44.0').

Sandbox verification failed (pnpm workspace flag / rg tsx type). Run locally to verify:

cd packages/web-ui-registration
pnpm install
pnpm run typecheck

# find Icon usages
rg -nP '\bIcon[A-Z][A-Za-z0-9]+' packages/web-ui-registration/src -S -C1 --glob '**/*.{ts,tsx,js,jsx}' || true

---

27-28: Resolved — versions already tightened to ~.
All package.json files reference @rocket.chat/fuselage@~0.66.4 and @rocket.chat/fuselage-hooks@~0.38.0; no differing minor versions found.

---

50-50: React types patch bump looks safe.
Workspace packages use @types/react ~18.3.24; react-dom dependents are at ~18.3.1 (not 18.3.7) and TypeScript is ~5.9.2 — no conflicting versions detected.

---

47-48: @testing-library/react 16.x — run workspace tests and verify userEvent/query changes.

• packages/web-ui-registration/package.json contains "@testing-library/react": "~16.3.0" (lines 47–48).
• Repo has many tests importing userEvent and using userEvent.setup (e.g. packages/ui-voip/src/components/VoipPopup/views/VoipOngoingView.spec.tsx).
• Test run here failed (pnpm error: "--workspace-root may only be used inside a workspace"); run full workspace tests from the repo root/CI (pnpm -w -r test) and address failures.
• Ensure @testing-library/user-event is pinned consistently (v14.x seen) and update tests for any userEvent import/API or query-option breaking changes.

packages/fuselage-ui-kit/package.json (3)

86-86: Confirm @rocket.chat/jest-presets peer deps support Jest 30 & Babel 7.28.
packages/fuselage-ui-kit/package.json sets "jest": "~30.1.3"; the verification script returned no output (couldn't locate @rocket.chat/jest-presets/package.json). Confirm @rocket.chat/jest-presets' package.json declares compatible peerDependencies for "jest" (v30) and Babel (>=7.28), or update the preset before merging.

---

77-80: RTL 16.x & user-event 14.6 — verify tests and jest-dom

• jest-dom is configured: import '@testing-library/jest-dom' found in the Jest setup (line 6).
• ripgrep returned unrecognized file type: tsx — re-run a repo-wide search without --type filters (e.g. rg -n "@testing-library/(react|dom|user-event)" -S) to confirm no .tsx tests require matcher/behavior updates.

---

48-51: Babel 7.28 bump — verify Node / Storybook / Jest transformer compatibility

Root package.json declares "engines.node": "22.16.0" and packages/fuselage-ui-kit/devDependencies include @babel/* 7.28.x and Storybook 8.6.x — verify that Node 22.16.0 meets the minimum requirements for Babel 7.28 and Storybook 8.6, and confirm the Jest transformer chain still uses a compatible babel-jest via your jest presets.

Files to check: root package.json (engines.node), packages/fuselage-ui-kit/package.json (devDependencies), packages/jest-presets/package.json and any jest.config.* or package.json "jest" entries.

apps/meteor/client/omnichannel/reports/components/BarChart.tsx (1)

60-60: SVG textAnchor fix is correct and RTL‑aware.

Switching from the invalid 'left' to spec‑compliant 'start' matches SVG/React types and improves RTL behavior. LGTM.

Please visually check LTR/RTL and reversed horizontal layouts to confirm labels don’t clip.

packages/ui-avatar/package.json (1)

6-6: Dev toolchain bumps look consistent.

Babel/fuselage/icons/@types/react updates align with the repo‑wide versions. No API surface change here.

Please run the package’s typecheck locally to confirm no fuselage/types fallout.

Also applies to: 9-10, 13-13, 15-15

apps/meteor/package.json (2)

69-74: Confirmed: @babel/[email protected] supports ESLint ^7.x and ^8.x.
Current ESLint ~8.45.0 is within the supported range — no change required.

---

117-117: Jest 30 upgrade — confirm testEnvironment & remove deprecated options.

• You aligned jest/@types/jest to v30 (apps/meteor/package.json — lines 117, 190). Ensure Jest config (jest.config.js or package.json "jest" or preset like @rocket.chat/jest-presets) explicitly sets testEnvironment to "jsdom" or "node".
• Remove/replace deprecated/removed options that break on Jest 30 (examples to search for: testURL, runner: "jest-jasmine2", any references to jest-jasmine2).
• Automated grep in the review sandbox returned no files — run a local search for the above and update configs if found.

packages/mock-providers/package.json (1)

19-22: Jest 30 + Testing Library — verified: no deprecated imports/configs found

Repo-wide checks found no occurrences of "@testing-library/jest-dom/extend-expect" and no deprecated Jest 30 keys (testURL, jest-jasmine2, testEnvironmentOptions). A type-only export remains at packages/jest-presets/src/client/index.ts (used to cascade matcher types) — safe to keep.

Reviewing files that changed from the base of the PR and between da3a907 and 89f2f2a.

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

• apps/meteor/package.json (15 hunks)
• apps/uikit-playground/package.json (2 hunks)
• ee/packages/ui-theming/package.json (1 hunks)
• packages/fuselage-ui-kit/package.json (2 hunks)
• packages/gazzodown/package.json (3 hunks)
• packages/livechat/package.json (3 hunks)
• packages/storybook-config/package.json (2 hunks)
• packages/ui-avatar/package.json (1 hunks)
• packages/ui-client/package.json (2 hunks)
• packages/ui-composer/package.json (2 hunks)
• packages/ui-contexts/package.json (1 hunks)
• packages/ui-video-conf/package.json (2 hunks)
• packages/ui-voip/package.json (2 hunks)
• packages/web-ui-registration/package.json (2 hunks)

• packages/ui-contexts/package.json
• packages/ui-composer/package.json
• packages/ui-video-conf/package.json
• packages/storybook-config/package.json
• packages/web-ui-registration/package.json
• apps/uikit-playground/package.json
• ee/packages/ui-theming/package.json
• packages/ui-avatar/package.json
• packages/fuselage-ui-kit/package.json
• packages/ui-voip/package.json
• packages/ui-client/package.json
• packages/livechat/package.json

• GitHub Check: 📦 Build Packages
• GitHub Check: CodeQL-Build
• GitHub Check: CodeQL-Build

apps/meteor/package.json (11)

225-235: Runtime libs: patch bumps only—LGTM.

@babel/runtime and oauth2-server patch bumps are safe.

---

310-315: Audit passed — no high-severity advisories for the bumped packages.
Ran yarn npm audit --severity high → "No audit suggestions". No further action required.

---

69-73: Babel toolchain bumps look consistent — run a quick build smoke.
rg shows @babel/* pinned to ~7.28.x across the workspace and yarn dedupe recommends consolidating older ranges to 7.28.4. Run Storybook and Meteor builds (apps/meteor — lines 69–73) to catch any preset/plugin option mismatches.

---

256-259: Fuselage family: align versions across workspaces

Most workspaces are already pinned to ~0.66.4 / ~0.37.2 / ~0.31.25 / ~0.33.2 / ~0.44.0; several package.json files use "" and yarn dedupe reports @rocket.chat/fuselage-hooks@^0.37.0 can be deduped to 0.37.2. Replace '' and any '^' ranges with the same ~ ranges (or run yarn dedupe and commit the lockfile) to prevent multiple runtime versions.

Affected files with "*" entries:

• packages/ui-voip/package.json (lines 78-80)
• ee/packages/ui-theming/package.json (lines 41-43)
• packages/ui-video-conf/package.json (lines 64-66)
• packages/ui-contexts/package.json (line 30)
• packages/ui-kit/package.json (line 60)
• packages/ui-composer/package.json (lines 59-60)
• packages/ui-avatar/package.json (line 40)
• packages/ui-client/package.json (lines 62-64)
• packages/storybook-config/package.json (lines 35-36)
• packages/livechat/package.json (line 96)
• packages/gazzodown/package.json (lines 87-88)
• packages/fuselage-ui-kit/package.json (lines 103-106)

---

190-191: Jest 30 + @types/jest 30: confirm @rocket.chat/jest-presets compatibility.

packages/jest-presets/package.json shows peerDependencies: null — no declared Jest peer, so compatibility is inconclusive; verify the preset’s config/transforms/runners in packages/jest-presets with Jest 30.

• Run the monorepo test-suite using jest@30.
• If compatible, add "peerDependencies": { "jest": "^30" } to packages/jest-presets/package.json (or document supported Jest versions).

---

93-93: Node types v22 — runtime pinned to Node 22.16.0 (OK). Volta and Dockerfiles use node:22.16.0; one build stage (apps/meteor/ee/server/services/Dockerfile) uses node:22.14.0 as a build image but final images are 22.16.0. @types/node ~22.16.5 is compatible.

---

211-212: source-map and supertest bumps: no action needed.
source-map ~0.7.6 is fine. supertest v7 does not ship TypeScript types, so keep @types/supertest (~6.0.3) — found in packages/http-router/package.json and apps/meteor/package.json.

---

331-331: Verify client bundle doesn't pull Node stubs / mailparser via codemirror.

Previous repo search returned no hits; manual verification required — run these checks and report results:

• rg -n --hidden -S 'mailparser|meteor-node-stubs|meteor-node-stub|node-libs-browser' -g '!/node_modules/'
• rg -n 'mailparser|meteor-node-stubs' package-lock.json yarn.lock pnpm-lock.yaml -S
• (cd apps/meteor && npm ls mailparser meteor-node-stubs --all) || true
• Produce a production client build and search the bundle for stubs: meteor build --directory build-output && rg -n 'mailparser|meteor-node-stubs|node-libs-browser' build-output -S

Location: apps/meteor/package.json (lines ~331 and ~391-396).

---

256-259: Policy check — confirm ^ → ~ for runtime deps aligns with Dependabot automation

Dependabot is configured (.github/dependabot.yml: npm, daily, labeled "automerge"). Changing ^ → ~ in apps/meteor/package.json limits updates to patch releases (reduces minor-bump PRs); confirm this is intentional for these runtime deps or revert to ^.

---

179-183: No ESLint bump required — peers verified.

[email protected] satisfies the peerRequirements for the listed plugins ([email protected] requires >=8.40.0; react/react-hooks, prettier and testing-library versions in question are compatible with ESLint 8.x) and yarn explain peer-requirements shows no ESLint peer warnings.

---

89-91: Testing Library v16 bump — peers appear provided; deprecation scan failed.

• yarn explain shows @testing-library/[email protected] and @testing-library/[email protected] provided across the workspace and jest-environment-jsdom supplies [email protected].
• Ripgrep scan errored (unrecognized file type: tsx), so I couldn't confirm removal of legacy helpers. Re-run this to find risky usages:
  rg -n -S -g '!/node_modules/' -C1 -e 'waitForElement' -e 'waitForElementToBeRemoved' -e 'container.firstChild' -e 'toBeInTheDocument' -e '\bfindBy[A-Z]'
  Confirm no deprecated helpers remain and that Jest/jsdom env versions are compatible.

packages/gazzodown/package.json (4)

55-56: Testing Library upgrades look fine.

React 18.3 is already in devDeps, so these bumps should be safe. Please run the package’s tests and storybook interaction tests to confirm no matcher or RTL API drift.

---

60-60: Types bump sanity-check — run a local typecheck

@types/react ~18.3.24 with TS ~5.9.2 should be OK. Sandbox run failed (workspace flags invalid; tsc/meteor not found). From the repo root, install deps and run a workspace typecheck and paste the output:
pnpm install && pnpm -w -r run typecheck (or the npm/yarn workspace-equivalent you use).

---

31-39: Tilde pinning + Fuselage alignment verified.

All packages use @rocket.chat/fuselage ~0.66.4, @rocket.chat/fuselage-hooks ~0.37.2, and @rocket.chat/icons 0.44.0 (peerDependencies set to '*'); no caret (^) ranges found — no mixed ^/ duplication risk.

---

72-72: Jest 30 upgrade — presets verified (no incompatible options found)
Local @rocket.chat/jest-presets (packages/jest-presets) is present and many packages already pin jest ~30.1.3; repo scan found no occurrences of legacyFakeTimers, jest.useFakeTimers, resetMocks:false, or empty transformIgnorePatterns. Presets use supported fields (transform, transformIgnorePatterns, moduleFileExtensions, setupFilesAfterEnv).
Relevant: packages/jest-presets/src/client/jest-preset.ts, packages/jest-presets/src/server/jest-preset.ts, packages/gazzodown/package.json (jest: ~30.1.3).

Reviewing files that changed from the base of the PR and between 8880aa4 and 9ab51b4.

• apps/meteor/client/views/audit/components/__snapshots__/AppInfoField.spec.tsx.snap is excluded by !**/*.snap
• apps/meteor/client/views/audit/components/__snapshots__/SecurityLogDisplayModal.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-client/src/components/AnnouncementBanner/__snapshots__/AnnouncementBanner.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageComposer/__snapshots__/MessageComposer.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageComposer/__snapshots__/MessageComposerHint.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageFooterCallout/__snapshots__/MessageFooterCallout.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfButton/__snapshots__/VideoConfButton.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfController/__snapshots__/VideoConfController.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfMessage/__snapshots__/VideoConfMessage.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipActionButton/__snapshots__/VoipActionButton.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipActions/__snapshots__/VoipActions.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipContactId/__snapshots__/VoipContactId.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipPopup/__snapshots__/VoipPopup.spec.tsx.snap is excluded by !**/*.snap
• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

• apps/meteor/client/omnichannel/reports/components/BarChart.tsx (1 hunks)
• apps/meteor/ee/server/services/package.json (2 hunks)
• apps/meteor/package.json (15 hunks)
• apps/uikit-playground/package.json (2 hunks)
• ee/apps/account-service/package.json (1 hunks)
• ee/apps/authorization-service/package.json (1 hunks)
• ee/apps/ddp-streamer/package.json (2 hunks)
• ee/apps/omnichannel-transcript/package.json (2 hunks)
• ee/apps/presence-service/package.json (1 hunks)
• ee/apps/queue-worker/package.json (1 hunks)
• ee/apps/stream-hub-service/package.json (1 hunks)
• ee/packages/license/package.json (1 hunks)
• ee/packages/network-broker/package.json (1 hunks)
• ee/packages/omni-core-ee/package.json (1 hunks)
• ee/packages/omnichannel-services/package.json (2 hunks)
• ee/packages/pdf-worker/package.json (1 hunks)
• ee/packages/presence/package.json (1 hunks)
• ee/packages/ui-theming/package.json (1 hunks)
• package.json (1 hunks)
• packages/api-client/package.json (1 hunks)
• packages/apps-engine/package.json (2 hunks)
• packages/base64/package.json (1 hunks)
• packages/cas-validate/package.json (1 hunks)
• packages/core-services/package.json (2 hunks)
• packages/core-typings/package.json (1 hunks)
• packages/ddp-client/package.json (1 hunks)
• packages/eslint-config/package.json (1 hunks)
• packages/freeswitch/package.json (1 hunks)
• packages/fuselage-ui-kit/package.json (2 hunks)
• packages/gazzodown/package.json (3 hunks)
• packages/http-router/package.json (1 hunks)
• packages/i18n/package.json (1 hunks)
• packages/jest-presets/package.json (2 hunks)
• packages/jwt/package.json (1 hunks)
• packages/livechat/package.json (3 hunks)
• packages/message-parser/package.json (1 hunks)
• packages/message-types/package.json (1 hunks)
• packages/mock-providers/package.json (1 hunks)
• packages/models/package.json (1 hunks)
• packages/mongo-adapter/package.json (1 hunks)
• packages/omni-core/package.json (1 hunks)
• packages/password-policies/package.json (1 hunks)
• packages/patch-injection/package.json (1 hunks)
• packages/peggy-loader/package.json (1 hunks)
• packages/random/package.json (1 hunks)
• packages/release-action/package.json (1 hunks)
• packages/release-changelog/package.json (1 hunks)
• packages/rest-typings/package.json (1 hunks)
• packages/server-fetch/package.json (1 hunks)
• packages/sha256/package.json (1 hunks)
• packages/storybook-config/package.json (2 hunks)
• packages/tools/package.json (1 hunks)
• packages/tracing/package.json (1 hunks)
• packages/ui-avatar/package.json (1 hunks)
• packages/ui-client/package.json (2 hunks)
• packages/ui-composer/package.json (2 hunks)
• packages/ui-contexts/package.json (1 hunks)
• packages/ui-kit/package.json (1 hunks)
• packages/ui-video-conf/package.json (2 hunks)
• packages/ui-voip/package.json (2 hunks)
• packages/web-ui-registration/package.json (2 hunks)

• ee/apps/ddp-streamer/package.json
• packages/i18n/package.json
• ee/apps/queue-worker/package.json
• packages/random/package.json
• ee/apps/omnichannel-transcript/package.json
• packages/mongo-adapter/package.json
• packages/tracing/package.json
• packages/patch-injection/package.json
• ee/packages/pdf-worker/package.json
• packages/release-action/package.json
• packages/api-client/package.json
• packages/ui-contexts/package.json
• ee/apps/presence-service/package.json
• packages/rest-typings/package.json
• packages/ddp-client/package.json
• ee/packages/omnichannel-services/package.json
• packages/ui-avatar/package.json
• ee/apps/account-service/package.json
• packages/omni-core/package.json
• packages/storybook-config/package.json
• packages/jwt/package.json
• ee/packages/omni-core-ee/package.json
• packages/password-policies/package.json
• packages/livechat/package.json
• packages/eslint-config/package.json
• apps/meteor/ee/server/services/package.json
• packages/message-types/package.json
• ee/packages/license/package.json
• packages/ui-composer/package.json
• packages/core-services/package.json
• packages/core-typings/package.json
• packages/cas-validate/package.json
• packages/base64/package.json
• packages/release-changelog/package.json
• packages/apps-engine/package.json
• packages/mock-providers/package.json
• apps/uikit-playground/package.json
• packages/message-parser/package.json
• packages/models/package.json
• packages/server-fetch/package.json
• packages/ui-video-conf/package.json
• packages/freeswitch/package.json
• packages/web-ui-registration/package.json
• ee/packages/network-broker/package.json
• package.json
• packages/gazzodown/package.json
• packages/jest-presets/package.json
• packages/ui-voip/package.json
• ee/packages/presence/package.json
• packages/ui-kit/package.json
• packages/fuselage-ui-kit/package.json
• ee/apps/stream-hub-service/package.json
• ee/apps/authorization-service/package.json
• ee/packages/ui-theming/package.json
• packages/ui-client/package.json
• apps/meteor/client/omnichannel/reports/components/BarChart.tsx

packages/peggy-loader/package.json (1)

47-47: LGTM on the @types/node bump; automated audit failed — verify workspace-wide alignment.

Change is scoped to dev types — confirm:

• All packages use a single @types/node major/minor (22.16.x).
• Repo root Volta/engines Node version is compatible with Node 22.

Automated audit errored: "/bin/bash: -c: line 8: conditional binary operator expected". Re-run this corrected audit from the repo root and attach the output:

#!/usr/bin/env bash
set -euo pipefail
IFS=$'\n'

echo "Scanning @types/node across workspace…"
find . -name package.json -not -path '*/node_modules/*' -not -path '*/dist/*' -not -path '*/build/*' -not -path '*/.git/*' -print0 |
while IFS= read -r -d '' f; do
  ver=$(jq -r '.devDependencies["@types/node"] // .dependencies["@types/node"] // .peerDependencies["@types/node"] // empty' "$f" 2>/dev/null || true)
  if [ -n "${ver:-}" ] && [ "$ver" != "null" ]; then
    pkg=$(jq -r '.name // empty' "$f" 2>/dev/null || true)
    printf '%s\t%s\t%s\n' "$ver" "$pkg" "$f"
  fi
done | sort -V | tee /tmp/types-node-versions.tsv

printf '\nDistinct @types/node versions:\n'
cut -f1 /tmp/types-node-versions.tsv | sort -V | uniq

printf '\nRoot Volta-pinned Node version (if any):\n'
jq -r '.volta.node // empty' package.json 2>/dev/null || true

printf '\nDistinct TypeScript versions (for awareness):\n'
find . -name package.json -not -path '*/node_modules/*' -not -path '*/dist/*' -not -path '*/build/*' -not -path '*/.git/*' -print0 |
while IFS= read -r -d '' f; do
  ver=$(jq -r '.devDependencies.typescript // .dependencies.typescript // .peerDependencies.typescript // empty' "$f" 2>/dev/null || true)
  if [ -n "${ver:-}" ] && [ "$ver" != "null" ]; then
    printf '%s\t%s\n' "$ver" "$f"
  fi
done | cut -f1 | sort -V | uniq

packages/sha256/package.json (1)

17-18: Keep Babel devDependencies — local babel.config.js references preset-env

packages/sha256/babel.config.js includes presets: ['@babel/preset-env'] (packages/sha256/babel.config.js), so keep @babel/core and @babel/preset-env; remove only if you delete or migrate that babel.config.js.

Likely an incorrect or invalid review comment.

packages/tools/package.json (1)

10-10: Jest 30 bump LGTM — manual repo verification required

Automated sandbox parsing failed, so I couldn't complete a full scan. Quick findings and checks to run locally:

• packages/tools/package.json: "jest": "~30.1.3" (PR change).
• Found testEnvironment entries: packages/jest-presets/src/client/jest-preset.ts and packages/jest-presets/src/server/jest-preset.ts — verify no deprecated options (e.g., testURL) are used in these presets or other jest configs.
• yarn.lock contains jest-circus entries — confirm no explicit runner config or reliance on removed circus options.
• Verify Node engine / volta.node constraints in root and package package.json files meet Jest 30 requirements.
• Confirm TypeScript configs (tsconfig*.json) do not force conflicting "types": ["jest"] and that @types/jest isn’t pinned/duplicated in a way that conflicts with built-in Jest types.

Run these checks locally (example):
rg -n --hidden -S -e "testURL" -e "runner.jest-circus" -e "ts-jest/presets/js-with-babel" -e ""@types/jest"" -e ""jest"\s:\s*"~30" --glob '!/node_modules/'

apps/meteor/package.json (11)

182-183: Verify ESLint/testing bumps: ensure plugin peers and Supertest v7 compatibility.

ripgrep skipped all files so I couldn't confirm usage. Manually verify:

• eslint-plugin-playwright ~2.2.2 with eslint ~8.45.0 produces no peer-dep warnings.
• supertest ~7.x: search for imports/usages (supertest, .agent(), Response handling) and confirm tests/types/helpers still compile.

Location: apps/meteor/package.json lines 182-183 (also applies to lines 211 and 217).

---

69-74: Babel @babel/ versions look aligned — repo-wide verification inconclusive*

apps/meteor/package.json shows @babel/* 7.28.x — good. The provided rg check returned "No files were searched", so I could not confirm there are no other @babel/* entries elsewhere; re-run a repo-wide search (e.g. rg -n --hidden --no-ignore-vcs -P "@babel/(core|preset-[^\"]+|eslint-parser|register|runtime)" --glob '!/node_modules/' -C1 or run rg --debug) to confirm.

---

178-186: ESLint plugin bumps — run a lint smoke test and verify peer deps.

apps/meteor/package.json (lines 178–186; also 188) had multiple eslint-plugin/version bumps. Sandbox scan failed; run these checks locally/CI:

• Install deps and run lint (e.g. npm ci && npm run lint) — fix any "unknown rule" errors.
• Search .eslintrc*, package.json (eslintConfig) for deprecated/renamed rules and update rulesets.
• Address peer-dependency warnings from npm/yarn/pnpm and update lockfile.

---

316-317: Action: verify & remediate XML parsing/signature deps

• apps/meteor/package.json (lines 316-317): @xmldom/xmldom ~0.8.11 — 0.8.11 addresses prior xmldom CVEs (e.g., CVE-2022-39353, CVE-2022-37616, CVE-2021-21366). Confirm your lockfile actually resolves to 0.8.11+.
• xml-crypto: high‑severity CVEs exist (CVE-2024-32962, CVE-2025-29775); patched in >=3.2.1 (and in 6.0.1+). If any resolved dependency is 3.2.0 or older, upgrade to >=3.2.1 or 6.0.1+ or add an npm override/resolution.
• xml-encryption (3.1.x): no widely published CVEs matching xml-crypto issues, but older releases allow insecure algorithm choices — ensure a maintained release and strong algorithm configuration.
• Remediation: scan package-lock/yarn.lock for xml-crypto/xml-encryption occurrences; if vulnerable, pin/override to fixed versions and harden parser/signature options (disable entity expansion/XXE, enforce strict KeyInfo/DigestValue validation).

---

406-406: Confirm Meteor Node >= 16.20.1 and import style for [email protected]

mongodb v6 is not ESM-only (CommonJS require is documented) and requires Node >= 16.20.1. Verify the Meteor app runtime/bundler runs Node >= 16.20.1 and that our code uses CommonJS imports (or switch to dynamic import()/interop build if Meteor forces ESM).

Location: apps/meteor/package.json — line ~406: "mongodb": "6.10.0"

---

312-313: Slack RTM API ^7.x — verify CJS/ESM compatibility & Node version

@slack/rtm-api v7 is ESM‑first (not strictly ESM‑only) and requires Node.js v18+; requiring it from a CommonJS app can still cause ERR_REQUIRE_ESM.

• If our app is CommonJS or runs Node <18: either upgrade Node to >=18 and migrate to ESM (or use dynamic import() / a small CJS compat wrapper), or pin @slack/rtm-api to 6.x.
• Verify runtime Node version and where @slack/rtm-api is imported/required in the codebase.

Location: apps/meteor/package.json lines 312–313

---

333-334: Confirm browser polyfills (meteor-node-stubs: Buffer/process)

• apps/meteor/package.json contains: codemirror ~5.65.20 (ln 333), colorette ^2.0.20 (ln 334), mailparser ~3.7.4 (ln 393), meteor-node-stubs ~1.2.24 (ln 398).
• Repo-wide search for Node globals (Buffer/process/stream/crypto) failed — cannot verify absence of code depending on those shims. Run a full repo search for those identifiers or validate the browser build still provides required polyfills.

---

452-454: Verify Zustand v5 & Typia ~9.7 compatibility

Sandbox couldn't search the repo — verify locally that upgrading/using these versions doesn't introduce breaking changes.

• Zustand: check for default import vs named export (e.g. "import create from 'zustand'" → named export if required) and middleware usage (persist, devtools, createJSONStorage).
• Typia: confirm repository TypeScript version supports typia ~9.7.x and inspect typia call sites/build-time usage.
• Run locally to confirm (example commands):
  rg -n --hidden --no-ignore -S "from 'zustand'" || true
  rg -n --hidden --no-ignore -S '\b(persist|createJSONStorage|devtools)\b' || true
  rg -n --hidden --no-ignore -S "typia" || true
  rg -n --hidden --no-ignore -S '"typescript"' package.json || true
  sed -n '440,470p' apps/meteor/package.json || true

---

117-117: Verified — @rocket.chat/jest-presets already targets Jest 30; no config changes required

packages/jest-presets/package.json pins jest ~30.1.3 (and jest-environment-jsdom/node ~30.1.2) and per-package jest.config.ts files import/use these presets (e.g. apps/meteor/jest.config.ts); configs are aligned with Jest 30. Gate the version bump behind CI/unit tests to confirm no runtime issues.

---

256-261: Approve — confirm workspace @rocket.chat fuselage/icons/string-helpers version ranges

Versions in apps/meteor/package.json (lines 256–261) are aligned and reduce UI-kit skew; approve. Automated verification failed in the sandbox; confirm other workspace package.json files depend on compatible semver ranges for @rocket.chat/fuselage*, @rocket.chat/icons, and @rocket.chat/string-helpers to avoid duplicate bundles.

---

135-147: Resolved — @types/node 22.x aligns with pinned runtime

Root ./package.json pins engines.node and volta.node to 22.16.0, and apps/meteor (and other packages) use @types/node ~22.16.5 — alignment confirmed, no change required.

packages/http-router/package.json (3)

14-14: supertest ~7.1.4 — verify types by running typecheck/tests

packages/http-router/package.json lists supertest ~7.1.4 with @types/supertest ~6.0.3; run the package's typecheck (npm run typecheck) and unit tests to confirm there are no SuperTest vs TestAgent type mismatches.

---

11-11: Tilde‑pin for @types/supertest looks OK — confirm import style in tests

packages/http-router/package.json shows "@types/supertest": "~6.0.3" and "supertest": "~7.1.4". Sandbox repo search returned no import matches, so import-style compatibility couldn't be verified automatically. Run the local grep from the original comment to locate any 'supertest' imports; if TypeScript import errors occur, use import * as request from 'supertest' or enable esModuleInterop in tsconfig.

---

13-15: No change required — ts-jest 29.4.x is compatible with Jest 30.

ts-jest 29.4.0+ declares peerDependencies allowing jest ^29 || ^30; our repo uses ts-jest ~29.4.2, TypeScript ~5.9.2 (>=5.4) and Node >=18, so keeping jest ~30.1.3 is fine. (app.unpkg.com)

Reviewing files that changed from the base of the PR and between 9ab51b4 and 8258879.

• apps/meteor/client/views/audit/components/__snapshots__/AppInfoField.spec.tsx.snap is excluded by !**/*.snap
• apps/meteor/client/views/audit/components/__snapshots__/SecurityLogDisplayModal.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-client/src/components/AnnouncementBanner/__snapshots__/AnnouncementBanner.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageComposer/__snapshots__/MessageComposer.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageComposer/__snapshots__/MessageComposerHint.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-composer/src/MessageFooterCallout/__snapshots__/MessageFooterCallout.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfButton/__snapshots__/VideoConfButton.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfController/__snapshots__/VideoConfController.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-video-conf/src/VideoConfMessage/__snapshots__/VideoConfMessage.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipActionButton/__snapshots__/VoipActionButton.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipActions/__snapshots__/VoipActions.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipContactId/__snapshots__/VoipContactId.spec.tsx.snap is excluded by !**/*.snap
• packages/ui-voip/src/components/VoipPopup/__snapshots__/VoipPopup.spec.tsx.snap is excluded by !**/*.snap
• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

• apps/meteor/client/omnichannel/reports/components/BarChart.tsx (1 hunks)
• apps/meteor/ee/server/services/package.json (2 hunks)
• apps/meteor/package.json (15 hunks)
• apps/uikit-playground/package.json (2 hunks)
• ee/apps/account-service/package.json (1 hunks)
• ee/apps/authorization-service/package.json (1 hunks)
• ee/apps/ddp-streamer/package.json (2 hunks)
• ee/apps/omnichannel-transcript/package.json (2 hunks)
• ee/apps/presence-service/package.json (1 hunks)
• ee/apps/queue-worker/package.json (1 hunks)
• ee/apps/stream-hub-service/package.json (1 hunks)
• ee/packages/license/package.json (1 hunks)
• ee/packages/network-broker/package.json (1 hunks)
• ee/packages/omni-core-ee/package.json (1 hunks)
• ee/packages/omnichannel-services/package.json (2 hunks)
• ee/packages/pdf-worker/package.json (1 hunks)
• ee/packages/presence/package.json (1 hunks)
• ee/packages/ui-theming/package.json (1 hunks)
• package.json (1 hunks)
• packages/api-client/package.json (1 hunks)
• packages/apps-engine/package.json (2 hunks)
• packages/base64/package.json (1 hunks)
• packages/cas-validate/package.json (1 hunks)
• packages/core-services/package.json (2 hunks)
• packages/core-typings/package.json (1 hunks)
• packages/ddp-client/package.json (1 hunks)
• packages/eslint-config/package.json (1 hunks)
• packages/freeswitch/package.json (1 hunks)
• packages/fuselage-ui-kit/package.json (2 hunks)
• packages/gazzodown/package.json (3 hunks)
• packages/http-router/package.json (1 hunks)
• packages/i18n/package.json (1 hunks)
• packages/jest-presets/package.json (2 hunks)
• packages/jwt/package.json (1 hunks)
• packages/livechat/package.json (3 hunks)
• packages/message-parser/package.json (1 hunks)
• packages/message-types/package.json (1 hunks)
• packages/mock-providers/package.json (1 hunks)
• packages/models/package.json (1 hunks)
• packages/mongo-adapter/package.json (1 hunks)
• packages/omni-core/package.json (1 hunks)
• packages/password-policies/package.json (1 hunks)
• packages/patch-injection/package.json (1 hunks)
• packages/peggy-loader/package.json (1 hunks)
• packages/random/package.json (1 hunks)
• packages/release-action/package.json (1 hunks)
• packages/release-changelog/package.json (1 hunks)
• packages/rest-typings/package.json (1 hunks)
• packages/server-fetch/package.json (1 hunks)
• packages/sha256/package.json (1 hunks)
• packages/storybook-config/package.json (2 hunks)
• packages/tools/package.json (1 hunks)
• packages/tracing/package.json (1 hunks)
• packages/ui-avatar/package.json (1 hunks)
• packages/ui-client/package.json (2 hunks)
• packages/ui-composer/package.json (2 hunks)
• packages/ui-contexts/package.json (1 hunks)
• packages/ui-kit/package.json (1 hunks)
• packages/ui-video-conf/package.json (2 hunks)
• packages/ui-voip/package.json (2 hunks)
• packages/web-ui-registration/package.json (2 hunks)

• ee/packages/omni-core-ee/package.json

• packages/tools/package.json
• packages/patch-injection/package.json
• packages/tracing/package.json
• packages/cas-validate/package.json
• packages/rest-typings/package.json
• packages/base64/package.json
• apps/meteor/client/omnichannel/reports/components/BarChart.tsx
• ee/apps/presence-service/package.json
• packages/api-client/package.json
• ee/apps/account-service/package.json
• packages/release-changelog/package.json
• apps/meteor/ee/server/services/package.json
• packages/ui-video-conf/package.json
• packages/gazzodown/package.json
• ee/packages/network-broker/package.json
• packages/ui-contexts/package.json
• packages/livechat/package.json
• packages/storybook-config/package.json
• packages/core-services/package.json
• ee/packages/ui-theming/package.json
• packages/message-parser/package.json
• packages/ui-voip/package.json
• ee/apps/omnichannel-transcript/package.json
• ee/apps/queue-worker/package.json
• packages/message-types/package.json
• packages/i18n/package.json
• packages/core-typings/package.json
• packages/mock-providers/package.json
• packages/server-fetch/package.json
• package.json
• packages/ui-kit/package.json
• ee/apps/authorization-service/package.json
• packages/http-router/package.json
• packages/password-policies/package.json
• ee/packages/omnichannel-services/package.json
• packages/peggy-loader/package.json
• packages/random/package.json
• ee/packages/presence/package.json
• packages/ddp-client/package.json
• packages/apps-engine/package.json
• packages/eslint-config/package.json
• ee/apps/ddp-streamer/package.json
• ee/packages/license/package.json
• packages/jwt/package.json
• ee/apps/stream-hub-service/package.json
• packages/freeswitch/package.json
• packages/omni-core/package.json
• packages/ui-client/package.json
• packages/jest-presets/package.json
• packages/ui-avatar/package.json
• packages/ui-composer/package.json
• apps/uikit-playground/package.json
• ee/packages/pdf-worker/package.json
• packages/web-ui-registration/package.json

packages/release-action/package.json (1)

13-15: Confirm action Node runtime and align @types/node

• Checked: packages/release-action/action.yml — no runs.using node declared.
• Checked: packages/release-action/tsconfig.json — target: "esnext"; "lib" and "types" are commented.
• Checked: .github/workflows — no setup-node node-version found.
• Action: confirm whether this action runs on Node 22 or Node 20. If Node 22, add "engines.node": ">=22" to packages/release-action/package.json (keep @types/node ~22.16.5). If Node 20, replace @types/node with a Node20-compatible version.

packages/models/package.json (2)

11-11: Jest 30 bump looks aligned — preset updated, but CI Node and ts-jest/legacy transforms require verification.

• Most packages use jest ~30.1.3 with @types/jest ~30.0.0; internal preset at packages/jest-presets/package.json is ~30.1.3.
• Root package.json has no volta/engines, no .nvmrc/.node-version, and no setup-node workflow found — CI Node version is not verifiable here; confirm CI/Volta Node meets Jest 30’s Node requirement.
• Could not conclusively detect ts-jest or legacy jest transform usage in the sandbox — verify there are no ts-jest deps or custom transform entries in package.json/jest config before merging.

---

19-19: Approve: tilde-pin @rocket.chat/string-helpers to ~0.32.x — verify API changes from 0.31.x

• Tilde pin reduces risk; 0.x can be breaking. Sandbox verification here failed to enumerate imports (ripgrep skipped files) and tsc --noEmit could not run; packages/models/package.json shows name "@rocket.chat/models" and TypeScript ~5.9.2.
• Action: Locally run: rg -n --hidden -S -g '!/node_modules/' '@rocket.chat/string-helpers' to list usages, and in packages/models run npx -y typescript@~5.9.2 --noEmit to confirm no type errors or missing/renamed exports.

packages/sha256/package.json (1)

17-19: Approve — Babel preset/core alignment confirmed.
packages/jest-presets/package.json: no @babel/core or @babel/preset-env in peerDependencies/dependencies/devDependencies; 7.28.x bumps are non-breaking.

apps/meteor/package.json (11)

225-225: @babel/runtime ~7.28—good to keep in sync with core.

No action; just noting parity with devDeps.

---

317-317: xmldom ~0.8.11—security improvement.

Good move; older versions had CVEs. No action.

---

69-74: Babel toolchain bumps — OK; no runtime @babel/register references found.

Search returned @babel/register only in apps/meteor/package.json (line 73) and yarn.lock (entry for 7.28.3); no require/import/--require occurrences detected. Verify test/startup CLI or config (e.g., mocha --require @babel/register) still load the intended package if you rely on runtime transpilation.

---

256-259: Fuselage/fuselage-hooks bumps—UI surface area check.

Scan for removed tokens/components between 0.65→0.66 and hooks 0.36→0.37 (e.g., useMediaQuery signatures).

---

190-190: Jest 30 — confirm presets & transformers

Found "jest": "~30.1.3" and imports of '@rocket.chat/jest-presets' (apps/meteor/package.json; apps/meteor/jest.config.ts). Verify the workspace @rocket.chat/jest-presets package and any custom transformers (ts-jest / babel-jest / custom) are compatible with Jest v30 and update them if not.

---

266-266: Icons ~0.44 — verify icon-name compatibility

rg found Icon usages in apps/meteor: client/components/deviceManagement/LoggedOutBanner.tsx (warning), client/components/message/content/location/MapViewFallback.tsx (map-pin), client/components/message/IgnoredContent.tsx (chevron-left), client/components/deviceManagement/DeviceIcon.tsx (dynamic via iconMap, fallback 'globe'), client/components/connectionStatus/ConnectionStatusBar.tsx (warning). Confirm these names weren’t renamed/removed in @rocket.chat/icons v0.44 (check changelog) and run Storybook + e2e.

---

135-135: Align @types/node with runtime Node (22.16.0)
engines and volta both pin Node to 22.16.0, but package.json requires "@types/node": "~22.16.5" — change @types/node to "~22.16.0" (or update engines/volta to match) to avoid type/runtime divergence.
File: apps/meteor/package.json: line 135

---

235-235: @node-oauth/oauth2-server 5.2.1 — verify API compatibility.

Repo imports types from the fork and implements the OAuth model/handlers — smoke-test token, refresh, authorize (and userinfo/introspect) flows; verify there are no type/API mismatches with the pinned fork versus @types/oauth2-server (^3.0.18). Relevant files: apps/meteor/server/oauth2-server/model.ts, apps/meteor/server/oauth2-server/oauth.ts, apps/meteor/app/oauth2-server-config/server/oauth/oauth2-server.ts, apps/meteor/package.json.

---

178-183: Verify ESLint peer compatibility — confirm project's ESLint version

Registry checks show: eslint-plugin-testing-library → eslint ^8.57.0 || ^9.0.0; eslint-plugin-playwright → eslint >=8.40.0; eslint-plugin-react → includes ^9.7; eslint-config-prettier → eslint >=7.0.0. apps/meteor/package.json was not found in the repo — confirm the ESLint version there; if it’s <=8.45, upgrade to >=8.57 or pin compatible plugin versions to avoid resolver/resolution errors.

---

452-454: typia TS peer OK; verify ua-parser-js ESM/CJS interop

• typia: yarn.lock shows typia requires TypeScript >=4.8 <5.10 and the repo packages declare "typescript": "~5.9.2" — no TS-minimum conflict.
• ua-parser-js (~1.0.41) is used with mixed import styles (default and named). Key occurrences: apps/meteor/app/livechat/server/lib/guests.ts, apps/meteor/app/statistics/server/lib/SAUMonitor.ts, apps/meteor/app/statistics/server/lib/UAParserCustom.js, apps/meteor/client/views/omnichannel/.../VisitorClientInfo.tsx, apps/meteor/ee/server/lib/deviceManagement/session.ts, apps/meteor/server/routes/avatar/middlewares/browserVersion.ts. Confirm your build/runtime (webpack/meteor) resolves v1.0.41; if not, unify imports to the package’s actual export shape or switch to require()/interop shim.

---

463-464: Zustand ~5.0.8 — verify selector equality & persist/devtools after bump

apps/meteor/package.json pins zustand ~5.0.8; repo uses create/useShallow/StoreApi/UseBoundStore across client code and I did not find persist/devtools middleware usage under apps/meteor. If this is a v4→v5 migration, v5 removes create's custom-equality support (use createWithEqualityFn for shallow/custom equality) and changed persist middleware behavior — audit selectors that rely on custom equality and any persist/devtools usage before merging; if the codebase is already on v5, a patch bump is fine. (zustand.docs.pmnd.rs)

packages/fuselage-ui-kit/package.json (3)

48-51: Babel preset/core bump is OK — repo Babel versions are aligned.

All @babel packages are within the ~7.27.x–~7.28.x range (e.g. @babel/core ~7.28.4, @babel/preset-env ~7.28.3, @babel/preset-react/~preset-typescript ~7.27.1), so no further changes required.

---

77-81: Testing Library v16 (DOM v10) — run tests and fix affected specs

• package.json uses @testing-library/react ~16.3.0; scan found async queries + userEvent in tests (examples: packages/fuselage-ui-kit/src/elements/UsersSelectElement/UserSelectElement.spec.tsx, ChannelsSelectElement/.{spec,tsx}, UsersSelectElement/MultiUsersSelectElement.spec.tsx, ChannelsSelectElement/MultiChannelsSelectElement.spec.tsx, src/hooks/.spec.tsx).
• Action: run the test suite; expect fixes for stricter query behavior and user-event timing. Common changes: migrate to userEvent.setup(), await interactions, prefer findBy*/waitFor for async assertions, and remove deprecated APIs.

---

86-86: Jest 30 adoption — preset already targets Jest 30; no action required.

packages/jest-presets/package.json pins "jest": "~30.1.3" and jest-environment-jsdom/node "~30.1.2", and repository jest.config.ts files import @rocket.chat/jest-presets and use current keys (preset, setupFilesAfterEnv, transformIgnorePatterns, moduleNameMapper) — compatible.