chore: update demo router dependency

[Noroth]

After upgrading the router with the arena branch we also need to upgrade the dependencies.

Summary by CodeRabbit

• Chores
  • Updated several dependencies (router, ristretto, redis client, GraphQL tooling) to newer compatible versions for improved stability and security.
• Chore / Compatibility
  • No changes to public/exported interfaces or signatures; existing integrations remain unaffected.

Checklist

• I have discussed my proposed changes in an issue and have received approval to proceed.
• I have followed the coding standards of the project.
• Tests or benchmarks have been added or updated.
• Documentation has been updated on https://github.com/wundergraph/cosmo-docs.
• I have read the Contributors Guide.

[coderabbitai]

Walkthrough

Updated dependency versions in demo/go.mod and router-tests/go.mod: bumped github.com/wundergraph/cosmo/router and router-tests commit refs; indirect bumps for ristretto/v2, redis/go-redis/v9, and graphql-go-tools/v2. No exported API/signature changes.

Changes

Cohort / File(s)	Summary
Demo module manifest demo/go.mod	Updated github.com/wundergraph/cosmo/router and router-tests commit refs; indirect bumps: github.com/dgraph-io/ristretto/v2 (v2.1.0 → v2.4.0), github.com/redis/go-redis/v9 (v9.4.0 → v9.7.3), github.com/vektah/graphql-go-tools/v2 (v2.0.0-rc.245 → v2.0.0-rc.248). No exported signatures changed.
Router-tests manifest router-tests/go.mod	Updated github.com/wundergraph/cosmo/router require entry to newer commit ref; no other semantic changes.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• chore(demo): update demo module router dependencies #2364: Updates the same demo/go.mod router and related demo dependency require lines.
• fix: go.mod references to security merge commit #2048: Changes the github.com/wundergraph/cosmo/router commit reference in go.mod files.
• fix: fix merging fetches and add dependencies update #2053: Adjusts router and graphql-go-tools versions in go.mod entries.

🚥 Pre-merge checks | ✅ 4

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: updating the router dependency version in demo configuration files (demo/go.mod and router-tests/go.mod).
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Merge Conflict Detection	✅ Passed	✅ No merge conflicts detected when merging into main

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

No actionable comments were generated in the recent review. 🎉

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Aenimus]

LGTM!

[github-actions]

Router-nonroot image scan passed

✅ No security vulnerabilities found in image:

ghcr.io/wundergraph/cosmo/router:sha-0637cb3739582b0d836747e8f3e25495c7b8ec2a-nonroot

[coderabbitai]

Actionable comments posted: 1

🤖 Fix all issues with AI agents

In `@demo/go.mod`:
- Around line 14-15: The demo/go.mod currently pins
github.com/wundergraph/cosmo/router to a newer pseudo-version than
github.com/wundergraph/cosmo/router-tests, causing Go to resolve a different
router version transitively; update the router-tests dependency in demo/go.mod
to github.com/wundergraph/cosmo/router-tests v0.0.0-20260211105507-4b780feecf49
(the version that requires the Feb 11 router) so both router and router-tests
align, then run `go mod tidy` to ensure the dependency graph is consistent and
verify builds/tests succeed; alternatively, if you intentionally want to keep
the Feb 13 router, explicitly confirm compatibility and document the decision in
the commit message.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 61.43%. Comparing base (9743345) to head (2d6363f).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2504      +/-   ##
==========================================
- Coverage   61.78%   61.43%   -0.36%     
==========================================
  Files         231      231              
  Lines       24126    24126              
==========================================
- Hits        14907    14822      -85     
- Misses       7974     8039      +65     
- Partials     1245     1265      +20     

see 18 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.