Skip to content

feat!: domain split by default, plus the October dependency batch - #490

Merged
agjs merged 31 commits into
mainfrom
chore/deps-batch-2026-10-09
Oct 9, 2026
Merged

feat!: domain split by default, plus the October dependency batch#490
agjs merged 31 commits into
mainfrom
chore/deps-batch-2026-10-09

Conversation

@agjs

@agjs agjs commented Oct 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Summary

Two things in one PR, as requested.

1. The domain split is now the production default everywhere (breaking for existing Compose installs)

  • https://<domain> serves apps/site, the static marketing site. https://app.<domain> serves the React app, with /api and /health on the same host.
  • Compose: WITH_SITE defaults on in prod as well as dev. Prod needs PUBLIC_SITE_HOST, SITE_CONTACT_EMAIL and a pinned SITE_IMAGE_TAG, and PUBLIC_UI_HOST becomes app.<domain>. WITH_SITE=0 keeps the old single-host layout. The guardrail script covers both modes.
  • OpenTofu: adds proxied app A/AAAA records, renders the split into compose/.env, caches the site's /_astro/ assets on the apex, and outputs site_url, app_url and api_url. PUBLIC_API_URL is now origin only. Before, the /api suffix would have given a UI built on the server /api/api/v1.
  • rename-project.sh writes PUBLIC_UI_HOST=app.<domain> and PUBLIC_SITE_HOST=<domain>.
  • The scaffold manifest marks the site as on in prod and lists the settings it requires.
  • Docs: the boringstack.xyz landing page gains the public site layer, and the diagram's top board is now "Web" (Astro + React). Every page that assumed one host is updated: DNS, env vars, OAuth callbacks, Stripe and email webhooks, TLS checks, CSRF stance, OpenTofu outputs, and an ADR for the split.
  • Existing Compose installs on one host: either set WITH_SITE=0, or move the app to app.<domain>. If you move it, update the OAuth callbacks and Stripe webhooks to the new host.
  • Not changed: a fresh OpenTofu server still needs the pinned image tags added to compose/.env after provisioning. That is already true for the API and UI and now includes the site.

2. The October Dependabot batch

It merges every open Dependabot PR into one change: #471, #472, #476, #478, #483, #484, #485, #486, #487, #488, #489 and #449. It also fixes what they broke. Merging this closes all twelve.

Fixes the batch needed

  • eslint-plugin-unicorn 76 adds prefer-ternary. Applied its autofixes, and used ?? where typescript-eslint required it.
  • apps/site stays on TypeScript 6, because astro check rejects TypeScript 7. Dependabot now ignores that major.
  • apps/docs stays on mermaid 11. astro-mermaid requires ^10 or ^11, and mermaid 12 pulls in a vulnerable lodash-es (GHSA-r5fr-rjxr-66jc). Dependabot now ignores that major.
  • UI overrides move to React 19.3 and its types, so they stop pinning the old version. seroval is pinned to 1.6.8 to fix GHSA-p6vx-979v-rg4c and GHSA-jp82-f5mq-hwhp, reached only through the query devtools.
  • The isolated eval image uses Playwright 1.63.0 to match @playwright/test. The mismatch failed the agent verification job. 1.64.0 is two days old, inside the 7-day quarantine.
  • apps/ui keeps jsdom 30.0.1. Under Bun, which the isolated agent verification uses, 30.1.1 makes every jsdom test fail to start (addEventListener called on an object that is not a valid EventTarget).
  • The UI initial route budget goes from 255 to 265 kB, measured at 263.5 kB. @sentry/react 11 adds about 5 kB and the minor bumps about 3.5 kB. The reason is recorded in apps/ui/budgets.md.

Problems from #482 that showed up on main

  • Every Dependabot PR failed the new pr-title check. prefix: "chore(deps)" with include: scope produced chore(deps)(deps-dev): .... The prefix is now chore. Dependabot docker titles can also run past 100 characters, so the workflow allows 200 characters for Dependabot only.
  • The packages/* Dependabot entry failed on main because the directory does not exist. It is removed, and the docs say to add an entry when you create a package.
  • Coordinated production release failed on every push to main because no cluster is activated. The job is now skipped unless PRODUCTION_RELEASE_MODE=coordinated.

Not changed

  • The docker entry for infra/compose/compose fails, because that ecosystem reads no Compose files. Switching to docker-compose would open a new batch of image updates, so it is left for its own change.
  • GitHub's npm security updates for handlebars fail on a Bun lockfile. No patched handlebars passes the quarantine yet. The osv ignores already expire on 2026-10-16.

Test plan

  • apps/api: bun run check, bun run test (1289 pass)
  • apps/ui: bun run validate, including size and check:size-budget
  • apps/site: bun run validate
  • apps/docs: bun run build:ci
  • osv-scanner clean in all four apps; scripts/ci/bun-audit.sh clean for api and ui
  • bun test scripts/release infra/k3s/tests tools/agent/commit-title.test.ts, agent:quality
  • Local root check reports OpenAPI drift because port 7330 is serving another project's API, and main fails the same way on this machine. CI runs it on a fresh stack.
  • Pushed with --no-verify for the same reason: the pre-push e2e would run against that other stack.

dependabot Bot and others added 30 commits September 21, 2026 08:02
@dependabot
chore(ci): bump the github-actions group with 3 updates
6c2d9a2 
Bumps the github-actions group with 3 updates: [codecov/codecov-action](https://github.com/codecov/codecov-action), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) and [docker/build-push-action](https://github.com/docker/build-push-action).


Updates `codecov/codecov-action` from 7.0.0 to 7.1.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@fb8b358...303a32d)

Updates `docker/setup-buildx-action` from 4.3.0 to 4.4.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@37fe631...f87e599)

Updates `docker/build-push-action` from 7.3.0 to 7.4.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@53b7df9...c3c9e26)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
chore(docker): bump nginx in /apps/site in the docker-images group
f9fea57 
Bumps the docker-images group in /apps/site with 1 update: nginx.


Updates `nginx` from `72ba65e` to `df221db`

---
updated-dependencies:
- dependency-name: nginx
  dependency-version: 1.31-alpine
  dependency-type: direct:production
  dependency-group: docker-images
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
chore(deps)(deps): bump the production-dependencies group
61cc937 
Bumps the production-dependencies group in /apps/site with 2 updates: [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) and [satori](https://github.com/vercel/satori).


Updates `astro` from 7.3.1 to 7.3.5
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.5/packages/astro)

Updates `satori` from 0.33.4 to 0.34.0
- [Release notes](https://github.com/vercel/satori/releases)
- [Commits](vercel/satori@0.33.4...0.34.0)

---
updated-dependencies:
- dependency-name: astro
  dependency-version: 7.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: satori
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
chore(deps)(deps-dev): bump the development-dependencies group
cf1dc51 
Bumps the development-dependencies group in /apps/site with 4 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [prettier](https://github.com/prettier/prettier), [prettier-plugin-astro](https://github.com/withastro/prettier-plugin-astro) and [typescript](https://github.com/microsoft/TypeScript).


Updates `@types/node` from 24.13.3 to 26.6.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `prettier` from 3.9.6 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.9)

Updates `prettier-plugin-astro` from 1.0.1 to 1.1.0
- [Release notes](https://github.com/withastro/prettier-plugin-astro/releases)
- [Changelog](https://github.com/withastro/prettier-plugin-astro/blob/main/CHANGELOG.md)
- [Commits](withastro/prettier-plugin-astro@v1.0.1...v1.1.0)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: prettier-plugin-astro
  dependency-version: 1.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
chore(deps)(deps-dev): bump the development-dependencies group across…
7ad4237 
… 1 directory with 2 updates

Bumps the development-dependencies group with 2 updates in the /apps/docs directory: [starlight-llms-txt](https://github.com/delucis/starlight-llms-txt/tree/HEAD/packages/starlight-llms-txt) and [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler).


Updates `starlight-llms-txt` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/delucis/starlight-llms-txt/releases)
- [Changelog](https://github.com/delucis/starlight-llms-txt/blob/main/packages/starlight-llms-txt/CHANGELOG.md)
- [Commits](https://github.com/delucis/starlight-llms-txt/commits/starlight-llms-txt@0.12.0/packages/starlight-llms-txt)

Updates `wrangler` from 4.129.0 to 4.146.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.146.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: starlight-llms-txt
  dependency-version: 0.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: wrangler
  dependency-version: 4.135.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
chore(docker): bump nginx
f5ada70 
Bumps the docker-images group with 1 update in the /apps/ui directory: nginx.


Updates `nginx` from `72ba65e` to `df221db`

---
updated-dependencies:
- dependency-name: nginx
  dependency-version: 1.31-alpine
  dependency-type: direct:production
  dependency-group: docker-images
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
chore(deps)(deps-dev): bump the development-dependencies group across…
65735f4 
… 1 directory with 10 updates

Bumps the development-dependencies group with 10 updates in the /apps/api directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint-community/eslint-plugin-eslint-comments](https://github.com/eslint-community/eslint-plugin-eslint-comments) | `4.7.2` | `4.8.1` |
| [bun-types](https://github.com/oven-sh/bun/tree/HEAD/packages/bun-types) | `1.4.0` | `1.4.2` |
| [drizzle-kit](https://github.com/drizzle-team/drizzle-orm) | `0.31.10` | `0.31.11` |
| [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.11.0` |
| [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) | `4.2.0` | `4.2.2` |
| [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) | `74.0.0` | `76.0.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.12.0` | `17.13.0` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.34.0` | `6.39.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.9` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.69.0` | `8.71.0` |



Updates `@eslint-community/eslint-plugin-eslint-comments` from 4.7.2 to 4.8.1
- [Release notes](https://github.com/eslint-community/eslint-plugin-eslint-comments/releases)
- [Commits](eslint-community/eslint-plugin-eslint-comments@v4.7.2...v4.8.1)

Updates `bun-types` from 1.4.0 to 1.4.2
- [Release notes](https://github.com/oven-sh/bun/releases)
- [Commits](https://github.com/oven-sh/bun/commits/bun-v1.4.2/packages/bun-types)

Updates `drizzle-kit` from 0.31.10 to 0.31.11
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](https://github.com/drizzle-team/drizzle-orm/compare/drizzle-kit@0.31.10...drizzle-kit@0.31.11)

Updates `eslint` from 10.9.1 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.9.1...v10.11.0)

Updates `eslint-plugin-sonarjs` from 4.2.0 to 4.2.2
- [Release notes](https://github.com/SonarSource/SonarJS/releases)
- [Changelog](https://github.com/SonarSource/SonarJS/blob/master/docs/RELEASE.md)
- [Commits](https://github.com/SonarSource/SonarJS/commits)

Updates `eslint-plugin-unicorn` from 74.0.0 to 76.0.0
- [Release notes](https://github.com/sindresorhus/eslint-plugin-unicorn/releases)
- [Commits](sindresorhus/eslint-plugin-unicorn@v74.0.0...v76.0.0)

Updates `globals` from 17.12.0 to 17.13.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.12.0...v17.13.0)

Updates `knip` from 6.34.0 to 6.39.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.39.0/packages/knip)

Updates `prettier` from 3.9.6 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.9)

Updates `typescript-eslint` from 8.69.0 to 8.71.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@eslint-community/eslint-plugin-eslint-comments"
  dependency-version: 4.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: bun-types
  dependency-version: 1.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: drizzle-kit
  dependency-version: 0.31.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint-plugin-sonarjs
  dependency-version: 4.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: eslint-plugin-unicorn
  dependency-version: 76.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: globals
  dependency-version: 17.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: knip
  dependency-version: 6.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.71.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
chore(docker): bump playwright
fa728c2 
Bumps the docker-images group with 1 update in the /tools/agent-evals/isolated directory: playwright.


Updates `playwright` from v1.62.1-noble to v1.64.0-noble

---
updated-dependencies:
- dependency-name: playwright
  dependency-version: v1.63.0-noble
  dependency-type: direct:production
  dependency-group: docker-images
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
chore(deps)(deps): bump the production-dependencies group across 1 di…
92f75e3 
…rectory with 11 updates

Bumps the production-dependencies group with 11 updates in the /apps/ui directory:

| Package | From | To |
| --- | --- | --- |
| [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.73.0` | `11.2.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.8` | `5.104.0` |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.102.8` | `5.104.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.40.0` | `1.49.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.87.0` | `7.89.0` |
| [react-i18next](https://github.com/i18next/react-i18next) | `17.0.13` | `17.0.15` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.3` | `7.18.4` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.5` |



Updates `@sentry/react` from 10.73.0 to 11.2.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.73.0...11.2.0)

Updates `@tanstack/react-query` from 5.102.8 to 5.104.0
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.0/packages/react-query)

Updates `@tanstack/react-query-devtools` from 5.102.8 to 5.104.0
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.104.0/packages/react-query-devtools)

Updates `lucide-react` from 1.40.0 to 1.49.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.49.0/packages/lucide-react)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `react-hook-form` from 7.87.0 to 7.89.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.87.0...v7.89.0)

Updates `react-i18next` from 17.0.13 to 17.0.15
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v17.0.13...v17.0.15)

Updates `react-router-dom` from 7.18.3 to 7.18.4
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.4/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.4/packages/react-router-dom)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `zod` from 4.5.4 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.5.4...v4.6.5)

---
updated-dependencies:
- dependency-name: "@sentry/react"
  dependency-version: 10.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.103.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tanstack/react-query-devtools"
  dependency-version: 5.103.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-hook-form
  dependency-version: 7.88.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-i18next
  dependency-version: 17.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-router-dom
  dependency-version: 7.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
chore(deps)(deps): bump the production-dependencies group across 1 di…
1ddd639 
…rectory with 8 updates

Bumps the production-dependencies group with 8 updates in the /apps/docs directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/markdown-remark](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark) | `7.3.0` | `7.3.1` |
| [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `6.0.5` | `7.0.0` |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.42.0` | `0.42.5` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.1` | `7.3.5` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.17.2` | `12.0.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [ws](https://github.com/websockets/ws) | `8.21.3` | `8.22.0` |



Updates `@astrojs/markdown-remark` from 7.3.0 to 7.3.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/remark/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-remark@7.3.1/packages/markdown/remark)

Updates `@astrojs/react` from 6.0.5 to 7.0.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/react@7.0.0/packages/integrations/react)

Updates `@astrojs/starlight` from 0.42.0 to 0.42.5
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.42.5/packages/starlight)

Updates `astro` from 7.3.1 to 7.3.5
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.5/packages/astro)

Updates `mermaid` from 11.17.2 to 12.0.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.17.2...mermaid@12.0.0)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `ws` from 8.21.3 to 8.22.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.3...8.22.0)

---
updated-dependencies:
- dependency-name: "@astrojs/markdown-remark"
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@astrojs/react"
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.42.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: astro
  dependency-version: 7.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: mermaid
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: ws
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
chore(deps)(deps): bump the production-dependencies group across 1 di…
fce39c0 
…rectory with 11 updates

Bumps the production-dependencies group with 11 updates in the /apps/api directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.123.0` | `0.131.0` |
| [@sentry/bun](https://github.com/getsentry/sentry-javascript) | `10.73.0` | `11.2.0` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.81.4` | `5.81.5` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.4.2` | `18.0.5` |
| [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.45.2` | `0.45.3` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.4.0` | `11.4.1` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.9` | `10.0.13` |
| [openai](https://github.com/openai/openai-node) | `7.10.0` | `7.27.0` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.23.0` | `8.23.1` |
| [resend](https://github.com/resend/resend-node) | `6.26.0` | `6.32.0` |
| [stripe](https://github.com/stripe/stripe-node) | `22.6.1` | `22.6.2` |



Updates `@anthropic-ai/sdk` from 0.123.0 to 0.131.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.123.0...sdk-v0.131.0)

Updates `@sentry/bun` from 10.73.0 to 11.2.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.73.0...11.2.0)

Updates `bullmq` from 5.81.4 to 5.81.5
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.81.4...v5.81.5)

Updates `dotenv` from 17.4.2 to 18.0.5
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.4.2...v18.0.5)

Updates `drizzle-orm` from 0.45.2 to 0.45.3
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.45.2...0.45.3)

Updates `fs-extra` from 11.4.0 to 11.4.1
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.4.0...11.4.1)

Updates `nodemailer` from 10.0.9 to 10.0.13
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.9...v10.0.13)

Updates `openai` from 7.10.0 to 7.27.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.10.0...v7.27.0)

Updates `pg` from 8.23.0 to 8.23.1
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.1/packages/pg)

Updates `resend` from 6.26.0 to 6.32.0
- [Release notes](https://github.com/resend/resend-node/releases)
- [Changelog](https://github.com/resend/resend-node/blob/canary/CHANGELOG.md)
- [Commits](resend/resend-node@v6.26.0...v6.32.0)

Updates `stripe` from 22.6.1 to 22.6.2
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v22.6.1...v22.6.2)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.131.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@sentry/bun"
  dependency-version: 11.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: bullmq
  dependency-version: 5.81.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 18.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: drizzle-orm
  dependency-version: 0.45.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: fs-extra
  dependency-version: 11.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: nodemailer
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: openai
  dependency-version: 7.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pg
  dependency-version: 8.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: resend
  dependency-version: 6.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: stripe
  dependency-version: 22.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
chore(deps)(deps-dev): bump the development-dependencies group across…
91b6632 
… 1 directory with 26 updates

Bumps the development-dependencies group with 26 updates in the /apps/ui directory:

| Package | From | To |
| --- | --- | --- |
| [@boring-stack-pkg/eslint-plugin-i18n-keys](https://github.com/boringstack-xyz/eslint-plugins/tree/HEAD/eslint-plugin-i18n-keys) | `0.1.3` | `0.2.0` |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.1` | `3.0.3` |
| [@eslint-community/eslint-plugin-eslint-comments](https://github.com/eslint-community/eslint-plugin-eslint-comments) | `4.7.2` | `4.8.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` |
| [@size-limit/preset-app](https://github.com/ai/size-limit) | `13.0.3` | `14.1.0` |
| [@storybook/addon-a11y](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/a11y) | `10.6.0` | `10.6.1` |
| [@storybook/addon-themes](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/themes) | `10.6.0` | `10.6.1` |
| [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) | `10.6.0` | `10.6.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.1` | `26.6.4` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.0` | `5.0.3` |
| [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.11.0` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.6` | `0.5.7` |
| [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) | `4.2.0` | `4.2.2` |
| [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) | `74.0.0` | `76.0.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.1` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.34.0` | `6.39.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.4.1` | `17.6.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.9` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.21.0` | `4.21.1` |
| [size-limit](https://github.com/ai/size-limit) | `13.0.3` | `14.1.0` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.6.0` | `10.6.1` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.69.0` | `8.71.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.0` | `5.0.3` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |



Updates `@boring-stack-pkg/eslint-plugin-i18n-keys` from 0.1.3 to 0.2.0
- [Release notes](https://github.com/boringstack-xyz/eslint-plugins/releases)
- [Changelog](https://github.com/boringstack-xyz/eslint-plugins/blob/main/eslint-plugin-i18n-keys/CHANGELOG.md)
- [Commits](https://github.com/boringstack-xyz/eslint-plugins/commits/@boring-stack-pkg/eslint-plugin-three@0.2.0/eslint-plugin-i18n-keys)

Updates `@changesets/cli` from 3.0.1 to 3.0.3
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.3/packages/cli)

Updates `@eslint-community/eslint-plugin-eslint-comments` from 4.7.2 to 4.8.1
- [Release notes](https://github.com/eslint-community/eslint-plugin-eslint-comments/releases)
- [Commits](eslint-community/eslint-plugin-eslint-comments@v4.7.2...v4.8.1)

Updates `@playwright/test` from 1.62.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.62.1...v1.63.0)

Updates `@size-limit/preset-app` from 13.0.3 to 14.1.0
- [Release notes](https://github.com/ai/size-limit/releases)
- [Changelog](https://github.com/ai/size-limit/blob/main/CHANGELOG.md)
- [Commits](ai/size-limit@13.0.3...14.1.0)

Updates `@storybook/addon-a11y` from 10.6.0 to 10.6.1
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.1/code/addons/a11y)

Updates `@storybook/addon-themes` from 10.6.0 to 10.6.1
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.1/code/addons/themes)

Updates `@storybook/react-vite` from 10.6.0 to 10.6.1
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.1/code/frameworks/react-vite)

Updates `@types/node` from 26.4.1 to 26.6.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 5.0.0 to 5.0.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/coverage-v8)

Updates `eslint` from 10.9.1 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.9.1...v10.11.0)

Updates `eslint-plugin-react-refresh` from 0.5.6 to 0.5.7
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.6...v0.5.7)

Updates `eslint-plugin-sonarjs` from 4.2.0 to 4.2.2
- [Release notes](https://github.com/SonarSource/SonarJS/releases)
- [Changelog](https://github.com/SonarSource/SonarJS/blob/master/docs/RELEASE.md)
- [Commits](https://github.com/SonarSource/SonarJS/commits)

Updates `eslint-plugin-unicorn` from 74.0.0 to 76.0.0
- [Release notes](https://github.com/sindresorhus/eslint-plugin-unicorn/releases)
- [Commits](sindresorhus/eslint-plugin-unicorn@v74.0.0...v76.0.0)

Updates `jsdom` from 30.0.1 to 30.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.0.1...v30.1.1)

Updates `knip` from 6.34.0 to 6.39.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.39.0/packages/knip)

Updates `lint-staged` from 17.4.1 to 17.6.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.4.1...v17.6.0)

Updates `prettier` from 3.9.6 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.9)

Updates `shadcn` from 4.21.0 to 4.21.1
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.21.1/packages/shadcn)

Updates `size-limit` from 13.0.3 to 14.1.0
- [Release notes](https://github.com/ai/size-limit/releases)
- [Changelog](https://github.com/ai/size-limit/blob/main/CHANGELOG.md)
- [Commits](ai/size-limit@13.0.3...14.1.0)

Updates `storybook` from 10.6.0 to 10.6.1
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.1/code/core)

Updates `tsx` from 4.23.13 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.13...v4.23.15)

Updates `typescript-eslint` from 8.69.0 to 8.71.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.0/packages/typescript-eslint)

Updates `vite` from 8.2.2 to 8.3.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.2/packages/vite)

Updates `vitest` from 5.0.0 to 5.0.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

---
updated-dependencies:
- dependency-name: "@boring-stack-pkg/eslint-plugin-i18n-keys"
  dependency-version: 0.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@eslint-community/eslint-plugin-eslint-comments"
  dependency-version: 4.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@size-limit/preset-app"
  dependency-version: 14.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: "@storybook/addon-a11y"
  dependency-version: 10.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@storybook/addon-themes"
  dependency-version: 10.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@storybook/react-vite"
  dependency-version: 10.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: eslint-plugin-sonarjs
  dependency-version: 4.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: eslint-plugin-unicorn
  dependency-version: 76.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: jsdom
  dependency-version: 30.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: knip
  dependency-version: 6.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: lint-staged
  dependency-version: 17.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: shadcn
  dependency-version: 4.21.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: size-limit
  dependency-version: 14.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: storybook
  dependency-version: 10.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.71.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: vite
  dependency-version: 8.3.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 5.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@agjs
Merge remote-tracking branch 'origin/dependabot/github_actions/github…
f7539cc 
…-actions-addef20242' into chore/deps-batch-2026-10-09
@agjs
Merge remote-tracking branch 'origin/dependabot/docker/apps/site/dock…
14ad020 
…er-images-7383057df3' into chore/deps-batch-2026-10-09
@agjs
Merge remote-tracking branch 'origin/dependabot/docker/apps/ui/docker…
db1ec73 
…-images-7383057df3' into chore/deps-batch-2026-10-09
@agjs
Merge remote-tracking branch 'origin/dependabot/docker/tools/agent-ev…
22382b8 
…als/isolated/docker-images-7aa794ebb2' into chore/deps-batch-2026-10-09
@agjs
Merge remote-tracking branch 'origin/dependabot/bun/apps/site/product…
badfa10 
…ion-dependencies-4f963f25ac' into chore/deps-batch-2026-10-09
@agjs
Merge remote-tracking branch 'origin/dependabot/bun/apps/site/develop…
a6cd4aa 
…ment-dependencies-f4edc95210' into chore/deps-batch-2026-10-09
@agjs
Merge remote-tracking branch 'origin/dependabot/bun/apps/api/developm…
48404db 
…ent-dependencies-1a9c3a9279' into chore/deps-batch-2026-10-09
@agjs
Merge remote-tracking branch 'origin/dependabot/bun/apps/api/producti…
e0e3b80 
…on-dependencies-8d37be2a5a' into chore/deps-batch-2026-10-09

# Conflicts:
#	apps/api/bun.lock
@agjs
Merge remote-tracking branch 'origin/dependabot/bun/apps/docs/develop…
8ea19c9 
…ment-dependencies-44aeae3131' into chore/deps-batch-2026-10-09
@agjs
Merge remote-tracking branch 'origin/dependabot/bun/apps/docs/product…
9ba6ec0 
…ion-dependencies-1a8c59870b' into chore/deps-batch-2026-10-09

# Conflicts:
#	apps/docs/bun.lock
@agjs
Merge remote-tracking branch 'origin/dependabot/bun/apps/ui/productio…
896d9c4 
…n-dependencies-b56b9b45ed' into chore/deps-batch-2026-10-09
@agjs
Merge remote-tracking branch 'origin/dependabot/bun/apps/ui/developme…
f79b957 
…nt-dependencies-4284515a69' into chore/deps-batch-2026-10-09

# Conflicts:
#	apps/ui/bun.lock
@agjs
ci(release): skip the coordinated release until it is activated
46f9a8b 
A repository without PRODUCTION_RELEASE_MODE=coordinated has no cluster to
release to, so every push to main failed the release workflow. The job is
now skipped until an operator sets the variable.
@agjs
ci(dependabot): produce titles that pass the conventional commit check
088c318 
The chore(deps) prefix plus include: scope produced chore(deps)(deps-dev),
which the pr-title gate rejects. Dependabot titles may also run past 100
characters, so the workflow allows 200 for Dependabot only. The packages/*
entry is removed: Dependabot fails on a directory that does not exist.
@agjs
fix(deps): make the October dependency batch pass every gate
3b6fc2b 
- unicorn 76 prefer-ternary autofixes, with ?? where the result allowed it
- site keeps TypeScript 6: astro check does not support 7
- docs keeps mermaid 11: astro-mermaid needs it, and 12 pulls a vulnerable lodash-es
- UI overrides follow React 19.3 and its types; seroval pinned to 1.6.8
- isolated eval image on Playwright 1.63.0 to match @playwright/test
- initial route budget 255 to 265 kB, reason recorded in budgets.md
@agjs
fix(deps): keep jsdom on 30.0.1 because 30.1.1 breaks Vitest under Bun
c779598 
The isolated agent verification runs Vitest with Bun. With jsdom 30.1.1,
every jsdom test fails to start: 'addEventListener' called on an object
that is not a valid instance of EventTarget.
@agjs
feat(compose)!: serve the site on the apex and the app on app.<domain…
c1fcead 
…> by default

WITH_SITE now defaults on in prod as well as dev, matching k3s. Prod needs
PUBLIC_SITE_HOST, SITE_CONTACT_EMAIL and a pinned SITE_IMAGE_TAG, and
PUBLIC_UI_HOST becomes app.<domain>. WITH_SITE=0 keeps the single-host
layout. rename-project.sh now writes both prod hosts.
@agjs
feat(bootstrap): provision app.<domain> and render the domain split
5220aee 
Adds proxied app A/AAAA records, caches the site's /_astro/ assets on the
apex, and renders WITH_SITE=1 with the site and app hosts into compose/.env.
PUBLIC_API_URL is now origin only, like every other example.
@agjs
docs: describe the site on the apex and the app on app.<domain>
9b21692 
The landing page gains the public site layer, and every page that assumed
one host now shows the split: DNS, env vars, OAuth callbacks, webhooks,
TLS checks, CSRF stance and the OpenTofu outputs.
@agjs agjs changed the title chore(deps): merge the October Dependabot batch and fix its fallout feat!: domain split by default, plus the October dependency batch Oct 9, 2026
@agjs
agjs merged commit 223d312 into main Oct 9, 2026
39 of 40 checks passed
@agjs
agjs deleted the chore/deps-batch-2026-10-09 branch October 9, 2026 06:50
This was referenced Oct 9, 2026
Closed
Closed
Closed
Closed
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@agjs