chore(deps): refresh compatible JavaScript dependencies (#46057)

package.json

@@ -38,5 +38,5 @@
   "engines": {
     "node": "^24.22.1"
   },
-  "packageManager": "pnpm@12.16.1"
+  "packageManager": "pnpm@12.18.0"
 }

pnpm-workspace.yaml

@@ -70,8 +70,8 @@ overrides:
   yaml@>=2.0.0 <2.8.3: 2.9.1
   yauzl@<3.2.1: 3.2.1
 catalog:
-  '@amplitude/analytics-browser': 2.48.1
-  '@amplitude/plugin-session-replay-browser': 1.36.5
+  '@amplitude/analytics-browser': 2.49.2
+  '@amplitude/plugin-session-replay-browser': 1.36.7
   '@axe-core/playwright': 4.14.0
   '@base-ui/react': 1.9.0
   '@base-ui/utils': 0.5.0
@@ -86,9 +86,9 @@ catalog:
   '@formatjs/intl-localematcher': 0.9.0
   '@heroicons/react': 2.2.0
   '@hey-api/openapi-ts': 0.99.0
-  '@hono/node-server': 2.1.5
+  '@hono/node-server': 2.1.6
   '@iconify-json/heroicons': 1.2.3
-  '@iconify-json/logos': 1.2.18
+  '@iconify-json/logos': 1.2.19
   '@iconify-json/ri': 1.2.10
   '@lexical/code': 0.47.0
   '@lexical/link': 0.47.0
@@ -97,45 +97,45 @@ catalog:
   '@lexical/selection': 0.47.0
   '@lexical/text': 0.47.0
   '@lexical/utils': 0.47.0
-  '@mediabunny/mp3-encoder': 1.64.0
+  '@mediabunny/mp3-encoder': 1.65.2
   '@monaco-editor/react': 4.7.0
   '@napi-rs/keyring': 1.3.0
-  '@orpc/client': 1.16.1
-  '@orpc/contract': 1.16.1
-  '@orpc/openapi-client': 1.16.1
-  '@orpc/standard-server': 1.16.1
-  '@orpc/tanstack-query': 1.16.1
+  '@orpc/client': 1.16.2
+  '@orpc/contract': 1.16.2
+  '@orpc/openapi-client': 1.16.2
+  '@orpc/standard-server': 1.16.2
+  '@orpc/tanstack-query': 1.16.2
   '@pierre/highlights': 0.3.0
-  '@playwright/test': 1.64.1
+  '@playwright/test': 1.65.0
   '@remixicon/react': 4.9.0
   '@sentry/react': 10.78.0
-  '@shadcn/lint': 0.2.3
-  '@storybook/addon-a11y': 10.6.5
-  '@storybook/addon-docs': 10.6.5
-  '@storybook/addon-links': 10.6.5
-  '@storybook/addon-onboarding': 10.6.5
-  '@storybook/addon-themes': 10.6.5
-  '@storybook/addon-vitest': 10.6.5
-  '@storybook/nextjs-vite': 10.6.5
-  '@storybook/react': 10.6.5
-  '@storybook/react-vite': 10.6.5
+  '@shadcn/lint': 0.2.5
+  '@storybook/addon-a11y': 10.6.7
+  '@storybook/addon-docs': 10.6.7
+  '@storybook/addon-links': 10.6.7
+  '@storybook/addon-onboarding': 10.6.7
+  '@storybook/addon-themes': 10.6.7
+  '@storybook/addon-vitest': 10.6.7
+  '@storybook/nextjs-vite': 10.6.7
+  '@storybook/react': 10.6.7
+  '@storybook/react-vite': 10.6.7
   '@streamdown/math': 1.0.3
   '@svgdotjs/svg.js': 3.2.8
   '@t3-oss/env-core': 0.13.11
   '@t3-oss/env-nextjs': 0.13.11
-  '@tailwindcss/postcss': 4.3.3
-  '@tailwindcss/vite': 4.3.3
-  '@tanstack/eslint-plugin-query': 5.105.0
+  '@tailwindcss/postcss': 4.3.5
+  '@tailwindcss/vite': 4.3.5
+  '@tanstack/eslint-plugin-query': 5.107.1
   '@tanstack/form-core': 1.33.5
-  '@tanstack/query-core': 5.105.0
+  '@tanstack/query-core': 5.107.1
   '@tanstack/react-form': 1.33.5
   '@tanstack/react-hotkeys': 0.17.0
-  '@tanstack/react-query': 5.105.0
-  '@tanstack/react-virtual': 3.14.24
+  '@tanstack/react-query': 5.107.1
+  '@tanstack/react-virtual': 3.14.26
   '@testing-library/dom': 10.4.2
   '@testing-library/jest-dom': 7.0.1
   '@testing-library/react': 16.3.3
-  '@testing-library/user-event': 14.6.8
+  '@testing-library/user-event': 14.6.9
   '@tsslint/cli': 3.1.4
   '@tsslint/compat-eslint': 3.1.4
   '@tsslint/config': 3.1.4
@@ -147,11 +147,11 @@ catalog:
   '@types/react': 19.3.0
   '@types/react-dom': 19.3.0
   '@types/sortablejs': 1.15.9
-  '@typescript-eslint/parser': 8.72.1
-  '@typescript-eslint/utils': 8.72.1
+  '@typescript-eslint/parser': 8.72.2
+  '@typescript-eslint/utils': 8.72.2
   '@typescript/native': npm:typescript@7.1.0-beta
-  '@vitejs/plugin-react': 6.1.2
-  '@vitejs/plugin-rsc': 0.5.38
+  '@vitejs/plugin-react': 6.3.0
+  '@vitejs/plugin-rsc': 0.5.39
   '@vitest/browser-playwright': 5.1.0
   '@vitest/coverage-v8': 5.1.0
   '@xmldom/xmldom': 0.9.12
@@ -164,11 +164,11 @@ catalog:
   c12: 4.0.0-rc.4
   chokidar: 5.0.0
   class-variance-authority: 0.7.1
-  cn: 0.5.0
+  cn: 0.5.2
   code-inspector-plugin: 1.6.6
-  concurrently: 10.0.6
+  concurrently: 10.0.7
   copy-to-clipboard: 4.0.2
-  cron-parser: 5.10.2
+  cron-parser: 5.10.4
   date-fns: 4.4.0
   dayjs: 1.11.23
   decimal.js: 10.6.0
@@ -180,69 +180,69 @@ catalog:
   embla-carousel-fade: 8.6.0
   embla-carousel-react: 8.6.0
   es-module-lexer: 3.0.4
-  es-toolkit: 1.53.0
-  eslint: 10.13.0
+  es-toolkit: 1.53.2
+  eslint: 10.14.0
   eslint-config-flat-gitignore: 2.4.0
   eslint-markdown: 0.20.0
   eslint-plugin-antfu: 3.3.1
-  eslint-plugin-better-tailwindcss: 4.10.0
-  eslint-plugin-jsdoc: 65.4.2
+  eslint-plugin-better-tailwindcss: 4.11.0
+  eslint-plugin-jsdoc: 65.4.5
   eslint-plugin-jsonc: 3.4.2
   eslint-plugin-markdown-preferences: 0.42.0
   eslint-plugin-n: 18.5.0
   eslint-plugin-no-barrel-files: 2.3.0
   eslint-plugin-perfectionist: 5.13.0
   eslint-plugin-pnpm: 1.9.1
-  eslint-plugin-regexp: 3.3.2
-  eslint-plugin-storybook: 10.6.5
-  eslint-plugin-yml: 3.9.0
+  eslint-plugin-regexp: 3.3.3
+  eslint-plugin-storybook: 10.6.7
+  eslint-plugin-yml: 3.10.0
   eventsource-parser: 4.1.3
   fast-deep-equal: 3.1.3
   foxact: 0.3.12
   fuse.js: 7.5.0
   happy-dom: 21.0.4
-  hono: 4.13.14
+  hono: 4.13.17
   html-entities: 2.6.0
   html-to-image: 1.11.13
-  i18next: 26.5.11
+  i18next: 26.7.2
   i18next-resources-for-ts: 2.1.2
-  i18next-resources-to-backend: 1.2.3
+  i18next-resources-to-backend: 1.2.4
   iconify-import-svg: 0.2.0
-  immer: 11.2.9
+  immer: 11.2.10
   import-meta-resolve: 4.2.0
-  jotai: 3.0.1
+  jotai: 3.0.2
   jotai-scope: 0.12.2
   jotai-tanstack-query: 0.11.0
   js-cookie: 3.0.8
   js-yaml: 5.5.0
   jsonc-eslint-parser: 3.3.0
   jsonschema: 1.5.0
-  katex: 0.18.2
-  knip: 6.44.0
+  katex: 0.18.10
+  knip: 6.45.0
   ky: 2.2.0
   lexical: 0.47.0
   lockfile: 1.0.4
   loro-crdt: 1.17.1
-  mediabunny: 1.64.0
+  mediabunny: 1.65.2
   mime: 4.1.2
   mitt: 3.0.1
   motion: 13.5.1
   negotiator: 1.1.0
-  next: 16.4.5
+  next: 16.4.6
   next-themes: 0.4.6
-  nuqs: 2.10.2
+  nuqs: 2.10.3
   open: 11.0.4
-  pele: 1.12.0
+  pele: 1.13.0
   picocolors: 1.1.1
   picomatch: 4.0.7
   pinyin-pro: 3.29.5
-  playwright: 1.64.1
+  playwright: 1.65.0
   postcss: 8.5.32
   qrcode.react: 4.2.0
   react: 19.3.1
   react-dom: 19.3.1
-  react-easy-crop: 6.2.4
-  react-i18next: 17.1.9
+  react-easy-crop: 6.2.5
+  react-i18next: 17.1.13
   react-papaparse: 4.4.0
   react-pdf-highlighter: 8.0.0-rc.0
   react-server-dom-webpack: 19.3.1
@@ -256,23 +256,23 @@ catalog:
   sharp: 0.35.5
   socket.io-client: 4.8.4
   sortablejs: 1.15.7
-  storybook: 10.6.5
+  storybook: 10.6.7
   streamdown: 2.7.1
-  string-ts: 2.3.1
+  string-ts: 2.4.0
   svgo: 4.1.0
-  tailwindcss: 4.3.3
-  tldts: 7.4.19
+  tailwindcss: 4.3.5
+  tldts: 7.4.21
   tsrs: 0.18.0-ts7.1.0-dev.20260929
   # JavaScript Compiler API for codegen/lint/i18n tools; type checks still use tsrs.
   # eslint-disable-next-line pnpm/yaml-no-duplicate-catalog-item -- Compiler API tools require TS 6; the mapper uses TS 7.1.
   typescript: npm:@typescript/typescript6@6.0.2
   uglify-js: 3.19.3
-  undici: 7.30.1
+  undici: 7.30.2
   unist-util-visit: 5.2.0
   use-context-selector: 2.0.0
   uuid: 14.0.3
   verkit: 0.5.0
-  vinext: 1.4.0
+  vinext: 1.4.5
   # The workspace uses Vite Plus; the SDK's public peer targets official Vite.
   # eslint-disable-next-line pnpm/yaml-no-duplicate-catalog-item
   vite: npm:@voidzero-dev/vite-plus-core@1.5.0
@@ -284,7 +284,7 @@ catalog:
   yaml: 2.9.1
   zod: 4.6.7
   zundo: 2.3.0
-  zustand: 5.0.16
+  zustand: 5.1.0
 catalogs:
   public-vite:
     vite: ^8.3.5

web/app/components/main-nav/components/__tests__/support-menu.browser.spec.tsx

@@ -66,7 +66,7 @@ async function renderSupportMenu({
   const screen = await render(
     <QueryClientTestProvider queryClient={queryClient}>
       <NuqsTestingAdapter onUrlUpdate={boundary.pricingUpdates}>
-        <AppToaster timeout={100} />
+        <AppToaster timeout={0} />
         <Menu>
           <MenuTrigger>Support</MenuTrigger>
           <MenuContent>
@@ -110,8 +110,11 @@ it('surfaces a failed Zendesk launch and permits a fresh retry', async () => {
   boundary.openZendesk.mockRejectedValueOnce(new Error('load failed'))
   const { screen, trigger } = await renderSupportMenu()
   await userEvent.click(screen.getByRole('menuitem', { name: 'common.userProfile.contactUs' }))
-  await expect.element(screen.getByText('common.api.actionFailed')).toBeVisible()
-  await expect.element(screen.getByText('common.api.actionFailed')).not.toBeInTheDocument()
+  const notification = screen.getByRole('dialog', { name: 'common.api.actionFailed' })
+  await expect.element(notification).toBeVisible()
+  await notification.hover()
+  await userEvent.click(screen.getByRole('button', { name: 'Close notification' }))
+  await expect.element(notification).not.toBeInTheDocument()
 
   await userEvent.click(trigger)
   const reopenedMenu = screen.getByRole('menu')

web/app/components/workflow/comment/comment-movement.browser.spec.tsx

@@ -70,7 +70,7 @@ function renderFixture(draft = false) {
 }
 
 it('keeps an authored comment focusable and draggable after adding keyboard movement', async () => {
-  // Browser-owned: real pointer capture, marker hit testing, and native button activation.
+  // Browser-owned: keyboard focus, real pointer capture, and preview hit testing.
   await page.viewport(1000, 800)
   const screen = await renderFixture()
   const marker = screen.getByRole('button', { name: /workflow.keyboard.openComment/ })
@@ -82,15 +82,18 @@ it('keeps an authored comment focusable and draggable after adding keyboard move
   await userEvent.keyboard('{ArrowRight}')
   await expect.poll(() => marker.element().getBoundingClientRect().x).toBe(initial.x + 5)
   const canvas = screen.getByRole('group', { name: 'Canvas' })
+  const preview = screen.getByText('Comment', { exact: true })
   await marker.hover()
-  const previewElement = document.querySelector<HTMLElement>('[data-role="comment-preview"]')
-  if (!previewElement) throw new Error('Real comment preview did not open')
-  await userEvent.dragAndDrop(page.elementLocator(previewElement), canvas, {
+  await expect.element(preview).toBeVisible()
+  await userEvent.dragAndDrop(preview, canvas, {
     targetPosition: { x: 300, y: 250 },
   })
   expect(marker.element().getBoundingClientRect().x).toBeGreaterThan(initial.x + 5)
   await expect.element(screen.getByRole('status')).not.toBeInTheDocument()
-  await marker.click()
+  // Hover reveals the clickable preview over the marker, so open that visible surface.
+  await marker.hover()
+  await expect.element(preview).toBeVisible()
+  await preview.click()
   await expect.element(screen.getByRole('status')).toHaveTextContent('Comment opened')
 })