chore(deps): update weekly dependencies

Author: renovate[bot]

.github/workflows/ci.yml

@@ -34,16 +34,16 @@ jobs:
   main:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Install pnpm package manager
         uses: pnpm/action-setup@v4
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
           cache: pnpm
 
       - name: Install dependencies

.github/workflows/e2e-matrix.yml

@@ -79,7 +79,7 @@ jobs:
           echo "run_status=$run_status" >> "$GITHUB_OUTPUT"
           echo "reason=$reason" >> "$GITHUB_OUTPUT"
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         if: steps.gate.outputs.run_status == 'true'
         with:
           fetch-depth: 0
@@ -90,9 +90,9 @@ jobs:
 
       - name: Setup Node.js
         if: steps.gate.outputs.run_status == 'true'
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
           cache: pnpm
 
       - name: Install dependencies
@@ -139,19 +139,19 @@ jobs:
 
     name: Cache install (${{ matrix.os }}, node v${{ matrix.node }})
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Install pnpm package manager
         uses: pnpm/action-setup@v4
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}
           cache: pnpm
 
-      - uses: actions/cache@v4
+      - uses: actions/cache@v5
         id: cache-modules
         with:
           lookup-only: true
@@ -162,7 +162,7 @@ jobs:
         run: pnpm install --frozen-lockfile
 
       - name: Cache Playwright browsers
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         id: cache-playwright
         with:
           path: ~/.cache/ms-playwright
@@ -219,19 +219,19 @@ jobs:
 
     name: E2E ${{ matrix.os }}/${{ matrix.pm }}/${{ matrix.node }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Install pnpm package manager
         uses: pnpm/action-setup@v4
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}
           cache: pnpm
 
-      - uses: actions/cache@v4
+      - uses: actions/cache@v5
         id: cache-modules
         with:
           path: "**/node_modules"
@@ -285,7 +285,7 @@ jobs:
 
       - name: Upload test results
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: results-${{ matrix.os }}-${{ matrix.pm }}-${{ matrix.node }}
           path: results-${{ matrix.os }}-${{ matrix.pm }}-${{ matrix.node }}.json
@@ -298,7 +298,7 @@ jobs:
     steps:
       - name: Download all workflow run artifacts
         if: needs.e2e.result != 'skipped'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           path: artifacts
           pattern: results-*
@@ -366,7 +366,7 @@ jobs:
           fi
 
       - name: Upload summary artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: e2e-test-summary
           path: summary.md

.github/workflows/fly-deployment.yml

@@ -38,11 +38,11 @@ jobs:
       skip: ${{ steps.preview.outputs.skip }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
-      - uses: actions/github-script@v7
+      - uses: actions/github-script@v8
         id: preview
         env:
           PREVIEW_LABEL: ${{ env.FLY_PREVIEW_LABEL  }}
@@ -62,13 +62,13 @@ jobs:
       app-tenants: ${{ steps.pre-deploy.outputs.app-tenants }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - uses: pnpm/action-setup@v4
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           cache: "pnpm"
 
@@ -105,19 +105,19 @@ jobs:
     environment: ${{ needs.pre-deploy.outputs.environment }}
 
     steps:
-      - uses: actions/create-github-app-token@v1
+      - uses: actions/create-github-app-token@v2
         id: generate-token
         with:
           app-id: ${{ secrets.CDWR_ACTIONS_BOT_ID }}
           private-key: ${{ secrets.CDWR_ACTIONS_BOT_PRIVATE_KEY }}
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - uses: pnpm/action-setup@v4
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           cache: "pnpm"
 

.github/workflows/nx-migrate.yml

@@ -18,19 +18,19 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/create-github-app-token@v1
+      - uses: actions/create-github-app-token@v2
         id: generate-token
         with:
           app-id: ${{ secrets.CDWR_ACTIONS_BOT_ID }}
           private-key: ${{ secrets.CDWR_ACTIONS_BOT_PRIVATE_KEY }}
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: pnpm/action-setup@v4
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
           cache: pnpm
 
       - name: Install dependencies

.github/workflows/publish-package.yml

@@ -88,17 +88,17 @@ jobs:
       # Unified checkout for all cases:
       # - tag push or release -> checks out that tag
       # - manual w/o tag -> checks out the branch chosen in the UI (or default branch)
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ steps.ctx.outputs.tag || github.ref }}
           fetch-depth: 0
           filter: tree:0
 
       - uses: pnpm/action-setup@v4
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
           cache: pnpm
           registry-url: https://registry.npmjs.org/
 

.node-version

@@ -1 +1 @@
-20.19.6
+24.13.0

.nvmrc

@@ -1 +1 @@
-20.19.6
+24.13.0

apps/cms/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:20-bullseye-slim AS base
+FROM node:24-bullseye-slim AS base
 
 RUN apt-get update \
   && apt-get install -y --no-install-recommends \

apps/web/package.json

@@ -32,7 +32,7 @@
     "class-variance-authority": "^0.7.0",
     "clsx": "^2.1.1",
     "hono": "^4.6.10",
-    "isbot": "^4.4.0",
+    "isbot": "^5.0.0",
     "jsonc-eslint-parser": "2.4.2",
     "lucide-react": "^0.562.0",
     "next-themes": "^0.4.6",
@@ -43,10 +43,10 @@
     "remix-hono": "^0.0.16",
     "remix-utils": "^8.4.0",
     "sonner": "^2.0.1",
-    "tailwind-merge": "^2.3.0",
+    "tailwind-merge": "^3.0.0",
     "tailwindcss-animate": "^1.0.7",
     "tiny-invariant": "^1.3.3",
-    "zod": "^3.23.8"
+    "zod": "^4.0.0"
   },
   "engines": {
     "node": ">=20"

package.json

@@ -11,19 +11,19 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "@actions/core": "^1.11.1",
-    "@actions/exec": "^1.1.1",
-    "@actions/github": "^6.0.0",
+    "@actions/core": "^2.0.0",
+    "@actions/exec": "^2.0.0",
+    "@actions/github": "^7.0.0",
     "@conform-to/react": "^1.2.2",
     "@conform-to/zod": "^1.2.2",
     "@epic-web/client-hints": "^1.3.5",
     "@headlessui/react": "^2.2.0",
     "@heroicons/react": "^2.2.0",
     "@hono/node-server": "^1.13.7",
-    "@hookform/resolvers": "^4.1.3",
+    "@hookform/resolvers": "^5.0.0",
     "@icons-pack/react-simple-icons": "^12.6.0",
     "@infisical/sdk": "^4.0.6",
-    "@ngneat/falso": "^7.3.0",
+    "@ngneat/falso": "^8.0.0",
     "@octokit/request-error": "^5.0.1",
     "@payloadcms/db-mongodb": "~3.69.0",
     "@payloadcms/db-postgres": "~3.69.0",
@@ -61,7 +61,7 @@
     "graphql": "^16.10.0",
     "hono": "^4.6.10",
     "http-status-codes": "^2.3.0",
-    "isbot": "^4.4.0",
+    "isbot": "^5.0.0",
     "lucide-react": "^0.562.0",
     "mime-types": "^3.0.1",
     "next": "~15.4.5",
@@ -82,7 +82,7 @@
     "sonner": "^2.0.1",
     "tailwind-merge": "^3.1.0",
     "tailwindcss": "^4.0.17",
-    "zod": "^3.24.2",
+    "zod": "^4.0.0",
     "@remix-run/serve": "2.17.3",
     "@remix-run/css-bundle": "2.17.3",
     "@remix-run/eslint-config": "2.17.3"
@@ -91,13 +91,13 @@
     "@babel/core": "^7.14.5",
     "@babel/preset-react": "^7.14.5",
     "@clack/prompts": "^0.11.0",
-    "@commitlint/cli": "^19.0.0",
-    "@commitlint/config-angular": "^19.0.0",
-    "@commitlint/config-conventional": "^19.0.0",
-    "@eslint/compat": "^1.1.1",
-    "@eslint/eslintrc": "^2.1.1",
+    "@commitlint/cli": "^20.0.0",
+    "@commitlint/config-angular": "^20.0.0",
+    "@commitlint/config-conventional": "^20.0.0",
+    "@eslint/compat": "^2.0.0",
+    "@eslint/eslintrc": "^3.0.0",
     "@eslint/js": "^9.8.0",
-    "@evilmartians/lefthook": "^1.8.0",
+    "@evilmartians/lefthook": "^2.0.0",
     "@homebridge/node-pty-prebuilt-multiarch": "^0.13.0",
     "@nx/cypress": "22.4.0",
     "@nx/devkit": "22.4.0",
@@ -117,10 +117,10 @@
     "@nx/web": "22.4.0",
     "@nx/webpack": "22.4.0",
     "@nx/workspace": "22.4.0",
-    "@octokit/core": "6.1.6",
+    "@octokit/core": "7.0.6",
     "@octokit/graphql-schema": "^15.25.0",
-    "@octokit/plugin-rest-endpoint-methods": "^13.2.6",
-    "@octokit/types": "^13.6.1",
+    "@octokit/plugin-rest-endpoint-methods": "^17.0.0",
+    "@octokit/types": "^16.0.0",
     "@octokit/webhooks-types": "^7.6.1",
     "@payloadcms/graphql": "~3.69.0",
     "@playwright/test": "^1.36.0",
@@ -142,9 +142,9 @@
     "@testing-library/user-event": "^14.5.2",
     "@types/jest": "30.0.0",
     "@types/kill-port": "^2.0.3",
-    "@types/mime-types": "^2.1.4",
-    "@types/node": "22.19.3",
-    "@types/nodemailer": "^6.4.17",
+    "@types/mime-types": "^3.0.0",
+    "@types/node": "24.10.9",
+    "@types/nodemailer": "^7.0.0",
     "@types/nodemailer-sendgrid": "^1.0.3",
     "@types/npm-whoami": "^1.1.2",
     "@types/react": "19.0.0",
@@ -174,7 +174,7 @@
     "eslint-plugin-jsx-a11y": "6.10.2",
     "eslint-plugin-playwright": "^2.0.0",
     "eslint-plugin-react": "7.37.5",
-    "eslint-plugin-react-hooks": "5.2.0",
+    "eslint-plugin-react-hooks": "7.0.1",
     "graphql-config": "^5.1.3",
     "is-ci": "^4.1.0",
     "jest": "30.0.5",
@@ -183,7 +183,7 @@
     "jest-environment-node": "^30.1.2",
     "jest-util": "~30.0.0",
     "jiti": "2.6.1",
-    "jsdom": "~26.1.0",
+    "jsdom": "~27.4.0",
     "kill-port": "^2.0.1",
     "memfs": "^4.14.0",
     "nodemon": "^3.1.9",
@@ -204,23 +204,23 @@
     "ts-node": "10.9.2",
     "tslib": "^2.4.1",
     "tsx": "^4.19.2",
-    "type-fest": "^4.26.1",
+    "type-fest": "^5.0.0",
     "typescript": "5.9.2",
     "typescript-eslint": "^8.0.0",
     "verdaccio": "6.1.6",
     "vite": "6.3.6",
     "vitest": "^1.3.1",
-    "yargs": "^17.7.2"
+    "yargs": "^18.0.0"
   },
   "nx": {
     "includedScripts": [
       "c",
       "commit"
     ]
   },
-  "packageManager": "pnpm@9.15.9",
+  "packageManager": "pnpm@10.28.1",
   "engines": {
-    "node": ">=20 <22"
+    "node": ">=20 <25"
   },
   "overrides": {
     "react": "$react",