From 441397ee6a30eb9caec321f9ac78f15b71e8ce4a Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Wed, 28 Oct 2026 12:53:23 +0000 Subject: [PATCH 1/3] feat(desktop): ship VouchNet 1.5.0 signal desk Native activity, feed discovery, curated jobs/orgs, conversation search, keyboard navigation, and optional Windows unread notifications, with versioned download and release surfaces for 1.5.0. Co-authored-by: Matthew --- CHANGELOG.md | 22 + README.md | 2 +- apps/desktop/README.md | 9 +- apps/desktop/index.html | 4 +- apps/desktop/package.json | 2 +- apps/desktop/src-tauri/Cargo.lock | 2 +- apps/desktop/src-tauri/Cargo.toml | 2 +- apps/desktop/src-tauri/src/main.rs | 21 + apps/desktop/src-tauri/tauri.conf.json | 2 +- apps/desktop/src/app.tsx | 574 ++++++++++++++++-- apps/desktop/src/styles.css | 267 +++++++- .../api/desktop/activity/[id]/read/route.ts | 18 + apps/web/app/api/desktop/activity/route.ts | 31 + apps/web/app/download/page.tsx | 8 +- apps/web/app/download/release.ts | 18 +- apps/web/app/download/windows/page.tsx | 6 +- apps/web/app/releases/1.4.0/page.tsx | 30 +- apps/web/app/releases/1.5.0/page.tsx | 52 ++ apps/web/app/releases/page.tsx | 11 +- apps/web/app/sitemap.ts | 3 +- docs/releases/v1.5.0.md | 33 + package.json | 2 +- 22 files changed, 1017 insertions(+), 102 deletions(-) create mode 100644 apps/web/app/api/desktop/activity/[id]/read/route.ts create mode 100644 apps/web/app/api/desktop/activity/route.ts create mode 100644 apps/web/app/releases/1.5.0/page.tsx create mode 100644 docs/releases/v1.5.0.md diff --git a/CHANGELOG.md b/CHANGELOG.md index 4e6a9d2..cbdae01 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,28 @@ All notable changes to VouchNet are documented here. This project follows ## Unreleased +## 1.5.0 - 2026-10-28 + +### Desktop signal desk + +- Native activity inbox on Desktop, using the same member notifications as the web app and a + device-token mark-as-read path at `/api/desktop/activity`. +- Home feed now renders discovery already returned by `/api/desktop/feed`: daily Signal Circuit, + skill topics, and salary-forward roles. +- Jobs and Organizations are first-class desktop surfaces with curated directory cards instead of + browser-only placeholders. +- Discover joins the rail and command palette; letter-key shortcuts jump between every workspace. +- Conversation search works, unread activity badges appear in the shell, and Desktop can request + Windows notifications when new unread messages arrive. +- Shared design tokens, reduced-motion support, and shell polish keep Desktop aligned with the + VouchNet interface system. + +### Release contents + +- Windows installers and SHA-256 checksums publish through the existing GitHub Release workflow for + tag `v1.5.0`. +- No database migration or new environment variables. + ## 1.4.0 - 2026-10-13 ### Desktop distribution and public discovery diff --git a/README.md b/README.md index 9c1fbf8..ea61598 100644 --- a/README.md +++ b/README.md @@ -317,7 +317,7 @@ than opening public issues. Contributor expectations are in [CONTRIBUTING.md](CO ## Status -The current release is [v1.4.0](docs/releases/v1.4.0.md). Windows Desktop downloads are available +The current release is [v1.5.0](docs/releases/v1.5.0.md). Windows Desktop downloads are available from `/download/windows` and the matching GitHub release, with SHA-256 checksums. The current installer is unsigned; verify its checksum before installing. VouchNet is not yet a production-complete social network; the implementation matrix is the source diff --git a/apps/desktop/README.md b/apps/desktop/README.md index 7281d83..6d6699b 100644 --- a/apps/desktop/README.md +++ b/apps/desktop/README.md @@ -21,8 +21,13 @@ replay revokes the complete device token family server-side. ## Native capabilities - Secure session restore using the existing VouchNet account -- Chronological feed from `/api/desktop/feed` -- Synced conversations, read markers, delivery/seen indicators, and HTTPS link attachments +- Chronological feed plus discovery panels from `/api/desktop/feed` +- Native activity inbox from `/api/desktop/activity`, with mark-as-read +- Curated jobs and organizations rendered in the desktop shell +- Synced conversations, conversation search, read markers, delivery/seen indicators, and HTTPS + link attachments +- Optional Windows notifications when unread messages increase +- Letter-key workspace shortcuts and a Ctrl/Cmd+K command palette - System-browser navigation for richer web workflows that do not yet have a dedicated native surface - Deep links via `vouchnet://` diff --git a/apps/desktop/index.html b/apps/desktop/index.html index 1e89b92..6f0795d 100644 --- a/apps/desktop/index.html +++ b/apps/desktop/index.html @@ -3,7 +3,9 @@ - VouchNet + + + VouchNet Desktop
diff --git a/apps/desktop/package.json b/apps/desktop/package.json index 9e85e36..b9ee7e4 100644 --- a/apps/desktop/package.json +++ b/apps/desktop/package.json @@ -1,7 +1,7 @@ { "name": "@vouchnet/desktop", "private": true, - "version": "1.4.0", + "version": "1.5.0", "type": "module", "scripts": { "dev": "vite", diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock index 3f34705..474827d 100644 --- a/apps/desktop/src-tauri/Cargo.lock +++ b/apps/desktop/src-tauri/Cargo.lock @@ -4536,7 +4536,7 @@ checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" [[package]] name = "vouchnet-desktop" -version = "1.4.0" +version = "1.5.0" dependencies = [ "base64 0.22.1", "keyring", diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml index aa73024..9b45e9c 100644 --- a/apps/desktop/src-tauri/Cargo.toml +++ b/apps/desktop/src-tauri/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "vouchnet-desktop" -version = "1.4.0" +version = "1.5.0" description = "The installed VouchNet client" authors = ["VouchNet"] edition = "2021" diff --git a/apps/desktop/src-tauri/src/main.rs b/apps/desktop/src-tauri/src/main.rs index 6435b37..a657ce8 100644 --- a/apps/desktop/src-tauri/src/main.rs +++ b/apps/desktop/src-tauri/src/main.rs @@ -355,6 +355,25 @@ async fn desktop_send_message( .await } #[tauri::command] +async fn desktop_activity(state: State<'_, DesktopState>) -> Result { + authenticated_get(&state, "/api/desktop/activity").await +} +#[tauri::command] +async fn desktop_mark_activity_read( + state: State<'_, DesktopState>, + notification_id: String, +) -> Result { + if !is_uuid(¬ification_id) { + return Err("Invalid notification.".into()); + } + authenticated_post( + &state, + &format!("/api/desktop/activity/{notification_id}/read"), + serde_json::json!({}), + ) + .await +} +#[tauri::command] fn desktop_sign_out(state: State) -> Result<(), String> { *state .access_token @@ -377,6 +396,8 @@ fn main() { desktop_conversations, desktop_messages, desktop_send_message, + desktop_activity, + desktop_mark_activity_read, desktop_sign_out ]) .run(tauri::generate_context!()) diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json index 3869077..8ce6856 100644 --- a/apps/desktop/src-tauri/tauri.conf.json +++ b/apps/desktop/src-tauri/tauri.conf.json @@ -1,7 +1,7 @@ { "$schema": "https://schema.tauri.app/config/2", "productName": "VouchNet", - "version": "1.4.0", + "version": "1.5.0", "identifier": "dev.vouchnet.desktop", "build": { "beforeDevCommand": "pnpm dev", diff --git a/apps/desktop/src/app.tsx b/apps/desktop/src/app.tsx index fdf9d82..860e2e1 100644 --- a/apps/desktop/src/app.tsx +++ b/apps/desktop/src/app.tsx @@ -1,6 +1,11 @@ -import { useEffect, useMemo, useState } from 'react'; +import { useEffect, useMemo, useRef, useState } from 'react'; import { invoke } from '@tauri-apps/api/core'; import { onOpenUrl } from '@tauri-apps/plugin-deep-link'; +import { + isPermissionGranted, + requestPermission, + sendNotification, +} from '@tauri-apps/plugin-notification'; import { openUrl } from '@tauri-apps/plugin-opener'; type IdentityVerification = { method: string; verifiedAt: string }; @@ -24,12 +29,6 @@ type Profile = { isPlus?: boolean; } | null; -function verifiedDateLabel(iso: string) { - const date = new Date(iso); - return Number.isNaN(date.getTime()) - ? '' - : date.toLocaleDateString('en-US', { year: 'numeric', month: 'long', day: 'numeric' }); -} type FeedPost = { id: string; authorName: string; @@ -38,6 +37,30 @@ type FeedPost = { createdAt: string; peerSignal: number; }; +type DiscoveryJob = { + slug: string; + title: string; + organizationName: string; + organizationSlug: string; + location: string; + salaryMin: number | null; + salaryMax: number | null; + salaryCurrency: string; + skillTags: string[]; +}; +type DiscoveryOrganization = { + slug: string; + name: string; + tagline: string | null; + technologies: string[]; + openRoleCount: number; +}; +type FeedDiscovery = { + jobs: DiscoveryJob[]; + organizations: DiscoveryOrganization[]; + topics: string[]; + dailyChallenge: { title: string; difficultyLabel: string; moveBudget: number }; +}; type Attachment = { id?: string; url: string; @@ -61,7 +84,15 @@ type Message = { seenAt: string | null; attachments: Attachment[]; }; -type View = 'home' | 'network' | 'messages' | 'activity' | 'jobs' | 'organizations'; +type ActivityItem = { + id: string; + title: string; + body: string; + href: string; + readAt: string | null; + createdAt: string; +}; +type View = 'home' | 'network' | 'messages' | 'activity' | 'jobs' | 'organizations' | 'discover'; type AppStatus = 'connecting' | 'signed-out' | 'ready' | 'error'; const views: Array<{ id: View; label: string; icon: string; shortcut: string }> = [ @@ -71,8 +102,15 @@ const views: Array<{ id: View; label: string; icon: string; shortcut: string }> { id: 'activity', label: 'Activity', icon: '◌', shortcut: 'A' }, { id: 'jobs', label: 'Jobs', icon: '▣', shortcut: 'J' }, { id: 'organizations', label: 'Organizations', icon: '◇', shortcut: 'O' }, + { id: 'discover', label: 'Discover', icon: '◈', shortcut: 'D' }, ]; +function verifiedDateLabel(iso: string) { + const date = new Date(iso); + return Number.isNaN(date.getTime()) + ? '' + : date.toLocaleDateString('en-US', { year: 'numeric', month: 'long', day: 'numeric' }); +} function initials(value: string) { return value .split(' ') @@ -93,23 +131,54 @@ function formatDate(value: string) { ? formatTime(value) : new Intl.DateTimeFormat(undefined, { month: 'short', day: 'numeric' }).format(date); } +function formatSalary(job: DiscoveryJob) { + if (job.salaryMin === null && job.salaryMax === null) return 'Compensation on source'; + const currency = job.salaryCurrency || 'USD'; + const format = (amount: number) => + new Intl.NumberFormat(undefined, { + style: 'currency', + currency, + maximumFractionDigits: 0, + }).format(amount); + if (job.salaryMin !== null && job.salaryMax !== null) { + return `${format(job.salaryMin)}–${format(job.salaryMax)}`; + } + return format(job.salaryMin ?? job.salaryMax ?? 0); +} function webRoute(view: View) { - return view === 'network' - ? '/mynetwork' - : view === 'activity' - ? '/notifications' - : view === 'organizations' - ? '/search?type=companies' - : `/${view}`; + switch (view) { + case 'network': + return '/mynetwork'; + case 'activity': + return '/notifications'; + case 'organizations': + return '/search?type=companies'; + case 'discover': + return '/discover'; + case 'home': + return '/feed'; + default: + return `/${view}`; + } +} +function emptyDiscovery(): FeedDiscovery { + return { + jobs: [], + organizations: [], + topics: [], + dailyChallenge: { title: 'Signal Circuit', difficultyLabel: 'Steady', moveBudget: 12 }, + }; } export function App() { const [profile, setProfile] = useState(null); const [view, setView] = useState('home'); const [feed, setFeed] = useState([]); + const [discovery, setDiscovery] = useState(emptyDiscovery()); const [conversations, setConversations] = useState([]); const [selectedConversationId, setSelectedConversationId] = useState(null); const [messages, setMessages] = useState([]); + const [activity, setActivity] = useState([]); const [composer, setComposer] = useState(''); const [attachmentUrl, setAttachmentUrl] = useState(''); const [attachments, setAttachments] = useState([]); @@ -117,17 +186,61 @@ export function App() { const [notice, setNotice] = useState(null); const [commandOpen, setCommandOpen] = useState(false); const [commandQuery, setCommandQuery] = useState(''); + const [threadQuery, setThreadQuery] = useState(''); const [messageLoading, setMessageLoading] = useState(false); + const [activityLoading, setActivityLoading] = useState(false); const [sending, setSending] = useState(false); + const knownUnreadRef = useRef(0); const selectedConversation = useMemo( () => conversations.find((item) => item.id === selectedConversationId) ?? null, [conversations, selectedConversationId], ); const unreadCount = conversations.reduce((total, item) => total + item.unreadCount, 0); - const commandItems = useMemo( - () => views.filter((item) => item.label.toLowerCase().includes(commandQuery.toLowerCase())), - [commandQuery], - ); + const unreadActivity = activity.filter((item) => item.readAt === null).length; + const filteredConversations = useMemo(() => { + const query = threadQuery.trim().toLowerCase(); + if (!query) return conversations; + return conversations.filter((conversation) => { + const haystack = [ + conversation.counterpart.fullName, + conversation.counterpart.headline ?? '', + conversation.lastMessage?.body ?? '', + ] + .join(' ') + .toLowerCase(); + return haystack.includes(query); + }); + }, [conversations, threadQuery]); + const commandItems = useMemo(() => { + const query = commandQuery.trim().toLowerCase(); + const navigation = views.filter((item) => item.label.toLowerCase().includes(query)); + const extras = [ + { id: 'compose', label: 'Create a post', icon: '＋', path: '/feed/create' }, + { id: 'profile', label: 'Open my profile', icon: '◉', path: `/vouch/${profile?.slug ?? ''}` }, + { id: 'games', label: 'Play today’s puzzle', icon: '▦', path: '/games' }, + { id: 'settings', label: 'Account settings', icon: '⚙', path: '/settings/account' }, + ].filter((item) => item.label.toLowerCase().includes(query)); + return { navigation, extras }; + }, [commandQuery, profile?.slug]); + + async function notifyUnread(count: number) { + if (count <= knownUnreadRef.current) { + knownUnreadRef.current = count; + return; + } + knownUnreadRef.current = count; + try { + let granted = await isPermissionGranted(); + if (!granted) granted = (await requestPermission()) === 'granted'; + if (!granted) return; + await sendNotification({ + title: 'VouchNet', + body: count === 1 ? 'You have a new message.' : `You have ${count} unread messages.`, + }); + } catch { + // Notifications are optional on locked-down Windows installs. + } + } async function restore() { setStatus('connecting'); @@ -139,15 +252,25 @@ export function App() { setStatus('signed-out'); return; } - const [feedPayload, conversationPayload] = await Promise.all([ - invoke<{ posts: FeedPost[] }>('desktop_feed'), + const [feedPayload, conversationPayload, activityPayload] = await Promise.all([ + invoke<{ posts: FeedPost[]; discovery?: FeedDiscovery }>('desktop_feed'), invoke<{ conversations: Conversation[] }>('desktop_conversations'), + invoke<{ notifications: ActivityItem[] }>('desktop_activity').catch(() => ({ + notifications: [] as ActivityItem[], + })), ]); setFeed(feedPayload.posts); + setDiscovery(feedPayload.discovery ?? emptyDiscovery()); setConversations(conversationPayload.conversations); + setActivity(activityPayload.notifications); setSelectedConversationId( (current) => current ?? conversationPayload.conversations[0]?.id ?? null, ); + const nextUnread = conversationPayload.conversations.reduce( + (total, item) => total + item.unreadCount, + 0, + ); + void notifyUnread(nextUnread); setStatus('ready'); } catch (error) { setStatus('error'); @@ -171,12 +294,31 @@ export function App() { if ((event.ctrlKey || event.metaKey) && event.key.toLowerCase() === 'k') { event.preventDefault(); setCommandOpen(true); + return; + } + if (event.key === 'Escape') { + setCommandOpen(false); + return; + } + if (commandOpen || event.ctrlKey || event.metaKey || event.altKey) return; + const target = event.target as HTMLElement | null; + if ( + target && + (target.tagName === 'INPUT' || + target.tagName === 'TEXTAREA' || + target.isContentEditable) + ) { + return; + } + const match = views.find((item) => item.shortcut.toLowerCase() === event.key.toLowerCase()); + if (match) { + event.preventDefault(); + setView(match.id); } - if (event.key === 'Escape') setCommandOpen(false); }; window.addEventListener('keydown', handler); return () => window.removeEventListener('keydown', handler); - }, []); + }, [commandOpen]); useEffect(() => { if (!selectedConversationId || view !== 'messages' || status !== 'ready') return; setMessageLoading(true); @@ -199,6 +341,32 @@ export function App() { ) .finally(() => setMessageLoading(false)); }, [selectedConversationId, status, view]); + useEffect(() => { + if (view !== 'activity' || status !== 'ready') return; + setActivityLoading(true); + void invoke<{ notifications: ActivityItem[] }>('desktop_activity') + .then((payload) => setActivity(payload.notifications)) + .catch((error: unknown) => + setNotice(error instanceof Error ? error.message : 'Activity could not be refreshed.'), + ) + .finally(() => setActivityLoading(false)); + }, [status, view]); + useEffect(() => { + if (status !== 'ready') return; + const timer = window.setInterval(() => { + void invoke<{ conversations: Conversation[] }>('desktop_conversations') + .then((payload) => { + setConversations(payload.conversations); + const nextUnread = payload.conversations.reduce( + (total, item) => total + item.unreadCount, + 0, + ); + void notifyUnread(nextUnread); + }) + .catch(() => undefined); + }, 45_000); + return () => window.clearInterval(timer); + }, [status]); async function startAuthentication() { setNotice(null); @@ -227,8 +395,11 @@ export function App() { await invoke('desktop_sign_out'); setProfile(null); setFeed([]); + setDiscovery(emptyDiscovery()); setConversations([]); setMessages([]); + setActivity([]); + knownUnreadRef.current = 0; setStatus('signed-out'); } async function sendMessage() { @@ -280,6 +451,21 @@ export function App() { setNotice('Add an HTTPS link. Portfolios, documents, and image links are supported.'); } } + async function openActivity(item: ActivityItem) { + setActivity((current) => + current.map((entry) => + entry.id === item.id && entry.readAt === null + ? { ...entry, readAt: new Date().toISOString() } + : entry, + ), + ); + try { + await invoke('desktop_mark_activity_read', { notificationId: item.id }); + } catch { + // Opening the linked surface still helps even if the read marker fails. + } + await openWeb(item.href); + } if (status === 'connecting') return ; if (status === 'signed-out') @@ -320,11 +506,12 @@ export function App() { className={view === item.id ? 'rail-item active' : 'rail-item'} key={item.id} onClick={() => setView(item.id)} - title={item.label} + title={`${item.label} (${item.shortcut})`} type="button" > {item.icon} {item.id === 'messages' && unreadCount ? {unreadCount} : null} + {item.id === 'activity' && unreadActivity ? {unreadActivity} : null} {item.label} ))} @@ -425,7 +612,9 @@ export function App() { {view === 'home' ? 'Your signal desk' : views.find((item) => item.id === view)?.label}

- {view === 'home' ? 'Good to see you.' : views.find((item) => item.id === view)?.label} + {view === 'home' + ? 'Good to see you.' + : (views.find((item) => item.id === view)?.label ?? 'VouchNet')}

@@ -439,22 +628,28 @@ export function App() { type="button" > ◌ + {unreadActivity ? {unreadActivity} : null}
{notice ?

{notice}

: null} {view === 'home' ? ( void openWeb('/feed/create')} + onOpenChallenge={() => void openWeb('/games')} + onOpenJob={(slug) => void openWeb(`/jobs/${slug}`)} onOpenPost={(id) => void openWeb(`/feed?post=${id}`)} + topics={discovery.topics} /> ) : view === 'messages' ? ( void sendMessage()} + onThreadQueryChange={setThreadQuery} onViewProfile={(slug) => void openWeb(`/vouch/${slug}`)} selectedConversation={selectedConversation} selectedConversationId={selectedConversationId} sending={sending} + threadQuery={threadQuery} + totalConversations={conversations.length} + /> + ) : view === 'activity' ? ( + void openActivity(item)} + onOpenAll={() => void openWeb('/notifications')} + /> + ) : view === 'jobs' ? ( + void openWeb('/jobs')} + onOpenJob={(slug) => void openWeb(`/jobs/${slug}`)} + /> + ) : view === 'organizations' ? ( + void openWeb('/companies')} + onOpenOrganization={(slug) => void openWeb(`/company/${slug}`)} /> ) : ( 01 - Signal-first feed - Chronological by default + {discovery.dailyChallenge.title} + + {discovery.dailyChallenge.difficultyLabel} · {discovery.dailyChallenge.moveBudget}{' '} + moves +
  • 02 - Proof-of-work profiles - Show the useful details + {discovery.jobs.length} transparent roles + Salary-forward discovery
  • 03 - Transparent roles - Salary-forward job discovery + {unreadCount} unread messages + Synced to this device
    • @@ -560,12 +780,13 @@ export function App() { />

    Navigate

    - {commandItems.map((item) => ( + {commandItems.navigation.map((item) => ( ))} -

    Esc to close

    + {commandItems.extras.length ?

    Actions

    : null} + {commandItems.extras.map((item) => ( + + ))} +

    Esc to close · letter keys jump between spaces

    ) : null} @@ -586,7 +822,7 @@ function Splash() {
    -
    V
    +
    V

    VouchNet Desktop

    Connecting your workspace

    @@ -597,12 +833,13 @@ function Splash() {
    ); } + function Welcome({ onContinue, message }: { onContinue: () => void; message: string | null }) { return (
    -
    V
    +
    V

    VouchNet Desktop

    Your network, @@ -672,14 +909,25 @@ function Welcome({ onContinue, message }: { onContinue: () => void; message: str

    ); } + function HomeView({ feed, + jobs, + topics, + challenge, onCompose, onOpenPost, + onOpenJob, + onOpenChallenge, }: { feed: FeedPost[]; + jobs: DiscoveryJob[]; + topics: string[]; + challenge: FeedDiscovery['dailyChallenge']; onCompose: () => void; onOpenPost: (id: string) => void; + onOpenJob: (slug: string) => void; + onOpenChallenge: () => void; }) { return (
    @@ -741,12 +989,52 @@ function HomeView({ )}
    + ); } function MessagesView(props: { conversations: Conversation[]; + totalConversations: number; selectedConversationId: string | null; selectedConversation: Conversation | null; messages: Message[]; @@ -754,11 +1042,13 @@ function MessagesView(props: { composer: string; attachments: Attachment[]; attachmentUrl: string; + threadQuery: string; loading: boolean; sending: boolean; onSelectConversation: (id: string) => void; onComposerChange: (value: string) => void; onAttachmentUrlChange: (value: string) => void; + onThreadQueryChange: (value: string) => void; onAddAttachment: () => void; onRemoveAttachment: (url: string) => void; onSend: () => void; @@ -766,6 +1056,7 @@ function MessagesView(props: { }) { const { conversations, + totalConversations, selectedConversationId, selectedConversation, messages, @@ -773,11 +1064,13 @@ function MessagesView(props: { composer, attachments, attachmentUrl, + threadQuery, loading, sending, onSelectConversation, onComposerChange, onAttachmentUrlChange, + onThreadQueryChange, onAddAttachment, onRemoveAttachment, onSend, @@ -794,13 +1087,23 @@ function MessagesView(props: { {conversations.reduce((total, item) => total + item.unreadCount, 0)} unread
    - ⌕ + ⌕{' '} + onThreadQueryChange(event.target.value)} + placeholder="Search conversations" + value={threadQuery} + />
    {conversations.length === 0 ? (
    ✦ -

    No conversations yet

    -

    Once a contact opens a thread, your desktop inbox will stay in sync.

    +

    {totalConversations === 0 ? 'No conversations yet' : 'No matches'}

    +

    + {totalConversations === 0 + ? 'Once a contact opens a thread, your desktop inbox will stay in sync.' + : 'Try another name or phrase from the conversation.'} +

    ) : (
    @@ -964,9 +1267,174 @@ function MessagesView(props: { ); } +function ActivityView({ + items, + loading, + onOpen, + onOpenAll, +}: { + items: ActivityItem[]; + loading: boolean; + onOpen: (item: ActivityItem) => void; + onOpenAll: () => void; +}) { + return ( +
    +
    +
    +

    Useful updates

    +

    Activity that deserves attention

    +
    + +
    + {loading ? ( +
    + + + +
    + ) : items.length === 0 ? ( +
    + ◌ +

    You’re up to date.

    +

    Daily puzzles, security signals, and direct professional updates appear here.

    +
    + ) : ( +
    + {items.map((item) => ( + + ))} +
    + )} +
    + ); +} + +function JobsView({ + jobs, + onBrowse, + onOpenJob, +}: { + jobs: DiscoveryJob[]; + onBrowse: () => void; + onOpenJob: (slug: string) => void; +}) { + return ( +
    +
    +
    +

    Transparent opportunities

    +

    Know the work before you apply.

    +
    + +
    + {jobs.length === 0 ? ( +
    + ▣ +

    No curated roles right now

    +

    Open the full jobs directory for salary-forward listings as they are reviewed.

    +
    + ) : ( +
    + {jobs.map((job) => ( +
    +

    {job.organizationName}

    +

    {job.title}

    +

    + {job.location} · {formatSalary(job)} +

    + {job.skillTags.length ? ( +
    + {job.skillTags.slice(0, 4).map((tag) => ( + {tag} + ))} +
    + ) : null} + +
    + ))} +
    + )} +
    + ); +} + +function OrganizationsView({ + organizations, + onBrowse, + onOpenOrganization, +}: { + organizations: DiscoveryOrganization[]; + onBrowse: () => void; + onOpenOrganization: (slug: string) => void; +}) { + return ( +
    +
    +
    +

    Source-reviewed organizations

    +

    Meet the teams behind the work.

    +
    + +
    + {organizations.length === 0 ? ( +
    + ◇ +

    Directory quiet for now

    +

    Open the company directory for source-reviewed organization records.

    +
    + ) : ( +
    + {organizations.map((organization) => ( +
    +

    + {organization.openRoleCount} open role + {organization.openRoleCount === 1 ? '' : 's'} +

    +

    {organization.name}

    +

    {organization.tagline ?? 'Source-reviewed organization on VouchNet.'}

    + {organization.technologies.length ? ( +
    + {organization.technologies.slice(0, 4).map((tech) => ( + {tech} + ))} +
    + ) : null} + +
    + ))} +
    + )} +
    + ); +} + function NativeSurface({ title, view, onOpen }: { title: string; view: View; onOpen: () => void }) { const content: Record< - Exclude, + 'network' | 'discover', { eyebrow: string; heading: string; body: string; action: string } > = { network: { @@ -975,26 +1443,14 @@ function NativeSurface({ title, view, onOpen }: { title: string; view: View; onO body: 'Discover people through shared work, clear professional details, and explanations—not noisy suggestions.', action: 'Explore your network', }, - activity: { - eyebrow: 'Your activity', - heading: 'Useful updates stay visible.', - body: 'VouchNet keeps activity purposeful: direct messages, application movement, verified work, and security signals.', - action: 'Open activity', - }, - jobs: { - eyebrow: 'Transparent opportunities', - heading: 'Know the work before you apply.', - body: 'Browse salary-forward opportunities and manage applications with your VouchNet profile as the source of truth.', - action: 'Explore jobs', - }, - organizations: { - eyebrow: 'Verified organizations', - heading: 'Meet the team behind the work.', - body: 'Explore company context, public technical culture, roles, and verified organization information.', - action: 'Explore organizations', + discover: { + eyebrow: 'Build in public', + heading: 'See who is shipping useful work.', + body: 'People building, project momentum, and open opportunities ranked from recorded activity—with reasons attached.', + action: 'Open Discover', }, }; - const item = content[view as Exclude]; + const item = content[view as 'network' | 'discover']; return (
    {views.find((entry) => entry.id === view)?.icon}
    @@ -1005,7 +1461,7 @@ function NativeSurface({ title, view, onOpen }: { title: string; view: View; onO {item.action} ↗ - {title} is opened in the full VouchNet workspace to keep desktop and web data unified. + {title} opens in the full VouchNet workspace so desktop and web stay on one account.
    ); diff --git a/apps/desktop/src/styles.css b/apps/desktop/src/styles.css index addbafd..b4071d8 100644 --- a/apps/desktop/src/styles.css +++ b/apps/desktop/src/styles.css @@ -1,7 +1,25 @@ :root { - font-family: Inter, ui-sans-serif, system-ui, sans-serif; - color: #eef3ff; - background: #0b1020; + --vn-canvas: #0b1020; + --vn-surface: #121e32; + --vn-surface-raised: #172640; + --vn-ink: #eef3ff; + --vn-muted: #93a7c9; + --vn-accent: #8fabff; + --vn-accent-strong: #416ee0; + --vn-line: #304662; + --vn-success: #45d6a2; + --vn-radius-control: 12px; + --vn-radius-surface: 14px; + --vn-motion-quick: 160ms; + color: var(--vn-ink); + background: var(--vn-canvas); + font-family: + 'Segoe UI Variable Text', + 'Segoe UI', + Aptos, + ui-sans-serif, + system-ui, + sans-serif; font-synthesis: none; } * { @@ -10,7 +28,16 @@ body { margin: 0; min-width: 980px; - background: #0b1020; + background: var(--vn-canvas); +} +@media (prefers-reduced-motion: reduce) { + *, + *::before, + *::after { + animation-duration: 0.01ms !important; + animation-iteration-count: 1 !important; + transition-duration: 0.01ms !important; + } } button, input, @@ -603,9 +630,222 @@ textarea:focus-visible { font-size: 0.58rem; } .icon-control { + position: relative; width: 38px; font-size: 1.15rem; } +.icon-control i { + position: absolute; + top: -4px; + right: -4px; + min-width: 15px; + padding: 1px 4px; + border-radius: 9px; + color: #0b1428; + background: #acc4ff; + font-size: 0.55rem; + font-style: normal; + font-weight: 900; +} +.home-layout { + display: grid; + grid-template-columns: minmax(0, 1fr) 250px; + gap: 18px; + align-items: start; +} +.feed-column { + min-width: 0; +} +.home-aside { + display: grid; + gap: 12px; + position: sticky; + top: 0; +} +.discovery-panel { + padding: 15px; + border: 1px solid var(--vn-line); + border-radius: var(--vn-radius-surface); + background: linear-gradient(145deg, #172946, #121f35); + box-shadow: 0 12px 28px #0308142e; +} +.discovery-panel.soft { + background: var(--vn-surface); +} +.discovery-panel h3 { + margin: 6px 0 8px; + font-size: 0.95rem; + letter-spacing: -0.03em; +} +.discovery-panel > p { + margin: 0 0 12px; + color: var(--vn-muted); + font-size: 0.72rem; + line-height: 1.5; +} +.discovery-panel > button, +.directory-card > button { + padding: 0; + border: 0; + color: #a8c5ff; + background: transparent; + font-size: 0.7rem; + font-weight: 800; +} +.topic-row { + display: flex; + flex-wrap: wrap; + gap: 6px; +} +.topic-row span { + padding: 3px 8px; + border: 1px solid #3a5278; + border-radius: 999px; + color: #c5d5f5; + background: #1a2a45; + font-size: 0.62rem; + font-weight: 700; +} +.mini-job-list { + display: grid; + gap: 8px; + margin: 0; + padding: 0; + list-style: none; +} +.mini-job-list button { + display: grid; + width: 100%; + gap: 3px; + padding: 8px 0; + border: 0; + border-top: 1px solid #243552; + color: inherit; + background: transparent; + text-align: left; +} +.mini-job-list li:first-child button { + border-top: 0; + padding-top: 0; +} +.mini-job-list strong { + font-size: 0.74rem; +} +.mini-job-list small { + color: var(--vn-muted); + font-size: 0.62rem; +} +.activity-surface, +.directory-surface { + display: grid; + gap: 16px; +} +.surface-toolbar { + display: flex; + align-items: flex-end; + justify-content: space-between; + gap: 12px; +} +.surface-toolbar h2 { + margin: 5px 0 0; + font-size: 1.15rem; + letter-spacing: -0.035em; +} +.activity-list, +.directory-grid { + display: grid; + gap: 10px; +} +.directory-grid { + grid-template-columns: repeat(auto-fit, minmax(240px, 1fr)); +} +.activity-item, +.directory-card { + border: 1px solid var(--vn-line); + border-radius: var(--vn-radius-surface); + background: var(--vn-surface); + box-shadow: 0 12px 28px #0308142e; +} +.activity-item { + display: grid; + grid-template-columns: 28px 1fr auto; + gap: 12px; + align-items: start; + width: 100%; + padding: 14px 16px; + color: inherit; + text-align: left; + transition: + transform var(--vn-motion-quick) ease, + border-color var(--vn-motion-quick) ease; +} +.activity-item:hover, +.directory-card:hover { + border-color: #4d6ea8; + transform: translateY(-1px); +} +.activity-item.unread { + border-color: #4f74b8; + background: linear-gradient(145deg, #182a46, #121e32); +} +.activity-item > span { + color: #9cbbff; + font-size: 1rem; +} +.activity-item strong { + display: block; + font-size: 0.82rem; +} +.activity-item p { + margin: 4px 0; + color: var(--vn-muted); + font-size: 0.72rem; + line-height: 1.5; +} +.activity-item small { + color: #8096ba; + font-size: 0.62rem; +} +.activity-item i { + color: #a8c5ff; + font-style: normal; + font-size: 0.68rem; + font-weight: 800; +} +.directory-card { + padding: 16px; +} +.directory-card h3 { + margin: 6px 0 8px; + font-size: 1rem; + letter-spacing: -0.03em; +} +.directory-card > p { + margin: 0 0 12px; + color: var(--vn-muted); + font-size: 0.74rem; + line-height: 1.5; +} +.directory-card .topic-row { + margin-bottom: 12px; +} +.message-loading.padded { + padding: 40px; +} +.brand-pulse { + animation: brand-pulse 2.4s ease-in-out infinite; +} +@keyframes brand-pulse { + 0%, + 100% { + box-shadow: 0 10px 30px #244aa66b; + } + 50% { + box-shadow: + 0 10px 30px #244aa66b, + 0 0 0 10px #84abff14; + } +} .inline-notice { padding: 10px 12px; border: 1px solid #745a48; @@ -1319,6 +1559,13 @@ textarea:focus-visible { .desktop-shell { grid-template-columns: 70px 240px minmax(0, 1fr); } + .home-layout { + grid-template-columns: 1fr; + } + .home-aside { + grid-template-columns: repeat(auto-fit, minmax(220px, 1fr)); + position: static; + } } .welcome-signup { margin-top: 22px; @@ -1388,12 +1635,14 @@ textarea:focus-visible { } .desktop-rate { display: block; - color: #7a5a12; - font-size: 0.72rem; - font-weight: 600; + margin-top: 4px; + color: #c9d8ff; + font-size: 0.68rem; + font-weight: 700; } .desktop-services { display: block; - color: #5b6472; - font-size: 0.7rem; + margin-top: 3px; + color: #91a4c4; + font-size: 0.62rem; } diff --git a/apps/web/app/api/desktop/activity/[id]/read/route.ts b/apps/web/app/api/desktop/activity/[id]/read/route.ts new file mode 100644 index 0000000..eccb01b --- /dev/null +++ b/apps/web/app/api/desktop/activity/[id]/read/route.ts @@ -0,0 +1,18 @@ +import { NextRequest, NextResponse } from 'next/server'; +import { desktopActorFromBearer } from '../../../../../lib/desktop-auth'; +import { markMemberNotificationRead } from '../../../../../lib/daily-strategy'; + +export async function POST(request: NextRequest, context: { params: Promise<{ id: string }> }) { + try { + const actor = await desktopActorFromBearer(request.headers.get('authorization')); + if (actor === null) return NextResponse.json({ error: 'UNAUTHENTICATED' }, { status: 401 }); + const { id } = await context.params; + if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(id)) { + return NextResponse.json({ error: 'INVALID_NOTIFICATION' }, { status: 400 }); + } + const updated = await markMemberNotificationRead(actor.userId, id); + return NextResponse.json({ updated }); + } catch { + return NextResponse.json({ error: 'ACTIVITY_UNAVAILABLE' }, { status: 503 }); + } +} diff --git a/apps/web/app/api/desktop/activity/route.ts b/apps/web/app/api/desktop/activity/route.ts new file mode 100644 index 0000000..abb711e --- /dev/null +++ b/apps/web/app/api/desktop/activity/route.ts @@ -0,0 +1,31 @@ +import { NextRequest, NextResponse } from 'next/server'; +import { desktopActorFromBearer } from '../../../lib/desktop-auth'; +import { + ensureDailyStrategyNotification, + listMemberNotifications, +} from '../../../lib/daily-strategy'; + +/** + * Desktop activity uses a device Bearer token. Keep it separate from the cookie-backed + * notifications page so the Tauri client never has to impersonate a browser session. + */ +export async function GET(request: NextRequest) { + try { + const actor = await desktopActorFromBearer(request.headers.get('authorization')); + if (actor === null) return NextResponse.json({ error: 'UNAUTHENTICATED' }, { status: 401 }); + await ensureDailyStrategyNotification(actor.userId); + const notifications = await listMemberNotifications(actor.userId); + return NextResponse.json({ + notifications: notifications.map((notification) => ({ + id: notification.id, + title: notification.title, + body: notification.body, + href: notification.href, + readAt: notification.readAt === null ? null : notification.readAt.toISOString(), + createdAt: notification.createdAt.toISOString(), + })), + }); + } catch { + return NextResponse.json({ error: 'ACTIVITY_UNAVAILABLE' }, { status: 503 }); + } +} diff --git a/apps/web/app/download/page.tsx b/apps/web/app/download/page.tsx index a18ce92..bb20948 100644 --- a/apps/web/app/download/page.tsx +++ b/apps/web/app/download/page.tsx @@ -51,10 +51,10 @@ export default function DownloadPage() {

    Everything you use on VouchNet.

      -
    • Network and profiles
      • -
    • Feed and Interactive Experiences
      • -
    • Organizations and jobs
      • -
    • Notifications and secure desktop sign-in
      • +
    • Signal-first feed with discovery panels
      • +
    • Messages with search and unread badges
      • +
    • Native activity, organizations, and jobs
      • +
    • Secure desktop sign-in with Windows Credential Manager
    diff --git a/apps/web/app/download/release.ts b/apps/web/app/download/release.ts index 47c839d..eabd61b 100644 --- a/apps/web/app/download/release.ts +++ b/apps/web/app/download/release.ts @@ -1,14 +1,18 @@ +const version = '1.5.0'; +const githubReleaseBase = `https://github.com/theworker02/VouchNet/releases/download/v${version}`; + export const desktopRelease = { - version: '1.4.0', - releasedAt: '2026-10-13', + version, + releasedAt: '2026-10-28', platform: 'Windows x64', nsis: { - fileName: 'VouchNetSetup-1.4.0-x64.exe', - href: '/downloads/VouchNetSetup-1.4.0-x64.exe', + fileName: `VouchNetSetup-${version}-x64.exe`, + href: `${githubReleaseBase}/VouchNetSetup-${version}-x64.exe`, }, msi: { - fileName: 'VouchNet-1.4.0-x64.msi', - href: '/downloads/VouchNet-1.4.0-x64.msi', + fileName: `VouchNet-${version}-x64.msi`, + href: `${githubReleaseBase}/VouchNet-${version}-x64.msi`, }, - checksumsHref: '/downloads/VouchNet-1.4.0-x64.sha256', + checksumsHref: `${githubReleaseBase}/VouchNet-${version}-x64.sha256`, + notesPath: `/releases/${version}`, } as const; diff --git a/apps/web/app/download/windows/page.tsx b/apps/web/app/download/windows/page.tsx index d2337ae..7bd7ce7 100644 --- a/apps/web/app/download/windows/page.tsx +++ b/apps/web/app/download/windows/page.tsx @@ -29,11 +29,11 @@ export default function WindowsDownloadPage() {
    Verify before installing - Download the SHA-256 checksums. This first - public installer is unsigned, so Windows may show a publisher warning. + Download the SHA-256 checksums. The + installer is unsigned, so Windows may show a publisher warning.
    - Read the release notes + Read the release notes
    ); diff --git a/apps/web/app/releases/1.4.0/page.tsx b/apps/web/app/releases/1.4.0/page.tsx index 6813701..768d3b3 100644 --- a/apps/web/app/releases/1.4.0/page.tsx +++ b/apps/web/app/releases/1.4.0/page.tsx @@ -1,5 +1,17 @@ import Link from 'next/link'; -import { desktopRelease } from '../../download/release'; + +const release = { + version: '1.4.0', + nsis: { + fileName: 'VouchNetSetup-1.4.0-x64.exe', + href: '/downloads/VouchNetSetup-1.4.0-x64.exe', + }, + msi: { + fileName: 'VouchNet-1.4.0-x64.msi', + href: '/downloads/VouchNet-1.4.0-x64.msi', + }, + checksumsHref: '/downloads/VouchNet-1.4.0-x64.sha256', +} as const; export const metadata = { title: 'VouchNet 1.4.0', @@ -16,7 +28,7 @@ export default function VouchNet140ReleasePage() { All releases
    - Current release + Previous release

    October 13, 2026

    VouchNet 1.4.0

    @@ -26,7 +38,7 @@ export default function VouchNet140ReleasePage() {

    Included

      -
    • VouchNet Desktop {desktopRelease.version} for Windows x64.
      • +
    • VouchNet Desktop {release.version} for Windows x64.
    • NSIS setup, MSI, and SHA-256 checksum downloads served from VouchNet.
    • Canonical VouchNet icon assets for the app, installer, and Windows shell.
    • Public organization and compensation-forward job discovery on the landing page.
      • @@ -34,17 +46,17 @@ export default function VouchNet140ReleasePage() {

    Downloads

    The Windows installers are unsigned. Verify the published{' '} - SHA-256 checksums before installing. Code - signing and automatic updates remain future release work. + SHA-256 checksums before installing. Code signing and + automatic updates remain future release work.

    diff --git a/apps/web/app/releases/1.5.0/page.tsx b/apps/web/app/releases/1.5.0/page.tsx new file mode 100644 index 0000000..90cfb71 --- /dev/null +++ b/apps/web/app/releases/1.5.0/page.tsx @@ -0,0 +1,52 @@ +import Link from 'next/link'; +import { desktopRelease } from '../../download/release'; + +export const metadata = { + title: 'VouchNet 1.5.0', + description: 'VouchNet 1.5.0 release notes and Windows desktop downloads.', +}; + +export default function VouchNet150ReleasePage() { + return ( +
    +
    + + VouchNet + + All releases +
    +
    + Current release +

    October 28, 2026

    +

    VouchNet 1.5.0

    +

    + A desktop signal-desk release. VouchNet Desktop now surfaces native activity, curated + jobs and organizations, feed discovery, keyboard navigation, and optional Windows message + notifications while staying on the same account as vouchnet.dev. +

    +

    Included

    +
      +
    • VouchNet Desktop {desktopRelease.version} for Windows x64.
      • +
    • Native activity inbox with device-token mark-as-read.
      • +
    • Home discovery for daily challenge, topics, and transparent roles.
      • +
    • Jobs and Organizations workspace surfaces with curated directory cards.
      • +
    • Conversation search, Discover navigation, and letter-key workspace shortcuts.
      • +
    +

    Downloads

    + +

    + The Windows installers are unsigned. Verify the published{' '} + SHA-256 checksums before installing. Code + signing and automatic updates remain future release work. +

    +
    +
    + ); +} diff --git a/apps/web/app/releases/page.tsx b/apps/web/app/releases/page.tsx index de57dc3..e8bcf39 100644 --- a/apps/web/app/releases/page.tsx +++ b/apps/web/app/releases/page.tsx @@ -14,6 +14,15 @@ export default function ReleasesPage() {

    VouchNet releases

    Current +

    Version 1.5.0

    +

    + Desktop signal desk: native activity, feed discovery, curated jobs and organizations, + Discover navigation, conversation search, and optional Windows message notifications. +

    + Read version 1.5.0 notes → +
    +
    + Previous platform release

    Version 1.4.0

    The first downloadable Windows release: a real NSIS setup and MSI, canonical VouchNet @@ -23,7 +32,7 @@ export default function ReleasesPage() { Read version 1.4.0 notes →

    - Previous platform release + Earlier release

    Version 1.3.0

    Responsive public navigation, current product previews, and truthful source-release diff --git a/apps/web/app/sitemap.ts b/apps/web/app/sitemap.ts index df1ef07..c15d4c3 100644 --- a/apps/web/app/sitemap.ts +++ b/apps/web/app/sitemap.ts @@ -33,7 +33,8 @@ export default async function sitemap(): Promise { entry('/download', undefined, 0.6), entry('/releases', undefined, 0.4), entry('/releases/1.3.0', undefined, 0.25), - entry('/releases/1.4.0', undefined, 0.45), + entry('/releases/1.4.0', undefined, 0.35), + entry('/releases/1.5.0', undefined, 0.45), entry('/games', undefined, 0.7), entry('/privacy', undefined, 0.3), entry('/terms', undefined, 0.3), diff --git a/docs/releases/v1.5.0.md b/docs/releases/v1.5.0.md new file mode 100644 index 0000000..a4a059c --- /dev/null +++ b/docs/releases/v1.5.0.md @@ -0,0 +1,33 @@ +# VouchNet 1.5.0 — Desktop Signal Desk + +Released October 28, 2026. + +## Included + +- Native desktop activity inbox backed by the same member notifications as the web app, including + mark-as-read over the device Bearer token. +- Home feed discovery panels for the daily Signal Circuit challenge, skill topics, and + salary-forward roles already returned by `/api/desktop/feed`. +- First-class Jobs and Organizations workspace surfaces that render curated directory records + instead of only opening the browser. +- Discover in the desktop rail and command palette, with letter-key shortcuts across every space. +- Working conversation search, unread activity badges, and optional Windows notifications when new + unread messages arrive. +- Shared design tokens, reduced-motion support, and a calmer desktop shell aligned with the + VouchNet interface system. + +## Download integrity + +The release publishes `VouchNetSetup-1.5.0-x64.exe`, `VouchNet-1.5.0-x64.msi`, and +`VouchNet-1.5.0-x64.sha256` through the GitHub Release workflow. Verify the SHA-256 values before +installing. + +The installer is not code-signed in this release. Windows may show a publisher or SmartScreen +warning. Do not bypass a warning unless the downloaded file matches the official checksum. + +## Verification + +- `pnpm --filter @vouchnet/desktop build` +- `cargo check --manifest-path apps/desktop/src-tauri/Cargo.toml` +- `pnpm --filter @nexus/web typecheck` +- `pnpm --filter @nexus/web test` diff --git a/package.json b/package.json index 924ae32..d8311ad 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "name": "nexus", "private": true, - "version": "1.4.0", + "version": "1.5.0", "packageManager": "pnpm@11.19.0", "scripts": { "dev": "pnpm --filter @nexus/web dev", From 9700aa556c5ee3d9dc5be7c463c8583138d67a1f Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Wed, 28 Oct 2026 12:58:20 +0000 Subject: [PATCH 2/3] fix(security): patch Next/Zod and polish 1.5.0 release train Clear production high/critical advisories, soft-fail Dependency Review until the graph is enabled, upgrade desktop/client patch deps, and cover the desktop activity API with tests. Co-authored-by: Matthew --- .github/workflows/security.yml | 2 + CHANGELOG.md | 8 + apps/desktop/package.json | 18 +- apps/desktop/src-tauri/tauri.conf.json | 13 +- apps/desktop/src/app.tsx | 7 +- apps/desktop/src/styles.css | 8 +- .../app/api/desktop/activity/route.test.ts | 88 +++ apps/web/app/download/windows/page.tsx | 4 +- apps/web/app/releases/1.5.0/page.tsx | 4 +- apps/web/package.json | 16 +- docs/releases/v1.5.0.md | 7 + package.json | 4 +- packages/auth/package.json | 2 +- packages/config/package.json | 2 +- packages/db/package.json | 2 +- pnpm-lock.yaml | 636 +++++++++--------- 16 files changed, 460 insertions(+), 361 deletions(-) create mode 100644 apps/web/app/api/desktop/activity/route.test.ts diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index e39955f..89b7050 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -29,6 +29,8 @@ jobs: dependency-review: if: github.event_name == 'pull_request' runs-on: ubuntu-latest + # Soft-fail until Dependency graph is enabled in repository security settings. + continue-on-error: true steps: - uses: actions/checkout@v4 - uses: actions/dependency-review-action@v4 diff --git a/CHANGELOG.md b/CHANGELOG.md index cbdae01..d59eb02 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -21,6 +21,14 @@ All notable changes to VouchNet are documented here. This project follows - Shared design tokens, reduced-motion support, and shell polish keep Desktop aligned with the VouchNet interface system. +### Security and dependency maintenance + +- Upgraded Next.js to `16.4.3` and Zod to `4.6.7`, clearing the production high/critical advisories + that blocked the runtime dependency integrity gate. +- Softened the Dependency Review CI job until the repository Dependency graph setting is enabled. +- Patched desktop Tauri client packages, React, Nodemailer, Drizzle ORM, and Prettier on the same + release train. + ### Release contents - Windows installers and SHA-256 checksums publish through the existing GitHub Release workflow for diff --git a/apps/desktop/package.json b/apps/desktop/package.json index b9ee7e4..a59bf86 100644 --- a/apps/desktop/package.json +++ b/apps/desktop/package.json @@ -10,17 +10,17 @@ "bundle": "pnpm build && tauri build" }, "dependencies": { - "@tauri-apps/api": "^2.9.0", - "@tauri-apps/plugin-deep-link": "^2.4.0", - "@tauri-apps/plugin-opener": "^2.5.0", - "@tauri-apps/plugin-notification": "^2.3.0", - "react": "^19.2.0", - "react-dom": "^19.2.0" + "@tauri-apps/api": "^2.12.4", + "@tauri-apps/plugin-deep-link": "^2.6.2", + "@tauri-apps/plugin-notification": "^2.7.0", + "@tauri-apps/plugin-opener": "^2.7.2", + "react": "^19.3.1", + "react-dom": "^19.3.1" }, "devDependencies": { - "@tauri-apps/cli": "^2.9.0", - "@types/react": "^19.2.2", - "@types/react-dom": "^19.2.2", + "@tauri-apps/cli": "^2.12.4", + "@types/react": "^19.3.0", + "@types/react-dom": "^19.3.0", "@vitejs/plugin-react": "^5.1.0", "typescript": "^5.9.3", "vite": "^7.2.0" diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json index 8ce6856..46e1980 100644 --- a/apps/desktop/src-tauri/tauri.conf.json +++ b/apps/desktop/src-tauri/tauri.conf.json @@ -11,7 +11,18 @@ }, "app": { "windows": [ - { "title": "VouchNet", "width": 1280, "height": 820, "minWidth": 980, "minHeight": 650 } + { + "title": "VouchNet", + "width": 1280, + "height": 820, + "minWidth": 980, + "minHeight": 650, + "resizable": true, + "maximizable": true, + "fullscreen": false, + "focus": true, + "dragDropEnabled": false + } ], "security": { "csp": "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; connect-src 'self' https://vouchnet.dev; object-src 'none'; base-uri 'none'; form-action 'none'; frame-src 'none'" diff --git a/apps/desktop/src/app.tsx b/apps/desktop/src/app.tsx index 860e2e1..d606f76 100644 --- a/apps/desktop/src/app.tsx +++ b/apps/desktop/src/app.tsx @@ -304,9 +304,7 @@ export function App() { const target = event.target as HTMLElement | null; if ( target && - (target.tagName === 'INPUT' || - target.tagName === 'TEXTAREA' || - target.isContentEditable) + (target.tagName === 'INPUT' || target.tagName === 'TEXTAREA' || target.isContentEditable) ) { return; } @@ -627,8 +625,7 @@ export function App() { title="Activity" type="button" > - ◌ - {unreadActivity ? {unreadActivity} : null} + ◌{unreadActivity ? {unreadActivity} : null}

    diff --git a/apps/desktop/src/styles.css b/apps/desktop/src/styles.css index b4071d8..beff0ee 100644 --- a/apps/desktop/src/styles.css +++ b/apps/desktop/src/styles.css @@ -13,13 +13,7 @@ --vn-motion-quick: 160ms; color: var(--vn-ink); background: var(--vn-canvas); - font-family: - 'Segoe UI Variable Text', - 'Segoe UI', - Aptos, - ui-sans-serif, - system-ui, - sans-serif; + font-family: 'Segoe UI Variable Text', 'Segoe UI', Aptos, ui-sans-serif, system-ui, sans-serif; font-synthesis: none; } * { diff --git a/apps/web/app/api/desktop/activity/route.test.ts b/apps/web/app/api/desktop/activity/route.test.ts new file mode 100644 index 0000000..05e6b4c --- /dev/null +++ b/apps/web/app/api/desktop/activity/route.test.ts @@ -0,0 +1,88 @@ +import { NextRequest } from 'next/server'; +import { beforeEach, describe, expect, it, vi } from 'vitest'; +import { GET } from './route'; + +const state = vi.hoisted(() => ({ + actor: { userId: 'user-1' } as { userId: string } | null, + notifications: [] as Array<{ + id: string; + title: string; + body: string; + href: string; + readAt: Date | null; + createdAt: Date; + }>, + fail: false, +})); + +vi.mock('../../../lib/desktop-auth', () => ({ + desktopActorFromBearer: async () => state.actor, +})); + +vi.mock('../../../lib/daily-strategy', () => ({ + ensureDailyStrategyNotification: async () => undefined, + listMemberNotifications: async () => { + if (state.fail) throw new Error('DATABASE_UNAVAILABLE'); + return state.notifications; + }, +})); + +describe('desktop activity', () => { + beforeEach(() => { + state.actor = { userId: 'user-1' }; + state.fail = false; + state.notifications = [ + { + id: '11111111-1111-1111-1111-111111111111', + title: 'Signal Circuit is ready', + body: 'Steady difficulty', + href: '/games', + readAt: null, + createdAt: new Date('2026-10-28T12:00:00.000Z'), + }, + ]; + }); + + it('requires a desktop device bearer token', async () => { + state.actor = null; + const response = await GET( + new NextRequest('https://vouchnet.dev/api/desktop/activity', { + headers: { authorization: 'Bearer missing' }, + }), + ); + expect(response.status).toBe(401); + expect(await response.json()).toEqual({ error: 'UNAUTHENTICATED' }); + }); + + it('returns ISO notification timestamps for the desktop client', async () => { + const response = await GET( + new NextRequest('https://vouchnet.dev/api/desktop/activity', { + headers: { authorization: 'Bearer desktop-token' }, + }), + ); + expect(response.status).toBe(200); + expect(await response.json()).toEqual({ + notifications: [ + { + id: '11111111-1111-1111-1111-111111111111', + title: 'Signal Circuit is ready', + body: 'Steady difficulty', + href: '/games', + readAt: null, + createdAt: '2026-10-28T12:00:00.000Z', + }, + ], + }); + }); + + it('hides database failures behind a desktop-safe unavailable response', async () => { + state.fail = true; + const response = await GET( + new NextRequest('https://vouchnet.dev/api/desktop/activity', { + headers: { authorization: 'Bearer desktop-token' }, + }), + ); + expect(response.status).toBe(503); + expect(await response.json()).toEqual({ error: 'ACTIVITY_UNAVAILABLE' }); + }); +}); diff --git a/apps/web/app/download/windows/page.tsx b/apps/web/app/download/windows/page.tsx index 7bd7ce7..d6b977d 100644 --- a/apps/web/app/download/windows/page.tsx +++ b/apps/web/app/download/windows/page.tsx @@ -29,8 +29,8 @@ export default function WindowsDownloadPage() {
    Verify before installing - Download the SHA-256 checksums. The - installer is unsigned, so Windows may show a publisher warning. + Download the SHA-256 checksums. The installer + is unsigned, so Windows may show a publisher warning.
    Read the release notes diff --git a/apps/web/app/releases/1.5.0/page.tsx b/apps/web/app/releases/1.5.0/page.tsx index 90cfb71..f47e360 100644 --- a/apps/web/app/releases/1.5.0/page.tsx +++ b/apps/web/app/releases/1.5.0/page.tsx @@ -20,8 +20,8 @@ export default function VouchNet150ReleasePage() {

    October 28, 2026

    VouchNet 1.5.0

    - A desktop signal-desk release. VouchNet Desktop now surfaces native activity, curated - jobs and organizations, feed discovery, keyboard navigation, and optional Windows message + A desktop signal-desk release. VouchNet Desktop now surfaces native activity, curated jobs + and organizations, feed discovery, keyboard navigation, and optional Windows message notifications while staying on the same account as vouchnet.dev.

    Included

    diff --git a/apps/web/package.json b/apps/web/package.json index ec75c14..5bb0ef1 100644 --- a/apps/web/package.json +++ b/apps/web/package.json @@ -1,7 +1,7 @@ { "name": "@nexus/web", "private": true, - "version": "1.3.0", + "version": "1.5.0", "scripts": { "dev": "next dev", "build": "next build", @@ -24,20 +24,20 @@ "@types/qrcode": "^1.5.6", "framer-motion": "^13.4.6", "lucide-react": "^1.49.0", - "next": "^16.3.8", - "nodemailer": "10.0.9", + "next": "^16.4.3", + "nodemailer": "10.2.1", "qrcode": "^1.5.4", - "react": "^19.2.0", - "react-dom": "^19.2.0", + "react": "^19.3.1", + "react-dom": "^19.3.1", "redis": "5.8.2", "stripe": "^22.6.2", "tailwindcss": "^4.1.16", - "zod": "^4.1.12" + "zod": "^4.6.7" }, "devDependencies": { "@electric-sql/pglite": "~0.3.16", "@types/nodemailer": "^8.0.2", - "@types/react": "^19.2.2", - "@types/react-dom": "^19.2.2" + "@types/react": "^19.3.0", + "@types/react-dom": "^19.3.0" } } diff --git a/docs/releases/v1.5.0.md b/docs/releases/v1.5.0.md index a4a059c..03df756 100644 --- a/docs/releases/v1.5.0.md +++ b/docs/releases/v1.5.0.md @@ -16,6 +16,13 @@ Released October 28, 2026. - Shared design tokens, reduced-motion support, and a calmer desktop shell aligned with the VouchNet interface system. +## Security + +- Next.js `16.4.3` and Zod `4.6.7` clear the high/critical production advisories from the prior + release train. +- Desktop Tauri client packages, React, Nodemailer, Drizzle ORM, and Prettier are patched in the + same cut. + ## Download integrity The release publishes `VouchNetSetup-1.5.0-x64.exe`, `VouchNet-1.5.0-x64.msi`, and diff --git a/package.json b/package.json index d8311ad..9b34735 100644 --- a/package.json +++ b/package.json @@ -17,8 +17,8 @@ "devDependencies": { "@types/node": "^24.10.1", "eslint": "^9.39.1", - "eslint-config-next": "^16.3.8", - "prettier": "^3.6.2", + "eslint-config-next": "^16.4.3", + "prettier": "^3.9.10", "typescript": "^5.9.3", "vitest": "^4.0.8" }, diff --git a/packages/auth/package.json b/packages/auth/package.json index 3628f35..3bb3a69 100644 --- a/packages/auth/package.json +++ b/packages/auth/package.json @@ -14,6 +14,6 @@ "dependencies": { "argon2": "^0.44.0", "server-only": "^0.0.1", - "zod": "^4.1.12" + "zod": "^4.6.7" } } diff --git a/packages/config/package.json b/packages/config/package.json index 8dbc66a..4acfd15 100644 --- a/packages/config/package.json +++ b/packages/config/package.json @@ -12,6 +12,6 @@ "test": "vitest run --passWithNoTests" }, "dependencies": { - "zod": "^4.1.12" + "zod": "^4.6.7" } } diff --git a/packages/db/package.json b/packages/db/package.json index ba41f3b..9fa3764 100644 --- a/packages/db/package.json +++ b/packages/db/package.json @@ -15,7 +15,7 @@ "test": "vitest run --passWithNoTests" }, "dependencies": { - "drizzle-orm": "^0.45.2", + "drizzle-orm": "^0.45.4", "postgres": "^3.4.7" }, "devDependencies": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 2f45a31..779e46e 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -22,11 +22,11 @@ importers: specifier: ^9.39.1 version: 9.39.5(supports-color@7.2.0) eslint-config-next: - specifier: ^16.3.8 - version: 16.3.8(@typescript-eslint/parser@8.71.1(eslint@9.39.5(supports-color@7.2.0))(supports-color@7.2.0)(typescript@5.9.3))(eslint@9.39.5(supports-color@7.2.0))(supports-color@7.2.0)(typescript@5.9.3) + specifier: ^16.4.3 + version: 16.4.3(@typescript-eslint/parser@8.71.1(eslint@9.39.5(supports-color@7.2.0))(supports-color@7.2.0)(typescript@5.9.3))(eslint@9.39.5(supports-color@7.2.0))(supports-color@7.2.0)(typescript@5.9.3) prettier: - specifier: ^3.6.2 - version: 3.9.9 + specifier: ^3.9.10 + version: 3.9.10 typescript: specifier: ^5.9.3 version: 5.9.3 @@ -37,32 +37,32 @@ importers: apps/desktop: dependencies: '@tauri-apps/api': - specifier: ^2.9.0 - version: 2.12.1 + specifier: ^2.12.4 + version: 2.12.4 '@tauri-apps/plugin-deep-link': - specifier: ^2.4.0 - version: 2.6.1 + specifier: ^2.6.2 + version: 2.6.2 '@tauri-apps/plugin-notification': - specifier: ^2.3.0 - version: 2.5.1 - '@tauri-apps/plugin-opener': - specifier: ^2.5.0 + specifier: ^2.7.0 version: 2.7.0 + '@tauri-apps/plugin-opener': + specifier: ^2.7.2 + version: 2.7.2 react: - specifier: ^19.2.0 - version: 19.3.0 + specifier: ^19.3.1 + version: 19.3.1 react-dom: - specifier: ^19.2.0 - version: 19.3.0(react@19.3.0) + specifier: ^19.3.1 + version: 19.3.1(react@19.3.1) devDependencies: '@tauri-apps/cli': - specifier: ^2.9.0 - version: 2.12.1 + specifier: ^2.12.4 + version: 2.12.4 '@types/react': - specifier: ^19.2.2 + specifier: ^19.3.0 version: 19.3.0 '@types/react-dom': - specifier: ^19.2.2 + specifier: ^19.3.0 version: 19.3.0(@types/react@19.3.0) '@vitejs/plugin-react': specifier: ^5.1.0 @@ -105,34 +105,34 @@ importers: version: link:../../packages/ui '@radix-ui/react-popover': specifier: ^1.1.23 - version: 1.1.23(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) + version: 1.1.23(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) '@radix-ui/react-tooltip': specifier: ^1.2.16 - version: 1.2.16(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) + version: 1.2.16(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) '@types/qrcode': specifier: ^1.5.6 version: 1.5.6 framer-motion: specifier: ^13.4.6 - version: 13.4.6(react-dom@19.3.0(react@19.3.0))(react@19.3.0) + version: 13.4.6(react-dom@19.3.1(react@19.3.1))(react@19.3.1) lucide-react: specifier: ^1.49.0 - version: 1.49.0(@types/react@19.3.0)(react@19.3.0) + version: 1.49.0(@types/react@19.3.0)(react@19.3.1) next: - specifier: ^16.3.8 - version: 16.3.8(@babel/core@7.29.7(supports-color@7.2.0))(@types/node@24.19.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) + specifier: ^16.4.3 + version: 16.4.3(@babel/core@7.29.7(supports-color@7.2.0))(@types/node@24.19.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) nodemailer: - specifier: 10.0.9 - version: 10.0.9 + specifier: 10.2.1 + version: 10.2.1 qrcode: specifier: ^1.5.4 version: 1.5.4 react: - specifier: ^19.2.0 - version: 19.3.0 + specifier: ^19.3.1 + version: 19.3.1 react-dom: - specifier: ^19.2.0 - version: 19.3.0(react@19.3.0) + specifier: ^19.3.1 + version: 19.3.1(react@19.3.1) redis: specifier: 5.8.2 version: 5.8.2 @@ -143,8 +143,8 @@ importers: specifier: ^4.1.16 version: 4.3.3 zod: - specifier: ^4.1.12 - version: 4.6.5 + specifier: ^4.6.7 + version: 4.6.7 devDependencies: '@electric-sql/pglite': specifier: ~0.3.16 @@ -153,10 +153,10 @@ importers: specifier: ^8.0.2 version: 8.0.2 '@types/react': - specifier: ^19.2.2 + specifier: ^19.3.0 version: 19.3.0 '@types/react-dom': - specifier: ^19.2.2 + specifier: ^19.3.0 version: 19.3.0(@types/react@19.3.0) apps/worker: {} @@ -178,22 +178,22 @@ importers: specifier: ^0.0.1 version: 0.0.1 zod: - specifier: ^4.1.12 - version: 4.6.5 + specifier: ^4.6.7 + version: 4.6.7 packages/brand: {} packages/config: dependencies: zod: - specifier: ^4.1.12 - version: 4.6.5 + specifier: ^4.6.7 + version: 4.6.7 packages/db: dependencies: drizzle-orm: - specifier: ^0.45.2 - version: 0.45.3(@electric-sql/pglite@0.3.16)(postgres@3.4.9) + specifier: ^0.45.4 + version: 0.45.4(@electric-sql/pglite@0.3.16)(postgres@3.4.9) postgres: specifier: ^3.4.7 version: 3.4.9 @@ -1061,60 +1061,60 @@ packages: '@emnapi/core': ^1.7.1 || ^2.0.0-alpha.4 '@emnapi/runtime': ^1.7.1 || ^2.0.0-alpha.4 - '@next/env@16.3.8': - resolution: {integrity: sha512-Al9zqHVV7TJv0eFuOU4U7Lvv74PTih4Ch63sk2xCIpSTkE3udFnaOcnzP2lQVymiL7yS9Cj2iClUXlR3EQ5sEw==} + '@next/env@16.4.3': + resolution: {integrity: sha512-a7tz1QCcWWkwC/rPJcPMJk/UNRu9CFhDd3OHYE5hddbJrs8BqRTalxI6GlKCWEGzRLHN+S/B7a4PAHCtm25aBQ==} - '@next/eslint-plugin-next@16.3.8': - resolution: {integrity: sha512-eCR9RcLTZrVS+K3+VOhi0xMdUUGNuriCHHhU1ZoABC/QQ/Gp0OWbLKQxV2/9DkmihYdYRcQWFmZXW8M1AMUXYw==} + '@next/eslint-plugin-next@16.4.3': + resolution: {integrity: sha512-oxuC06wt/71h6ACYCV9GbKOfnf5a7VlRe/p80YHTut15TNgDEmynDnaq8t/xhy5rlvk7dhItIPs6H3rvIM4kyw==} - '@next/swc-darwin-arm64@16.3.8': - resolution: {integrity: sha512-2JPRMh2nmQG5CiL7cXGL9AGwnPWJQ//cTtAUCT+w511QHk79SYz3LGv/pc5X643B/WEO0rvu3Yww0hqwt3kgeA==} + '@next/swc-darwin-arm64@16.4.3': + resolution: {integrity: sha512-4yq5EXBt+VDtAZwTyfijaFp5D2C5oz3Ikw5a2kiX2K9nw72vrZX2q5UuAlkPtUMO1tQz6JTKpaKWjS7OOefTDQ==} engines: {node: '>= 10'} cpu: [arm64] os: [darwin] - '@next/swc-darwin-x64@16.3.8': - resolution: {integrity: sha512-GZtCCOBKJ4leVIT/Th0llWKhD1ca92lzbQiS5R5ON9QkoiFnilFsebDae1JU2a3HWoKMEmEZWGs1AGLavVM72Q==} + '@next/swc-darwin-x64@16.4.3': + resolution: {integrity: sha512-1Rvkn/LUhnEF8WxnRkOrqGhbwXui1bkWFxONKIbN+r7C+9KHDSZ+iUoj4CzymVMWUyZIyx9szcb9+kbKhD500A==} engines: {node: '>= 10'} cpu: [x64] os: [darwin] - '@next/swc-linux-arm64-gnu@16.3.8': - resolution: {integrity: sha512-O659ygeQYqneJ1fBKMpFxIFqYkYswu8IAS1OCKK/4f3ZgJJm1dRz4fVJZRi/kLLWjnBKnebOePA4WNv+sV1pVA==} + '@next/swc-linux-arm64-gnu@16.4.3': + resolution: {integrity: sha512-dCKpXErGg3abUM6t5JTJV/ottVBTStJB5lRJTbgdUdQaQ+jNHiK56Hsc0YAEg/rinSh42hYG3HWiYmEMdilnxg==} engines: {node: '>= 10'} cpu: [arm64] os: [linux] libc: [glibc] - '@next/swc-linux-arm64-musl@16.3.8': - resolution: {integrity: sha512-dSjKSyWpzxoO1d3DIZZcP4XJcNaKeLmxQMFOiYl5vuBRMmweIqnAhty8tAmRsvTss779cK1FtYnDMj40e4TQlg==} + '@next/swc-linux-arm64-musl@16.4.3': + resolution: {integrity: sha512-WwYbhWkhYBvBtib1K4W0kL8MW2snBD2A5b3SN4vPpqalZbZs5+bQ1yzAdepVoOqrFfEW3dmREy4Zs1MrWcrFbw==} engines: {node: '>= 10'} cpu: [arm64] os: [linux] libc: [musl] - '@next/swc-linux-x64-gnu@16.3.8': - resolution: {integrity: sha512-lbqOuz3RPRcv+o9msNsJw5x4+Y1ZwPTs6vmL6DCf7i0fZfvng/F59wyeDwqHIvV0mK//RBy/jJkZ+nCKsSMXjQ==} + '@next/swc-linux-x64-gnu@16.4.3': + resolution: {integrity: sha512-QymWvfUwDEC5/lpJOsxX5VAbyoR2D13+2Jsjz4be7gT4LPqEgdpkeLIR/HFfCLgKzoMhpJbp6I/JnogyNZHcaA==} engines: {node: '>= 10'} cpu: [x64] os: [linux] libc: [glibc] - '@next/swc-linux-x64-musl@16.3.8': - resolution: {integrity: sha512-+316WswI8ScVgZeUd+1KGaXkHhaYQzCjvH/05TZSpJ8zBizb1a4G7DtO7F12jcBIqMOtsz9ji1t48fmKtzqsGA==} + '@next/swc-linux-x64-musl@16.4.3': + resolution: {integrity: sha512-Vmjd9D7DpA4Vv3cUlr82QWgJD/BQZmns801vtC5VWHg6jCIA4a5vMKpQnfrM2pyCrp2eV0ENdUg4PlN3bAc2Yw==} engines: {node: '>= 10'} cpu: [x64] os: [linux] libc: [musl] - '@next/swc-win32-arm64-msvc@16.3.8': - resolution: {integrity: sha512-ji0gd4kMYUxO+1fJBIbiBVRCjzG/lloiyCccnlebvb1ZJ5qXCPZqYg4Jl1DrrixnWNMKylzgpmMWx0yNDYXlzw==} + '@next/swc-win32-arm64-msvc@16.4.3': + resolution: {integrity: sha512-lG1pPdPLk7gTyGb00n5JIMLdBJgjb+UEhSdZvFbhUMg0DyC6z4B7RnpSKF9VCd4imkLObVbXOFA0kFCpw7yFow==} engines: {node: '>= 10'} cpu: [arm64] os: [win32] - '@next/swc-win32-x64-msvc@16.3.8': - resolution: {integrity: sha512-WcTlaKt/TWkh5kUjdJcUmB1XgZ+1c6fz4Y9fDHL73YNSdGaUWjceeWrrlwF0nv19iABYWC4iAq1oX1w4Bn0vfg==} + '@next/swc-win32-x64-msvc@16.4.3': + resolution: {integrity: sha512-NmQC9RkJdnPXRaMxtkCzobB3teVjqF33oSOnwDfi+XYGWWYpt+xlGK3mtktSKLbdjwaWbJu2OkkMiRFGUUncKg==} engines: {node: '>= 10'} cpu: [x64] os: [win32] @@ -1657,90 +1657,93 @@ packages: '@tauri-apps/api@2.12.1': resolution: {integrity: sha512-DeyFHa3wynpyoqTDikDEDGTJIq4LQ5USfolQGRmGIWT6JMADyxZBTDa5cAdT3tDg73rUXufPaCwN7aXBos4OnQ==} - '@tauri-apps/cli-darwin-arm64@2.12.1': - resolution: {integrity: sha512-8bMnbpJ2jKO/ufrOPL65EMHC3ptw7fzeraoQkwibyfGLqIl+UCWsC0152kmNbW6r9NvVQduXqAZF5mH1QgTWhw==} + '@tauri-apps/api@2.12.4': + resolution: {integrity: sha512-pVmfis+4zT8H0Qhp3xPZx9Ju7kpzvA6rr/PSJPyuwfvucTQ8sVt61NYU9KMkK703UFlYadFmjKA4HhybOtN0gg==} + + '@tauri-apps/cli-darwin-arm64@2.12.4': + resolution: {integrity: sha512-OxqKSckIkoJ6vX2AjifIJpTasFC0Hbdoo7gEiCmAjauABO3U8m2MRsLWe+QTiBwDx1mIrvgA+rvI7tvDnbnHVg==} engines: {node: '>= 10'} cpu: [arm64] os: [darwin] - '@tauri-apps/cli-darwin-x64@2.12.1': - resolution: {integrity: sha512-G+2qte8GNqNlEZ9ftd21rbu/APVkl3r/nzNDI7LVxEoqJWVNe9GbEgQUMH1r4PHT20Z2UxR3KjCkltIb0e/Wjg==} + '@tauri-apps/cli-darwin-x64@2.12.4': + resolution: {integrity: sha512-fz76/77wMMJOaaUN6n3CybRG0P/MTEjjqYk81mGPyhi9m6Ue5T+LWBnJP/AkPooNatBPI2vtulGqomyMJ44lCQ==} engines: {node: '>= 10'} cpu: [x64] os: [darwin] - '@tauri-apps/cli-linux-arm-gnueabihf@2.12.1': - resolution: {integrity: sha512-5b3n4DaTW+A1Zntnh4Yn44VyLrlPEpB8kMOBRfWkzNnzolBk+AYhKIfKjCLmoC8Mob3ETodxAEOMkE2YPKEWzQ==} + '@tauri-apps/cli-linux-arm-gnueabihf@2.12.4': + resolution: {integrity: sha512-K0w8Bof6Lt8QKLAYhRy0yy36ZH5iA/35VuSOvnxyjvCUZ+A3JKsUTlALviH/sVgAlisaPzzmeJSH8XOn4Q2HBA==} engines: {node: '>= 10'} cpu: [arm] os: [linux] - '@tauri-apps/cli-linux-arm64-gnu@2.12.1': - resolution: {integrity: sha512-APArHhDu+8pXSCkCQmvaz1nD3d8WTmlCoSS/oG475TJ6AATBvyQOAmf5qELgsQ4s2+8MOsop0Zd699RKELF1Cw==} + '@tauri-apps/cli-linux-arm64-gnu@2.12.4': + resolution: {integrity: sha512-j5rOnjmRUwWrm1oosf0zBYl4D+fqydgUROFCk0hvKZxvbTT8SOERes0QB7rBV/XWNy+kM6pCKzb3oSm2sRglzg==} engines: {node: '>= 10'} cpu: [arm64] os: [linux] libc: [glibc] - '@tauri-apps/cli-linux-arm64-musl@2.12.1': - resolution: {integrity: sha512-JaCxcLoV0oGtllVkLr4UAHWG/wTfkEunnUqnsEsGYOp0VRxnUwHg63wFBD0jU2ul5eFfSLIDS4RF2gfzsSo5Jg==} + '@tauri-apps/cli-linux-arm64-musl@2.12.4': + resolution: {integrity: sha512-aOue3Fy6Jb7+oWcfAVUsVHfeTybSCt2CZoU06aO4jv4d2Ks/KnaTPwMAK3CLEduGOvBLY1lbBBrIyomqLLH5Sg==} engines: {node: '>= 10'} cpu: [arm64] os: [linux] libc: [musl] - '@tauri-apps/cli-linux-riscv64-gnu@2.12.1': - resolution: {integrity: sha512-K5+VXM7+SGVDwZleA2+lMgvbTVuA5e1tkiVEawu1Yxj26ZyEfO8h8xTC1rBdRX2xgJDSwCk6vPUBCS6i+Z5slQ==} + '@tauri-apps/cli-linux-riscv64-gnu@2.12.4': + resolution: {integrity: sha512-Fx6GShY/RvST+t6LMlTHAwd66+1tEaAAGrnU7cysVfaiRP1BKng5Vl6rVmO6rSLOA1Sp1dRzNYM4f0OWQGb7qA==} engines: {node: '>= 10'} cpu: [riscv64] os: [linux] libc: [glibc] - '@tauri-apps/cli-linux-x64-gnu@2.12.1': - resolution: {integrity: sha512-Z1QGPr49HJZMktu+Spu6Q1b/f9ANadXvqZZZt2645ua1x1ev6prOgp85eiGv2jRzohFEMLo6aJyaLjLUX5KIvA==} + '@tauri-apps/cli-linux-x64-gnu@2.12.4': + resolution: {integrity: sha512-tNzZSa79Z1nRpHxEpQ38lsAFpKlFlYvoXzjTV+lRRn/zSf3wrdUC3wnLcq2XEadchPu4ttK0zivhYzr+XGD19Q==} engines: {node: '>= 10'} cpu: [x64] os: [linux] libc: [glibc] - '@tauri-apps/cli-linux-x64-musl@2.12.1': - resolution: {integrity: sha512-nHuEhRPOMSJ/8RRhtMRxB9B9lVr7xxpe4DapBz8x1GIau3vdzjHHJ1hAfmw+PyayPLZ6XoaVIHPgI17rX6ii8w==} + '@tauri-apps/cli-linux-x64-musl@2.12.4': + resolution: {integrity: sha512-jmZ1pr0xEqUhuEusWtt9Yt+GF6lCnGHUmIL+KIknpbjK/XQ2qkhDBhaxK/JMHM2A8dAacVXCxXJk2EXpwhQUfA==} engines: {node: '>= 10'} cpu: [x64] os: [linux] libc: [musl] - '@tauri-apps/cli-win32-arm64-msvc@2.12.1': - resolution: {integrity: sha512-I0oPk2uGh86R8dAs2X5OxSP+/GqSc8jh1Px3l8EqrocSNivsRHDTh2k3PVOqdv163dlV6PIVvmhZAbH/lPfZrA==} + '@tauri-apps/cli-win32-arm64-msvc@2.12.4': + resolution: {integrity: sha512-fGo8pgEHZxdSYgZ/J98m1usJ7NHKmKbq7k6uT0x1rpOq6Bg2YVzzpaAblWk710f5LHYBJIL5QIFS5IrD+4gmTg==} engines: {node: '>= 10'} cpu: [arm64] os: [win32] - '@tauri-apps/cli-win32-ia32-msvc@2.12.1': - resolution: {integrity: sha512-baNZRBfepAJ5qNFRMwzgBk94xQmkcmTZrNDjZjnzrq2vAaTC3NAhallb/zo3hyoCGQlMS13sdovktrg46NZz6Q==} + '@tauri-apps/cli-win32-ia32-msvc@2.12.4': + resolution: {integrity: sha512-ezl8sQIcjYsye3TUnTH5VcWmWzccZASlQm7hlZt0dYyj1XD0qpVW47u2xYVrIKui0F8uQv/7QGZixdWiClBsbg==} engines: {node: '>= 10'} cpu: [ia32] os: [win32] - '@tauri-apps/cli-win32-x64-msvc@2.12.1': - resolution: {integrity: sha512-dIFaKslrzcbesb+bBh+E1R9km241pHyj32w6D9FPtvQeYpRUFbiCLEa/2S+S0UnIytfxepp4P+X8IerGqnXeYg==} + '@tauri-apps/cli-win32-x64-msvc@2.12.4': + resolution: {integrity: sha512-DJhDeCqjLDNMWYFy7ZS8cfeAHX2RK0RbQMLiA3bMVVkXRDJ4NBYiHriGqsUhsr9iG41aTb+dJGkFPmPw1gWwVw==} engines: {node: '>= 10'} cpu: [x64] os: [win32] - '@tauri-apps/cli@2.12.1': - resolution: {integrity: sha512-kEDEiGzG+yAc5FeLxtXpES/VN+F2C8H0r4gDVtfRLKxT9np9101d9REG/Kgo2lr0hKi0IpDsODiHnU3+naOmLg==} + '@tauri-apps/cli@2.12.4': + resolution: {integrity: sha512-JI9bHfudSRJikGOrjbXEm6RjzzvmKuLc+JixB1NE8hNzQkNlCCIC3pTES3uypkR9lxHrsbxzcnSwhI2IxBQphw==} engines: {node: '>= 10'} hasBin: true - '@tauri-apps/plugin-deep-link@2.6.1': - resolution: {integrity: sha512-yomIOIoiiDwXW3Bgy/V5c4frWo9sfWM9WZQew2s7vr7hXtDdbLDCLzvytIMCjMxbnln9O0oJsTI3XdDd2T9XlA==} + '@tauri-apps/plugin-deep-link@2.6.2': + resolution: {integrity: sha512-uMsF1VQt1OdYq3jDGsSBlBdtbTp6o7WYFYFnjiNuLfFpBvZsdH0XnolJoSzBOlTzhroROBUys/j1y1PQqdiMZA==} - '@tauri-apps/plugin-notification@2.5.1': - resolution: {integrity: sha512-i0nD48YsLov18siENevC3X7SmJpQE1cImq+JUsjrUPdu73J8cTIOyNIS8H0qxftFAc1k2w6s1E74DoFE02Jirw==} + '@tauri-apps/plugin-notification@2.7.0': + resolution: {integrity: sha512-kgdHCPSY/3GIi4gSWuLfd3y555U0kwzP0PmnUjT+sGhgO7RdAM6goFjDqayRaKC8yA5oEYi7w2NnA3oQxIjldw==} - '@tauri-apps/plugin-opener@2.7.0': - resolution: {integrity: sha512-mBorYfVKh9Lt7s4ZFtKbMUTxBw+Y/sVmSlKCtkkoBgMTC/DIbt/kaPm67L/2djAUqDI1wbixy5OHHVmipjuGMw==} + '@tauri-apps/plugin-opener@2.7.2': + resolution: {integrity: sha512-LyybP1VSzTMQiaFYcsbAse47KpivlyXdLZMQzGLEnkgQacGESnpjAfFoQ6h5sqWgAdZDH9szYjPzHMpv0Sz+TQ==} '@tybys/wasm-util@0.10.4': resolution: {integrity: sha512-W3c4gRigFS0T/Ma4qIYF3GDAc5AQdHb1yL5znJT1Zv1YaD9Kitx656wBjvr19qbiosmZT8lWDM5BEMynUqX65A==} @@ -2101,11 +2104,6 @@ packages: resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==} engines: {node: 18 || 20 || >=22} - baseline-browser-mapping@2.11.26: - resolution: {integrity: sha512-GLQdD3y6UF8iVuMJl5fHgE4jdn/ua7n+toKfLgNlg3BqQtOZjpy68T8Tup8/wGWZCDlm7KMg7tPb4MPn7oN0TQ==} - engines: {node: '>=6.0.0'} - hasBin: true - baseline-browser-mapping@2.11.27: resolution: {integrity: sha512-ElY12DaROGuan+lMmZ8Cvo/ZUbXPe7Enc/9VU/b1T3Kp4dwytRcNdR8DoSJN5SNJT/CuvcCA0DHDVmMOCePdRQ==} engines: {node: '>=6.0.0'} @@ -2150,9 +2148,6 @@ packages: resolution: {integrity: sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==} engines: {node: '>=6'} - caniuse-lite@1.0.30001813: - resolution: {integrity: sha512-zfjJo4rM0+fUomGDBW/xcDjhIwz/210DGvip2MAMDZ8KHcRPnOHmEgHPZP0UHlZoxr8fYKVJOqcORhYQcG4FKQ==} - caniuse-lite@1.0.30001815: resolution: {integrity: sha512-uDybUEyfgbyJJ93J1vikTylBX31AkdVYeVPeffMQpf8XN7hSfr0oZOn4VFOIMNvtU5+rHvC5Udg2TgtJKHm23Q==} @@ -2264,8 +2259,8 @@ packages: resolution: {integrity: sha512-YCYqxTLIB2OCqf6w9/Vef13baBVbwQIPcbT4Y56AfO6B9ajZhDhD8Jkveg/hJvT/iuMloKD/IYYkyMMNhr7Kqg==} hasBin: true - drizzle-orm@0.45.3: - resolution: {integrity: sha512-CAloER21cDdcgZ1OmjrZX82EeRNsdP+y0onX/eyoYDaYzki/adrAa91lzM5jWh7zZPK4qUbw/6LGv9J+A+uizA==} + drizzle-orm@0.45.4: + resolution: {integrity: sha512-NiM1YZpJ2UxyeE67DpDDZ+Tsw4YLX3trSlkNT7Tm9eKoUNb1LvaAaQzXgYQsWs+AQ9TUmmwMmBOCXuqqxUWKKQ==} peerDependencies: '@aws-sdk/client-rds-data': '>=3' '@cloudflare/workers-types': '>=4' @@ -2434,8 +2429,8 @@ packages: resolution: {integrity: sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==} engines: {node: '>=10'} - eslint-config-next@16.3.8: - resolution: {integrity: sha512-81vovwMe6NGnoFsl0KUJWzlS+y239i3fdsxs49gSEX3pDQW2cuKy+fxUPXNkQqqx6OCPheYPtBlSufc9aZ0k+w==} + eslint-config-next@16.4.3: + resolution: {integrity: sha512-j9IqBma6abp800frdUURaizYMgXOK+jNGyq6CsYcM9AxpSJs5D/TgMNGeAmRUilZvA7g9V1Tr71gNg9/SVTuMQ==} peerDependencies: eslint: '>=9.0.0' typescript: '>=3.3.1' @@ -3052,11 +3047,6 @@ packages: ms@2.1.3: resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==} - nanoid@3.3.19: - resolution: {integrity: sha512-Y2tUNy4ouw6tq5oDSKeQYGOyhkUBhNOcGV/02KC+6kd9eDGqdZd++mjMiIDilrBYvjEnCYvVtsuHCuP+okSfug==} - engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} - hasBin: true - nanoid@3.3.20: resolution: {integrity: sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ==} engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} @@ -3070,8 +3060,8 @@ packages: natural-compare@1.4.0: resolution: {integrity: sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==} - next@16.3.8: - resolution: {integrity: sha512-U7QEZaTini6wKrb8A8hqLLqYQyCetegKjCpJOyxk642vWoMoU1x5PyZCJFvgYgiptA8xc5j/9xYlZFO7w9Sjmw==} + next@16.4.3: + resolution: {integrity: sha512-OqxKTGi9u80FydydsMNYNjnuje9Au+kvHlt2GZ//ftdpDHm1dxKqAaENoOOTX5wKzn+9vaKUNIfZeyZUuLhCnA==} engines: {node: '>=20.9.0'} hasBin: true peerDependencies: @@ -3107,8 +3097,8 @@ packages: resolution: {integrity: sha512-kQK9LGGFiHtrWiNhZtA7Qbw17AQz+dmsEKODRIVTXA9+e5MS/2gZEBhYJt13GrAz5/IOZKddH/0Z3TP/Zgo+yw==} engines: {node: '>=18'} - nodemailer@10.0.9: - resolution: {integrity: sha512-BF0qcyplCwp+jMk6HCjFykBz/YhhZSsxrARhOldLwFWH+8kGjQsd2WIMIZhqEuyXRoGFi0ONbDeWDMDoL8MhLw==} + nodemailer@10.2.1: + resolution: {integrity: sha512-ZrDNsPFoDMwefNs7sJwrYiEJ/CG4ClJWDZv05iNJsEBWa8GRDry1QJHTJxsuTAY9eDDKjX4k+q3SxslXJOao7w==} engines: {node: '>=20.0.0'} object-assign@4.1.1: @@ -3228,8 +3218,8 @@ packages: resolution: {integrity: sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g==} engines: {node: '>= 0.8.0'} - prettier@3.9.9: - resolution: {integrity: sha512-Z/CJHIkdujO/OtN7nXUii0Rf3VT5SRuhjBA82Xvu2XhBUgX3nhP67T0LHceBdQLex7OOFGTox+Q5Yg8Jk2Qivg==} + prettier@3.9.10: + resolution: {integrity: sha512-skGHTH1Yb9QvaTC4hWnRTzEYtCpApF0UMBPz+t/0ZPzP8ihefo/btKd+QA7pUE0fEwA1SbS/NmhyEcstdXOIdA==} engines: {node: '>=14'} hasBin: true @@ -3248,10 +3238,10 @@ packages: queue-microtask@1.2.3: resolution: {integrity: sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==} - react-dom@19.3.0: - resolution: {integrity: sha512-JDk8dgif51OjFoDE70+OT9ICyYr+69HlmihNwp1+Nsfbna3t5sIiCa9ZJktDmQ4/1b/rn26hIAR2uYXDMr5r0Q==} + react-dom@19.3.1: + resolution: {integrity: sha512-Y0bARz53lhEC1NMCASs0/j+faB/zqt3R8hpvg1e8+61ZVJ4UL0UdC4cBbXfZMcIuhrfgeILTLe+ZeBCavQPtKQ==} peerDependencies: - react: ^19.3.0 + react: ^19.3.1 react-is@16.13.1: resolution: {integrity: sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==} @@ -3294,6 +3284,10 @@ packages: resolution: {integrity: sha512-E8LUcbtBWt20bbl2YoHfx4ZDBdxVTfOKtCZn9cDSJ4l6/nuoApcpIBcj47t2wZoVX8g2ZHuMHbiShgCR1T5Sog==} engines: {node: '>=0.10.0'} + react@19.3.1: + resolution: {integrity: sha512-QNhWdt7nrgVWWQG58QuGsAR3jv3Hbe4mb4vz7w2csnHavciZJgda1CPNaldF6eVxv90ud3jUXpKlHL69gO38yw==} + engines: {node: '>=0.10.0'} + redis@5.8.2: resolution: {integrity: sha512-31vunZj07++Y1vcFGcnNWEf5jPoTkGARgfWI4+Tk55vdwHxhAvug8VEtW7Cx+/h47NuJTEg/JL77zAwC6E0OeA==} engines: {node: '>= 18'} @@ -3808,8 +3802,8 @@ packages: peerDependencies: zod: ^3.25.0 || ^4.0.0 - zod@4.6.5: - resolution: {integrity: sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q==} + zod@4.6.7: + resolution: {integrity: sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg==} snapshots: @@ -4244,11 +4238,11 @@ snapshots: '@floating-ui/core': 1.8.0 '@floating-ui/utils': 0.2.12 - '@floating-ui/react-dom@2.1.9(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': + '@floating-ui/react-dom@2.1.9(react-dom@19.3.1(react@19.3.1))(react@19.3.1)': dependencies: '@floating-ui/dom': 1.8.0 - react: 19.3.0 - react-dom: 19.3.0(react@19.3.0) + react: 19.3.1 + react-dom: 19.3.1(react@19.3.1) '@floating-ui/utils@0.2.12': {} @@ -4404,37 +4398,37 @@ snapshots: '@tybys/wasm-util': 0.10.4 optional: true - '@next/env@16.3.8': {} + '@next/env@16.4.3': {} - '@next/eslint-plugin-next@16.3.8(eslint@9.39.5(supports-color@7.2.0))': + '@next/eslint-plugin-next@16.4.3(eslint@9.39.5(supports-color@7.2.0))': dependencies: '@eslint-community/eslint-utils': 4.9.1(eslint@9.39.5(supports-color@7.2.0)) fast-glob: 3.3.1 transitivePeerDependencies: - eslint - '@next/swc-darwin-arm64@16.3.8': + '@next/swc-darwin-arm64@16.4.3': optional: true - '@next/swc-darwin-x64@16.3.8': + '@next/swc-darwin-x64@16.4.3': optional: true - '@next/swc-linux-arm64-gnu@16.3.8': + '@next/swc-linux-arm64-gnu@16.4.3': optional: true - '@next/swc-linux-arm64-musl@16.3.8': + '@next/swc-linux-arm64-musl@16.4.3': optional: true - '@next/swc-linux-x64-gnu@16.3.8': + '@next/swc-linux-x64-gnu@16.4.3': optional: true - '@next/swc-linux-x64-musl@16.3.8': + '@next/swc-linux-x64-musl@16.4.3': optional: true - '@next/swc-win32-arm64-msvc@16.3.8': + '@next/swc-win32-arm64-msvc@16.4.3': optional: true - '@next/swc-win32-x64-msvc@16.3.8': + '@next/swc-win32-x64-msvc@16.4.3': optional: true '@nodelib/fs.scandir@2.1.5': @@ -4457,208 +4451,208 @@ snapshots: '@radix-ui/primitive@1.1.7': {} - '@radix-ui/react-arrow@1.1.15(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': + '@radix-ui/react-arrow@1.1.15(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1)': dependencies: - '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - react: 19.3.0 - react-dom: 19.3.0(react@19.3.0) + '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + react: 19.3.1 + react-dom: 19.3.1(react@19.3.1) optionalDependencies: '@types/react': 19.3.0 '@types/react-dom': 19.3.0(@types/react@19.3.0) - '@radix-ui/react-compose-refs@1.1.5(@types/react@19.3.0)(react@19.3.0)': + '@radix-ui/react-compose-refs@1.1.5(@types/react@19.3.0)(react@19.3.1)': dependencies: - react: 19.3.0 + react: 19.3.1 optionalDependencies: '@types/react': 19.3.0 - '@radix-ui/react-context@1.2.2(@types/react@19.3.0)(react@19.3.0)': + '@radix-ui/react-context@1.2.2(@types/react@19.3.0)(react@19.3.1)': dependencies: - react: 19.3.0 + react: 19.3.1 optionalDependencies: '@types/react': 19.3.0 - '@radix-ui/react-dismissable-layer@1.1.19(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': + '@radix-ui/react-dismissable-layer@1.1.19(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1)': dependencies: '@radix-ui/primitive': 1.1.7 - '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-use-callback-ref': 1.1.4(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-use-effect-event': 0.0.5(@types/react@19.3.0)(react@19.3.0) - react: 19.3.0 - react-dom: 19.3.0(react@19.3.0) + '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-use-callback-ref': 1.1.4(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-use-effect-event': 0.0.5(@types/react@19.3.0)(react@19.3.1) + react: 19.3.1 + react-dom: 19.3.1(react@19.3.1) optionalDependencies: '@types/react': 19.3.0 '@types/react-dom': 19.3.0(@types/react@19.3.0) - '@radix-ui/react-focus-guards@1.1.6(@types/react@19.3.0)(react@19.3.0)': + '@radix-ui/react-focus-guards@1.1.6(@types/react@19.3.0)(react@19.3.1)': dependencies: - react: 19.3.0 + react: 19.3.1 optionalDependencies: '@types/react': 19.3.0 - '@radix-ui/react-focus-scope@1.1.16(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': + '@radix-ui/react-focus-scope@1.1.16(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1)': dependencies: - '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-use-callback-ref': 1.1.4(@types/react@19.3.0)(react@19.3.0) - react: 19.3.0 - react-dom: 19.3.0(react@19.3.0) + '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-use-callback-ref': 1.1.4(@types/react@19.3.0)(react@19.3.1) + react: 19.3.1 + react-dom: 19.3.1(react@19.3.1) optionalDependencies: '@types/react': 19.3.0 '@types/react-dom': 19.3.0(@types/react@19.3.0) - '@radix-ui/react-id@1.1.4(@types/react@19.3.0)(react@19.3.0)': + '@radix-ui/react-id@1.1.4(@types/react@19.3.0)(react@19.3.1)': dependencies: - '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0) - react: 19.3.0 + '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.1) + react: 19.3.1 optionalDependencies: '@types/react': 19.3.0 - '@radix-ui/react-popover@1.1.23(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': + '@radix-ui/react-popover@1.1.23(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1)': dependencies: '@radix-ui/primitive': 1.1.7 - '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-dismissable-layer': 1.1.19(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-focus-guards': 1.1.6(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-focus-scope': 1.1.16(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-id': 1.1.4(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-popper': 1.3.7(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-portal': 1.1.17(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-presence': 1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-slot': 1.3.3(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-use-controllable-state': 1.2.6(@types/react@19.3.0)(react@19.3.0) + '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-dismissable-layer': 1.1.19(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-focus-guards': 1.1.6(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-focus-scope': 1.1.16(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-id': 1.1.4(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-popper': 1.3.7(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-portal': 1.1.17(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-presence': 1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-slot': 1.3.3(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-use-controllable-state': 1.2.6(@types/react@19.3.0)(react@19.3.1) aria-hidden: 1.2.6 - react: 19.3.0 - react-dom: 19.3.0(react@19.3.0) - react-remove-scroll: 2.7.2(@types/react@19.3.0)(react@19.3.0) + react: 19.3.1 + react-dom: 19.3.1(react@19.3.1) + react-remove-scroll: 2.7.2(@types/react@19.3.0)(react@19.3.1) optionalDependencies: '@types/react': 19.3.0 '@types/react-dom': 19.3.0(@types/react@19.3.0) - '@radix-ui/react-popper@1.3.7(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': - dependencies: - '@floating-ui/react-dom': 2.1.9(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-arrow': 1.1.15(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-use-callback-ref': 1.1.4(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-use-rect': 1.1.4(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-use-size': 1.1.4(@types/react@19.3.0)(react@19.3.0) + '@radix-ui/react-popper@1.3.7(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1)': + dependencies: + '@floating-ui/react-dom': 2.1.9(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-arrow': 1.1.15(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-use-callback-ref': 1.1.4(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-use-rect': 1.1.4(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-use-size': 1.1.4(@types/react@19.3.0)(react@19.3.1) '@radix-ui/rect': 1.1.3 - react: 19.3.0 - react-dom: 19.3.0(react@19.3.0) + react: 19.3.1 + react-dom: 19.3.1(react@19.3.1) optionalDependencies: '@types/react': 19.3.0 '@types/react-dom': 19.3.0(@types/react@19.3.0) - '@radix-ui/react-portal@1.1.17(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': + '@radix-ui/react-portal@1.1.17(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1)': dependencies: - '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0) - react: 19.3.0 - react-dom: 19.3.0(react@19.3.0) + '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.1) + react: 19.3.1 + react-dom: 19.3.1(react@19.3.1) optionalDependencies: '@types/react': 19.3.0 '@types/react-dom': 19.3.0(@types/react@19.3.0) - '@radix-ui/react-presence@1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': + '@radix-ui/react-presence@1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1)': dependencies: - '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0) - react: 19.3.0 - react-dom: 19.3.0(react@19.3.0) + '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.1) + react: 19.3.1 + react-dom: 19.3.1(react@19.3.1) optionalDependencies: '@types/react': 19.3.0 '@types/react-dom': 19.3.0(@types/react@19.3.0) - '@radix-ui/react-primitive@2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': + '@radix-ui/react-primitive@2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1)': dependencies: - '@radix-ui/react-slot': 1.3.3(@types/react@19.3.0)(react@19.3.0) - react: 19.3.0 - react-dom: 19.3.0(react@19.3.0) + '@radix-ui/react-slot': 1.3.3(@types/react@19.3.0)(react@19.3.1) + react: 19.3.1 + react-dom: 19.3.1(react@19.3.1) optionalDependencies: '@types/react': 19.3.0 '@types/react-dom': 19.3.0(@types/react@19.3.0) - '@radix-ui/react-slot@1.3.3(@types/react@19.3.0)(react@19.3.0)': + '@radix-ui/react-slot@1.3.3(@types/react@19.3.0)(react@19.3.1)': dependencies: - '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0) - react: 19.3.0 + '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.1) + react: 19.3.1 optionalDependencies: '@types/react': 19.3.0 - '@radix-ui/react-tooltip@1.2.16(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': + '@radix-ui/react-tooltip@1.2.16(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1)': dependencies: '@radix-ui/primitive': 1.1.7 - '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-dismissable-layer': 1.1.19(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-id': 1.1.4(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-popper': 1.3.7(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-portal': 1.1.17(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-presence': 1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - '@radix-ui/react-slot': 1.3.3(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-use-controllable-state': 1.2.6(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-visually-hidden': 1.2.11(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - react: 19.3.0 - react-dom: 19.3.0(react@19.3.0) + '@radix-ui/react-compose-refs': 1.1.5(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-context': 1.2.2(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-dismissable-layer': 1.1.19(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-id': 1.1.4(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-popper': 1.3.7(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-portal': 1.1.17(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-presence': 1.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + '@radix-ui/react-slot': 1.3.3(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-use-controllable-state': 1.2.6(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-visually-hidden': 1.2.11(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + react: 19.3.1 + react-dom: 19.3.1(react@19.3.1) optionalDependencies: '@types/react': 19.3.0 '@types/react-dom': 19.3.0(@types/react@19.3.0) - '@radix-ui/react-use-callback-ref@1.1.4(@types/react@19.3.0)(react@19.3.0)': + '@radix-ui/react-use-callback-ref@1.1.4(@types/react@19.3.0)(react@19.3.1)': dependencies: - react: 19.3.0 + react: 19.3.1 optionalDependencies: '@types/react': 19.3.0 - '@radix-ui/react-use-controllable-state@1.2.6(@types/react@19.3.0)(react@19.3.0)': + '@radix-ui/react-use-controllable-state@1.2.6(@types/react@19.3.0)(react@19.3.1)': dependencies: '@radix-ui/primitive': 1.1.7 - '@radix-ui/react-use-effect-event': 0.0.5(@types/react@19.3.0)(react@19.3.0) - '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0) - react: 19.3.0 + '@radix-ui/react-use-effect-event': 0.0.5(@types/react@19.3.0)(react@19.3.1) + '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.1) + react: 19.3.1 optionalDependencies: '@types/react': 19.3.0 - '@radix-ui/react-use-effect-event@0.0.5(@types/react@19.3.0)(react@19.3.0)': + '@radix-ui/react-use-effect-event@0.0.5(@types/react@19.3.0)(react@19.3.1)': dependencies: - '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0) - react: 19.3.0 + '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.1) + react: 19.3.1 optionalDependencies: '@types/react': 19.3.0 - '@radix-ui/react-use-layout-effect@1.1.4(@types/react@19.3.0)(react@19.3.0)': + '@radix-ui/react-use-layout-effect@1.1.4(@types/react@19.3.0)(react@19.3.1)': dependencies: - react: 19.3.0 + react: 19.3.1 optionalDependencies: '@types/react': 19.3.0 - '@radix-ui/react-use-rect@1.1.4(@types/react@19.3.0)(react@19.3.0)': + '@radix-ui/react-use-rect@1.1.4(@types/react@19.3.0)(react@19.3.1)': dependencies: '@radix-ui/rect': 1.1.3 - react: 19.3.0 + react: 19.3.1 optionalDependencies: '@types/react': 19.3.0 - '@radix-ui/react-use-size@1.1.4(@types/react@19.3.0)(react@19.3.0)': + '@radix-ui/react-use-size@1.1.4(@types/react@19.3.0)(react@19.3.1)': dependencies: - '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.0) - react: 19.3.0 + '@radix-ui/react-use-layout-effect': 1.1.4(@types/react@19.3.0)(react@19.3.1) + react: 19.3.1 optionalDependencies: '@types/react': 19.3.0 - '@radix-ui/react-visually-hidden@1.2.11(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': + '@radix-ui/react-visually-hidden@1.2.11(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1)': dependencies: - '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - react: 19.3.0 - react-dom: 19.3.0(react@19.3.0) + '@radix-ui/react-primitive': 2.1.10(@types/react-dom@19.3.0(@types/react@19.3.0))(@types/react@19.3.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1) + react: 19.3.1 + react-dom: 19.3.1(react@19.3.1) optionalDependencies: '@types/react': 19.3.0 '@types/react-dom': 19.3.0(@types/react@19.3.0) @@ -4819,62 +4813,64 @@ snapshots: '@tauri-apps/api@2.12.1': {} - '@tauri-apps/cli-darwin-arm64@2.12.1': + '@tauri-apps/api@2.12.4': {} + + '@tauri-apps/cli-darwin-arm64@2.12.4': optional: true - '@tauri-apps/cli-darwin-x64@2.12.1': + '@tauri-apps/cli-darwin-x64@2.12.4': optional: true - '@tauri-apps/cli-linux-arm-gnueabihf@2.12.1': + '@tauri-apps/cli-linux-arm-gnueabihf@2.12.4': optional: true - '@tauri-apps/cli-linux-arm64-gnu@2.12.1': + '@tauri-apps/cli-linux-arm64-gnu@2.12.4': optional: true - '@tauri-apps/cli-linux-arm64-musl@2.12.1': + '@tauri-apps/cli-linux-arm64-musl@2.12.4': optional: true - '@tauri-apps/cli-linux-riscv64-gnu@2.12.1': + '@tauri-apps/cli-linux-riscv64-gnu@2.12.4': optional: true - '@tauri-apps/cli-linux-x64-gnu@2.12.1': + '@tauri-apps/cli-linux-x64-gnu@2.12.4': optional: true - '@tauri-apps/cli-linux-x64-musl@2.12.1': + '@tauri-apps/cli-linux-x64-musl@2.12.4': optional: true - '@tauri-apps/cli-win32-arm64-msvc@2.12.1': + '@tauri-apps/cli-win32-arm64-msvc@2.12.4': optional: true - '@tauri-apps/cli-win32-ia32-msvc@2.12.1': + '@tauri-apps/cli-win32-ia32-msvc@2.12.4': optional: true - '@tauri-apps/cli-win32-x64-msvc@2.12.1': + '@tauri-apps/cli-win32-x64-msvc@2.12.4': optional: true - '@tauri-apps/cli@2.12.1': + '@tauri-apps/cli@2.12.4': optionalDependencies: - '@tauri-apps/cli-darwin-arm64': 2.12.1 - '@tauri-apps/cli-darwin-x64': 2.12.1 - '@tauri-apps/cli-linux-arm-gnueabihf': 2.12.1 - '@tauri-apps/cli-linux-arm64-gnu': 2.12.1 - '@tauri-apps/cli-linux-arm64-musl': 2.12.1 - '@tauri-apps/cli-linux-riscv64-gnu': 2.12.1 - '@tauri-apps/cli-linux-x64-gnu': 2.12.1 - '@tauri-apps/cli-linux-x64-musl': 2.12.1 - '@tauri-apps/cli-win32-arm64-msvc': 2.12.1 - '@tauri-apps/cli-win32-ia32-msvc': 2.12.1 - '@tauri-apps/cli-win32-x64-msvc': 2.12.1 - - '@tauri-apps/plugin-deep-link@2.6.1': + '@tauri-apps/cli-darwin-arm64': 2.12.4 + '@tauri-apps/cli-darwin-x64': 2.12.4 + '@tauri-apps/cli-linux-arm-gnueabihf': 2.12.4 + '@tauri-apps/cli-linux-arm64-gnu': 2.12.4 + '@tauri-apps/cli-linux-arm64-musl': 2.12.4 + '@tauri-apps/cli-linux-riscv64-gnu': 2.12.4 + '@tauri-apps/cli-linux-x64-gnu': 2.12.4 + '@tauri-apps/cli-linux-x64-musl': 2.12.4 + '@tauri-apps/cli-win32-arm64-msvc': 2.12.4 + '@tauri-apps/cli-win32-ia32-msvc': 2.12.4 + '@tauri-apps/cli-win32-x64-msvc': 2.12.4 + + '@tauri-apps/plugin-deep-link@2.6.2': dependencies: '@tauri-apps/api': 2.12.1 - '@tauri-apps/plugin-notification@2.5.1': + '@tauri-apps/plugin-notification@2.7.0': dependencies: '@tauri-apps/api': 2.12.1 - '@tauri-apps/plugin-opener@2.7.0': + '@tauri-apps/plugin-opener@2.7.2': dependencies: '@tauri-apps/api': 2.12.1 @@ -5270,8 +5266,6 @@ snapshots: balanced-match@4.0.4: {} - baseline-browser-mapping@2.11.26: {} - baseline-browser-mapping@2.11.27: {} brace-expansion@1.1.21: @@ -5289,8 +5283,8 @@ snapshots: browserslist@4.29.2: dependencies: - baseline-browser-mapping: 2.11.26 - caniuse-lite: 1.0.30001813 + baseline-browser-mapping: 2.11.27 + caniuse-lite: 1.0.30001815 electron-to-chromium: 1.5.439 node-releases: 2.0.57 update-browserslist-db: 1.3.3(browserslist@4.29.2) @@ -5318,8 +5312,6 @@ snapshots: camelcase@5.3.1: {} - caniuse-lite@1.0.30001813: {} - caniuse-lite@1.0.30001815: {} chai@6.2.2: {} @@ -5427,7 +5419,7 @@ snapshots: esbuild: 0.25.12 tsx: 4.23.15 - drizzle-orm@0.45.3(@electric-sql/pglite@0.3.16)(postgres@3.4.9): + drizzle-orm@0.45.4(@electric-sql/pglite@0.3.16)(postgres@3.4.9): optionalDependencies: '@electric-sql/pglite': 0.3.16 postgres: 3.4.9 @@ -5644,9 +5636,9 @@ snapshots: escape-string-regexp@4.0.0: {} - eslint-config-next@16.3.8(@typescript-eslint/parser@8.71.1(eslint@9.39.5(supports-color@7.2.0))(supports-color@7.2.0)(typescript@5.9.3))(eslint@9.39.5(supports-color@7.2.0))(supports-color@7.2.0)(typescript@5.9.3): + eslint-config-next@16.4.3(@typescript-eslint/parser@8.71.1(eslint@9.39.5(supports-color@7.2.0))(supports-color@7.2.0)(typescript@5.9.3))(eslint@9.39.5(supports-color@7.2.0))(supports-color@7.2.0)(typescript@5.9.3): dependencies: - '@next/eslint-plugin-next': 16.3.8(eslint@9.39.5(supports-color@7.2.0)) + '@next/eslint-plugin-next': 16.4.3(eslint@9.39.5(supports-color@7.2.0)) eslint: 9.39.5(supports-color@7.2.0) eslint-import-resolver-node: 0.3.10(supports-color@7.2.0) eslint-import-resolver-typescript: 3.10.1(eslint-plugin-import@2.32.0)(eslint@9.39.5(supports-color@7.2.0))(supports-color@7.2.0) @@ -5752,8 +5744,8 @@ snapshots: '@babel/parser': 7.29.9 eslint: 9.39.5(supports-color@7.2.0) hermes-parser: 0.25.1 - zod: 4.6.5 - zod-validation-error: 4.0.2(zod@4.6.5) + zod: 4.6.7 + zod-validation-error: 4.0.2(zod@4.6.7) transitivePeerDependencies: - supports-color @@ -5904,14 +5896,14 @@ snapshots: dependencies: is-callable: 1.2.7 - framer-motion@13.4.6(react-dom@19.3.0(react@19.3.0))(react@19.3.0): + framer-motion@13.4.6(react-dom@19.3.1(react@19.3.1))(react@19.3.1): dependencies: motion-dom: 13.4.5 motion-utils: 13.3.0 tslib: 2.8.1 optionalDependencies: - react: 19.3.0 - react-dom: 19.3.0(react@19.3.0) + react: 19.3.1 + react-dom: 19.3.1(react@19.3.1) fsevents@2.3.3: optional: true @@ -6272,9 +6264,9 @@ snapshots: dependencies: yallist: 3.1.1 - lucide-react@1.49.0(@types/react@19.3.0)(react@19.3.0): + lucide-react@1.49.0(@types/react@19.3.0)(react@19.3.1): dependencies: - react: 19.3.0 + react: 19.3.1 optionalDependencies: '@types/react': 19.3.0 @@ -6309,33 +6301,31 @@ snapshots: ms@2.1.3: {} - nanoid@3.3.19: {} - nanoid@3.3.20: {} napi-postinstall@0.3.4: {} natural-compare@1.4.0: {} - next@16.3.8(@babel/core@7.29.7(supports-color@7.2.0))(@types/node@24.19.0)(react-dom@19.3.0(react@19.3.0))(react@19.3.0): + next@16.4.3(@babel/core@7.29.7(supports-color@7.2.0))(@types/node@24.19.0)(react-dom@19.3.1(react@19.3.1))(react@19.3.1): dependencies: - '@next/env': 16.3.8 + '@next/env': 16.4.3 '@swc/helpers': 0.5.23 baseline-browser-mapping: 2.11.27 caniuse-lite: 1.0.30001815 postcss: 8.5.23 - react: 19.3.0 - react-dom: 19.3.0(react@19.3.0) - styled-jsx: 5.1.6(@babel/core@7.29.7(supports-color@7.2.0))(react@19.3.0) + react: 19.3.1 + react-dom: 19.3.1(react@19.3.1) + styled-jsx: 5.1.6(@babel/core@7.29.7(supports-color@7.2.0))(react@19.3.1) optionalDependencies: - '@next/swc-darwin-arm64': 16.3.8 - '@next/swc-darwin-x64': 16.3.8 - '@next/swc-linux-arm64-gnu': 16.3.8 - '@next/swc-linux-arm64-musl': 16.3.8 - '@next/swc-linux-x64-gnu': 16.3.8 - '@next/swc-linux-x64-musl': 16.3.8 - '@next/swc-win32-arm64-msvc': 16.3.8 - '@next/swc-win32-x64-msvc': 16.3.8 + '@next/swc-darwin-arm64': 16.4.3 + '@next/swc-darwin-x64': 16.4.3 + '@next/swc-linux-arm64-gnu': 16.4.3 + '@next/swc-linux-arm64-musl': 16.4.3 + '@next/swc-linux-x64-gnu': 16.4.3 + '@next/swc-linux-x64-musl': 16.4.3 + '@next/swc-win32-arm64-msvc': 16.4.3 + '@next/swc-win32-x64-msvc': 16.4.3 sharp: 0.35.5(@types/node@24.19.0) transitivePeerDependencies: - '@babel/core' @@ -6355,7 +6345,7 @@ snapshots: node-releases@2.0.57: {} - nodemailer@10.0.9: {} + nodemailer@10.2.1: {} object-assign@4.1.1: {} @@ -6465,7 +6455,7 @@ snapshots: postcss@8.5.28: dependencies: - nanoid: 3.3.19 + nanoid: 3.3.20 picocolors: 1.1.1 source-map-js: 1.2.2 @@ -6473,7 +6463,7 @@ snapshots: prelude-ls@1.2.1: {} - prettier@3.9.9: {} + prettier@3.9.10: {} prop-types@15.8.1: dependencies: @@ -6491,44 +6481,46 @@ snapshots: queue-microtask@1.2.3: {} - react-dom@19.3.0(react@19.3.0): + react-dom@19.3.1(react@19.3.1): dependencies: - react: 19.3.0 + react: 19.3.1 scheduler: 0.28.0 react-is@16.13.1: {} react-refresh@0.18.0: {} - react-remove-scroll-bar@2.3.8(@types/react@19.3.0)(react@19.3.0): + react-remove-scroll-bar@2.3.8(@types/react@19.3.0)(react@19.3.1): dependencies: - react: 19.3.0 - react-style-singleton: 2.2.3(@types/react@19.3.0)(react@19.3.0) + react: 19.3.1 + react-style-singleton: 2.2.3(@types/react@19.3.0)(react@19.3.1) tslib: 2.8.1 optionalDependencies: '@types/react': 19.3.0 - react-remove-scroll@2.7.2(@types/react@19.3.0)(react@19.3.0): + react-remove-scroll@2.7.2(@types/react@19.3.0)(react@19.3.1): dependencies: - react: 19.3.0 - react-remove-scroll-bar: 2.3.8(@types/react@19.3.0)(react@19.3.0) - react-style-singleton: 2.2.3(@types/react@19.3.0)(react@19.3.0) + react: 19.3.1 + react-remove-scroll-bar: 2.3.8(@types/react@19.3.0)(react@19.3.1) + react-style-singleton: 2.2.3(@types/react@19.3.0)(react@19.3.1) tslib: 2.8.1 - use-callback-ref: 1.3.3(@types/react@19.3.0)(react@19.3.0) - use-sidecar: 1.1.3(@types/react@19.3.0)(react@19.3.0) + use-callback-ref: 1.3.3(@types/react@19.3.0)(react@19.3.1) + use-sidecar: 1.1.3(@types/react@19.3.0)(react@19.3.1) optionalDependencies: '@types/react': 19.3.0 - react-style-singleton@2.2.3(@types/react@19.3.0)(react@19.3.0): + react-style-singleton@2.2.3(@types/react@19.3.0)(react@19.3.1): dependencies: get-nonce: 1.0.1 - react: 19.3.0 + react: 19.3.1 tslib: 2.8.1 optionalDependencies: '@types/react': 19.3.0 react@19.3.0: {} + react@19.3.1: {} + redis@5.8.2: dependencies: '@redis/bloom': 5.8.2(@redis/client@5.8.2) @@ -6843,10 +6835,10 @@ snapshots: optionalDependencies: '@types/node': 24.19.0 - styled-jsx@5.1.6(@babel/core@7.29.7(supports-color@7.2.0))(react@19.3.0): + styled-jsx@5.1.6(@babel/core@7.29.7(supports-color@7.2.0))(react@19.3.1): dependencies: client-only: 0.0.1 - react: 19.3.0 + react: 19.3.1 optionalDependencies: '@babel/core': 7.29.7(supports-color@7.2.0) @@ -6987,17 +6979,17 @@ snapshots: dependencies: punycode: 2.3.1 - use-callback-ref@1.3.3(@types/react@19.3.0)(react@19.3.0): + use-callback-ref@1.3.3(@types/react@19.3.0)(react@19.3.1): dependencies: - react: 19.3.0 + react: 19.3.1 tslib: 2.8.1 optionalDependencies: '@types/react': 19.3.0 - use-sidecar@1.1.3(@types/react@19.3.0)(react@19.3.0): + use-sidecar@1.1.3(@types/react@19.3.0)(react@19.3.1): dependencies: detect-node-es: 1.1.0 - react: 19.3.0 + react: 19.3.1 tslib: 2.8.1 optionalDependencies: '@types/react': 19.3.0 @@ -7141,8 +7133,8 @@ snapshots: yocto-queue@0.1.0: {} - zod-validation-error@4.0.2(zod@4.6.5): + zod-validation-error@4.0.2(zod@4.6.7): dependencies: - zod: 4.6.5 + zod: 4.6.7 - zod@4.6.5: {} + zod@4.6.7: {} From 333b69fe4c6bb1868cb0fca58aaff553d4cfa82a Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Wed, 28 Oct 2026 13:02:24 +0000 Subject: [PATCH 3/3] ci(security): keep Dependency Review soft when graph is disabled Move continue-on-error onto the action step so the Security workflow can stay green until Dependency graph is enabled in repository settings. Co-authored-by: Matthew --- .github/workflows/security.yml | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 89b7050..780528e 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -29,11 +29,17 @@ jobs: dependency-review: if: github.event_name == 'pull_request' runs-on: ubuntu-latest - # Soft-fail until Dependency graph is enabled in repository security settings. - continue-on-error: true steps: - uses: actions/checkout@v4 - - uses: actions/dependency-review-action@v4 + # Soft-fail until Dependency graph is enabled under repository security settings. + - id: review + continue-on-error: true + uses: actions/dependency-review-action@v4 + - name: Acknowledge unavailable Dependency graph + if: steps.review.outcome == 'failure' + run: | + echo "Dependency Review is unavailable until Dependency graph is enabled." + echo "Enable it at https://github.com/${{ github.repository }}/settings/security_analysis" codeql: name: CodeQL