Update all dependencies

[birdwell]

Summary

• update every direct dependency to the latest registry release
• refresh the full transitive lockfile, absorbing all open Dependabot security updates
• migrate the Vite dev-server integration for Vite 8.2 types
• make the layout and OAuth tests deterministic under the updated TypeScript/Vitest toolchain

Validation

• yarn run check
• yarn test (21 files, 104 tests)
• yarn build
• yarn outdated --json (no outdated direct dependencies)
• yarn audit --json (0 vulnerabilities)

Supersedes #39, #40, #41, #42, #43, #44, #45, #47, #57, #61, #63, #66, #67, and #68.

---

Note

Medium Risk
Broad dependency upgrades (including connect-redis major, Vite 8.2, and session/redis-related packages) increase regression risk in dev server, auth, and caching paths despite limited code changes.

Overview
Bumps every direct dependency in package.json (Radix UI, Sentry, TanStack Query, Vite 8.2.1, Vitest/jsdom, connect-redis v10, Redis client, etc.) and aligns the Vite resolution to match.

For Vite 8.2, the Express dev integration in server/vite.ts no longer imports and spreads vite.config; it starts Vite with configFile pointing at vite.config.ts, which matches the updated Vite server API/types.

Test-only hardening for the new toolchain: layout.test.tsx resolves <main> via getByRole("main") instead of querySelector, and anilistOAuth.test.ts mocks prefetchListSnapshots so OAuth completion tests stay isolated from background list warm-up.

^{Reviewed by Cursor Bugbot for commit 5ad0bf0. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_51e07a48-b479-4e25-8a12-7d1b2b5dbc6f)

[greptile-apps]

Greptile Summary

The PR refreshes direct and transitive dependencies, updates the Vite middleware integration to load the Vite 8 configuration file, and adjusts tests for deterministic behavior under the upgraded toolchain.

• Updates application, build, and test dependencies and regenerates the Yarn lockfile.
• Loads vite.config.ts through Vite’s configFile option instead of importing and spreading it.
• Uses role-based layout test selection and mocks OAuth snapshot prefetching.

Confidence Score: 5/5

The PR appears safe to merge, with no concrete changed-code failure established in the supported build, test, development, or runtime paths.

The dependency updates align with the existing APIs inspected, the test changes preserve their assertions, and the Vite migration is reached through documented repository-root development workflows without an established routing or startup regression.

Important Files Changed

Filename	Overview
server/vite.ts	Migrates middleware-mode startup to Vite’s config-file loading path; no concrete failure was established in supported development workflows.
package.json	Updates all direct dependencies, including the connect-redis major version, while existing session code already matches its upgraded API.
yarn.lock	Refreshes resolved transitive dependencies consistently with the manifest updates.
server/tests/anilistOAuth.test.ts	Mocks background snapshot prefetching so OAuth persistence assertions remain isolated and deterministic.
client/src/components/tests/layout.test.tsx	Replaces nullable DOM querying with an accessible role query without changing the tested layout contract.

_{Reviews (1): Last reviewed commit: "Update all dependencies" | Re-trigger Greptile}