fix(deps): batch pending renovate dependency updates

[dmnktoe]

Bundles the mergeable open Renovate PRs into a single change with a freshly resolved pnpm-lock.yaml.

Background

Every open Renovate PR was red. Renovate could not regenerate the lockfile because pnpm's minimumReleaseAge policy rejected transitive packages published within the last 24 hours (ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION). As a result the PRs carried only package.json, and pnpm install --frozen-lockfile in CI failed with ERR_PNPM_OUTDATED_LOCKFILE.

Included updates

dependencies

Package	From	To	PR
@hookform/resolvers	5.4.0	5.5.7	#377
altcha-lib	2.2.0	2.3.2	#378
lucide-react	1.24.0	1.28.0	#380
react-hook-form	7.81.0	7.83.0	#381

devDependencies

Package	From	To	PR
@eslint/js, eslint	9.39.4	9.39.5	#361
@playwright/test	1.61.1	1.62.1	#374
prettier-plugin-tailwindcss	0.8.0	0.8.1	#371
@typescript-eslint/eslint-plugin, @typescript-eslint/parser, typescript-eslint	8.59.4	8.65.0	#313

Excluded — blocked upstream

• chore(deps): update dependency typescript to v7 #368 typescript 6.0.3 → 7.0.2: typescript-eslint@8.65.0 refuses to load — Error: typescript-eslint does not support TS 7.0. Support is tracked in typescript-eslint#10940.
• chore(deps): update eslint monorepo to v10 #325 eslint 9.x → 10.x: eslint-plugin-react@7.37.5, the latest release, declares peerDependencies.eslint: "^3 || … || ^9.7" and crashes under ESLint 10 with TypeError: contextOrFilename.getFilename is not a function. It also conflicts with chore(deps): update eslint monorepo to v9.39.5 - autoclosed #361.

Both PRs stay open until their respective upstream blockers are resolved.

Verification

Run locally against Node 22 (CI uses Node 24):

• pnpm install --frozen-lockfile — ✅ no change to the lockfile
• pnpm run lint:strict — ✅
• pnpm run typecheck — ✅
• pnpm run format:check — ✅
• pnpm run test:coverage — ✅ 382 tests, 30 suites
• pnpm run build — TypeScript and Turbopack compile ✅; then fails while collecting page data because no CMS is reachable in this environment (fetch failed for /articles/[slug]). CI has the real secrets and covers that part.

Summary by CodeRabbit

• Chores
  • Updated application and development tooling dependencies to newer versions.
  • Improved compatibility and maintenance across form handling, validation, icons, testing, linting, formatting, and TypeScript tooling.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.04%. Comparing base (33ff802) to head (2992b3a).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #382   +/-   ##
=======================================
  Coverage   67.04%   67.04%           
=======================================
  Files          67       67           
  Lines         789      789           
  Branches      175      169    -6     
=======================================
  Hits          529      529           
  Misses        260      260           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 1546d45d-5816-43c0-be97-cdddc0fa59b7

📥 Commits

Reviewing files that changed from the base of the PR and between 33ff802 and 2992b3a.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (1)

• package.json

---

📝 Walkthrough

Walkthrough

The pull request updates runtime and development dependency versions in package.json. It changes form tooling, altcha-lib, icons, Playwright, ESLint, TypeScript ESLint packages, and Prettier Tailwind integration.

Changes

Dependency Version Updates

Layer / File(s)	Summary
Package dependency version updates package.json	Updated runtime and development dependency versions, including form tooling, altcha-lib, lucide-react, Playwright, ESLint, TypeScript ESLint packages, prettier-plugin-tailwindcss, and typescript-eslint. tailwindcss and typescript remain unchanged.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested reviewers: claude

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch claude/issue-378-377-problem-irt369

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

ESLint install failed: lockfile failed supply-chain policy check. Run pnpm install locally to update the lockfile.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}