chore: update dependencies and security tooling

.dockerignore

@@ -2,6 +2,7 @@
 
 !package.json
 !pnpm-lock.yaml
+!pnpm-workspace.yaml
 !Dockerfile
 !nginx.conf
 !app

.github/actions/node-bootstrap/action.yaml

@@ -9,18 +9,18 @@ inputs:
   pnpm-version:
     description: pnpm version to install
     required: false
-    default: "10.12.1"
+    default: "11.10.0"
 
 runs:
   using: composite
   steps:
     - name: Setup pnpm
-      uses: pnpm/action-setup@v4
+      uses: pnpm/action-setup@v6
       with:
         version: ${{ inputs.pnpm-version }}
 
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ inputs.node-version }}
         cache: pnpm

.gitignore

@@ -26,6 +26,7 @@
 !playwright.config.ts
 !playwright.visual.config.ts
 !pnpm-lock.yaml
+!pnpm-workspace.yaml
 !postcss.config.mjs
 !release.config.mjs
 !tsconfig.json

Dockerfile

@@ -4,11 +4,11 @@
 # CI validation uses local Supabase (host.docker.internal:54321); publish uses cloud URL.
 FROM node:24.18.0-alpine3.24 AS builder
 
-RUN corepack enable && corepack prepare pnpm@10.12.1 --activate
+RUN corepack enable && corepack prepare pnpm@11.10.0 --activate
 
 WORKDIR /app
 
-COPY package.json pnpm-lock.yaml ./
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
 RUN pnpm install --frozen-lockfile
 
 COPY . .

package.json

@@ -2,7 +2,7 @@
   "name": "@95gabor/cv",
   "version": "3.0.1",
   "private": true,
-  "packageManager": "pnpm@10.12.1",
+  "packageManager": "pnpm@11.10.0",
   "scripts": {
     "dev": "next dev --turbopack",
     "prebuild": "tsx scripts/generate-llms-txt.mts",
@@ -28,44 +28,44 @@
     "node": ">=24.18.0"
   },
   "dependencies": {
-    "@radix-ui/react-slot": "^1.2.3",
-    "@supabase/supabase-js": "^2.49.8",
+    "@radix-ui/react-slot": "^1.3.0",
+    "@supabase/supabase-js": "^2.110.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
-    "lucide-react": "^0.511.0",
+    "lucide-react": "^1.23.0",
     "next": "16.2.10",
     "next-intl": "^4.13.1",
     "next-themes": "^0.4.6",
-    "react": "19.2.4",
-    "react-dom": "19.2.4",
-    "tailwind-merge": "^3.3.0"
+    "react": "19.2.7",
+    "react-dom": "19.2.7",
+    "tailwind-merge": "^3.6.0"
   },
   "devDependencies": {
-    "@commitlint/cli": "^21.0.2",
-    "@commitlint/config-conventional": "^21.0.2",
+    "@commitlint/cli": "^21.2.0",
+    "@commitlint/config-conventional": "^21.2.0",
     "@percy/cli": "1.31.14",
     "@percy/playwright": "^1.1.0",
-    "@playwright/test": "^1.61.0",
+    "@playwright/test": "^1.61.1",
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/commit-analyzer": "^13.0.1",
     "@semantic-release/git": "^10.0.1",
     "@semantic-release/github": "^12.0.9",
     "@semantic-release/npm": "^13.1.5",
     "@semantic-release/release-notes-generator": "^14.1.1",
-    "@tailwindcss/postcss": "^4",
-    "@types/node": "^22",
-    "@types/react": "^19",
-    "@types/react-dom": "^19",
-    "eslint": "^9",
+    "@tailwindcss/postcss": "^4.3.2",
+    "@types/node": "^24.13.2",
+    "@types/react": "^19.2.17",
+    "@types/react-dom": "^19.2.3",
+    "eslint": "^9.39.4",
     "eslint-config-next": "16.2.10",
     "husky": "^9.1.7",
     "lint-staged": "^17.0.8",
-    "prettier": "^3.8.4",
+    "prettier": "^3.9.4",
     "semantic-release": "^25.0.5",
     "supabase": "^2.109.0",
-    "tailwindcss": "^4",
-    "tsx": "^4.20.3",
-    "typescript": "^5",
-    "yaml": "^2.8.0"
+    "tailwindcss": "^4.3.2",
+    "tsx": "^4.23.0",
+    "typescript": "^6.0.3",
+    "yaml": "^2.9.0"
   }
 }