chore(deps): update workspace dependencies and CI actions (#43721)

.github/workflows/accessibility-e2e.yml

@@ -99,7 +99,7 @@ jobs:
 
       - name: Upload accessibility Cucumber report
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: cucumber-report-accessibility-${{ inputs.level }}-${{ inputs.page }}
           path: e2e/cucumber-report
@@ -107,7 +107,7 @@ jobs:
 
       - name: Upload accessibility E2E logs
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: e2e-logs-accessibility-${{ inputs.level }}-${{ inputs.page }}
           path: e2e/.logs/*.log

.github/workflows/api-tests.yml

@@ -49,7 +49,7 @@ jobs:
             api/providers/vdb/*/tests/unit_tests \
             api/providers/trace/*/tests/unit_tests
       - name: Upload shared plan
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: api-unit-plan
           path: |
@@ -99,7 +99,7 @@ jobs:
         run: uv sync --project api --dev
 
       - name: Download shared plan
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: api-unit-plan
 
@@ -128,7 +128,7 @@ jobs:
 
       - name: Upload unit test reports
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: api-test-results-unit-${{ matrix.python-version }}-${{ matrix.shardIndex }}
           path: test-results/*.xml
@@ -136,7 +136,7 @@ jobs:
           retention-days: 7
 
       - name: Upload successful timing observations
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: api-unit-durations-${{ matrix.shardIndex }}
           path: test-results/durations-*.json
@@ -144,7 +144,7 @@ jobs:
           if-no-files-found: error
 
       - name: Upload unit coverage data
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: api-coverage-unit-${{ matrix.python-version }}-${{ matrix.shardIndex }}
           path: ${{ env.COVERAGE_FILE }}
@@ -188,7 +188,7 @@ jobs:
 
       - name: Upload controller test reports
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: api-test-results-controllers-3.12
           path: test-results/*.xml
@@ -196,7 +196,7 @@ jobs:
           retention-days: 7
 
       - name: Upload controller coverage data
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: api-coverage-controllers-3.12
           path: ${{ env.COVERAGE_FILE }}
@@ -254,7 +254,7 @@ jobs:
             api/tests/test_containers_integration_tests
 
       - name: Upload integration coverage data
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: api-coverage-integration-${{ matrix.python-version }}
           path: ${{ env.COVERAGE_FILE }}
@@ -287,7 +287,7 @@ jobs:
           python-version: '3.12'
 
       - name: Download coverage data
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: coverage-data
           pattern: api-coverage-*

.github/workflows/build-push.yml

@@ -133,7 +133,7 @@ jobs:
           touch "/tmp/digests/${sanitized_digest}"
 
       - name: Upload digest
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: digests-${{ matrix.artifact_context }}-${{ env.PLATFORM_PAIR }}
           path: /tmp/digests/*
@@ -192,7 +192,7 @@ jobs:
             context: 'local-sandbox'
     steps:
       - name: Download digests
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: /tmp/digests
           pattern: digests-${{ matrix.context }}-*
@@ -246,7 +246,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Use Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: package.json
           cache: ''

.github/workflows/cli-e2e.yml

@@ -266,7 +266,7 @@ jobs:
 
       - name: Upload results on failure
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: e2e-run-${{ matrix.name }}-${{ github.run_id }}
           path: cli/test-results/
@@ -396,7 +396,7 @@ jobs:
 
       - name: Upload results on failure
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: e2e-last-${{ github.run_id }}
           path: cli/test-results/

.github/workflows/pyrefly-diff.yml

@@ -66,7 +66,7 @@ jobs:
           echo ${{ github.event.pull_request.number }} > pr_number.txt
 
       - name: Upload pyrefly diff
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: pyrefly_diff
           path: |

.github/workflows/pyrefly-type-coverage.yml

@@ -74,7 +74,7 @@ jobs:
           echo ${{ github.event.pull_request.number }} > pr_number.txt
 
       - name: Upload type coverage artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: pyrefly_type_coverage
           path: |

.github/workflows/translate-i18n-claude.yml

@@ -8,19 +8,15 @@ on:
   workflow_dispatch:
     inputs:
       files:
-        description: 'Specific files to translate (space-separated, e.g., "app common").
-          Required for full mode; leave empty in incremental mode to use en-US
-          files changed since HEAD~1.'
+        description: 'Specific files to translate (space-separated, e.g., "app common"). Required for full mode; leave empty in incremental mode to use en-US files changed since HEAD~1.'
         required: false
         type: string
       languages:
-        description: 'Specific languages to translate (space-separated, e.g., "zh-Hans
-          ja-JP"). Leave empty for all supported target languages except en-US.'
+        description: 'Specific languages to translate (space-separated, e.g., "zh-Hans ja-JP"). Leave empty for all supported target languages except en-US.'
         required: false
         type: string
       mode:
-        description: 'Sync mode: incremental (compare with previous en-US revision) or
-          full (sync all keys in scope)'
+        description: 'Sync mode: incremental (compare with previous en-US revision) or full (sync all keys in scope)'
         required: false
         default: incremental
         type: choice
@@ -163,7 +159,7 @@ jobs:
 
       - name: Run Claude Code for Translation Sync
         if: steps.context.outputs.CHANGED_FILES != ''
-        uses: anthropics/claude-code-action@ed670b4cf9de2a5a570d130d2f6197b9e543cd64 # v1.0.240
+        uses: anthropics/claude-code-action@2dca132ff0e0c4094ce6048b422c6915a071210b # v1.0.247
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           github_token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/web-bundle-size.yml

@@ -67,7 +67,7 @@ jobs:
         run: node "$RUNNER_TEMP/bundle-analysis.ts" collect web "$COMMIT_SHA" "$RUNNER_TEMP/bundle-size/summary.json"
 
       - name: Upload size snapshot
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: web-bundle-summary-${{ matrix.revision }}
           path: ${{ runner.temp }}/bundle-size/summary.json
@@ -75,7 +75,7 @@ jobs:
           retention-days: 14
 
       - name: Upload official Rolldown analysis
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: web-bundle-analyzer-${{ matrix.revision }}
           path: |
@@ -106,7 +106,7 @@ jobs:
           install: false
 
       - name: Download size snapshots
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           pattern: web-bundle-summary-*
           path: bundle-results

.github/workflows/web-e2e.yml

@@ -71,14 +71,10 @@ jobs:
 
       - name: Package Web build
         run: >-
-          tar -cf e2e-web-build.tar -C web
-          .next/BUILD_ID
-          .next/e2e-web-build.sha256
-          .next/standalone
-          .next/static
+          tar -cf e2e-web-build.tar -C web .next/BUILD_ID .next/e2e-web-build.sha256 .next/standalone .next/static
 
       - name: Upload Web build
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: core-e2e-web-build-${{ github.run_attempt }}
           path: e2e-web-build.tar
@@ -154,7 +150,7 @@ jobs:
 
       - name: Upload Cucumber report
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: cucumber-report-chromium-${{ matrix.shard }}
           path: e2e/cucumber-report
@@ -164,7 +160,7 @@ jobs:
 
       - name: Upload E2E logs
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: e2e-logs-chromium-${{ matrix.shard }}
           path: e2e/.logs/*.log
@@ -232,7 +228,7 @@ jobs:
 
       - name: Upload Cucumber report
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: cucumber-report-webkit
           path: e2e/cucumber-report
@@ -242,7 +238,7 @@ jobs:
 
       - name: Upload E2E logs
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: e2e-logs-webkit
           path: e2e/.logs/*.log
@@ -327,7 +323,7 @@ jobs:
 
       - name: Upload Cucumber report
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: cucumber-report
           path: e2e/cucumber-report
@@ -336,7 +332,7 @@ jobs:
 
       - name: Upload E2E logs
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: e2e-logs
           path: e2e/.logs/*.log
@@ -346,7 +342,7 @@ jobs:
 
       - name: Upload E2E seed report
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: e2e-seed-report
           path: e2e/seed-report

.github/workflows/web-tests.yml

@@ -37,7 +37,7 @@ jobs:
 
       - name: Upload blob report
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: blob-report-${{ matrix.shardIndex }}
           path: web/.vitest/blob/*
@@ -71,7 +71,7 @@ jobs:
 
       - name: Upload browser failure artifacts
         if: ${{ failure() && !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: browser-test-failures
           path: web/.vitest-browser/
@@ -101,7 +101,7 @@ jobs:
         uses: ./.github/actions/setup-web
 
       - name: Download blob reports
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: web/.vitest/blob
           pattern: blob-report-*
@@ -147,7 +147,7 @@ jobs:
 
       - name: Upload dify-ui test failure artifacts
         if: ${{ failure() && !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: dify-ui-test-failures
           path: packages/dify-ui/.vitest-browser/
@@ -190,7 +190,7 @@ jobs:
 
       - name: Upload dify-ui Storybook test failure artifacts
         if: ${{ failure() && !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: dify-ui-storybook-test-failures
           path: packages/dify-ui/.vitest-browser/

oxlint-suppressions.json

@@ -500,7 +500,7 @@
   },
   "web/app/components/app/log/list.tsx": {
     "eslint-react/set-state-in-effect": {
-      "count": 6
+      "count": 2
     },
     "typescript/no-explicit-any": {
       "count": 5
@@ -1703,9 +1703,6 @@
     }
   },
   "web/app/components/datasets/documents/detail/completed/common/chunk-content.tsx": {
-    "eslint-react/set-state-in-effect": {
-      "count": 1
-    },
     "jsx-a11y/no-autofocus": {
       "count": 2
     }
@@ -2889,11 +2886,6 @@
       "count": 8
     }
   },
-  "web/app/components/workflow/nodes/_base/hooks/use-toggle-expend.ts": {
-    "eslint-react/set-state-in-effect": {
-      "count": 1
-    }
-  },
   "web/app/components/workflow/nodes/_base/hooks/use-var-list.ts": {
     "typescript/no-explicit-any": {
       "count": 2
@@ -4045,17 +4037,12 @@
       "count": 2
     }
   },
-  "web/features/skills/detail/builder-panel.tsx": {
-    "eslint-react/set-state-in-effect": {
-      "count": 1
-    }
-  },
   "web/features/skills/detail/file-editor.tsx": {
     "@tanstack/query/prefer-query-options": {
       "count": 2
     },
     "eslint-react/set-state-in-effect": {
-      "count": 24
+      "count": 14
     }
   },
   "web/features/skills/detail/file-tree-items.tsx": {

package.json

@@ -64,5 +64,5 @@
   "engines": {
     "node": "^24.20.0"
   },
-  "packageManager": "pnpm@12.6.0"
+  "packageManager": "pnpm@12.10.1"
 }

pnpm-workspace.yaml

@@ -66,24 +66,24 @@ overrides:
   yaml@>=2.0.0 <2.8.3: 2.9.1
   yauzl@<3.2.1: 3.2.1
 catalog:
-  '@amplitude/analytics-browser': 2.47.1
-  '@amplitude/plugin-session-replay-browser': 1.35.4
+  '@amplitude/analytics-browser': 2.47.4
+  '@amplitude/plugin-session-replay-browser': 1.36.1
   '@axe-core/playwright': 4.13.0
   '@base-ui/react': 1.8.0
   '@base-ui/utils': 0.4.0
-  '@chromatic-com/storybook': 5.3.1
-  '@cucumber/cucumber': 13.2.1
-  '@date-fns/tz': 1.4.1
-  '@daypicker/react': 10.0.1
+  '@chromatic-com/storybook': 5.4.0
+  '@cucumber/cucumber': 13.3.0
+  '@date-fns/tz': 1.5.0
+  '@daypicker/react': 10.0.2
   '@egoist/tailwindcss-icons': 1.9.2
   '@eslint-community/eslint-plugin-eslint-comments': 4.8.1
-  '@eslint-react/eslint-plugin': 5.21.0
+  '@eslint-react/eslint-plugin': 5.24.10
   '@eslint/markdown': 8.0.3
   '@floating-ui/react': 0.27.20
   '@formatjs/intl-localematcher': 0.9.0
   '@heroicons/react': 2.2.0
   '@hey-api/openapi-ts': 0.98.2
-  '@hono/node-server': 2.1.1
+  '@hono/node-server': 2.1.4
   '@iconify-json/heroicons': 1.2.3
   '@iconify-json/ri': 1.2.10
   '@lexical/code': 0.47.0
@@ -93,38 +93,38 @@ catalog:
   '@lexical/selection': 0.47.0
   '@lexical/text': 0.47.0
   '@lexical/utils': 0.47.0
-  '@mediabunny/mp3-encoder': 1.60.0
+  '@mediabunny/mp3-encoder': 1.61.3
   '@monaco-editor/react': 4.7.0
   '@napi-rs/keyring': 1.3.0
-  '@orpc/client': 1.15.4
-  '@orpc/contract': 1.15.4
-  '@orpc/openapi-client': 1.15.4
-  '@orpc/tanstack-query': 1.15.4
-  '@playwright/test': 1.63.0
+  '@orpc/client': 1.15.5
+  '@orpc/contract': 1.15.5
+  '@orpc/openapi-client': 1.15.5
+  '@orpc/tanstack-query': 1.15.5
+  '@playwright/test': 1.64.0
   '@remixicon/react': 4.9.0
-  '@sentry/react': 10.75.3
+  '@sentry/react': 10.76.2
   '@shadcn/lint': 0.2.0
-  '@storybook/addon-a11y': 10.6.0
-  '@storybook/addon-docs': 10.6.0
-  '@storybook/addon-links': 10.6.0
-  '@storybook/addon-onboarding': 10.6.0
-  '@storybook/addon-themes': 10.6.0
-  '@storybook/addon-vitest': 10.6.0
-  '@storybook/nextjs-vite': 10.6.0
-  '@storybook/react': 10.6.0
-  '@storybook/react-vite': 10.6.0
-  '@streamdown/math': 1.0.2
+  '@storybook/addon-a11y': 10.6.1
+  '@storybook/addon-docs': 10.6.1
+  '@storybook/addon-links': 10.6.1
+  '@storybook/addon-onboarding': 10.6.1
+  '@storybook/addon-themes': 10.6.1
+  '@storybook/addon-vitest': 10.6.1
+  '@storybook/nextjs-vite': 10.6.1
+  '@storybook/react': 10.6.1
+  '@storybook/react-vite': 10.6.1
+  '@streamdown/math': 1.0.3
   '@svgdotjs/svg.js': 3.2.8
   '@t3-oss/env-core': 0.13.11
   '@t3-oss/env-nextjs': 0.13.11
   '@tailwindcss/postcss': 4.3.3
   '@tailwindcss/vite': 4.3.3
-  '@tanstack/eslint-plugin-query': 5.104.0
+  '@tanstack/eslint-plugin-query': 5.104.1
   '@tanstack/form-core': 1.33.5
-  '@tanstack/query-core': 5.104.0
+  '@tanstack/query-core': 5.104.1
   '@tanstack/react-form': 1.33.5
-  '@tanstack/react-hotkeys': 0.12.1
-  '@tanstack/react-query': 5.104.0
+  '@tanstack/react-hotkeys': 0.13.0
+  '@tanstack/react-query': 5.104.1
   '@tanstack/react-virtual': 3.14.13
   '@testing-library/dom': 10.4.2
   '@testing-library/jest-dom': 7.0.1
@@ -136,16 +136,16 @@ catalog:
   '@types/js-cookie': 3.0.6
   '@types/lockfile': 1.0.4
   '@types/negotiator': 0.6.5
-  '@types/node': 25.9.8
+  '@types/node': 25.9.9
   '@types/picomatch': 4.0.3
   '@types/qs': 6.15.1
   '@types/react': 19.3.0
   '@types/react-dom': 19.3.0
   '@types/sortablejs': 1.15.9
-  '@typescript-eslint/parser': 8.70.1
+  '@typescript-eslint/parser': 8.71.1
   '@typescript/native': npm:typescript@7.0.2
-  '@vitejs/plugin-react': 6.1.1
-  '@vitejs/plugin-rsc': 0.5.35
+  '@vitejs/plugin-react': 6.1.2
+  '@vitejs/plugin-rsc': 0.5.36
   '@vitest/browser-playwright': 5.0.3
   '@vitest/coverage-v8': 5.0.3
   '@xmldom/xmldom': 0.9.12
@@ -159,10 +159,10 @@ catalog:
   class-variance-authority: 0.7.1
   cn: 0.4.0
   code-inspector-plugin: 1.6.6
-  concurrently: 10.0.5
+  concurrently: 10.0.6
   copy-to-clipboard: 4.0.2
   cron-parser: 5.10.1
-  date-fns: 4.1.0
+  date-fns: 4.4.0
   dayjs: 1.11.23
   decimal.js: 10.6.0
   dompurify: 3.4.16
@@ -173,71 +173,71 @@ catalog:
   embla-carousel-fade: 8.6.0
   embla-carousel-react: 8.6.0
   es-toolkit: 1.52.0
-  eslint: 10.11.0
+  eslint: 10.12.0
   eslint-config-flat-gitignore: 2.4.0
   eslint-markdown: 0.18.1
   eslint-plugin-antfu: 3.2.3
-  eslint-plugin-better-tailwindcss: 4.7.0
+  eslint-plugin-better-tailwindcss: 4.9.0
   eslint-plugin-command: 4.0.0
-  eslint-plugin-jsdoc: 64.5.4
+  eslint-plugin-jsdoc: 65.2.1
   eslint-plugin-jsonc: 3.4.2
   eslint-plugin-markdown-preferences: 0.42.0
-  eslint-plugin-n: 18.4.0
+  eslint-plugin-n: 18.4.1
   eslint-plugin-no-barrel-files: 2.2.0
   eslint-plugin-perfectionist: 5.12.1
   eslint-plugin-pnpm: 1.9.1
   eslint-plugin-regexp: 3.3.1
-  eslint-plugin-storybook: 10.6.0
+  eslint-plugin-storybook: 10.6.1
   eslint-plugin-toml: 1.5.0
-  eslint-plugin-unicorn: 76.0.0
-  eslint-plugin-yml: 3.8.1
+  eslint-plugin-unicorn: 77.0.0
+  eslint-plugin-yml: 3.9.0
   eventsource-parser: 4.1.1
   fast-deep-equal: 3.1.3
   foxact: 0.3.12
   fuse.js: 7.5.0
-  happy-dom: 20.14.5
+  happy-dom: 20.14.6
   hast-util-to-jsx-runtime: 2.3.6
-  hono: 4.13.9
+  hono: 4.13.13
   html-entities: 2.6.0
   html-to-image: 1.11.13
   i18next: 26.4.2
   i18next-resources-for-ts: 2.1.1
   i18next-resources-to-backend: 1.2.3
   iconify-import-svg: 0.2.0
-  immer: 11.1.18
-  jotai: 3.0.0
+  immer: 11.1.21
+  jotai: 3.0.1
   jotai-scope: 0.12.2
   jotai-tanstack-query: 0.11.0
   js-cookie: 3.0.8
-  js-yaml: 5.4.2
+  js-yaml: 5.4.3
   jsonschema: 1.5.0
   katex: 0.17.0
-  knip: 6.38.0
+  knip: 6.40.0
   ky: 2.1.0
   lexical: 0.47.0
   lockfile: 1.0.4
-  loro-crdt: 1.16.3
-  mediabunny: 1.60.0
+  loro-crdt: 1.16.4
+  mediabunny: 1.61.3
   mermaid: 11.17.2
   mime: 4.1.0
   mitt: 3.0.1
-  motion: 13.4.4
+  motion: 13.5.1
   negotiator: 1.1.0
-  next: 16.3.8
+  next: 16.4.0
   next-themes: 0.4.6
-  nuqs: 2.10.1
+  nuqs: 2.10.2
   open: 11.0.4
   picocolors: 1.1.1
   picomatch: 4.0.7
   pinyin-pro: 3.29.4
-  playwright: 1.63.0
-  postcss: 8.5.28
+  playwright: 1.64.0
+  postcss: 8.5.29
   qrcode.react: 4.2.0
   qs: 6.16.0
   react: 19.3.0
   react-dom: 19.3.0
-  react-easy-crop: 6.2.3
-  react-i18next: 17.0.15
+  react-easy-crop: 6.2.4
+  react-i18next: 17.0.16
   react-papaparse: 4.4.0
   react-pdf-highlighter: 8.0.0-rc.0
   react-server-dom-webpack: 19.3.0
@@ -249,23 +249,23 @@ catalog:
   scheduler: 0.28.0
   server-only: 0.0.1
   sharp: 0.35.5
-  shiki: 4.4.3
+  shiki: 4.5.0
   socket.io-client: 4.8.4
   sortablejs: 1.15.7
   std-semver: 1.0.8
-  storybook: 10.6.0
-  streamdown: 2.6.0
+  storybook: 10.6.1
+  streamdown: 2.7.0
   string-ts: 2.3.1
   svgo: 4.1.0
   tailwindcss: 4.3.3
-  tldts: 7.4.16
+  tldts: 7.4.18
   typescript: npm:@typescript/typescript6@6.0.2
   uglify-js: 3.19.3
   undici: 7.30.0
   unist-util-visit: 5.1.0
   use-context-selector: 2.0.0
   uuid: 14.0.2
-  vinext: 1.0.0
+  vinext: 1.1.0
   vite: npm:@voidzero-dev/vite-plus-core@1.1.0
   vite-plugin-inspect: 12.0.2
   vite-plus: 1.1.0

web/app/components/header/account-setting/model-provider-page/provider-added-card/__tests__/use-credential-panel-state.spec.ts

@@ -22,7 +22,6 @@ vi.mock('../use-trial-credits', () => ({
 }))
 
 const renderPanelHook = (provider: ModelProvider | undefined) => {
-  // oxlint-disable-next-line eslint-react/use-state -- This is a domain hook, not React's useState.
   return renderHookWithConsoleQuery(() => useCredentialPanelState(provider), {
     systemFeatures: { deployment_edition: 'CLOUD' },
     trialModels: mockTrialModels,

web/app/components/plugins/marketplace/list/list-with-collection.tsx

@@ -124,7 +124,6 @@ const CollectionSection = ({
     if (!section) return
 
     if (typeof IntersectionObserver === 'undefined') {
-      // oxlint-disable-next-line eslint-react/set-state-in-effect -- This is the hydration fallback for browsers without IntersectionObserver.
       setIsMounted(true)
       return
     }

web/app/components/snippet-list/hooks/__tests__/use-snippets-query-state.spec.tsx

@@ -4,7 +4,6 @@ import { SNIPPET_LIST_SEARCH_DEBOUNCE_MS } from '../../constants'
 import { useSnippetsQueryState } from '../use-snippets-query-state'
 
 const renderWithAdapter = (searchParams = '') => {
-  // oxlint-disable-next-line eslint-react/use-state -- renderHook executes a custom hook, not React.useState
   return renderHookWithNuqs(() => useSnippetsQueryState(), { searchParams })
 }
 

web/features/new-rag/auxiliary-task-read-guard.ts

@@ -56,9 +56,7 @@ export function useAuxiliaryTaskReadGuard({
     previousDocumentPermissionDeniedRef.current = documentPermissionDenied
     if (!wasDenied || documentPermissionDenied) return
     guard.clear()
-    // oxlint-disable-next-line eslint-react/set-state-in-effect -- The authoritative document permission transition retires the local denial.
     setPermissionDenied(false)
-    // oxlint-disable-next-line eslint-react/set-state-in-effect -- Guard mutations need one render so blocked readers are reconsidered.
     setGuardRevision((current) => current + 1)
   }, [documentPermissionDenied, guard])
 

web/features/new-rag/documents-page.tsx

@@ -832,7 +832,6 @@ export function DocumentsPage({ knowledgeSpaceId }: { knowledgeSpaceId: string }
     const shouldRestoreFocus =
       tasksOpen || documentSurfaceHadFocusRef.current || bulkActionsHadFocusRef.current
     if (tasksOpen) {
-      // oxlint-disable-next-line eslint-react/set-state-in-effect -- Permission revocation permanently closes the controlled task drawer.
       setTasksOpen(false)
     }
     if (shouldRestoreFocus) documentPermissionAlertRef.current?.focus()
@@ -866,9 +865,7 @@ export function DocumentsPage({ knowledgeSpaceId }: { knowledgeSpaceId: string }
     )
       return
     writePermissionRecoveryFetchSeenRef.current = false
-    // oxlint-disable-next-line eslint-react/set-state-in-effect -- A post-denial permission request is the authoritative event that retires the local mutation lock.
     setWritePermissionRevoked(false)
-    // oxlint-disable-next-line eslint-react/set-state-in-effect -- The completed recovery generation is retired with its write lock.
     setWritePermissionRecoveryGeneration(undefined)
   }, [
     canEdit,

web/features/new-rag/processing-tasks-drawer.tsx

@@ -251,9 +251,7 @@ export function ProcessingTasksDrawer({
     if (!wasOpen || open) return
     openCycleRef.current += 1
     loadMoreRequestedRef.current = false
-    // oxlint-disable-next-line eslint-react/set-state-in-effect -- Every committed controlled close resets drawer-local pagination and errors.
     setVisibleTaskLimit(TASK_DRAWER_LIMIT)
-    // oxlint-disable-next-line eslint-react/set-state-in-effect -- Every committed controlled close starts a fresh action-error cycle.
     setActionErrors({})
   }, [open])