docs: update CURRENT-STATE and CHANGELOG for v0.5.0 / It2 complete

EmiyaKiritsugu3 · claude · EmiyaKiritsugu3 · commit 9f4e7947f53a · 2026-04-18T00:24:54.000-03:00
- CURRENT-STATE: bump to v0.5.0, mark CI E2E green in CI (15/15), add deps row, clear resolved P1 items (PR #69, #70 merged), update Genkit to 1.32 - CHANGELOG: promote [Unreleased] to [0.5.0] with dep update + E2E fixes Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,24 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.5.0] — 2026-04-18 — It2 Complete: CI Green, Dependencies Updated, E2E Stabilized
+
+### Added
+
+- **E2E test timeout headroom**: `playwright.config.ts` sets `timeout: 60_000` and `navigationTimeout: 60_000` to accommodate first-request Next.js dev-mode compilation of `/aluno/dashboard` (~20s on CI runners).
+
+### Changed
+
+- **Dependencies**: all patch/minor packages bumped (PR #70). `genkit` + `@genkit-ai/*` aligned to `^1.32.0`; lockfile fully regenerated from scratch to fix transitive dep sync errors (`magicast`, `@opentelemetry/*`, `protobufjs` were missing after `npm update --save`).
+- **ALUNO E2E login**: `loginAs(page, 'ALUNO')` now navigates to `/aluno/login` (client-side Supabase auth + `router.push`) instead of the admin `/login` server action. Eliminates the inline RSC render timing gap where `getUser()=null` caused a double-redirect before the browser could send the session cookie.
+- **`waitForURL` pattern**: changed from `'**/dashboard**'` to `(url) => !url.pathname.startsWith(loginPath)` — works for both `/login` (staff) and `/aluno/login` (student) departure detection.
+
+### Fixed
+
+- **`npm ci` lockfile sync in CI**: `npm update --save` only resolves declared ranges, not full transitive trees; missing packages caused `npm ci` to fail. Fixed by full lockfile regeneration (`rm package-lock.json && npm install`).
+- **CI E2E ALUNO timeout**: first-request compilation of `/aluno/dashboard` (framer-motion, recharts) takes >20s in Next.js dev mode on CI, exceeding the 30s test timeout. Fixed by using `/aluno/login` flow + 60s timeout.
+- **`@tanstack/react-table` duplicate**: removed from `devDependencies` (was duplicated in `dependencies`).
+
 ## [Unreleased] — 2026-04-17 — E2E Auth Stabilization & Observability [PID-SENTINEL]
 
 ### Added
diff --git a/docs/CURRENT-STATE.md b/docs/CURRENT-STATE.md
@@ -1,8 +1,8 @@
 # Current State — Five Star Academy
 
-**Last Updated**: 2026-04-17
-**Branch**: `fix/e2e-auth-stabilization` → PR #69 open against `main`
-**Version**: 0.4.2 (pre-release)
+**Last Updated**: 2026-04-18
+**Branch**: `main`
+**Version**: 0.5.0 (It2 complete)
 
 ## What Works Today
 
@@ -25,27 +25,28 @@
 | Local E2E stack                             | ✅ Done       | `supabase start` (Docker)                          |
 | E2E seed script                             | ✅ Done       | `prisma/seed-e2e.ts` (4 users, purge-on-seed)      |
 | Playwright E2E suite                        | ✅ Done       | 15/15 passing                                      |
-| CI E2E job                                  | ✅ Done       | `.github/workflows/ci.yml`                         |
+| CI E2E job                                  | ✅ Green      | 15/15 passing in CI (PR #69 + #70)                 |
 | Sentry error tracking                       | ✅ Modernized | Next.js 15, v10, `instrumentation-client.ts`       |
 | Structured logging                          | ✅ Done       | `src/lib/logger.ts` (Logger wrapper, Sentry-aware) |
+| Dependencies                                | ✅ Updated    | All patch/minor bumped via PR #70; lockfile clean  |
 
 ## What Is Incomplete
 
 | Area          | Gap                                                                     | Priority |
 | ------------- | ----------------------------------------------------------------------- | -------- |
 | CI security   | 3 moderate vulns in `@prisma/dev` (transitive, awaiting upstream)       | P3       |
 | Lint warnings | `no-console` warnings reduced — remaining are accepted Logger internals | P3       |
-| GitHub secret | `SUPABASE_LOCAL_SERVICE_ROLE_KEY` must be set for CI seed               | P1       |
-| Env Sync      | Ensure `NEXT_PUBLIC_SENTRY_DSN` is set in production for scrubbing      | P1       |
-| PR merge      | PR #69 (`fix/e2e-auth-stabilization`) open, awaiting CI green + review  | P1       |
+| Env Sync      | `NEXT_PUBLIC_SENTRY_DSN` must be set in production for error scrubbing  | P1       |
+| `@types/pg`   | Pinned at `8.11.11` — upgrade to `8.20.0` needs manual compat check     | P3       |
 
 ## Quality Gates (current status)
 
 ```
 npm run typecheck   → ✅  0 errors
 npm run lint        → ✅  0 errors
 npm run test        → ✅  18/18 passing
-npm run e2e         → ✅  15/15 passing  (local, 2026-04-17)
+npm run e2e         → ✅  15/15 passing  (local + CI, 2026-04-18)
+npm run build       → ✅  production build succeeds
 ```
 
 ## Tech Stack
@@ -55,7 +56,7 @@ npm run e2e         → ✅  15/15 passing  (local, 2026-04-17)
 - **Auth**: Supabase Auth SSR (`@supabase/ssr`)
 - **Database**: PostgreSQL via Prisma 7
 - **Validation**: Zod 3
-- **AI**: Google Genkit 1.31 + Gemini 2.5 Flash
+- **AI**: Google Genkit 1.32 + Gemini 2.5 Flash
 - **Styling**: Tailwind CSS 4 + Shadcn/UI
 - **Testing**: Vitest 4 (3 files, 14 unit tests) + Playwright 1.59 (15 E2E scenarios)
 - **CI**: GitHub Actions (quality + test + e2e jobs)
diff --git a/docs/pdr/MILESTONES.md b/docs/pdr/MILESTONES.md
@@ -9,7 +9,7 @@
 | ----------------------- | --------------- | --------------- | --------------------------------------------------------- | ----------------------------------------------------- |
 | **It0 (Inception)**     | Mar 10 - Mar 26 | ✅ Complete     | Planning, studies, and tech stack definition.             | Repository setup, initial docs.                       |
 | **It1 (Requirements)**  | Mar 27 - Apr 17 | ✅ Complete     | Vision, data models, user stories, full quality pipeline. | PDRs, E2E suite, CI/CD, Sentry, CRUD, Student Portal. |
-| **It2 (Stabilization)** | Apr 18 - May 08 | 🔄 In Progress  | Merge PR #69, Sentry CI secrets, E2E in CI green.         | Stable main branch, CI fully green, v0.5.0 release.   |
+| **It2 (Stabilization)** | Apr 18 - May 08 | ✅ Complete     | PR #69 + #70 merged, CI 15/15 green, v0.5.0 released.    | Stable main branch, CI fully green, v0.5.0 release.   |
 | **It3 (AI & Workouts)** | May 09 - May 29 | ⏳ Planned      | Workout management and AI generation polish.              | Gemini Genkit integrations.                           |
 | **It4 (Student App)**   | May 30 - Jun 19 | ⏳ Planned      | Student Portal and Gamification features.                 | Mobile-first portal, feedback.                        |
 | **It5 (Wrap-up)**       | Jun 20 - Jul 10 | ⏳ Planned      | Final QA, bug fixes, and closing documentation.           | Complete MVP System.                                  |
@@ -27,14 +27,14 @@ Everything originally planned for It1–It2 was delivered during It1:
 - ✅ Sentry v10 (Next.js 15), structured Logger, privacy-first Replay
 - ✅ Ops documentation: RUNBOOK, SLOs, THREAT-MODEL, INCIDENT-RESPONSE
 
-### It2 Remaining Work
+### It2 Delivered
 
-| Task                                              | Priority | Status      |
-| ------------------------------------------------- | -------- | ----------- |
-| Merge PR #69 (`fix/e2e-auth-stabilization`)       | P1       | Open        |
-| Set `SUPABASE_LOCAL_SERVICE_ROLE_KEY` GitHub secret | P1     | Pending     |
-| Confirm E2E job green in CI after merge           | P1       | Pending     |
-| Set `NEXT_PUBLIC_SENTRY_DSN` in production        | P1       | Pending     |
+| Task                                              | Priority | Status          |
+| ------------------------------------------------- | -------- | --------------- |
+| Merge PR #69 (`fix/e2e-auth-stabilization`)       | P1       | ✅ Merged        |
+| Merge PR #70 (`chore/update-dependencies`)        | P1       | ✅ Merged        |
+| E2E job green in CI (15/15)                       | P1       | ✅ Confirmed     |
+| Set `NEXT_PUBLIC_SENTRY_DSN` in production        | P1       | ⚠️ Still pending |
 
 ---
 
@@ -43,5 +43,5 @@ Everything originally planned for It1–It2 was delivered during It1:
 | Release          | Target Date | Status        | Scope                                                                      |
 | ---------------- | ----------- | ------------- | -------------------------------------------------------------------------- |
 | **v0.1.0**       | Apr 17      | ✅ Released   | Documentation, scaffolding, CI/CD, database schema, full feature set.     |
-| **v0.5.0**       | May 08      | ⏳ Planned    | CI fully green, Sentry in production, PR #69 merged, secrets configured.  |
+| **v0.5.0**       | Apr 18      | ✅ Released   | CI fully green (15/15 E2E), PR #69 + #70 merged, deps updated.            |
 | **v1.0.0 (MVP)** | Jul 10      | ⏳ Planned    | Complete system including Dashboard, Student Portal, and AI integrations.  |
