chore(deps): update deps to latest, minimize overrides, upgrade expo sample to SDK 56

- Update 46 outdated external dependencies to their latest versions
  (vitest 2->4, zod 3->4 + @modelcontextprotocol/sdk 1.0->1.29, eslint,
  @playwright/test, rollup, @docusaurus/*, @rspack/*, react/react-native,
  postcss, svelte, vue, wrangler, ...).
- Minimize pnpm.overrides from 40 to 7 now that the latest direct deps pull
  patched transitives natively (kept: ip-address, minimatch, on-headers,
  postcss, qs, serialize-javascript, uuid).
- Relax the vitest fs check (server.fs.strict=false) so vite 6 can load the
  temp config files that loadJs/loadConfig dynamically import.
- Bump activesupport to >=7.2.3.1 in the React Native CLI sample Gemfiles.
- Upgrade the Expo sample to SDK 56 (RN 0.85, react-navigation -> expo-router
  theming, regenerated android/ios native projects).

Clears the outstanding Dependabot alerts (vite, ws, activesupport, uuid, ...).
pnpm audit: 0; cpp.js tests 68/68; expo sample npm audit: 0.

Author: bugra9

cppjs-core/cpp.js/package.json

@@ -20,8 +20,8 @@
         "test:coverage": "vitest run --coverage"
     },
     "devDependencies": {
-        "vitest": "^2.1.4",
-        "@vitest/coverage-v8": "^2.1.4"
+        "vitest": "^4.1.7",
+        "@vitest/coverage-v8": "^4.1.7"
     },
     "dependencies": {
         "@rollup/plugin-commonjs": "^29.0.2",
@@ -30,7 +30,7 @@
         "@rollup/plugin-virtual": "^3.0.2",
         "commander": "^14.0.3",
         "glob": "^13.0.6",
-        "rollup": "^4.60.2",
+        "rollup": "^4.60.4",
         "upath": "^3.0.7",
         "decompress": "^4.2.1",
         "follow-redirects": "^1.16.0",

cppjs-core/cpp.js/vitest.config.js

@@ -1,6 +1,14 @@
 import { defineConfig } from 'vitest/config';
 
 export default defineConfig({
+    // loadJs/loadConfig dynamically import config files written to os.tmpdir()
+    // during tests. Vite 6 tightened server.fs.allow and rejects those out-of-root
+    // paths ("Does the file exist?"); relax the fs check for the test runner.
+    server: {
+        fs: {
+            strict: false,
+        },
+    },
     test: {
         include: ['test/**/*.test.js'],
         environment: 'node',

cppjs-core/cppjs-core-create-app/package.json

@@ -22,7 +22,7 @@
         "@cpp.js/sample-cloud-cloudflare-worker": "workspace:^",
         "@cpp.js/sample-mobile-reactnative-cli": "workspace:^",
         "@cpp.js/sample-mobile-reactnative-expo": "2.0.0-beta.15",
-        "fs-extra": "^11.3.4",
+        "fs-extra": "^11.3.5",
         "kleur": "^4.1.5",
         "prompts": "^2.4.2",
         "replace": "^1.2.2"

cppjs-core/cppjs-mcp/package.json

@@ -20,8 +20,8 @@
         "AGENTS.md"
     ],
     "dependencies": {
-        "@modelcontextprotocol/sdk": "^1.0.4",
-        "zod": "^3.23.8"
+        "@modelcontextprotocol/sdk": "^1.29.0",
+        "zod": "^4.4.3"
     },
     "keywords": [
         "mcp",

cppjs-plugins/cppjs-plugin-metro/package.json

@@ -11,8 +11,8 @@
     },
     "dependencies": {
         "cpp.js": "workspace:^",
-        "@babel/runtime": "^7.29.2",
-        "@react-native/metro-babel-transformer": "^0.85.2",
+        "@babel/runtime": "^7.29.7",
+        "@react-native/metro-babel-transformer": "^0.85.3",
         "upath": "^3.0.7"
     },
     "keywords": [

cppjs-plugins/cppjs-plugin-react-native/package.json

@@ -15,7 +15,7 @@
         "cpp.js": "workspace:^",
         "@cpp.js/plugin-metro": "workspace:^",
         "@cpp.js/core-embind-jsi": "workspace:^",
-        "@babel/runtime": "^7.29.2",
+        "@babel/runtime": "^7.29.7",
         "upath": "^3.0.7"
     },
     "keywords": [

cppjs-samples/cppjs-playground-backend-nodejs-multithread/package.json

@@ -24,7 +24,7 @@
         "@cpp.js/package-tiff": "workspace:^",
         "@cpp.js/package-webp": "workspace:^",
         "@cpp.js/package-zlib": "workspace:^",
-        "ws": "8.20.0",
+        "ws": "8.21.0",
         "xhr2": "^0.2.1"
     },
     "keywords": [

cppjs-samples/cppjs-playground-backend-nodejs/package.json

@@ -25,7 +25,7 @@
         "@cpp.js/package-tiff": "workspace:^",
         "@cpp.js/package-webp": "workspace:^",
         "@cpp.js/package-zlib": "workspace:^",
-        "ws": "8.20.0",
+        "ws": "8.21.0",
         "xhr2": "^0.2.1"
     },
     "keywords": [

cppjs-samples/cppjs-playground-cloud-cloudflare-worker/package.json

@@ -35,8 +35,8 @@
         "@cpp.js/package-zlib": "workspace:^"
     },
     "devDependencies": {
-        "wrangler": "^4.85.0",
-        "@playwright/test": "^1.59.1"
+        "wrangler": "^4.95.0",
+        "@playwright/test": "^1.60.0"
     },
     "keywords": [
         "cpp.js-sample",

cppjs-samples/cppjs-playground-mobile-reactnative-cli/Gemfile

@@ -5,7 +5,7 @@ ruby ">= 2.6.10"
 
 # Exclude problematic versions of cocoapods and activesupport that causes build failures.
 gem 'cocoapods', '>= 1.13', '!= 1.15.0', '!= 1.15.1'
-gem 'activesupport', '>= 6.1.7.5', '!= 7.1.0'
+gem 'activesupport', '>= 7.2.3.1'
 gem 'xcodeproj', '< 1.26.0'
 gem 'concurrent-ruby', '< 1.3.4'