chore(deps): bump the production-minor-patch group across 1 directory with 21 updates

Bumps the production-minor-patch group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.20.0` | `8.22.0` |
| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.4.0` | `1.7.0` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.34.2` | `5.40.0` |
| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.60.4` | `4.62.2` |
| [arktype](https://github.com/arktypeio/arktype/tree/HEAD/ark/type) | `2.2.0` | `2.2.3` |
| [@cipherstash/protect-ffi](https://github.com/cipherstash/protectjs-ffi) | `0.23.0` | `0.28.0` |
| [@stricli/core](https://github.com/bloomberg/stricli) | `1.2.7` | `1.2.9` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.0` | `14.0.1` |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.143` | `0.3.204` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.106.0` | `0.110.0` |
| @cipherstash/auth-darwin-arm64 | `0.41.0` | `0.42.0` |
| @cipherstash/auth-darwin-x64 | `0.41.0` | `0.42.0` |
| @cipherstash/auth-linux-arm64-gnu | `0.41.0` | `0.42.0` |
| @cipherstash/auth-linux-x64-gnu | `0.41.0` | `0.42.0` |
| @cipherstash/auth-linux-x64-musl | `0.41.0` | `0.42.0` |
| @cipherstash/auth-win32-x64-msvc | `0.41.0` | `0.42.0` |
| [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.3.5` | `7.5.14` |
| [next](https://github.com/vercel/next.js) | `15.5.18` | `15.5.20` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.1` | `4.23.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.6` | `3.2.7` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.13` | `8.1.3` |

Updates `pg` from 8.20.0 to 8.22.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.22.0/packages/pg)

Updates `@clack/prompts` from 1.4.0 to 1.7.0
- [Release notes](https://github.com/bombshell-dev/clack/releases)
- [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md)
- [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.7.0/packages/prompts)

Updates `posthog-node` from 5.34.2 to 5.40.0
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.40.0/packages/node)

Updates `@rollup/rollup-linux-x64-gnu` from 4.60.4 to 4.62.2
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.60.4...v4.62.2)

Updates `arktype` from 2.2.0 to 2.2.3
- [Release notes](https://github.com/arktypeio/arktype/releases)
- [Changelog](https://github.com/arktypeio/arktype/blob/main/ark/type/CHANGELOG.md)
- [Commits](https://github.com/arktypeio/arktype/commits/arktype@2.2.3/ark/type)

Updates `@cipherstash/protect-ffi` from 0.23.0 to 0.28.0
- [Release notes](https://github.com/cipherstash/protectjs-ffi/releases)
- [Changelog](https://github.com/cipherstash/protectjs-ffi/blob/main/CHANGELOG.md)
- [Commits](cipherstash/protectjs-ffi@v0.23.0...v0.28.0)

Updates `@stricli/core` from 1.2.7 to 1.2.9
- [Release notes](https://github.com/bloomberg/stricli/releases)
- [Changelog](https://github.com/bloomberg/stricli/blob/main/CHANGELOG.md)
- [Commits](bloomberg/stricli@v1.2.7...v1.2.9)

Updates `uuid` from 14.0.0 to 14.0.1
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v14.0.0...v14.0.1)

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.143 to 0.3.204
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.143...v0.3.204)

Updates `@anthropic-ai/sdk` from 0.106.0 to 0.110.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.106.0...sdk-v0.110.0)

Updates `@cipherstash/auth-darwin-arm64` from 0.41.0 to 0.42.0

Updates `@cipherstash/auth-darwin-x64` from 0.41.0 to 0.42.0

Updates `@cipherstash/auth-linux-arm64-gnu` from 0.41.0 to 0.42.0

Updates `@cipherstash/auth-linux-x64-gnu` from 0.41.0 to 0.42.0

Updates `@cipherstash/auth-linux-x64-musl` from 0.41.0 to 0.42.0

Updates `@cipherstash/auth-win32-x64-msvc` from 0.41.0 to 0.42.0

Updates `@clerk/nextjs` from 7.3.5 to 7.5.14
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.5.14/packages/nextjs)

Updates `next` from 15.5.18 to 15.5.20
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.18...v15.5.20)

Updates `tsx` from 4.22.1 to 4.23.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.1...v4.23.0)

Updates `vitest` from 3.2.6 to 3.2.7
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.7/packages/vitest)

Updates `vite` from 8.0.13 to 8.1.3
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.3/packages/vite)

---
updated-dependencies:
- dependency-name: pg
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@clack/prompts"
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: posthog-node
  dependency-version: 5.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@rollup/rollup-linux-x64-gnu"
  dependency-version: 4.62.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: arktype
  dependency-version: 2.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@cipherstash/protect-ffi"
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@stricli/core"
  dependency-version: 1.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: uuid
  dependency-version: 14.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.204
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.110.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@cipherstash/auth-darwin-arm64"
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@cipherstash/auth-darwin-x64"
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@cipherstash/auth-linux-arm64-gnu"
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@cipherstash/auth-linux-x64-gnu"
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@cipherstash/auth-linux-x64-musl"
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@cipherstash/auth-win32-x64-msvc"
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.5.14
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: next
  dependency-version: 15.5.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: vitest
  dependency-version: 3.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: vite
  dependency-version: 8.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

examples/basic/package.json

@@ -15,7 +15,7 @@
     "@cipherstash/stack-drizzle": "workspace:*",
     "@cipherstash/stack-supabase": "workspace:*",
     "dotenv": "^17.4.2",
-    "pg": "8.20.0"
+    "pg": "8.22.0"
   },
   "devDependencies": {
     "stash": "workspace:*",

packages/bench/package.json

@@ -14,7 +14,7 @@
     "@cipherstash/stack": "workspace:*",
     "@cipherstash/stack-drizzle": "workspace:*",
     "drizzle-orm": "0.45.2",
-    "pg": "^8.20.0"
+    "pg": "^8.22.0"
   },
   "devDependencies": {
     "@types/node": "^22.20.0",

packages/cli/package.json

@@ -48,12 +48,12 @@
 	"dependencies": {
 		"@cipherstash/auth": "catalog:repo",
 		"@cipherstash/migrate": "workspace:*",
-		"@clack/prompts": "1.4.0",
+		"@clack/prompts": "1.7.0",
 		"dotenv": "17.4.2",
 		"jiti": "2.7.0",
-		"pg": "8.20.0",
+		"pg": "8.22.0",
 		"picocolors": "^1.1.1",
-		"posthog-node": "^5.34.2",
+		"posthog-node": "^5.40.0",
 		"zod": "^3.25.76"
 	},
 	"//optionalDependencies": "@cipherstash/auth ships per-platform native bindings as optional peerDependencies. pnpm does not auto-install platform-matched optional peer deps, so we declare them here as optionalDependencies — pnpm then picks the binary matching the host's os/cpu (from each sub-package's own package.json) and ignores the rest. All seven names share a single catalog entry to keep them in lockstep.",

packages/migrate/package.json

@@ -57,7 +57,7 @@
     "@cipherstash/stack": "workspace:*",
     "@types/pg": "^8.20.0",
     "dotenv": "^17.4.2",
-    "pg": "8.20.0",
+    "pg": "8.22.0",
     "tsup": "catalog:repo",
     "typescript": "catalog:repo",
     "vitest": "catalog:repo"

packages/nextjs/package.json

@@ -51,7 +51,7 @@
 		"access": "public"
 	},
 	"optionalDependencies": {
-		"@rollup/rollup-linux-x64-gnu": "4.60.4"
+		"@rollup/rollup-linux-x64-gnu": "4.62.2"
 	},
 	"dependencies": {
 		"jose": "^6.2.3"

packages/prisma-next/package.json

@@ -90,7 +90,7 @@
 		"@prisma-next/sql-runtime": "0.14.0",
 		"@prisma-next/ts-render": "0.14.0",
 		"@prisma-next/utils": "0.14.0",
-		"arktype": "^2.1.29"
+		"arktype": "^2.2.3"
 	},
 	"devDependencies": {
 		"@prisma-next/adapter-postgres": "0.14.0",

packages/protect/package.json

@@ -70,13 +70,13 @@
 	},
 	"dependencies": {
 		"@byteslice/result": "^0.2.0",
-		"@cipherstash/protect-ffi": "0.23.0",
+		"@cipherstash/protect-ffi": "0.28.0",
 		"@cipherstash/schema": "workspace:*",
-		"@stricli/core": "^1.2.7",
+		"@stricli/core": "^1.2.9",
 		"dotenv": "17.4.2",
 		"zod": "^3.25.76"
 	},
 	"optionalDependencies": {
-		"@rollup/rollup-linux-x64-gnu": "4.60.4"
+		"@rollup/rollup-linux-x64-gnu": "4.62.2"
 	}
 }

packages/stack-drizzle/package.json

@@ -79,7 +79,7 @@
 		"drizzle-orm": ">=0.33"
 	},
 	"devDependencies": {
-		"@cipherstash/protect-ffi": "0.29.0",
+		"@cipherstash/protect-ffi": "0.28.0",
 		"@cipherstash/test-kit": "workspace:*",
 		"fta-cli": "3.0.0",
 		"dotenv": "17.4.2",

packages/stack-supabase/package.json

@@ -69,15 +69,15 @@
 		}
 	},
 	"devDependencies": {
-		"@cipherstash/protect-ffi": "0.29.0",
+		"@cipherstash/protect-ffi": "0.28.0",
 		"@cipherstash/test-kit": "workspace:*",
 		"fta-cli": "3.0.0",
 		"@supabase/postgrest-js": "2.105.4",
 		"@supabase/supabase-js": "^2.110.0",
 		"@types/pg": "^8.20.0",
 		"fast-check": "^4.8.0",
 		"dotenv": "17.4.2",
-		"pg": "8.20.0",
+		"pg": "8.22.0",
 		"postgres": "^3.4.8",
 		"tsup": "catalog:repo",
 		"typescript": "catalog:repo",

packages/stack/package.json

@@ -203,7 +203,7 @@
 	},
 	"devDependencies": {
 		"@cipherstash/eql": "3.0.0",
-		"@clack/prompts": "^1.4.0",
+		"@clack/prompts": "^1.7.0",
 		"@clerk/backend": "3.4.9",
 		"@supabase/postgrest-js": "2.105.4",
 		"@supabase/supabase-js": "^2.110.0",
@@ -215,7 +215,7 @@
 		"fast-check": "^4.8.0",
 		"fta-cli": "3.0.0",
 		"json-schema-to-typescript": "^15.0.2",
-		"pg": "8.20.0",
+		"pg": "8.22.0",
 		"postgres": "^3.4.8",
 		"tsup": "catalog:repo",
 		"tsx": "catalog:repo",
@@ -228,9 +228,9 @@
 	"dependencies": {
 		"@byteslice/result": "0.2.0",
 		"@cipherstash/auth": "catalog:repo",
-		"@cipherstash/protect-ffi": "0.29.0",
+		"@cipherstash/protect-ffi": "0.28.0",
 		"evlog": "1.11.0",
-		"uuid": "14.0.0",
+		"uuid": "14.0.1",
 		"zod": "3.25.76"
 	},
 	"//optionalDependencies": "@cipherstash/auth ships per-platform native bindings as optional peerDependencies. pnpm does not auto-install platform-matched optional peer deps, so we declare them here as optionalDependencies — pnpm then picks the binary matching the host's os/cpu (from each sub-package's own package.json) and ignores the rest. Required because @cipherstash/stack re-exports the Node auth strategies (OidcFederationStrategy, AccessKeyStrategy, …). All seven names share a single catalog entry to keep them in lockstep.",