Merge pull request #487 from cipherstash/dependabot/npm_and_yarn/production-minor-patch-0b84702d29

chore(deps): bump the production-minor-patch group across 1 directory with 14 updates

Author: auxesis

.github/dependabot.yml

@@ -37,6 +37,9 @@ updates:
     ignore:
       # Catalog-managed; bump manually via pnpm-workspace.yaml + changeset.
       - dependency-name: "@cipherstash/auth"
+      # 0.x bumps ship breaking type changes (e.g. 0.2 → 0.3 tightened the
+      # FailureOption constraint). Review and apply manually.
+      - dependency-name: "@byteslice/result"
       # Major bumps are reviewed and applied manually, not by Dependabot.
       - dependency-name: "*"
         update-types:

packages/cli/package.json

@@ -42,13 +42,13 @@
 	"dependencies": {
 		"@cipherstash/auth": "catalog:repo",
 		"@cipherstash/migrate": "workspace:*",
-		"@clack/prompts": "1.3.0",
+		"@clack/prompts": "1.4.0",
 		"dotenv": "17.4.2",
 		"jiti": "2.7.0",
 		"pg": "8.20.0",
 		"picocolors": "^1.1.1",
-		"posthog-node": "^5.33.5",
-		"zod": "^4.3.6"
+		"posthog-node": "^5.34.2",
+		"zod": "^3.25.76"
 	},
 	"peerDependencies": {
 		"@cipherstash/stack": ">=0.6.0"

packages/cli/src/config/index.ts

@@ -43,7 +43,7 @@ const DEFAULT_ENCRYPT_CLIENT_PATH = './src/encryption/index.ts'
 
 const stashConfigSchema = z.object({
   databaseUrl: z
-    .string({ error: 'databaseUrl is required' })
+    .string({ required_error: 'databaseUrl is required' })
     .min(1, 'databaseUrl must not be empty'),
   client: z.string().default(DEFAULT_ENCRYPT_CLIENT_PATH),
 })

packages/migrate/package.json

@@ -42,7 +42,7 @@
     "lint": "biome check ."
   },
   "dependencies": {
-    "zod": "^3.24.2"
+    "zod": "^3.25.76"
   },
   "peerDependencies": {
     "@cipherstash/stack": ">=0.6.0",

packages/nextjs/package.json

@@ -49,7 +49,7 @@
 		"access": "public"
 	},
 	"optionalDependencies": {
-		"@rollup/rollup-linux-x64-gnu": "4.60.3"
+		"@rollup/rollup-linux-x64-gnu": "4.60.4"
 	},
 	"dependencies": {
 		"jose": "^6.2.3"

packages/protect/package.json

@@ -71,11 +71,11 @@
 		"@byteslice/result": "^0.2.0",
 		"@cipherstash/protect-ffi": "0.21.4",
 		"@cipherstash/schema": "workspace:*",
-		"@stricli/core": "^1.2.6",
+		"@stricli/core": "^1.2.7",
 		"dotenv": "17.4.2",
-		"zod": "^3.24.2"
+		"zod": "^3.25.76"
 	},
 	"optionalDependencies": {
-		"@rollup/rollup-linux-x64-gnu": "4.60.3"
+		"@rollup/rollup-linux-x64-gnu": "4.60.4"
 	}
 }

packages/schema/package.json

@@ -41,7 +41,7 @@
 		"vitest": "catalog:repo"
 	},
 	"dependencies": {
-		"zod": "^3.24.2"
+		"zod": "^3.25.76"
 	},
 	"publishConfig": {
 		"access": "public"

packages/stack/package.json

@@ -185,7 +185,7 @@
 		"release": "tsup"
 	},
 	"devDependencies": {
-		"@clack/prompts": "^1.3.0",
+		"@clack/prompts": "^1.4.0",
 		"@supabase/supabase-js": "^2.105.4",
 		"@types/uuid": "^11.0.0",
 		"dotenv": "17.4.2",
@@ -204,9 +204,9 @@
 	"dependencies": {
 		"@byteslice/result": "0.2.0",
 		"@cipherstash/protect-ffi": "0.21.4",
-		"evlog": "1.9.0",
+		"evlog": "1.11.0",
 		"uuid": "14.0.0",
-		"zod": "3.24.2"
+		"zod": "3.25.76"
 	},
 	"peerDependencies": {
 		"@supabase/supabase-js": ">=2",

packages/wizard/package.json

@@ -24,14 +24,14 @@
 		"lint": "biome check ."
 	},
 	"dependencies": {
-		"@anthropic-ai/claude-agent-sdk": "^0.2.138",
+		"@anthropic-ai/claude-agent-sdk": "^0.3.143",
 		"@cipherstash/auth": "catalog:repo",
-		"@clack/prompts": "1.3.0",
+		"@clack/prompts": "1.4.0",
 		"dotenv": "17.4.2",
 		"pg": "8.20.0",
 		"picocolors": "^1.1.1",
-		"posthog-node": "^5.33.5",
-		"zod": "^4.3.6"
+		"posthog-node": "^5.34.2",
+		"zod": "^3.25.76"
 	},
 	"devDependencies": {
 		"@types/pg": "^8.20.0",