Next wip dev deps (#1124)

* chore(dev-deps): to latest

* chore(dev-deps): to latest

* chore(dev-deps): to latest

* chore(dev-deps): to latest

* chore(dev-deps): to latest

* chore(dev-deps): to latest

* chore(dev-deps): to latest

Author: belgattitude

.agents/skills/shadcn/SKILL.md

@@ -77,7 +77,8 @@ These rules are **always enforced**. Each links to a file with Incorrect/Correct
 
 ### CLI
 
-- **Never decode or fetch preset codes manually.** Pass them directly to `npx shadcn@latest apply --preset <code>` for existing projects, or `npx shadcn@latest init --preset <code>` when initializing.
+- **Never decode preset codes or build preset URLs manually.** Use `npx shadcn@latest preset decode <code>`, `preset url <code>`, or `preset open <code>`. For project-aware preset detection, use `npx shadcn@latest preset resolve`.
+- **Apply preset codes directly with the CLI.** Use `npx shadcn@latest apply <code>` for existing projects, or `npx shadcn@latest init --preset <code>` when initializing.
 
 ## Key Patterns
 
@@ -150,6 +151,7 @@ The injected project context contains these key fields:
 - **`resolvedPaths`** → exact file-system destinations for components, utils, hooks, etc.
 - **`framework`** → routing and file conventions (e.g. Next.js App Router vs Vite SPA).
 - **`packageManager`** → use this for any non-shadcn dependency installs (e.g. `pnpm add date-fns` vs `npm install date-fns`).
+- **`preset`** → resolved preset code and values for the current project. Use `npx shadcn@latest preset resolve --json` when you only need preset information.
 
 See [cli.md — `info` command](./cli.md) for the full field reference.
 
@@ -173,8 +175,11 @@ npx shadcn@latest docs button dialog select
 6. **Fix imports in third-party components** — After adding components from community registries (e.g. `@bundui`, `@magicui`), check the added non-UI files for hardcoded import paths like `@/components/ui/...`. These won't match the project's actual aliases. Use `npx shadcn@latest info` to get the correct `ui` alias (e.g. `@workspace/ui/components`) and rewrite the imports accordingly. The CLI rewrites imports for its own UI files, but third-party registry components may use default paths that don't match the project.
 7. **Review added components** — After adding a component or block from any registry, **always read the added files and verify they are correct**. Check for missing sub-components (e.g. `SelectItem` without `SelectGroup`), missing imports, incorrect composition, or violations of the [Critical Rules](#critical-rules). Also replace any icon imports with the project's `iconLibrary` from the project context (e.g. if the registry item uses `lucide-react` but the project uses `hugeicons`, swap the imports and icon names accordingly). Fix all issues before moving on.
 8. **Registry must be explicit** — When the user asks to add a block or component, **do not guess the registry**. If no registry is specified (e.g. user says "add a login block" without specifying `@shadcn`, `@tailark`, etc.), ask which registry to use. Never default to a registry on behalf of the user.
-9. **Switching presets** — Ask the user first: **overwrite**, **merge**, or **skip**?
-   - **Overwrite**: `npx shadcn@latest apply --preset <code>`. Overwrites detected components, fonts, and CSS variables.
+9. **Switching presets** — Ask the user first: **overwrite**, **partial**, **merge**, or **skip**?
+   - **Inspect current preset**: `npx shadcn@latest preset resolve`. Use `--json` when you need structured values.
+   - **Inspect incoming preset**: `npx shadcn@latest preset decode <code>`. Use `preset url <code>` or `preset open <code>` to share or open the preset builder.
+   - **Overwrite**: `npx shadcn@latest apply <code>`. Overwrites detected components, fonts, and CSS variables.
+   - **Partial**: `npx shadcn@latest apply <code> --only theme,font`. Updates only the selected preset parts without reinstalling UI components. Supported values are `theme` and `font`; comma-separated combinations are allowed. `icon` is intentionally not supported, because icon changes may require full component reinstall and transforms.
    - **Merge**: `npx shadcn@latest init --preset <code> --force --no-reinstall`, then run `npx shadcn@latest info` to list installed components, then for each installed component use `--dry-run` and `--diff` to [smart merge](#updating-components) it individually.
    - **Skip**: `npx shadcn@latest init --preset <code> --force --no-reinstall`. Only updates config and CSS, leaves components as-is.
    - **Important**: Always run preset commands inside the user's project directory. `apply` only works in an existing project with a `components.json` file. The CLI automatically preserves the current base (`base` vs `radix`) from `components.json`. If you must use a scratch/temp directory (e.g. for `--dry-run` comparisons), pass `--base <current-base>` explicitly — preset codes do not encode the base.
@@ -207,8 +212,17 @@ npx shadcn@latest init --preset base-nova
 npx shadcn@latest init --defaults  # shortcut: --template=next --preset=nova (base style implied)
 
 # Apply a preset to an existing project.
-npx shadcn@latest apply --preset a2r6bw
 npx shadcn@latest apply a2r6bw
+npx shadcn@latest apply a2r6bw --only theme
+npx shadcn@latest apply a2r6bw --only font
+npx shadcn@latest apply a2r6bw --only theme,font
+
+# Inspect preset codes and project preset state.
+npx shadcn@latest preset decode a2r6bw
+npx shadcn@latest preset url a2r6bw
+npx shadcn@latest preset open a2r6bw
+npx shadcn@latest preset resolve
+npx shadcn@latest preset resolve --json
 
 # Add components.
 npx shadcn@latest add button card dialog

.gitignore

@@ -4,7 +4,8 @@
 # hack for changeset releases
 _release
 
-# Turbo pruned files
+# Turbo and turbo docker pruned files
+.turbo
 .turbo-pruned
 
 # local env files (following nextjs convention)
@@ -22,9 +23,6 @@ next-env.d.ts
 nx-cloud.env
 .nx
 
-# turbo
-.turbo
-
 # temp files
 **/tmp/*
 !**/tmp/.gitkeep

.ncurc.cjs

@@ -40,7 +40,7 @@ const npmPreapprovedPackages = [
   '@valibot/*',
   '@standard-schema/*',
   'shadcn',
-  '@logtape/logtape'
+  '@logtape/*',
 ];
 
 module.exports = defineConfig({
@@ -70,6 +70,10 @@ module.exports = defineConfig({
     // duckdb-wasm depends on an older version of arrow
     'apache-arrow',
 
+    // Temp hack cause @orpc/client was published with a wrong version
+    // and removed later... but still the latest version is 2.0.0
+    '@orpc/client',
+
     // prisma
     'prisma',
     '@prisma/client',

.yarnrc.yml

@@ -13,7 +13,7 @@ nodeLinker: node-modules
 npmMinimalAgeGate: 2880
 
 catalog:
-  '@typescript/native-preview': 7.0.0-dev.20260503.1
+  '@typescript/native-preview': 7.0.0-dev.20260504.1
 
 npmPreapprovedPackages:
   - "@belgattitude/*"
@@ -23,6 +23,7 @@ npmPreapprovedPackages:
   - "@next/*"
   - "@azure/*"
   - prisma
+  - postcss
   - "@prisma/*"
   - "@duckdb/*"
   - kysely
@@ -47,28 +48,19 @@ npmPreapprovedPackages:
   - "@better-auth/*"
   - "@typescript-eslint/*"
   - prettier
-  - "@kubb/*"
-  - remeda
-  - "@redocly/*"
   - tsdown
   - rolldown-plugin-dts
   - rolldown
   - "@rolldown/*"
-  - oas
-  - dedent
-  - unrun
   - zod
   - valibot
   - "@valibot/*"
   - "@standard-schema/*"
-  - import-without-cache
-  - ws
   - "@vitest/*"
   - "shadcn"
   - "@oxc-project/*"
   - "@typescript/*"
-  - picomatch
-  - '@logtape/logtape'
+  - '@logtape/*'
   - '@napi-rs/*'
   - 'npm-check-updates'
 

docs/package.json

@@ -33,7 +33,7 @@
   "dependencies": {
     "@t3-oss/env-nextjs": "0.13.11",
     "clsx": "2.1.1",
-    "next": "16.2.4",
+    "next": "16.2.5",
     "nextra": "4.6.1",
     "nextra-theme-docs": "4.6.1",
     "react": "19.2.5",

examples/apps/fastify-app/package.json

@@ -45,7 +45,7 @@
     "@httpx/exception": "3.1.10",
     "@httpx/lru": "0.13.3",
     "@httpx/memo-intl": "1.4.10",
-    "@httpx/plain-object": "2.1.9",
+    "@httpx/plain-object": "2.1.10",
     "@httpx/treeu": "0.6.0",
     "close-with-grace": "2.5.0",
     "fastify": "5.8.5",

examples/apps/nextjs-app/docker/Dockerfile

@@ -12,6 +12,7 @@ RUN apt-get update \
   #&& apt-get install build-essential cmake curl unzip ca-certificates git jq --no-install-recommends -y \
   && apt-get install git jq --no-install-recommends -y \
   && rm -rf /var/cache/apt/* \
+  && rm -rf /var/lib/apt/lists/* \
   ## Corepack won't be bundled in node 25+
   && npm i -g corepack@${COREPACK_VERSION} && corepack enable
 
@@ -100,13 +101,18 @@ ENV TZ=Etc/UTC
 ENV NODE_ENV=production
 
 RUN apt-get update \
-  && apt-get install bash tzdata --no-install-recommends -y \
-  && rm -rf /var/cache/apt/*
+  && apt-get install tzdata ca-certificates --no-install-recommends -y \
+  && rm -rf /var/cache/apt/* \
+  && rm -rf /var/lib/apt/lists/*
   # If needed, we can enable corepack in the runner as well, but for now we don't need it  \
   # since we're running the built server.js directly with node.
   # && npm i -g corepack@${COREPACK_VERSION} && corepack enable
 
 
+# For duckdb azure extension, we need to have the certs available in the runner image as well, so we link them to the expected location.
+# see https://github.com/duckdb/duckdb/discussions/9675
+RUN mkdir -p /etc/pki/tls/certs && ln -s /etc/ssl/certs/ca-certificates.crt /etc/pki/tls/certs/ca-bundle.crt
+
 WORKDIR /app
 
 # Set the correct permission for prerender cache

examples/apps/nextjs-app/docker/docker-compose.yml

@@ -1,10 +1,13 @@
 name: flowblade-example-nextjs
 services:
   app-debian:
+    container_name: 'flowblade-nextjs-app'
     build:
       # Start from root of the monorepo
       context: ../../../../
       dockerfile: ./examples/apps/nextjs-app/docker/Dockerfile
+      tags:
+        - flowblade-nextjs-app:latest
     restart: no
     networks:
       - flowblade-net

examples/apps/nextjs-app/package.json

@@ -22,7 +22,7 @@
     "typegen": "next typegen",
     "build-no-paths": "cross-env NEXT_BUILD_TSCONFIG=./tsconfig.no-paths.json next build",
     "build-standalone": "cross-env NEXT_BUILD_OUTPUT=standalone next build",
-    "build-pruned": "yarn --top-level run turbo prune --scope=@examples/nextjs-app --docker --out-dir=./out/nextjs-app/",
+    "build-pruned": "yarn --top-level run turbo prune --scope=@examples/nextjs-app --docker --out-dir=./.turbo-pruned/nextjs-app/",
     "bundle-analyze": "next experimental-analyze",
     "start": "next start",
     "clean": "rimraf ./.next ./coverage ./tsconfig.tsbuildinfo",
@@ -62,13 +62,13 @@
     "@httpx/lru": "0.13.3",
     "@httpx/md5": "1.0.3",
     "@httpx/memo-intl": "1.4.10",
-    "@httpx/plain-object": "2.1.9",
+    "@httpx/plain-object": "2.1.10",
     "@httpx/stable-hash": "0.4.0",
     "@httpx/treeu": "0.6.0",
     "@httpx/xcache": "0.5.1",
     "@logtape/logtape": "2.0.7",
-    "@logtape/otel": "2.0.6",
-    "@logtape/pretty": "2.0.6",
+    "@logtape/otel": "2.0.7",
+    "@logtape/pretty": "2.0.7",
     "@motherduck/wasm-client": "0.8.1",
     "@opentelemetry/api": "1.9.1",
     "@opentelemetry/api-logs": "0.216.0",
@@ -78,17 +78,17 @@
     "@opentelemetry/sdk-metrics": "2.7.1",
     "@opentelemetry/sdk-trace-base": "2.7.1",
     "@opentelemetry/semantic-conventions": "1.40.0",
-    "@orpc/client": "1.14.0",
-    "@orpc/server": "1.14.0",
+    "@orpc/client": "1.14.1",
+    "@orpc/server": "1.14.1",
     "@reduxjs/toolkit": "2.11.2",
-    "@scalar/hono-api-reference": "0.10.13",
+    "@scalar/hono-api-reference": "0.10.14",
     "@sentry/nextjs": "10.51.0",
     "@shikijs/transformers": "4.0.2",
     "@standard-community/standard-json": "0.3.5",
     "@standard-community/standard-openapi": "0.2.9",
     "@t3-oss/env-nextjs": "0.13.11",
     "@tanstack/react-form": "1.29.1",
-    "@tanstack/react-query": "5.100.8",
+    "@tanstack/react-query": "5.100.9",
     "@vercel/blob": "2.3.3",
     "@vercel/otel": "2.1.2",
     "ag-charts-community": "13.2.1",
@@ -100,15 +100,15 @@
     "class-variance-authority": "0.7.1",
     "clsx": "2.1.1",
     "hast-util-to-jsx-runtime": "2.3.6",
-    "hono": "4.12.16",
+    "hono": "4.12.18",
     "hono-openapi": "1.3.0",
     "json-schema-walker": "3.3.0",
     "ky": "2.0.2",
     "kysely": "0.28.17",
     "lodash": "4.18.1",
     "lucide-react": "1.14.0",
     "marked": "18.0.3",
-    "next": "16.2.4",
+    "next": "16.2.5",
     "pretty-bytes": "7.1.0",
     "primereact": "10.9.7",
     "quansync": "1.0.0",
@@ -123,7 +123,7 @@
     "tarn": "3.0.2",
     "tedious": "19.2.1",
     "type-fest": "5.6.0",
-    "valibot": "1.3.1",
+    "valibot": "1.4.0",
     "zod": "4.4.3"
   },
   "devDependencies": {
@@ -140,7 +140,7 @@
     "@kubb/react": "4.3.1",
     "@standard-schema/spec": "1.1.0",
     "@tailwindcss/postcss": "4.2.4",
-    "@tanstack/react-query-devtools": "5.100.8",
+    "@tanstack/react-query-devtools": "5.100.9",
     "@testing-library/dom": "10.4.1",
     "@testing-library/react": "16.3.2",
     "@testing-library/user-event": "14.6.1",
@@ -152,7 +152,7 @@
     "@typescript-eslint/eslint-plugin": "8.59.2",
     "@typescript-eslint/parser": "8.59.2",
     "@typescript/native-preview": "catalog:",
-    "@valibot/to-json-schema": "1.6.0",
+    "@valibot/to-json-schema": "1.7.0",
     "@vitejs/plugin-react": "6.0.1",
     "@vitest/coverage-v8": "4.1.5",
     "@vitest/ui": "4.1.5",
@@ -161,7 +161,7 @@
     "happy-dom": "20.9.0",
     "npm-run-all2": "8.0.4",
     "openapi-types": "12.1.3",
-    "postcss": "8.5.13",
+    "postcss": "8.5.14",
     "prettier": "3.8.3",
     "rimraf": "6.1.3",
     "tailwindcss": "4.2.4",

examples/apps/nextjs-app/turbo.jsonc

@@ -4,7 +4,7 @@
   "tasks": {
     "build": {
       "env": ["NEXT_BUILD_*", "NEXT_PUBLIC_*", "SENTRY_*"],
-      "outputs": [".next/**", "!.next/cache/**"],
+      "outputs": [".next/**", "!.next/cache/**", "!.next/dev/**"],
       // We rely on tsconfig path aliases to ease starting
       // Only exception @flowblade/sqlduck that is used for env
       "dependsOn": ["@flowblade/sqlduck#build"]