chore(deps): bump all dependabot dependencies

Production npm deps:
- better-sqlite3 12.5.0 to 12.8.0
- cors 2.8.5 to 2.8.6
- zod 4.2.1 to 4.3.6
- @tailwindcss/vite + tailwindcss 4.1.18 to 4.2.1
- react + react-dom 19.0.0 to 19.2.4
- react-router-dom 7.12.0 to 7.13.1
- @tauri-apps/api 2.0.0 to 2.10.1
- @tauri-apps/plugin-dialog 2.5.0 to 2.6.0
- @tauri-apps/plugin-shell 2.3.4 to 2.3.5
- @tauri-apps/plugin-updater 2.0.0 to 2.10.0
- @tanstack/react-query 5.62.7 to 5.90.21
- @tanstack/react-virtual 3.13.18 to 3.13.23
- lucide-react 0.562.0 to 0.577.0
- react-day-picker 9.12.0 to 9.14.0
- react-dropzone 14.3.5 to 14.4.1
- react-window 2.2.3 to 2.2.7
- @types/react-window 1.8.8 to 2.0.0 (now a stub; types bundled in react-window)
- recharts 3.6.0 to 3.8.0
- tailwind-merge 3.4.0 to 3.5.0
- @journeyapps/wa-sqlite 1.4.1 to 1.5.0

Cargo deps (via cargo update):
- tauri-plugin-fs, tauri-plugin-dialog, tauri-plugin-shell,
  tauri-plugin-updater, serde_json, and many transitive deps updated

GitHub Actions:
- actions/upload-pages-artifact 3 to 4
- codecov/codecov-action 4 to 5
- github/codeql-action 3 to 4
- actions/upload-artifact 4 to 7
- actions/configure-pages 4 to 5

Fix recharts 3.8.0 type changes:
- Cast entry.dataKey to string in tooltip renders (DataKey now includes fn type)
- Update Tooltip formatter type to use value inference (ValueType broadened)

Closes #4, #5, #6, #7, #8, #9, #10, #11, #12, #13, #14, #15, #16

---
Developed by Claude Sonnet 4.6

Author: houke

.github/workflows/codeql-analysis.yml

@@ -34,17 +34,17 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           # Use default queries plus security-extended
           queries: security-extended,security-and-quality
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
         with:
           category: '/language:${{ matrix.language }}'
 

.github/workflows/deploy-pages.yml

@@ -60,10 +60,10 @@ jobs:
         # No VITE_BASE_URL needed - custom domain (fluxby.app) serves from root /
 
       - name: Setup Pages
-        uses: actions/configure-pages@v4
+        uses: actions/configure-pages@v5
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v4
         with:
           path: 'dist'
 

.github/workflows/e2e-tests.yml

@@ -43,15 +43,15 @@ jobs:
           CI: true
 
       - name: Upload Playwright report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: failure()
         with:
           name: playwright-report
           path: playwright-report/
           retention-days: 7
 
       - name: Upload test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: failure()
         with:
           name: test-results

.github/workflows/fluxby-pr-check.yml

@@ -41,7 +41,7 @@ jobs:
         run: npm run test:coverage
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: ./coverage/coverage-final.json
@@ -122,6 +122,4 @@ jobs:
 
       - name: Build Tauri app (debug)
         working-directory: apps/tauri
-        run: npx tauri build --debug
-        env:
-          TAURI_SIGNING_PRIVATE_KEY: ''
+        run: npx tauri build --debug --bundles none

.github/workflows/fluxby-release.yml

@@ -187,7 +187,7 @@ jobs:
           } >> $GITHUB_OUTPUT
 
       - name: Upload changelog artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: changelog
           path: changelog_body.md

apps/api/package.json

@@ -13,15 +13,15 @@
   },
   "dependencies": {
     "@fluxby/shared": "*",
-    "better-sqlite3": "^12.5.0",
-    "cors": "^2.8.5",
+    "better-sqlite3": "^12.8.0",
+    "cors": "^2.8.6",
     "express": "^5.2.1",
     "express-rate-limit": "^8.3.1",
     "multer": "^2.0.2",
     "papaparse": "^5.4.1",
     "swagger-jsdoc": "^6.2.1",
     "swagger-ui-express": "^5.0.1",
-    "zod": "^4.2.1"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.12",

apps/landing/package.json

@@ -12,11 +12,11 @@
   "dependencies": {
     "@fluxby/shared": "*",
     "@tailwindcss/typography": "^0.5.19",
-    "@tailwindcss/vite": "^4.1.18",
-    "react": "^19.0.0",
-    "react-dom": "^19.0.0",
-    "react-router-dom": "^7.12.0",
-    "tailwindcss": "^4.1.18"
+    "@tailwindcss/vite": "^4.2.1",
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "react-router-dom": "^7.13.1",
+    "tailwindcss": "^4.2.1"
   },
   "devDependencies": {
     "@types/react": "^19.0.1",