chore: update and pin all dependencies

.env.example

@@ -166,7 +166,8 @@ BILLING_ENABLED=false
 # ============================================
 # Server Configuration
 # ============================================
-NODE_ENV=production
+# Avoid setting NODE_ENV here.
+# Setting NODE_ENV=production causes conflicts with `make dev`.
 # PORT=3000
 # HOST=0.0.0.0
 # LOG_LEVEL=info

.github/workflows/ci-cli.yml

@@ -49,9 +49,9 @@ jobs:
           go-version-file: packages/cli/go.mod
 
       - name: Run golangci-lint
-        uses: golangci/golangci-lint-action@v4
+        uses: golangci/golangci-lint-action@v7
         with:
-          version: latest
+          version: v2.11.4
           working-directory: packages/cli
 
   build:

.github/workflows/ci-crypto.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.24"
+          go-version-file: packages/crypto/go.mod
 
       - name: Download dependencies
         run: go mod download

package.json

@@ -14,8 +14,8 @@
     "format:check": "prettier --check \"packages/*/src/**/*.{ts,tsx}\""
   },
   "devDependencies": {
-    "prettier": "^3.7.4",
-    "turbo": "^2.5.4"
+    "prettier": "3.8.1",
+    "turbo": "2.8.20"
   },
   "packageManager": "pnpm@10.11.0",
   "engines": {
@@ -25,7 +25,8 @@
     "overrides": {
       "qs": ">=6.14.1",
       "esbuild": ">=0.25.0",
-      "hono": ">=4.11.4"
+      "hono": ">=4.11.4",
+      "serialize-javascript": ">=7.0.3"
     }
   }
 }

packages/backend/package.json

@@ -31,42 +31,42 @@
   "author": "Nicolas Ritouet",
   "license": "MIT",
   "dependencies": {
-    "@fastify/cookie": "^11.0.2",
-    "@fastify/cors": "^11.1.0",
-    "@fastify/formbody": "^8.0.2",
-    "@fastify/helmet": "^13.0.2",
+    "@fastify/cookie": "11.0.2",
+    "@fastify/cors": "11.2.0",
+    "@fastify/formbody": "8.0.2",
+    "@fastify/helmet": "13.0.2",
     "@fastify/rate-limit": "10.3.0",
-    "@grpc/grpc-js": "^1.14.1",
-    "@grpc/proto-loader": "^0.8.0",
-    "@sentry/node": "^10.30.0",
-    "dotenv": "^16.3.1",
-    "drizzle-orm": "^0.44.7",
-    "fastify": "^5.6.2",
-    "jsonwebtoken": "^9.0.3",
-    "pino": "^10.1.0",
-    "postgres": "^3.4.3",
-    "posthog-node": "^3.5.0",
-    "resend": "^6.5.2",
-    "stripe": "^20.1.0",
-    "zod": "^3.22.4"
+    "@grpc/grpc-js": "1.14.3",
+    "@grpc/proto-loader": "0.8.0",
+    "@sentry/node": "10.45.0",
+    "dotenv": "16.6.1",
+    "drizzle-orm": "0.44.7",
+    "fastify": "5.8.4",
+    "jsonwebtoken": "9.0.3",
+    "pino": "10.3.1",
+    "postgres": "3.4.8",
+    "posthog-node": "3.6.3",
+    "resend": "6.9.4",
+    "stripe": "20.4.1",
+    "zod": "3.25.76"
   },
   "devDependencies": {
-    "@eslint/js": "^9.39.2",
-    "@types/jsonwebtoken": "^9.0.10",
-    "@types/node": "^20.10.0",
-    "@vitest/coverage-v8": "^4.0.14",
-    "drizzle-kit": "^0.31.8",
-    "eslint": "^9.39.2",
-    "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-security": "^3.0.1",
-    "husky": "^9.1.7",
-    "lint-staged": "^16.2.7",
-    "pino-pretty": "^13.1.2",
-    "prettier": "^3.7.4",
-    "tsx": "^4.7.0",
-    "typescript": "^5.3.3",
-    "typescript-eslint": "^8.51.0",
-    "vitest": "^4.0.14"
+    "@eslint/js": "9.39.4",
+    "@types/jsonwebtoken": "9.0.10",
+    "@types/node": "20.19.37",
+    "@vitest/coverage-v8": "4.1.1",
+    "drizzle-kit": "0.31.10",
+    "eslint": "9.39.4",
+    "eslint-config-prettier": "10.1.8",
+    "eslint-plugin-security": "3.0.1",
+    "husky": "9.1.7",
+    "lint-staged": "16.4.0",
+    "pino-pretty": "13.1.3",
+    "prettier": "3.8.1",
+    "tsx": "4.21.0",
+    "typescript": "5.9.3",
+    "typescript-eslint": "8.57.2",
+    "vitest": "4.1.1"
   },
   "engines": {
     "node": ">=22.0.0"

packages/cli/.golangci.yml

@@ -1,35 +1,36 @@
+version: "2"
+
 run:
   timeout: 5m
 
 linters:
   enable:
     - errcheck
-    - gosimple
     - govet
     - ineffassign
     - staticcheck
     - unused
-
-linters-settings:
-  errcheck:
-    # Ignore specific functions where error return is intentionally not checked
-    exclude-functions:
-      - (io.Writer).Write
-      - (*encoding/json.Encoder).Encode
-      - (*encoding/json.Decoder).Decode
-      - fmt.Fprintf
-      - fmt.Printf
-      - fmt.Print
-      - fmt.Println
-
-issues:
-  # Exclude test files from certain linters
-  exclude-rules:
-    - path: _test\.go
-      linters:
-        - errcheck
-        - ineffassign
-        - staticcheck
-    - path: mock\.go
-      linters:
-        - errcheck
+  settings:
+    errcheck:
+      # Ignore specific functions where error return is intentionally not checked
+      exclude-functions:
+        - (io.Writer).Write
+        - (*encoding/json.Encoder).Encode
+        - (*encoding/json.Decoder).Decode
+        - fmt.Fprintf
+        - fmt.Printf
+        - fmt.Print
+        - fmt.Println
+        - (*github.com/fatih/color.Color).Printf
+        - (io.ReadCloser).Close
+        - (*os.File).Close
+  exclusions:
+    rules:
+      - path: _test\.go
+        linters:
+          - errcheck
+          - ineffassign
+          - staticcheck
+      - path: mock\.go
+        linters:
+          - errcheck

packages/cli/go.mod

@@ -1,45 +1,48 @@
 module github.com/keywaysh/cli
 
-go 1.24.0
+go 1.25.0
 
 require (
-	github.com/charmbracelet/huh v0.6.0
-	github.com/charmbracelet/huh/spinner v0.0.0-20251215014908-6f7d32faaff3
-	github.com/fatih/color v1.18.0
+	github.com/charmbracelet/huh v1.0.0
+	github.com/charmbracelet/huh/spinner v0.0.0-20260223110133-9dc45e34a40b
+	github.com/fatih/color v1.19.0
 	github.com/google/uuid v1.6.0
 	github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c
-	github.com/posthog/posthog-go v1.6.13
-	github.com/spf13/cobra v1.8.1
-	golang.org/x/text v0.18.0
+	github.com/posthog/posthog-go v1.11.1
+	github.com/spf13/cobra v1.10.2
+	golang.org/x/text v0.35.0
 )
 
 require (
 	github.com/atotto/clipboard v0.1.4 // indirect
 	github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
-	github.com/catppuccin/go v0.2.0 // indirect
-	github.com/charmbracelet/bubbles v0.21.0 // indirect
+	github.com/catppuccin/go v0.3.0 // indirect
+	github.com/charmbracelet/bubbles v1.0.0 // indirect
 	github.com/charmbracelet/bubbletea v1.3.10 // indirect
-	github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc // indirect
+	github.com/charmbracelet/colorprofile v0.4.3 // indirect
 	github.com/charmbracelet/lipgloss v1.1.0 // indirect
-	github.com/charmbracelet/x/ansi v0.10.1 // indirect
-	github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd // indirect
-	github.com/charmbracelet/x/exp/strings v0.0.0-20240722160745-212f7b056ed0 // indirect
-	github.com/charmbracelet/x/term v0.2.1 // indirect
+	github.com/charmbracelet/x/ansi v0.11.6 // indirect
+	github.com/charmbracelet/x/cellbuf v0.0.15 // indirect
+	github.com/charmbracelet/x/exp/strings v0.1.0 // indirect
+	github.com/charmbracelet/x/term v0.2.2 // indirect
+	github.com/clipperhouse/displaywidth v0.11.0 // indirect
+	github.com/clipperhouse/uax29/v2 v2.7.0 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
 	github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f // indirect
+	github.com/goccy/go-json v0.10.6 // indirect
 	github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
-	github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
-	github.com/mattn/go-colorable v0.1.13 // indirect
+	github.com/lucasb-eyer/go-colorful v1.3.0 // indirect
+	github.com/mattn/go-colorable v0.1.14 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/mattn/go-localereader v0.0.1 // indirect
-	github.com/mattn/go-runewidth v0.0.16 // indirect
+	github.com/mattn/go-runewidth v0.0.21 // indirect
 	github.com/mitchellh/hashstructure/v2 v2.0.2 // indirect
 	github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 // indirect
 	github.com/muesli/cancelreader v0.2.2 // indirect
 	github.com/muesli/termenv v0.16.0 // indirect
 	github.com/rivo/uniseg v0.4.7 // indirect
-	github.com/spf13/pflag v1.0.5 // indirect
+	github.com/spf13/pflag v1.0.10 // indirect
 	github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
-	golang.org/x/sys v0.36.0 // indirect
+	golang.org/x/sys v0.42.0 // indirect
 )