[RustedAperture]

Stacked on #156. Upgrades the remaining major-version npm dependencies.

Landed

• dotenv 17 → 18 (root). Removed features (vault, preloading) aren't used.
• vitest 4 → 5.0.5 (root + web). 5.1.0 is blocked by the repo's min-release-age=7. Works with vite 8.3 and happy-dom 21.
  • clearMocks now defaults to true. This exposed a broken /set slot test: it had been reading a previous test's call. Its mock data used the wrong shape (default_images, JSON-string images), so I fixed it.
  • Vitest 5 no longer reads jest.Matchers, so the web setup now imports @testing-library/jest-dom/vitest to keep the matcher types.
• @testing-library/jest-dom 6 → 7 (web). Its new required peer, @testing-library/dom 10, is already installed.
• framer-motion 12 → 14.7.1 (web). 14.9.x is blocked by min-release-age=7. The breaking changes are internal APIs and @emotion/is-prop-valid, which we don't use.

Skipped

• @hookform/resolvers 5 → 7. Every 7.x release (the first was 2026-10-31) is under the repo's 7-day min-release-age. It can land after 2026-11-07, and the code needs no changes since we only use the zod resolver.
• typescript 6 → 7. typescript-eslint (including canary, and the copy pulled in by eslint-config-next) requires typescript >=4.8.4 <6.1.0. TS 7's package also has no stable compiler JS API yet (only unstable/* entries). Revisit once typescript-eslint supports TS 7.
• drizzle-orm / drizzle-kit: already on 1.0.0-rc, which is newer than latest.

Verification

npm ci (npm 11.16, same as CI), lint, lint:web, test:ci, test:web:ci, build and format:check all exit 0. There's a single copy each of react, react-dom, @types/react and @types/react-dom.

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge, with the previous lockfile mismatch fixed and no new actionable issues found.

Summary

Upgrades dotenv, vitest, @testing-library/jest-dom, and framer-motion.

• Server and web tests now run on Vitest 5.
• Server configuration now uses dotenv 18.
• The web app's animation components use Framer Motion 14.

This review checked source and configuration; it did not run installs, builds, tests, or browser checks.

_{Reviews (2) · Last reviewed commit: "chore(deps): upgrade framer-motion to v1..." · Reviewed by Greptile}