[security](deps): Bump framer-motion from 12.23.26 to 12.38.0

FORJAMIE.md

@@ -16,7 +16,7 @@
 ## Status
 
 <!-- STATUS_START -->
-**Last updated:** 2026-05-03
+**Last updated:** 2026-05-05
 **Production status:** IN_PROGRESS overall; Agent Design Prepare north-star plan is REVIEW_GREEN
 **Overall health:** Yellow overall; Green for the Agent Design Prepare plan lane
 
@@ -215,6 +215,10 @@ See also: `~/.codex/instructions/Learnings.md`
 
 ## Recent changes
 
+### 2026-05-05
+
+- **Framer Motion widget manifest refresh**: refreshed the tracked widget runtime manifests on the Dependabot `framer-motion` update branch after installing from the branch lockfile. The dependency update changes the built `pizzaz-shop` and `solar-system` widget bundle hashes, so `packages/widgets/src/sdk/generated/widget-manifest.js` and `packages/cloudflare-template/src/worker/widget-manifest.generated.ts` now match the generated-source freshness gate used by CI.
+
 ### 2026-05-03
 
 - **Unslopify quality evidence refresh**: ran the `unslopify` cleanup audit path across the current repo-owned cleanup gates, refreshed the Apps SDK upstream alignment stamp from a passing `pnpm test:drift` run, and generated the current weekly quality-debt report. The report remains warn-first: it is release-owner evidence, not a new hard-fail gate.

packages/cloudflare-template/src/worker/widget-manifest.generated.ts

@@ -114,8 +114,8 @@ export const widgetManifest = {
   },
   "pizzaz-shop": {
     name: "pizzaz-shop",
-    uri: "pizzaz-shop.4dae698d",
-    hash: "4dae698d",
+    uri: "pizzaz-shop.66b086d8",
+    hash: "66b086d8",
     originalPath: "src/widgets/pizzaz/pizzaz-shop/index.html",
   },
   "pizzaz-table": {
@@ -126,8 +126,8 @@ export const widgetManifest = {
   },
   "solar-system": {
     name: "solar-system",
-    uri: "solar-system.950bcdce",
-    hash: "950bcdce",
+    uri: "solar-system.4a7e7872",
+    hash: "4a7e7872",
     originalPath: "src/widgets/science/solar-system/index.html",
   },
   "search-results": {

packages/widgets/package.json

@@ -17,7 +17,7 @@
     "@react-three/fiber": "9.5.0",
     "@react-three/postprocessing": "3.0.4",
     "embla-carousel-react": "8.6.0",
-    "framer-motion": "12.23.26",
+    "framer-motion": "12.38.0",
     "lucide-react": "0.562.0",
     "mapbox-gl": "^3.6.2",
     "react": "^19.2.5",

packages/widgets/src/sdk/generated/widget-manifest.js

@@ -113,8 +113,8 @@ export const widgetManifest = {
   },
   "pizzaz-shop": {
     "name": "pizzaz-shop",
-    "uri": "pizzaz-shop.4dae698d",
-    "hash": "4dae698d",
+    "uri": "pizzaz-shop.66b086d8",
+    "hash": "66b086d8",
     "originalPath": "src/widgets/pizzaz/pizzaz-shop/index.html"
   },
   "pizzaz-table": {
@@ -125,8 +125,8 @@ export const widgetManifest = {
   },
   "solar-system": {
     "name": "solar-system",
-    "uri": "solar-system.950bcdce",
-    "hash": "950bcdce",
+    "uri": "solar-system.4a7e7872",
+    "hash": "4a7e7872",
     "originalPath": "src/widgets/science/solar-system/index.html"
   },
   "search-results": {