Update non-dev dependencies to patch security advisories

[kylemh]

What: Every production dependency was behind its latest release, and pnpm audit --prod flagged 32 advisories (14 high, 16 moderate) — direct hits on axios and next plus a pile of vulnerable transitives (sharp, postcss, fast-uri, brace-expansion, valibot).

Why: The direct deps hadn't been bumped to their patched releases, and those transitives had no parent bump pulling them forward, so they lingered at vulnerable versions in the lockfile.

Fix: Bumped all non-dev dependencies to latest, respecting the repo's 3-day minimumReleaseAge cooldown — next sits at 16.2.11, the oldest release that satisfies the advisory (>=16.2.11), since 16.2.12's @next/swc binaries were still inside the cooldown window. Added scoped pnpm-workspace.yamloverrides to force the remaining transitives to their patched versions. Adapted code to two majors: cva beta.8 (the twMerge wrapper in src/lib/utils/index.ts now preserves the newly-required config property) and zod v4 (z.literal(true, { errorMap }) → { error } in RegistrationForm, and the deprecated ZodTypeAny → ZodType<Record<string, unknown>, Record<string, unknown>> in MultiStepForm so @hookform/resolvers v5's stricter FieldValues constraint is satisfied). Snapshots refreshed for base-ui's shifted id counter. pnpm audit --prod drops from 32 to a single low-severity, dev-server-only esbuild advisory left in place to avoid destabilizing the vite toolchain.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
operation-code	Ready	Preview, Comment	Jul 28, 2026 7:32pm
storybook	Ready	Preview, Comment	Jul 28, 2026 7:32pm

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	51.86%	348 / 671
🔵	Statements	52.79%	368 / 697
🔵	Functions	56.55%	164 / 290
🔵	Branches	65.65%	195 / 297

File Coverage

File	Stmts	Branches	Functions	Lines	Uncovered Lines
Changed Files
src/components/Form/MultiStepForm.tsx	94.87%	100%	90.9%	94.11%	169-170
src/components/Forms/RegistrationForm/RegistrationForm.tsx	89.28%	85.71%	85.71%	89.28%	91, 241, 270
src/lib/utils/index.ts	100%	100%	100%	100%

Generated in workflow #124 for commit b9b8bf6 by the Vitest Coverage Report Action