chore(deps): consolidate minor and patch bumps

[khaira777]

Summary

Consolidates routine and security dependency updates across 4 Dependabot PRs (#1104, #1051, #1049, #1048), plus aligns the workflow action SHA pins in tests/release-config.test.ts.

Consolidated Dependabot PRs & Updates

• chore(deps): bump the minor-and-patch group across 1 directory with 9 updates #1104 (Root runtime/build dependencies):

  • express: ^5.2.1 -> ^5.3.0
  • express-rate-limit: ^8.7.0 -> ^8.7.1
  • @googleapis/drive: ^26.0.1 -> ^26.0.2
  • libphonenumber-js: ^1.13.14 -> ^1.13.15
  • @electron/rebuild: ^4.2.0 -> ^4.2.1
  • @formatjs/icu-messageformat-parser: ^3.5.20 -> ^3.5.21
  • @types/node: ^26.6.4 -> ^26.6.5
  • electron: ^44.5.1 -> ^44.7.0
  • js-yaml: ^5.4.2 -> ^5.4.3

• chore(deps): bump lint-staged from 16.4.0 to 17.6.0 #1051 (Root devDependencies):

  • lint-staged: 16.4.0 -> 17.6.0

• chore(deps): bump the minor-and-patch group in /frontend with 9 updates #1049 (Frontend dependencies in frontend/package.json):

  • libphonenumber-js: ^1.13.14 -> ^1.13.15
  • lucide-react: ^1.49.0 -> ^1.53.0
  • next: 16.3.8 -> 16.4.0
  • radix-ui: ^1.6.7 -> ^1.7.0
  • react-easy-crop: ^6.2.3 -> ^6.2.4
  • @playwright/test: ^1.63.0 -> ^1.64.0
  • playwright: 1.63.0 -> 1.64.0
  • postcss: 8.5.28 -> 8.5.29
  • shadcn: ^4.21.1 -> ^4.21.4

• chore(ci): bump the minor-and-patch group across 1 directory with 4 updates #1048 (GitHub Actions workflow files under .github/workflows/):

  • actions/setup-node: v7.0.0 (820762786026740c76f36085b0efc47a31fe5020) -> v7.1.0 (949feb2413d6458794dcd2491c4babbbce0c15c1)
  • actions/upload-artifact: v7.0.1 (043fb46d1a93c77aae656e7c1c64a875d1fc6a0a) -> v7.0.2 (cf430e030ddbb5b0abf93d22962f4752f3646cd9)
  • ruby/setup-ruby: v1.327.0 (14594264cd68ce8a2345dd349bc3d138a4ef85c8) -> v1.328.0 (e81a8fa391b11a595c1b7ed84177cc0fe02faf83)
  • actions/download-artifact: v8.0.1 (3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c) -> v8.0.2 (9000827ccba6bdab643e8b6fd33ac0654aef8333)

• Release Config Test Pins (tests/release-config.test.ts):

  • Updated actions/upload-artifact expected pin to cf430e030ddbb5b0abf93d22962f4752f3646cd9
  • Updated actions/download-artifact expected pin to 9000827ccba6bdab643e8b6fd33ac0654aef8333

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: FreeOpenSourcePOS/FloCafe/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: e4183337-f2ee-49c4-a7b0-2d315c2b6fd2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}