deps: refresh workspace dependencies and CI tooling

[anand-testcompare]

Summary

• refresh all currently outdated workspace dependencies and the root Bun catalog/package manager pin
• update CI/runtime workflow pins to Bun 1.3.11 and move the remaining actions/upload-artifact usage to v7
• replace the overlapping Dependabot dependency backlog with one consolidated maintenance branch

Repo State Reviewed

• Open Dependabot PRs before this branch: deps: bump the app-dependencies group with 2 updates #117, deps: bump @vercel/analytics from 1.6.1 to 2.0.1 #118, ci: bump actions/upload-artifact from 6 to 7 in the github-actions group #119
• Dependabot vulnerability alerts: none open
• Code scanning alerts: existing alerts are fixed on main
• Notable branch state: several stale maintenance/dependabot branches still exist remotely, but the currently actionable dependency work was the three open PRs above

Validation

• bun x ultracite fix
• bun x ultracite check
• bun test packages/backend/convex/manualInferenceLogic.test.ts apps/web/src/lib/capability.test.ts apps/web/src/lib/mappers.test.ts
• bun run build
• cd apps/web && bun run check
• mkdir -p apps/tui/dist && bun build apps/tui/src/index.tsx --compile --outfile apps/tui/dist/cable-intel-tui && ./apps/tui/dist/cable-intel-tui --help
• d3k --headless --no-agent --no-skills --script dev smoke run against http://localhost:5173 with curl -I returning 200 OK and d3k errors empty

Notes

• npm-check-updates reports all workspace/root dependencies current after this change. It still returns no version data for packages/shopify-cable-source/package.json, but that package has no external dependencies to update.

Summary by CodeRabbit

• Chores
  • Updated development dependencies and build tooling across the project to latest compatible versions
  • Upgraded Bun runtime environment and related CI/CD infrastructure for improved stability and performance
  • Enhanced GitHub Actions workflows with updated tool versions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
cable-intel-web	Ready	Preview, Comment	Mar 23, 2026 5:12am

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 1357d5f9-51cd-4210-b59d-9e2d10251d82

📥 Commits

Reviewing files that changed from the base of the PR and between 5b2cc42 and c5ebb03.

⛔ Files ignored due to path filters (1)

• bun.lock is excluded by !**/*.lock

📒 Files selected for processing (8)

• .github/workflows/ci.yml
• .github/workflows/preview-seed.yml
• .github/workflows/tui-release.yml
• apps/tui/package.json
• apps/web/package.json
• package.json
• packages/backend/package.json
• packages/env/package.json

---

📝 Walkthrough

Walkthrough

The PR upgrades the Bun runtime from version 1.3.8 to 1.3.11 across CI/CD workflows and the root package configuration. It also bumps multiple dependency versions throughout the workspace, including core packages, styling libraries, analytics tools, and development utilities, with no changes to application logic or code structure.

Changes

Cohort / File(s)	Summary
CI/CD Workflows .github/workflows/ci.yml, .github/workflows/preview-seed.yml, .github/workflows/tui-release.yml	Updated Bun runtime version from 1.3.8 to 1.3.11 across all workflow steps. Also upgraded actions/upload-artifact from v6 to v7 in the CI workflow.
Root & Tool Dependencies package.json	Bumped convex workspace catalog version from ^1.31.2 to ^1.34.0, @biomejs/biome from 2.4.6 to 2.4.8, turbo from ^2.8.9 to ^2.8.20, ultracite from 7.2.5 to 7.3.2, and updated packageManager Bun version to 1.3.11.
Application Dependencies apps/tui/package.json, apps/web/package.json	Updated @opentui/core and @opentui/solid to ^0.1.90 in TUI app. Upgraded web app dependencies: @vercel/analytics to ^2.0.1, @tabler/icons-svelte to ^3.40.0, @tailwindcss/vite to ^4.2.2, svelte to 5.54.1, tailwindcss to ^4.2.2, and vite to 8.0.1.
Backend Package Dependencies packages/backend/package.json, packages/env/package.json	Increased ai from ^6.0.87 to ^6.0.134, @types/node from ^25.2.3 to ^25.5.0, convex-test from ^0.0.41 to ^0.0.43 in backend. Updated @t3-oss/env-core from ^0.13.1 to ^0.13.11 in env package.

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'deps: refresh workspace dependencies and CI tooling' directly and clearly summarizes the main change: updating dependencies across the workspace and refreshing CI tooling versions.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Browser QA (agent-browser)

• Screenshots artifact: browser-qa
• Browserbase replay: session replay