fix: all npm vulnerabilities

apps/api/package.json

@@ -44,42 +44,42 @@
     "@sweetr/email-templates": "*",
     "@sweetr/graphql-types": "*",
     "basic-auth": "^2.0.1",
-    "bcrypt": "^5.1.1",
-    "bullmq": "^5.2.0",
+    "bcrypt": "^6.0.0",
+    "bullmq": "^5.42.0",
     "date-fns": "^4.0.0",
     "dotenv": "^16.3.1",
     "envsafe": "^2.0.3",
-    "express": "^4.20.0",
+    "express": "^4.22.0",
     "express-rate-limit": "^7.5.0",
     "got": "^11.8.3",
     "graphql": "^16.8.1",
     "graphql-scalars": "^1.22.4",
     "graphql-yoga": "^5.0.0",
     "hashids": "^2.3.0",
-    "ioredis": "^5.4.1",
+    "ioredis": "^5.9.3",
     "jsonwebtoken": "^9.0.2",
     "micromatch": "^4.0.8",
     "octokit": "^3.2.2",
     "pino": "^9.13.1",
     "radash": "^11.0.0",
-    "resend": "^3.4.0",
+    "resend": "^6.0.0",
     "semver": "^7.5.4",
     "stripe": "^16.6.0",
     "utility-types": "^3.10.0",
     "zod": "^3.24.2"
   },
   "devDependencies": {
-    "@graphql-codegen/cli": "^5.0.0",
-    "@graphql-codegen/client-preset": "^4.1.0",
-    "@graphql-codegen/typescript": "^4.0.1",
-    "@graphql-codegen/typescript-resolvers": "^4.0.1",
+    "@graphql-codegen/cli": "^6.0.0",
+    "@graphql-codegen/client-preset": "^5.0.0",
+    "@graphql-codegen/typescript": "^5.0.0",
+    "@graphql-codegen/typescript-resolvers": "^5.0.0",
     "@octokit/webhooks-types": "^7.3.1",
-    "@types/bcrypt": "^5.0.2",
+    "@types/bcrypt": "^6.0.0",
     "@types/micromatch": "^4.0.9",
     "@types/node": "^20.9.0",
     "@typescript-eslint/eslint-plugin": "^8.26.0",
     "cross-env": "^10.1.0",
-    "pino-pretty": "^10.2.3",
+    "pino-pretty": "^13.0.0",
     "prisma": "^5.5.2",
     "tsx": "^4.15.9",
     "typescript": "^5.2.2",

apps/api/src/app/auth/services/auth.service.ts

@@ -5,7 +5,7 @@ import {
   WorkspaceMembership,
   InstallationTargetType,
 } from "@prisma/client";
-import jwt from "jsonwebtoken";
+import jwt, { type SignOptions } from "jsonwebtoken";
 import { config } from "../../../config";
 import { getBypassRlsPrisma, getPrisma } from "../../../prisma";
 import * as github from "../providers/github/github.provider";
@@ -62,11 +62,9 @@ export const getGithubLoginUrl = (redirectTo?: string) => {
 };
 
 const signJwtToken = (payload: JWTPayload): Token => {
-  const expiresIn = config.auth.jwt.expiresIn;
-
   const accessToken = jwt.sign(payload, config.auth.jwt.secret, {
-    expiresIn,
-  });
+    expiresIn: config.auth.jwt.expiresIn,
+  } as SignOptions);
 
   return {
     accessToken,

apps/api/src/app/billing/resolvers/mutations/login-to-stripe.mutation.ts

@@ -15,6 +15,6 @@ export const loginToStripeMutation = createMutationResolver({
 
     const session = await createStripeCustomerPortalSession(input.workspaceId);
 
-    return session?.url;
+    return session?.url || null;
   },
 });

apps/api/src/app/email/workers/send-email.worker.ts

@@ -16,7 +16,7 @@ interface SendEmailJob {
 export const sendEmailWorker = createWorker(
   SweetQueue.SEND_EMAIL,
   async (job: Job<SendEmailJob>) => {
-    const template = renderEmailTemplate(
+    const template = await renderEmailTemplate(
       emailTemplates[job.data.template.type],
       job.data.template.props
     );

apps/api/src/app/sync-batch/services/sync-batch.service.ts

@@ -221,6 +221,7 @@ const sendSyncCompleteEmail = async (workspaceId: number) => {
       to: member.user.email,
       subject: "Sync complete.",
       template: {
+        id: "initial-sync-complete",
         type: emailTemplate,
         props: {
           username: member.name,

apps/api/src/lib/email.ts

@@ -1,11 +1,11 @@
-import { Resend } from "resend";
+import { CreateEmailOptions, CreateEmailRequestOptions, Resend } from "resend";
 import { DataAccessException } from "../app/errors/exceptions/data-access.exception";
 import { env } from "../env";
 
 let resendClient: Resend | null;
 
-export type EmailPayload = Parameters<Resend["emails"]["send"]>[0];
-export type EmailOptions = Parameters<Resend["emails"]["send"]>[1];
+export type EmailPayload = CreateEmailOptions;
+export type EmailOptions = CreateEmailRequestOptions;
 
 export const getEmailClient = (): Resend => {
   if (!env.RESEND_API_KEY) {

apps/api/src/prisma.ts

@@ -90,5 +90,5 @@ export const take = (limit: number = 50) => {
 export const jsonObject = <T extends Record<string, any>>(
   value: string | object | JsonValue
 ): T => {
-  return isObject(value) ? value : JSON.parse(value as string);
+  return isObject(value) ? (value as T) : (JSON.parse(value as string) as T);
 };

apps/web/package.json

@@ -25,7 +25,7 @@
     "@mantine/nprogress": "^8.3.0",
     "@mantine/spotlight": "^8.3.0",
     "@sentry/react": "^9.5.0",
-    "@sentry/vite-plugin": "^3.2.2",
+    "@sentry/vite-plugin": "^4.0.0",
     "@sweetr/graphql-types": "*",
     "@tabler/icons": "^3.31.0",
     "@tabler/icons-react": "^3.31.0",
@@ -42,7 +42,7 @@
     "react": "^18.3.0",
     "react-canvas-confetti": "^1.4.0",
     "react-dom": "^18.3.0",
-    "react-router-dom": "^6.17.0",
+    "react-router-dom": "^7.0.0",
     "zod": "^3.24.2",
     "zustand": "^5.0.3"
   },
@@ -66,7 +66,7 @@
     "postcss-preset-mantine": "^1.9.0",
     "postcss-simple-vars": "^7.0.1",
     "typescript": "^5.2.2",
-    "vite": "^6.3.6",
+    "vite": "^7.0.0",
     "vite-plugin-eslint": "^1.8.1"
   },
   "packageManager": "npm@8.5.5"