chore: Bump vulnerable dependencies (#46624)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
  * Updated build tools and development dependencies across the project
  * Upgraded Vue framework and related tooling to latest versions
  * Updated TanStack React Start dependency
* Refined dependency resolution settings to improve build stability and
performance

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

apps/studio/Dockerfile

@@ -31,7 +31,7 @@ WORKDIR /app
 FROM base AS turbo
 COPY . .
 
-RUN pnpm dlx turbo@2.9.3 prune studio --docker
+RUN pnpm dlx turbo@2.9.14 prune studio --docker
 
 # Install dev dependencies (only if needed)
 FROM base AS deps

apps/ui-library/package.json

@@ -75,7 +75,7 @@
     "@supabase/ssr": "catalog:",
     "@supabase/supabase-js": "catalog:",
     "@tanstack/react-router": "^1.168.0",
-    "@tanstack/react-start": "^1.167.0",
+    "@tanstack/react-start": "^1.168.0",
     "@types/common-tags": "^1.8.4",
     "@types/lodash": "^4.17.16",
     "@types/react": "catalog:",

blocks/vue/package.json

@@ -18,9 +18,9 @@
     "clsx": "^2.1.1",
     "h3": "^1.15.10",
     "lucide-vue-next": "^0.562.0",
-    "nuxt": "^4.4.0",
+    "nuxt": "^4.4.6",
     "tailwind-merge": "^3.5.0",
-    "vue": "^3.5.21",
+    "vue": "^3.5.35",
     "vue-router": "^4.5.1"
   },
   "devDependencies": {

package.json

@@ -55,7 +55,7 @@
     "supports-color": "^8.0.0",
     "tailwindcss": "catalog:",
     "tsx": "catalog:",
-    "turbo": "2.9.6",
+    "turbo": "2.9.14",
     "typescript": "catalog:",
     "zod": "catalog:"
   },

pnpm-workspace.yaml

@@ -56,8 +56,6 @@ minimumReleaseAgeExclude:
   - '@supabase/*'
   - '@supabase-labs/*'
   # The following are excluded to fix vulnerablities.
-  - mermaid
-  - '@mermaid-js/parser'
 
 onlyBuiltDependencies:
   - node-pty
@@ -66,9 +64,6 @@ onlyBuiltDependencies:
 overrides:
   '@ardatan/relay-compiler>immutable': ^3.8.3
   '@mapbox/node-pre-gyp>tar': ^7.5.11
-  '@redocly/respect-core>form-data': ^4.0.4
-  '@redocly/respect-core>js-yaml': ^4.1.1
-  '@rollup/plugin-terser>serialize-javascript': ^7.0.5
   cacache>tar: ^7.5.11
   dompurify: ^3.3.2
   esbuild: ^0.25.2
@@ -77,14 +72,11 @@ overrides:
   lodash-es: 'catalog:'
   node-gyp>tar: ^7.5.11
   nodemailer: ^7.0.11
-  payload>undici: ^7.18.2
-  pgsql-parser>libpg-query: ^15.2.0
   postcss: 'catalog:'
+  qs: ^6.15.2
   refractor>prismjs: ^1.30.0
   supabase>tar: ^7.5.11
-  terser-webpack-plugin>serialize-javascript: ^7.0.5
-  tmp: ^0.2.4
-  unhead: ^2.1.13
+  tmp: ^0.2.7
   webpack: ^5.104.1
 
 patchedDependencies: