chore: Bump vulnerable deps (#40675)

* Bump @nuxt/devtools.

* Bump tar.

* Bump js-yaml.

* Bump ai.

* Bump js-yaml@3.

* Deduplicate nitropack.

* Deduplicate @aws libs.

apps/docs/package.json

@@ -73,7 +73,7 @@
     "hast-util-to-html": "^9.0.0",
     "icons": "workspace:*",
     "isbot": "^5.1.2",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^3.14.2",
     "jsrsasign": "^11.0.0",
     "katex": "^0.16.21",
     "libpg-query": "15.2.0",

apps/studio/package.json

@@ -30,7 +30,7 @@
     "@ai-sdk/openai": "2.0.32",
     "@ai-sdk/provider": "^2.0.0",
     "@ai-sdk/provider-utils": "^3.0.0",
-    "@ai-sdk/react": "2.0.45",
+    "@ai-sdk/react": "2.0.52",
     "@aws-sdk/credential-providers": "^3.804.0",
     "@dagrejs/dagre": "^1.0.4",
     "@dnd-kit/core": "^6.1.0",
@@ -73,7 +73,7 @@
     "@vercel/functions": "^2.1.0",
     "@vitejs/plugin-react": "^4.3.4",
     "@zip.js/zip.js": "^2.7.29",
-    "ai": "5.0.45",
+    "ai": "5.0.52",
     "ai-commands": "workspace:*",
     "awesome-debounce-promise": "^2.1.0",
     "common": "workspace:*",

package.json

@@ -41,7 +41,7 @@
     "knip": "pnpx knip@~5.50.0"
   },
   "devDependencies": {
-    "@aws-sdk/client-secrets-manager": "^3.410.0",
+    "@aws-sdk/client-secrets-manager": "^3.823.0",
     "@types/node": "catalog:",
     "eslint": "^9.0.0",
     "prettier": "3.2.4",

packages/ai-commands/package.json

@@ -14,7 +14,7 @@
   "dependencies": {
     "@serafin/schema-builder": "^0.18.5",
     "@supabase/supabase-js": "catalog:",
-    "ai": "^5.0.0",
+    "ai": "5.0.52",
     "common-tags": "^1.8.2",
     "config": "workspace:*",
     "js-tiktoken": "^1.0.10",

pnpm-workspace.yaml

@@ -43,6 +43,7 @@ minimumReleaseAgeExclude:
   - '@ai-sdk/*'
   - '@supabase/*'
   - ai
+  - js-yaml
   - supabase
   - iceberg-js
 
@@ -50,12 +51,14 @@ onlyBuiltDependencies:
   - supabase
 
 overrides:
+  '@eslint/eslintrc>js-yaml': ^4.1.1
   '@react-router/dev>vite-node': 3.2.4
   '@redocly/respect-core>form-data': ^4.0.4
-  '@supabase/supabase-js>@supabase/auth-js': 'catalog:'
+  '@redocly/respect-core>js-yaml': ^4.1.1
   '@tanstack/directive-functions-plugin>vite': 'catalog:'
   '@tanstack/react-start-plugin>vite': 'catalog:'
   'vinxi>vite': 'catalog:'
   'refractor>prismjs': ^1.30.0
   esbuild: ^0.25.2
+  tar: ^7.0.0
   tmp: ^0.2.4