chore: update dependencies and improve CI workflow

[Perdolique]

What's Up, Homies? 😎👍

This PR packs some fresh updates to our dependencies and streamlines our CI workflow setup 💨

Package Upgrades 📦

Major updates rolling through:

• Vue ecosystem: Bumped to v3.5.25 with all the related plugins synced up 🍏
• Vite: Jumped from v7.2.2 to v7.2.4 for better performance ⚡
• Dev tooling: Updated devtools-core and devtools-kit to v8.0.5 🔧
• Icon collections: Fresh batch with v1.0.621 🎨
• Browser mappings: Latest compatibility data for caniuse-lite and electron-to-chromium 🌐

Plus a bunch of minor updates across the board keeping everything tight and compatible 💪

Cleanup Work 🔥

Removed some duplicate and outdated packages:

• Consolidated duplicate versions of knitwork, unplugin, unstorage, and youch
• Dropped outdated @rolldown/pluginutils v1.0.0-beta.29

CI Workflow Improvements ♻️

Merged the separate database migration workflows into one universal workflow that:

• Uses dynamic environment selection (staging for PRs, production for master) 🎯
• Added database seeding step for staging environment to keep test data fresh ✅
• Switched to reusable pnpm setup action for cleaner workflow code 🔧

Testing

All packages updated successfully, no breaking changes detected. CI workflows validated and ready to roll 🚀

[gemini-code-assist]

Summary of Changes

Hello @Perdolique, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request focuses on maintaining the project's health and efficiency by updating various dependencies to their latest stable versions and enhancing the continuous integration pipeline. These changes ensure better performance, improved compatibility with modern web standards, and a more robust and streamlined development workflow.

Highlights

• Core Dependency Upgrades: Updated the Vue ecosystem to v3.5.25, Vite to v7.2.4, and dev tooling components like devtools-core and devtools-kit to v8.0.5, ensuring the project benefits from the latest features and performance improvements.
• Browser Compatibility Data Updates: Refreshed browser compatibility data by updating caniuse-lite and electron-to-chromium to their latest versions, enhancing cross-browser consistency and support.
• CI Workflow Streamlining: Consolidated separate database migration workflows into a single, universal CI workflow. This new workflow features dynamic environment selection (staging for PRs, production for master), includes a database seeding step for staging, and utilizes a reusable pnpm setup action for cleaner, more efficient CI code.
• Package Cleanup and Optimization: Performed a cleanup of package dependencies by removing duplicate and outdated versions of packages such as knitwork, unplugin, unstorage, youch, and @rolldown/pluginutils, leading to a leaner and more manageable dependency tree.

Ignored Files

• Ignored by pattern: .github/workflows/** (2)
  • .github/workflows/database-migration-production.yml
  • .github/workflows/database-migration.yml

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[github-actions]

🎉 Deployed to Cloudflare!

• Commit: 4b5223d8e98d165fadff62cf9bddc38eec6e75d6
• Preview URL: https://e89f744d-perd-staging.perd.workers.dev

[Copilot]

Pull request overview

This PR updates various dependencies across the Vue and Vite ecosystems, modernizes browser compatibility data, removes duplicate package versions, and consolidates database migration workflows into a single unified workflow with dynamic environment selection.

• Dependencies: Updated Vue to 3.5.25, Vite to 7.2.4, devtools packages to 8.0.5, icon collections to 1.0.621, and various browser mapping packages
• Cleanup: Removed duplicate versions of knitwork, unplugin, unstorage, youch, and outdated @rolldown/pluginutils
• CI Workflow: Merged staging and production migration workflows into one with conditional environment selection and database seeding for PRs

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File	Description
package.json	Updated Vue to 3.5.25 and pnpm to 10.23.0
pnpm-lock.yaml	Comprehensive dependency updates including Vue ecosystem, Vite, devtools, icons, and browser mappings; removed duplicate package versions
.github/workflows/database-migration.yml	Consolidated workflow with dynamic environment selection (staging for PRs, production for master) and conditional database seeding
.github/workflows/database-migration-production.yml	Removed in favor of consolidated workflow

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

Comments suppressed due to low confidence (2)

.github/workflows/database-migration.yml:23

• The actions/checkout@v6 does not exist. The latest major version of the checkout action is v4. Please update this to use actions/checkout@v4 instead.
  .github/workflows/database-migration.yml:15
• The trigger configuration has been updated to include both pull_request and push events, but the paths filter that was previously present has been removed. This means the workflow will now run for all changes on PRs and pushes to master, not just when database migration files or this workflow file are modified. This could lead to unnecessary workflow runs. Consider re-adding the paths filter:

on:
  pull_request:
    branches:
      - master
    types:
      - opened
      - synchronize
    paths:
      - 'server/database/migrations/**'
      - '.github/workflows/database-migration.yml'
  push:
    branches:
      - master
    paths:
      - 'server/database/migrations/**'
      - '.github/workflows/database-migration.yml'

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[gemini-code-assist]

Code Review

This pull request updates numerous dependencies and cleans up the dependency tree by removing several duplicate packages. The changes are well-described and contribute to keeping the project up-to-date. My review includes a suggestion to further consolidate dependencies using pnpm overrides, which will improve consistency and reduce the bundle size. Overall, this is a good maintenance PR.

[gemini-code-assist]

While this PR does a great job of cleaning up some duplicate dependencies, there's an opportunity to consolidate even more. The lockfile shows that multiple versions of @rolldown/pluginutils (v1.0.0-beta.50 and v1.0.0-beta.51) and youch (v4.1.0-beta.10 and v4.1.0-beta.13) are still present.

To ensure consistency and a smaller dependency tree, you can use pnpm's overrides feature to force a single version for these packages. This will make all dependencies use the latest versions available in this PR.

Since some of these are beta versions, please ensure this override doesn't introduce any breaking changes by running tests after applying.

  },
  "pnpm": {
    "overrides": {
      "@rolldown/pluginutils": "1.0.0-beta.51",
      "youch": "4.1.0-beta.13"
    }
  },