chore(deps): bump the production-deps group with 27 updates

Bumps the production-deps group with 27 updates:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.52.0` | `0.112.3` |
| [diff](https://github.com/kpdecker/jsdiff) | `5.2.0` | `9.0.0` |
| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `17.4.2` |
| [express](https://github.com/expressjs/express) | `4.21.2` | `5.2.1` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `7.5.1` | `8.6.0` |
| [express-validator](https://github.com/express-validator/express-validator) | `7.2.1` | `7.3.2` |
| [helmet](https://github.com/helmetjs/helmet) | `7.2.0` | `8.3.0` |
| [joi](https://github.com/hapijs/joi) | `17.13.3` | `18.2.3` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.16.3` | `8.22.0` |
| [redis](https://github.com/redis/node-redis) | `4.7.1` | `6.1.0` |
| [uuid](https://github.com/uuidjs/uuid) | `9.0.1` | `14.0.1` |
| [winston](https://github.com/winstonjs/winston) | `3.17.0` | `3.19.0` |
| [winston-daily-rotate-file](https://github.com/winstonjs/winston-daily-rotate-file) | `4.7.1` | `5.0.0` |
| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.13.4` | `1.14.4` |
| [@grpc/proto-loader](https://github.com/grpc/grpc-node) | `0.7.15` | `0.8.1` |
| [ioredis](https://github.com/luin/ioredis) | `5.6.1` | `5.11.1` |
| [knex](https://github.com/knex/knex) | `3.1.0` | `3.3.0` |
| [reflect-metadata](https://github.com/rbuckton/reflect-metadata) | `0.1.14` | `0.2.2` |
| [@octokit/app](https://github.com/octokit/app.js) | `16.0.1` | `16.1.2` |
| [@octokit/auth-app](https://github.com/octokit/auth-app.js) | `6.1.4` | `8.2.0` |
| [@octokit/rest](https://github.com/octokit/rest.js) | `20.1.2` | `22.0.1` |
| [@octokit/webhooks](https://github.com/octokit/webhooks.js) | `12.3.2` | `14.2.0` |
| [convict](https://github.com/mozilla/node-convict) | `6.2.4` | `6.2.5` |
| [dotenv-expand](https://github.com/motdotla/dotenv-expand) | `10.0.0` | `13.0.0` |
| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.4.3` |
| [axios](https://github.com/axios/axios) | `1.11.0` | `1.18.1` |


Updates `@anthropic-ai/sdk` from 0.52.0 to 0.112.3
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.52.0...sdk-v0.112.3)

Updates `diff` from 5.2.0 to 9.0.0
- [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md)
- [Commits](kpdecker/jsdiff@v5.2.0...v9.0.0)

Updates `cors` from 2.8.5 to 2.8.6
- [Release notes](https://github.com/expressjs/cors/releases)
- [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md)
- [Commits](expressjs/cors@v2.8.5...v2.8.6)

Updates `dotenv` from 16.6.1 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.6.1...v17.4.2)

Updates `express` from 4.21.2 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@4.21.2...v5.2.1)

Updates `express-rate-limit` from 7.5.1 to 8.6.0
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v7.5.1...v8.6.0)

Updates `express-validator` from 7.2.1 to 7.3.2
- [Release notes](https://github.com/express-validator/express-validator/releases)
- [Commits](express-validator/express-validator@v7.2.1...v7.3.2)

Updates `helmet` from 7.2.0 to 8.3.0
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](helmetjs/helmet@v7.2.0...v8.3.0)

Updates `joi` from 17.13.3 to 18.2.3
- [Commits](hapijs/joi@v17.13.3...v18.2.3)

Updates `pg` from 8.16.3 to 8.22.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.22.0/packages/pg)

Updates `redis` from 4.7.1 to 6.1.0
- [Release notes](https://github.com/redis/node-redis/releases)
- [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/redis/node-redis/compare/redis@4.7.1...redis@6.1.0)

Updates `uuid` from 9.0.1 to 14.0.1
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v9.0.1...v14.0.1)

Updates `winston` from 3.17.0 to 3.19.0
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md)
- [Commits](winstonjs/winston@v3.17.0...v3.19.0)

Updates `winston-daily-rotate-file` from 4.7.1 to 5.0.0
- [Release notes](https://github.com/winstonjs/winston-daily-rotate-file/releases)
- [Changelog](https://github.com/winstonjs/winston-daily-rotate-file/blob/master/CHANGELOG.md)
- [Commits](winstonjs/winston-daily-rotate-file@v4.7.1...v5.0.0)

Updates `@grpc/grpc-js` from 1.13.4 to 1.14.4
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.13.4...@grpc/grpc-js@1.14.4)

Updates `@grpc/proto-loader` from 0.7.15 to 0.8.1
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/proto-loader@0.7.15...@grpc/proto-loader@0.8.1)

Updates `ioredis` from 5.6.1 to 5.11.1
- [Release notes](https://github.com/luin/ioredis/releases)
- [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md)
- [Commits](redis/ioredis@v5.6.1...v5.11.1)

Updates `knex` from 3.1.0 to 3.3.0
- [Release notes](https://github.com/knex/knex/releases)
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md)
- [Commits](knex/knex@3.1.0...3.3.0)

Updates `reflect-metadata` from 0.1.14 to 0.2.2
- [Release notes](https://github.com/rbuckton/reflect-metadata/releases)
- [Commits](https://github.com/rbuckton/reflect-metadata/commits)

Updates `@octokit/app` from 16.0.1 to 16.1.2
- [Release notes](https://github.com/octokit/app.js/releases)
- [Commits](octokit/app.js@v16.0.1...v16.1.2)

Updates `@octokit/auth-app` from 6.1.4 to 8.2.0
- [Release notes](https://github.com/octokit/auth-app.js/releases)
- [Commits](octokit/auth-app.js@v6.1.4...v8.2.0)

Updates `@octokit/rest` from 20.1.2 to 22.0.1
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](octokit/rest.js@v20.1.2...v22.0.1)

Updates `@octokit/webhooks` from 12.3.2 to 14.2.0
- [Release notes](https://github.com/octokit/webhooks.js/releases)
- [Commits](octokit/webhooks.js@v12.3.2...v14.2.0)

Updates `convict` from 6.2.4 to 6.2.5
- [Changelog](https://github.com/mozilla/node-convict/blob/master/CHANGELOG.md)
- [Commits](mozilla/node-convict@v6.2.4...v6.2.5)

Updates `dotenv-expand` from 10.0.0 to 13.0.0
- [Changelog](https://github.com/motdotla/dotenv-expand/blob/master/CHANGELOG.md)
- [Commits](dotenvx/dotenv-expand@v10.0.0...v13.0.0)

Updates `zod` from 3.25.76 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.76...v4.4.3)

Updates `axios` from 1.11.0 to 1.18.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.11.0...v1.18.1)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.112.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: diff
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: cors
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: express-rate-limit
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: express-validator
  dependency-version: 7.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: helmet
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: joi
  dependency-version: 18.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: pg
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: redis
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: uuid
  dependency-version: 14.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: winston
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: winston-daily-rotate-file
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: "@grpc/grpc-js"
  dependency-version: 1.14.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@grpc/proto-loader"
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: ioredis
  dependency-version: 5.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: knex
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: reflect-metadata
  dependency-version: 0.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@octokit/app"
  dependency-version: 16.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@octokit/auth-app"
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: "@octokit/rest"
  dependency-version: 22.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: "@octokit/webhooks"
  dependency-version: 14.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: convict
  dependency-version: 6.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: dotenv-expand
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: axios
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

apps/ai-service/package.json

@@ -24,31 +24,31 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.52.0",
+    "@anthropic-ai/sdk": "^0.112.3",
     "@speccursor/shared-config": "workspace:*",
     "@speccursor/shared-types": "workspace:*",
     "@speccursor/shared-utils": "workspace:*",
     "compression": "^1.7.4",
-    "cors": "^2.8.5",
-    "diff": "^5.1.0",
-    "dotenv": "^16.3.1",
-    "express": "^4.18.2",
-    "express-rate-limit": "^7.1.5",
-    "express-validator": "^7.0.1",
-    "helmet": "^7.1.0",
-    "joi": "^17.11.0",
-    "pg": "^8.11.3",
+    "cors": "^2.8.6",
+    "diff": "^9.0.0",
+    "dotenv": "^17.4.2",
+    "express": "^5.2.1",
+    "express-rate-limit": "^8.6.0",
+    "express-validator": "^7.3.2",
+    "helmet": "^8.3.0",
+    "joi": "^18.2.3",
+    "pg": "^8.22.0",
     "prom-client": "^15.0.0",
-    "redis": "^4.6.10",
-    "uuid": "^9.0.1",
-    "winston": "^3.11.0",
-    "winston-daily-rotate-file": "^4.7.1"
+    "redis": "^6.1.0",
+    "uuid": "^14.0.1",
+    "winston": "^3.19.0",
+    "winston-daily-rotate-file": "^5.0.0"
   },
   "devDependencies": {
     "@types/compression": "^1.7.5",
     "@types/cors": "^2.8.17",
     "@types/diff": "^5.0.9",
-    "@types/express": "^4.17.21",
+    "@types/express": "^5.0.6",
     "@types/jest": "^29.5.8",
     "@types/pg": "^8.10.9",
     "@types/supertest": "^2.0.16",

apps/controller/package.json

@@ -24,35 +24,35 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@grpc/grpc-js": "^1.9.0",
-    "@grpc/proto-loader": "^0.7.8",
+    "@grpc/grpc-js": "^1.14.4",
+    "@grpc/proto-loader": "^0.8.1",
     "@speccursor/shared-config": "workspace:*",
     "@speccursor/shared-types": "workspace:*",
     "@speccursor/shared-utils": "workspace:*",
     "bull": "^4.12.0",
     "compression": "^1.7.4",
-    "cors": "^2.8.5",
-    "dotenv": "^16.3.1",
-    "express": "^4.18.2",
-    "express-rate-limit": "^7.1.5",
-    "express-validator": "^7.0.1",
-    "helmet": "^7.1.0",
-    "ioredis": "^5.3.2",
-    "joi": "^17.11.0",
-    "knex": "^3.0.1",
+    "cors": "^2.8.6",
+    "dotenv": "^17.4.2",
+    "express": "^5.2.1",
+    "express-rate-limit": "^8.6.0",
+    "express-validator": "^7.3.2",
+    "helmet": "^8.3.0",
+    "ioredis": "^5.11.1",
+    "joi": "^18.2.3",
+    "knex": "^3.3.0",
     "objection": "^3.0.1",
-    "pg": "^8.11.3",
+    "pg": "^8.22.0",
     "prom-client": "^15.0.0",
-    "redis": "^4.6.10",
-    "reflect-metadata": "^0.1.13",
-    "uuid": "^9.0.1",
-    "winston": "^3.11.0",
-    "winston-daily-rotate-file": "^4.7.1"
+    "redis": "^6.1.0",
+    "reflect-metadata": "^0.2.2",
+    "uuid": "^14.0.1",
+    "winston": "^3.19.0",
+    "winston-daily-rotate-file": "^5.0.0"
   },
   "devDependencies": {
     "@types/compression": "^1.7.5",
     "@types/cors": "^2.8.17",
-    "@types/express": "^4.17.21",
+    "@types/express": "^5.0.6",
     "@types/jest": "^29.5.8",
     "@types/pg": "^8.10.9",
     "@types/supertest": "^2.0.16",

apps/github-app/package.json

@@ -24,32 +24,32 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@octokit/app": "^16.0.1",
-    "@octokit/auth-app": "^6.0.0",
-    "@octokit/rest": "^20.0.0",
-    "@octokit/webhooks": "^12.0.0",
+    "@octokit/app": "^16.1.2",
+    "@octokit/auth-app": "^8.2.0",
+    "@octokit/rest": "^22.0.1",
+    "@octokit/webhooks": "^14.2.0",
     "@speccursor/shared-config": "workspace:*",
     "@speccursor/shared-types": "workspace:*",
     "@speccursor/shared-utils": "workspace:*",
     "compression": "^1.7.4",
-    "cors": "^2.8.5",
-    "dotenv": "^16.3.1",
-    "express": "^4.18.2",
-    "express-rate-limit": "^7.1.5",
-    "express-validator": "^7.0.1",
-    "helmet": "^7.1.0",
-    "joi": "^17.11.0",
-    "pg": "^8.11.3",
+    "cors": "^2.8.6",
+    "dotenv": "^17.4.2",
+    "express": "^5.2.1",
+    "express-rate-limit": "^8.6.0",
+    "express-validator": "^7.3.2",
+    "helmet": "^8.3.0",
+    "joi": "^18.2.3",
+    "pg": "^8.22.0",
     "prom-client": "^15.0.0",
-    "redis": "^4.6.10",
-    "uuid": "^9.0.1",
-    "winston": "^3.11.0",
-    "winston-daily-rotate-file": "^4.7.1"
+    "redis": "^6.1.0",
+    "uuid": "^14.0.1",
+    "winston": "^3.19.0",
+    "winston-daily-rotate-file": "^5.0.0"
   },
   "devDependencies": {
     "@types/compression": "^1.7.5",
     "@types/cors": "^2.8.17",
-    "@types/express": "^4.17.21",
+    "@types/express": "^5.0.6",
     "@types/jest": "^29.5.8",
     "@types/supertest": "^2.0.16",
     "@types/uuid": "^9.0.7",

package.json

@@ -49,8 +49,8 @@
     "prepare": "husky install"
   },
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.52.0",
-    "diff": "^5.1.0"
+    "@anthropic-ai/sdk": "^0.112.3",
+    "diff": "^9.0.0"
   },
   "devDependencies": {
     "@commitlint/cli": "^21.2.1",

packages/shared-config/package.json

@@ -22,11 +22,11 @@
   "dependencies": {
     "@speccursor/shared-types": "workspace:*",
     "@types/convict": "^6.1.6",
-    "convict": "^6.2.4",
-    "dotenv": "^16.3.1",
-    "dotenv-expand": "^10.0.0",
-    "joi": "^17.11.0",
-    "zod": "^3.22.4"
+    "convict": "^6.2.5",
+    "dotenv": "^17.4.2",
+    "dotenv-expand": "^13.0.0",
+    "joi": "^18.2.3",
+    "zod": "^4.4.3"
   },
   "devDependencies": {
     "@types/jest": "^29.5.8",

packages/shared-types/package.json

@@ -20,7 +20,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "zod": "^3.22.4"
+    "zod": "^4.4.3"
   },
   "devDependencies": {
     "@types/jest": "^29.5.8",

packages/shared-utils/package.json

@@ -21,25 +21,25 @@
   },
   "dependencies": {
     "@speccursor/shared-types": "workspace:*",
-    "axios": "^1.6.0",
+    "axios": "^1.18.1",
     "compression": "^1.7.4",
-    "cors": "^2.8.5",
-    "dotenv": "^16.3.1",
-    "express": "^4.18.2",
-    "express-rate-limit": "^7.1.5",
-    "helmet": "^7.1.0",
-    "joi": "^17.11.0",
-    "pg": "^8.11.3",
+    "cors": "^2.8.6",
+    "dotenv": "^17.4.2",
+    "express": "^5.2.1",
+    "express-rate-limit": "^8.6.0",
+    "helmet": "^8.3.0",
+    "joi": "^18.2.3",
+    "pg": "^8.22.0",
     "prom-client": "^15.0.0",
-    "redis": "^4.6.10",
-    "uuid": "^9.0.1",
-    "winston": "^3.11.0",
-    "winston-daily-rotate-file": "^4.7.1"
+    "redis": "^6.1.0",
+    "uuid": "^14.0.1",
+    "winston": "^3.19.0",
+    "winston-daily-rotate-file": "^5.0.0"
   },
   "devDependencies": {
     "@types/compression": "^1.7.5",
     "@types/cors": "^2.8.17",
-    "@types/express": "^4.17.21",
+    "@types/express": "^5.0.6",
     "@types/jest": "^29.5.8",
     "@types/pg": "^8.20.0",
     "@types/uuid": "^9.0.7",