chore(deps): patch vitest/vite advisories and add dependabot (#6)

Upgrade vitest to 3.2.7 across the monorepo, override vite to 6.4.3 for
the high-severity fs.deny advisory, and add weekly grouped Dependabot for
npm workspaces and GitHub Actions.

.github/dependabot.yml

@@ -0,0 +1,29 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      minor-and-patch:
+        update-types:
+          - "minor"
+          - "patch"
+  - package-ecosystem: "npm"
+    directory: "/infra"
+    schedule:
+      interval: "weekly"
+    groups:
+      minor-and-patch:
+        update-types:
+          - "minor"
+          - "patch"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      minor-and-patch:
+        update-types:
+          - "minor"
+          - "patch"

auth/group-sync/package.json

@@ -22,9 +22,9 @@
     "@aws-sdk/client-secrets-manager": "^3.700.0",
     "@aws-sdk/lib-dynamodb": "^3.700.0",
     "@types/node": "^22.0.0",
-    "@vitest/coverage-v8": "3.0.2",
+    "@vitest/coverage-v8": "3.2.7",
     "typescript": "^5.5.0",
-    "vitest": "3.0.2"
+    "vitest": "3.2.7"
   },
   "engines": {
     "node": ">=24.0.0"

auth/pre-token-gen/package.json

@@ -17,9 +17,9 @@
     "@aws-sdk/client-dynamodb": "^3.700.0",
     "@aws-sdk/lib-dynamodb": "^3.700.0",
     "@types/node": "^22.0.0",
-    "@vitest/coverage-v8": "3.0.2",
+    "@vitest/coverage-v8": "3.2.7",
     "typescript": "^5.5.0",
-    "vitest": "3.0.2"
+    "vitest": "3.2.7"
   },
   "engines": {
     "node": ">=24.0.0"

infra/package.json

@@ -17,7 +17,7 @@
     "constructs": "10.6.0",
     "tsx": "4.22.4",
     "typescript": "^5.5.0",
-    "vitest": "3.0.2"
+    "vitest": "3.2.7"
   },
   "engines": {
     "node": ">=24.0.0"

package.json

@@ -26,7 +26,7 @@
     "@types/node": "22.7.4",
     "@typescript-eslint/eslint-plugin": "8.17.0",
     "@typescript-eslint/parser": "8.17.0",
-    "@vitest/coverage-v8": "3.0.2",
+    "@vitest/coverage-v8": "3.2.7",
     "aws-cdk": "2.1128.1",
     "aws-cdk-lib": "2.260.0",
     "constructs": "10.6.0",
@@ -34,9 +34,12 @@
     "prettier": "3.4.2",
     "tsx": "4.22.4",
     "typescript": "5.6.3",
-    "vitest": "3.0.2"
+    "vitest": "3.2.7"
   },
   "engines": {
     "node": ">=24.0.0"
+  },
+  "overrides": {
+    "vite": "^6.4.3"
   }
 }

packages/calendar/package.json

@@ -22,6 +22,6 @@
   "devDependencies": {
     "@types/node": "^22.0.0",
     "typescript": "^5.5.0",
-    "vitest": "^2.0.0"
+    "vitest": "^3.2.6"
   }
 }

packages/gmail/package.json

@@ -27,8 +27,8 @@
     "@sh-mcp/shared": "*"
   },
   "devDependencies": {
-    "@vitest/coverage-v8": "^2.0.0",
+    "@vitest/coverage-v8": "^3.2.6",
     "typescript": "^5.5.0",
-    "vitest": "^2.0.0"
+    "vitest": "^3.2.6"
   }
 }

packages/google-maps/package.json

@@ -18,7 +18,7 @@
   "devDependencies": {
     "@types/node": "^22.0.0",
     "typescript": "^5.5.0",
-    "vitest": "^2.0.0"
+    "vitest": "^3.2.6"
   },
   "engines": {
     "node": ">=24.0.0"

packages/internal-data/package.json

@@ -18,9 +18,9 @@
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
-    "@vitest/coverage-v8": "^2.0.0",
+    "@vitest/coverage-v8": "^3.2.6",
     "typescript": "^5.5.0",
-    "vitest": "^2.0.0"
+    "vitest": "^3.2.6"
   },
   "engines": {
     "node": ">=24.0.0"

packages/knowledge-base/package.json

@@ -24,9 +24,9 @@
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
-    "@vitest/coverage-v8": "^2.0.0",
+    "@vitest/coverage-v8": "^3.2.6",
     "typescript": "^5.5.0",
-    "vitest": "^2.0.0"
+    "vitest": "^3.2.6"
   },
   "engines": {
     "node": ">=24.0.0"

packages/payments/package.json

@@ -24,9 +24,9 @@
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
-    "@vitest/coverage-v8": "^2.0.0",
+    "@vitest/coverage-v8": "^3.2.6",
     "typescript": "^5.5.0",
-    "vitest": "^2.0.0"
+    "vitest": "^3.2.6"
   },
   "engines": {
     "node": ">=24.0.0"

packages/qbo/package.json

@@ -24,9 +24,9 @@
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
-    "@vitest/coverage-v8": "^3.0.0",
+    "@vitest/coverage-v8": "^3.2.6",
     "typescript": "^5.7.0",
-    "vitest": "^3.0.0"
+    "vitest": "^3.2.6"
   },
   "engines": {
     "node": ">=24.0.0"

packages/reminders/package.json

@@ -22,6 +22,6 @@
   "devDependencies": {
     "@types/node": "^22.0.0",
     "typescript": "^5.5.0",
-    "vitest": "^2.0.0"
+    "vitest": "^3.2.6"
   }
 }

packages/shared/package.json

@@ -24,10 +24,10 @@
   "devDependencies": {
     "@types/express": "5.0.6",
     "@types/supertest": "7.2.0",
-    "@vitest/coverage-v8": "^2.0.0",
+    "@vitest/coverage-v8": "^3.2.6",
     "supertest": "7.2.2",
     "typescript": "^5.5.0",
-    "vitest": "^2.0.0"
+    "vitest": "^3.2.6"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.29.0",

packages/tasks/package.json

@@ -24,7 +24,7 @@
     "@sh-mcp/shared": "*"
   },
   "devDependencies": {
-    "vitest": "^2.0.0",
+    "vitest": "^3.2.6",
     "typescript": "^5.5.0"
   }
 }

servers/sh-mcp-finance/package.json

@@ -31,6 +31,6 @@
     "constructs": "10.6.0",
     "tsx": "4.22.4",
     "typescript": "^5.5.0",
-    "vitest": "^2.0.0"
+    "vitest": "^3.2.6"
   }
 }

servers/sh-mcp-ops/package.json

@@ -36,6 +36,6 @@
     "constructs": "10.6.0",
     "tsx": "4.22.4",
     "typescript": "^5.5.0",
-    "vitest": "^2.0.0"
+    "vitest": "^3.2.6"
   }
 }