chore(deps): update codebase dependencies

apps/cli/package.json

@@ -151,8 +151,8 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@better-fullstack/template-generator": "^2.6.2",
-    "@better-fullstack/types": "^2.6.2",
+    "@better-fullstack/template-generator": "^2.6.3",
+    "@better-fullstack/types": "^2.6.3",
     "@clack/core": "^0.5.0",
     "@clack/prompts": "^1.7.0",
     "@modelcontextprotocol/server": "^2.0.0",
@@ -168,7 +168,7 @@
     "trpc-cli": "^0.12.1",
     "ts-morph": "^27.0.2",
     "yaml": "^2.9.0",
-    "zod": "4.4.3"
+    "zod": "4.5.2"
   },
   "devDependencies": {
     "@better-fullstack/project-lifecycle": "workspace:*",

apps/cli/test/features/frontend.test.ts

@@ -1,8 +1,7 @@
+import { expectError, expectSuccess, runTRPCTest, type TestConfig } from "@test/support/test-utils";
 import { describe, expect, it } from "bun:test";
 import { execa } from "execa";
 
-import { expectError, expectSuccess, runTRPCTest, type TestConfig } from "@test/support/test-utils";
-
 const hasDeno = Boolean(Bun.which("deno"));
 const freshRuntimeSmokeTimeoutMs = 180_000;
 
@@ -267,7 +266,9 @@ describe("Frontend Configurations", () => {
       });
 
       expectSuccess(result);
-      expect(await Bun.file(`${result.projectDir}/apps/web/test/smoke.test.ts`).exists()).toBe(true);
+      expect(await Bun.file(`${result.projectDir}/apps/web/test/smoke.test.ts`).exists()).toBe(
+        true,
+      );
       expect(await Bun.file(`${result.projectDir}/apps/web/package.json`).text()).toContain(
         "mocha --import=tsx",
       );
@@ -360,6 +361,34 @@ describe("Frontend Configurations", () => {
       });
 
       expectSuccess(result);
+      if (!result.projectDir) throw new Error("Expected generated Redwood project directory");
+
+      const rootPackage = await Bun.file(`${result.projectDir}/package.json`).json();
+      const apiPackage = await Bun.file(`${result.projectDir}/api/package.json`).json();
+      const webPackage = await Bun.file(`${result.projectDir}/web/package.json`).json();
+      const viteConfig = await Bun.file(`${result.projectDir}/web/vite.config.ts`).text();
+      const bunConfig = await Bun.file(`${result.projectDir}/bunfig.toml`).text();
+      const redwoodConfig = await Bun.file(`${result.projectDir}/redwood.toml`).text();
+
+      expect(rootPackage.scripts).toMatchObject({
+        build: "rw --no-telemetry build",
+        "check-types":
+          "rw-gen && node node_modules/typescript/bin/tsc --noEmit --project web/tsconfig.json && node node_modules/typescript/bin/tsc --noEmit --project api/tsconfig.json",
+        dev: "rw --no-telemetry dev",
+      });
+      expect(rootPackage.devDependencies).toMatchObject({
+        typescript: expect.any(String),
+      });
+      expect(webPackage.dependencies).toMatchObject({
+        react: "18.3.1",
+        "react-dom": "18.3.1",
+      });
+      expect(apiPackage.dependencies).toMatchObject({
+        "@redwoodjs/context": "^8.9.0",
+      });
+      expect(viteConfig).toContain('import redwood from "@redwoodjs/vite"');
+      expect(bunConfig).toContain('linker = "hoisted"');
+      expect(redwoodConfig).toContain("versionUpdates = []");
     });
 
     it("should fail RedwoodJS with tRPC API", async () => {

apps/cli/test/lifecycle/stack-update.test.ts

@@ -2911,7 +2911,7 @@ describe("stack update planner", () => {
         expect(btsConfig[testCase.field]).toEqual(testCase.expected);
       }
     },
-    { timeout: 60_000 },
+    { timeout: 120_000 },
   );
 
   it("applies Go Better Auth through the generic auth update field", async () => {

apps/web/package.json

@@ -41,8 +41,8 @@
     "@orama/orama": "^3.1.18",
     "@shikijs/rehype": "^4.4.3",
     "@shikijs/transformers": "^3.20.0",
-    "@tanstack/react-router": "^1.170.31",
-    "@tanstack/react-start": "^1.168.48",
+    "@tanstack/react-router": "^1.170.32",
+    "@tanstack/react-start": "^1.168.49",
     "@tanstack/zod-adapter": "^1.167.0",
     "@vercel/analytics": "^1.6.1",
     "@vercel/speed-insights": "^1.3.1",
@@ -62,8 +62,8 @@
     "mdast-util-toc": "^7.1.0",
     "motion": "^12.43.0",
     "ogl": "^1.0.11",
-    "papaparse": "^5.6.0",
-    "posthog-js": "^1.418.10",
+    "papaparse": "^5.7.0",
+    "posthog-js": "^1.422.5",
     "qrcode": "^1.5.4",
     "radix-ui": "^1.6.7",
     "react": "^19.2.8",
@@ -78,11 +78,11 @@
     "sonner": "^2.0.8",
     "tailwind-merge": "^3.6.0",
     "unist-util-visit": "^5.1.0",
-    "zod": "4.4.3"
+    "zod": "4.5.2"
   },
   "devDependencies": {
     "@axe-core/playwright": "^4.13.0",
-    "@inlang/paraglide-js": "^2.24.1",
+    "@inlang/paraglide-js": "^2.25.0",
     "@playwright/test": "1.62.1",
     "@tailwindcss/postcss": "^4.3.3",
     "@tailwindcss/vite": "^4.3.3",
@@ -93,7 +93,7 @@
     "@types/papaparse": "^5.5.2",
     "@types/qrcode": "^1.5.6",
     "@types/react": "19.2.18",
-    "@types/react-dom": "19.2.4",
+    "@types/react-dom": "19.2.5",
     "@types/unist": "^3.0.3",
     "@vitejs/plugin-react": "^5.1.2",
     "nitro": "^3.0.260610-beta",