fix: remediate dashboard dependency alerts

[lilienblum]

Summary

• update the GitHub Agent dashboard's direct Next.js, Drizzle ORM, and bcrypt dependencies
• resolve vulnerable transitive Sharp, Nanoid, Undici, and PostCSS versions through narrow pnpm overrides
• remove the vulnerable node-pre-gyp/tar path by upgrading bcrypt

Validation

• pnpm --ignore-workspace audit --prod --audit-level high (no high or critical findings)
• pnpm --ignore-workspace run build with non-secret documented placeholder environment values
• git diff --check

Notes

• The dashboard's standalone tsc --noEmit still reports existing incompatibilities in unchanged chart, SDK, and local-agent sources; Next's production build succeeds.

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge based on the reviewed dependency graph and reported production build and audit validation.

Summary

• Upgrades Next.js, Drizzle ORM, and bcrypt.
• Adds narrow pnpm overrides for Nanoid, Undici, and PostCSS.
• Refreshes the lockfile, including Sharp, and removes bcrypt’s former node-pre-gyp/tar dependency path.
• No actionable correctness, security, or repository-rule violations were identified.

_{Reviews (1) · Last reviewed commit: "fix: remediate dashboard dependency aler..."}