deps: periodic dependency update

[qw-in]

No description provided.

[arcjet-review]

Arcjet Review — 🟡 Medium Risk

Decision: Approved

Rationale: This PR only updates pinned dependency versions in example package.json files. The dependency-changes escalation trigger fires, but the changes are limited to well-known ecosystem packages and are mostly patch/minor updates with exact version pins. No application logic, auth, secrets, infrastructure, or database changes are present, and no security issues were identified from the diff. Approved as Medium risk because dependency updates should still be validated by CI/example builds.

Summary of Changes

Periodic dependency refresh across multiple example apps, including Astro, Fastify, Firebase Functions, NestJS, Next.js, Nuxt, React Router, SvelteKit, and TanStack Start examples.

Escalation Triggers

• Dependency Changes: Multiple package.json files under examples/ update dependency and devDependency versions.

Review Focus Areas

• Do the example apps still install, build, and run successfully after these dependency updates?
  Even patch/minor framework updates can introduce regressions in generated output, build tooling, or runtime behavior.
• Confirm the React Router 7.15.1 to 7.16.0 update does not require code or config changes.
  This is a minor version bump across several related React Router packages and should be validated as a coordinated framework update.
• Confirm firebase-tools 15.18.0 to 15.22.4 remains compatible with the Firebase Functions example and CI environment.
  Firebase CLI updates can affect emulator behavior, deployment commands, and local test workflows.

Notes

No secrets, auth changes, injection-sensitive code, cryptography changes, infrastructure changes, or migrations were present in the diff. Dependency versions remain exact-pinned, which reduces accidental drift.

Path filtering: 11 files excluded by ignore paths. 11 of 22 files included in review.

_{Review: 8880c5d5 | Model: openai/gpt-5.5 | Powered by Arcjet Review}