chore(deps): bulk dependency updates incl. Next.js security fix

.changeset/library-deps-patch-bumps.md

@@ -0,0 +1,13 @@
+---
+"@datum-cloud/datum-ui": patch
+---
+
+Tighten peer and dependency version ranges following upstream patch releases.
+
+- `@hookform/resolvers`: `^5` → `^5.2.2`
+- `class-variance-authority`: `^0.7` → `^0.7.1`
+
+Transitive updates via the inlined shadcn primitives:
+
+- `@types/geojson`: `^7946` → `^7946.0.16`
+- `@types/leaflet.fullscreen`: `^3` → `^3.0.3`

.changeset/storybook-toolchain-bumps.md

@@ -0,0 +1,9 @@
+---
+"@repo/storybook": patch
+---
+
+Bump Rsbuild toolchain to latest patches and update the shared publish workflow action.
+
+- `@rsbuild/core`: `^1` → `^1.7.5`
+- `@rsbuild/plugin-react`: `^1` → `^1.4.6`
+- `datum-cloud/actions` reusable workflows: `v1.13.1` → `v1.13.2`

.github/workflows/publish-storybook.yml

@@ -20,7 +20,7 @@ jobs:
       contents: read
       packages: write
       attestations: write
-    uses: datum-cloud/actions/.github/workflows/publish-docker.yaml@v1.13.1
+    uses: datum-cloud/actions/.github/workflows/publish-docker.yaml@v1.13.2
     with:
       image-name: datum-storybook
       dockerfile-path: apps/storybook/Dockerfile
@@ -32,7 +32,7 @@ jobs:
       id-token: write
       contents: read
       packages: write
-    uses: datum-cloud/actions/.github/workflows/publish-kustomize-bundle.yaml@v1.13.1
+    uses: datum-cloud/actions/.github/workflows/publish-kustomize-bundle.yaml@v1.13.2
     with:
       bundle-name: ghcr.io/datum-cloud/datum-storybook-kustomize
       bundle-path: apps/storybook/config/base

apps/docs/package.json

@@ -31,7 +31,7 @@
     "fumadocs-mdx": "^14.2.9",
     "fumadocs-ui": "^16",
     "lucide-react": "^0.576.0",
-    "next": "^16",
+    "next": "^16.2.3",
     "react": "^19.2",
     "react-dom": "^19.2",
     "recharts": "^2",
@@ -45,6 +45,7 @@
     "@types/leaflet.fullscreen": "^5.2.0",
     "@types/leaflet.markercluster": "^1.5.6",
     "@types/mdx": "^2.0.13",
+    "@types/node": "25.6.0",
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "leaflet": "^1.9.4",

apps/storybook/package.json

@@ -23,8 +23,8 @@
   "devDependencies": {
     "@repo/config": "workspace:*",
     "@repo/shadcn": "workspace:*",
-    "@rsbuild/core": "^1",
-    "@rsbuild/plugin-react": "^1",
+    "@rsbuild/core": "^1.7.5",
+    "@rsbuild/plugin-react": "^1.4.6",
     "@storybook/addon-a11y": "^10.2.14",
     "@storybook/addon-interactions": "^8",
     "@storybook/addon-links": "^10.2.14",

packages/datum-ui/package.json

@@ -376,7 +376,7 @@
     "@conform-to/zod": ">=1",
     "@dnd-kit/core": ">=6",
     "@dnd-kit/sortable": ">=8",
-    "@hookform/resolvers": ">=5",
+    "@hookform/resolvers": ">=5.2.2",
     "@monaco-editor/react": "^4.7.0",
     "@stepperize/react": ">=4",
     "@tanstack/react-table": ">=8",
@@ -513,7 +513,7 @@
     "@radix-ui/react-tabs": "^1",
     "@radix-ui/react-tooltip": "^1",
     "@radix-ui/react-visually-hidden": "^1",
-    "class-variance-authority": "^0.7",
+    "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1",
     "tailwind-merge": "^3.5.0",

packages/shadcn/package.json

@@ -23,7 +23,7 @@
   "dependencies": {
     "clsx": "^2.1.1",
     "tailwind-merge": "^3.4.0",
-    "@hookform/resolvers": "^5",
+    "@hookform/resolvers": "^5.2.2",
     "@radix-ui/react-avatar": "^1",
     "@radix-ui/react-checkbox": "^1",
     "@radix-ui/react-collapsible": "^1",
@@ -40,7 +40,7 @@
     "@radix-ui/react-tabs": "^1",
     "@radix-ui/react-tooltip": "^1",
     "@radix-ui/react-visually-hidden": "^1",
-    "class-variance-authority": "^0.7",
+    "class-variance-authority": "^0.7.1",
     "cmdk": "^1",
     "date-fns": "^4",
     "embla-carousel-react": "^8",
@@ -57,7 +57,7 @@
   },
   "devDependencies": {
     "@repo/config": "workspace:*",
-    "@types/geojson": "^7946",
+    "@types/geojson": "^7946.0.16",
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "tailwindcss": "^4",
@@ -72,7 +72,7 @@
     "leaflet-draw": "^1.0.4",
     "@types/leaflet-draw": "^1",
     "leaflet.fullscreen": "^5.3.0",
-    "@types/leaflet.fullscreen": "^3",
+    "@types/leaflet.fullscreen": "^3.0.3",
     "leaflet.markercluster": "^1.5.3",
     "@types/leaflet.markercluster": "^1",
     "react-leaflet-markercluster": ">=5.0.0-rc.0"