chore: Update dependencies and add typecheck

[stefashkaa]

Description

• What does this PR do?

  • Updates project dependencies across the workspace, including root tooling, demo dependencies, and framework package dependencies for Nuxt, React, Svelte, and Vue
  • Adds a root pnpm typecheck command that runs package typechecks across packages/**
  • Adds a Nuxt package typecheck script and switches the Vue package typecheck to vue-tsc
  • Keeps Vite constrained to the stable 8.0.x line to avoid the Vue SFC build regression seen with Vite 8.1.x
  • Applies formatting updates from the project formatter

• Why is this change needed?

  • Keeps the dependency graph current while preserving reliable package builds
  • Provides one workspace-level command for validating TypeScript across all packages
  • Fixes the Vue package build issue where Vite/OXC fails to resolve tsconfig for PhoneInput.vue with 8.1.x vite version
  • Keeps source formatting consistent after the dependency and script updates

Type of Change

• Bug fix (non-breaking)
• New feature (non-breaking)
• Breaking change
• Documentation update
• Tests
• Other (describe below): Dependency maintenance, tooling scripts, and formatting

Testing

• Ran pnpm test:unit
• Ran pnpm test:e2e
• Ran pnpm build

Screenshots (if applicable)

• N/A

Checklist

• Code follows project style guidelines
• Self-review completed
• Comments added for complex code
• Documentation updated
• No new warnings generated
• Tests added/updated
• All tests passing

Manual Coverage (Optional)

Maintainers only (write/maintain/admin access): open the workflow, click Run workflow, and set pr_number to this PR number to post/update a coverage comment on this PR

Summary by CodeRabbit

• New Features

  • Added workspace-wide type checking to help catch issues earlier during development.

• Bug Fixes

  • Updated several frontend and tooling dependencies to newer versions for improved stability and compatibility.
  • Locked one build tool version more precisely to reduce unexpected version drift.

• Refactor

  • Minor formatting updates in internal scripts with no change in behavior.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
phone-mask	Ready	Preview, Comment	Jul 8, 2026 3:26pm

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: b7c77241-8f99-4ffa-978d-df5ead0d5627

📥 Commits

Reviewing files that changed from the base of the PR and between eb614b5 and a42d223.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (9)

• demo/package.json
• package.json
• packages/phone-mask-nuxt/package.json
• packages/phone-mask-react/package.json
• packages/phone-mask-svelte/package.json
• packages/phone-mask-vue/package.json
• packages/phone-mask/scripts/gen.mts
• pnpm-workspace.yaml
• scripts/update-readme-benchmarks.mts

---

📝 Walkthrough

Walkthrough

This PR updates dependency and devDependency versions across the root, demo, and package-level package.json files, pins the vite override in pnpm-workspace.yaml to an exact version, adds typecheck scripts (including switching phone-mask-vue to vue-tsc), and applies cosmetic formatting changes to two script files with no logic changes.

Changes

Dependency and Tooling Maintenance

Layer / File(s)	Summary
Typecheck script additions package.json, packages/phone-mask-nuxt/package.json, packages/phone-mask-vue/package.json	Adds a root typecheck script running across ./packages/**, adds a tsc --noEmit typecheck script to phone-mask-nuxt, and switches phone-mask-vue's typecheck script to use vue-tsc instead of tsc.
Version bumps package.json, demo/package.json, packages/phone-mask-nuxt/package.json, packages/phone-mask-react/package.json, packages/phone-mask-svelte/package.json, packages/phone-mask-vue/package.json, pnpm-workspace.yaml	Bumps various dev/runtime dependency versions (Playwright, TypeScript ESLint, Vitest, Prettier, Vue, svelte, vue-tsc, @vitejs/plugin-react, @nuxtjs/sitemap) and pins the vite override in pnpm-workspace.yaml to an exact version.
Cosmetic formatting packages/phone-mask/scripts/gen.mts, scripts/update-readme-benchmarks.mts	Reformats a type union declaration and a validity guard condition with no behavioral changes.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Possibly related PRs

• DeSource-Labs/phone-mask#91: Both PRs touch scripts/update-readme-benchmarks.mts's resolveDataOverheadGzip peerMetric validation logic.
• DeSource-Labs/phone-mask#113: Both PRs modify dependency versions in package.json files and pnpm-workspace.yaml overrides.
• DeSource-Labs/phone-mask#92: Both PRs bump vue and other dev dependencies in demo/package.json and packages/phone-mask-nuxt/package.json.

Poem

A hop, a skip, a version bump,
vue-tsc now gives typecheck a jump.
Pinned my vite so tight and neat,
Formatting tidied, clean and sweet.
🐰 Carrots and code, all in a row!

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main changes: dependency updates and new typecheck scripts.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/update-dependencies-and-add-typecheck

Warning

Tools execution failed with the following error:

Failed to run tools: 13 INTERNAL: Received RST_STREAM with code 2 (Internal server error)

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​typescript-eslint/​parser@​8.63.0
	vitest@​4.1.10
	@​vitest/​coverage-v8@​4.1.10
	@​typescript-eslint/​eslint-plugin@​8.63.0
	@​types/​node@​26.1.0
	globals@​17.7.0
	svelte@​5.56.4
	vue@​3.5.39
	vue-tsc@​3.3.6
	prettier-plugin-svelte@​4.1.1
	@​vitejs/​plugin-react@​6.0.3
	lint-staged@​17.0.8
	svelte-check@​4.7.2
	@​nuxtjs/​sitemap@​8.2.2
	eslint-plugin-svelte@​3.20.0
	prettier@​3.9.4
	@​testing-library/​svelte@​5.4.2
	@​playwright/​test@​1.61.1

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm @emnapi/runtime is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → npm/nuxt@4.4.8 → npm/@nuxt/image@2.0.0 → npm/@emnapi/runtime@1.11.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@emnapi/runtime@1.11.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a42d2234a5

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[Copilot]

Pull request overview

This PR performs workspace-wide dependency maintenance and standardizes TypeScript validation by introducing a root pnpm typecheck command that runs each package’s typecheck script (with Nuxt and Vue typecheck scripts aligned to the intended tooling). It also constrains Vite to 8.0.x via ~8.0.16 to avoid known regressions with 8.1.x, and applies formatting adjustments in a couple of scripts.

Changes:

• Add a root typecheck script that runs typecheck across packages/** recursively.
• Update dependencies across the workspace (root tooling, demo, and framework packages), including Vue, Svelte, React plugin, and test/lint/format tooling.
• Pin Vite to the 8.0.x line via ~8.0.16 (root devDependency + pnpm override) and align Vue package typechecking to vue-tsc.

Reviewed changes

Copilot reviewed 9 out of 10 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
scripts/update-readme-benchmarks.mts	Formatting-only change in gzip overhead calculation guard.
pnpm-workspace.yaml	Constrains Vite override to ~8.0.16 to stay on 8.0.x.
packages/phone-mask/scripts/gen.mts	Formatting-only change to a union type declaration.
packages/phone-mask-vue/package.json	Switches typecheck to vue-tsc and bumps Vue / vue-tsc dev deps.
packages/phone-mask-svelte/package.json	Bumps Svelte-related dev dependencies.
packages/phone-mask-react/package.json	Bumps @vitejs/plugin-react.
packages/phone-mask-nuxt/package.json	Adds Nuxt package typecheck script and bumps Vue dev dep.
package.json	Adds root typecheck script and bumps root dev tooling dependencies; pins Vite to ~8.0.16.
demo/package.json	Bumps demo dependencies (Nuxt sitemap + Vue).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.