chore: bump deps (#14065)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Chores**
* Updated dependency versions across the monorepo (notably zod →
^3.25.76 and vitest-related packages → ^3.2.4), plus minor package bumps
to align tooling and libraries. These are manifest/test-tooling updates
only; no public API, behavior, or end-user features were changed.

<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

packages/backend/server/package.json

@@ -40,7 +40,7 @@
     "@fal-ai/serverless-client": "^0.15.0",
     "@google-cloud/opentelemetry-cloud-trace-exporter": "^2.4.1",
     "@google-cloud/opentelemetry-resource-util": "^2.4.0",
-    "@modelcontextprotocol/sdk": "^1.16.0",
+    "@modelcontextprotocol/sdk": "^1.24.3",
     "@nestjs-cls/transactional": "^2.6.1",
     "@nestjs-cls/transactional-adapter-prisma": "^1.2.19",
     "@nestjs/apollo": "^13.0.4",
@@ -49,7 +49,7 @@
     "@nestjs/core": "^11.0.12",
     "@nestjs/graphql": "^13.0.4",
     "@nestjs/platform-express": "^11.0.12",
-    "@nestjs/platform-socket.io": "^11.0.12",
+    "@nestjs/platform-socket.io": "^11.1.9",
     "@nestjs/schedule": "^6.0.0",
     "@nestjs/throttler": "^6.4.0",
     "@nestjs/websockets": "^11.0.12",
@@ -96,7 +96,7 @@
     "ioredis": "^5.4.1",
     "is-mobile": "^5.0.0",
     "jose": "^6.1.3",
-    "jsonwebtoken": "^9.0.2",
+    "jsonwebtoken": "^9.0.3",
     "keyv": "^5.2.2",
     "lodash-es": "^4.17.21",
     "mixpanel": "^0.18.0",
@@ -122,7 +122,7 @@
     "typescript": "^5.7.2",
     "winston": "^3.17.0",
     "yjs": "^13.6.21",
-    "zod": "^3.24.1"
+    "zod": "^3.25.76"
   },
   "devDependencies": {
     "@affine-tools/cli": "workspace:*",

packages/backend/server/src/plugins/copilot/mcp/provider.ts

@@ -2,7 +2,7 @@ import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
 import { Injectable } from '@nestjs/common';
 import { pick } from 'lodash-es';
-import z from 'zod';
+import z from 'zod/v3';
 
 import { DocReader } from '../../../core/doc';
 import { AccessController } from '../../../core/permission';
@@ -32,9 +32,9 @@ export class WorkspaceMcpProvider {
       {
         title: 'Read Document',
         description: 'Read a document with given ID',
-        inputSchema: {
+        inputSchema: z.object({
           docId: z.string(),
-        },
+        }),
       },
       async ({ docId }) => {
         const notFoundError: CallToolResult = {
@@ -74,7 +74,7 @@ export class WorkspaceMcpProvider {
               text: content.markdown,
             },
           ],
-        };
+        } as const;
       }
     );
 
@@ -84,9 +84,9 @@ export class WorkspaceMcpProvider {
         title: 'Semantic Search',
         description:
           'Retrieve conceptually related passages by performing vector-based semantic similarity search across embedded documents; use this tool only when exact keyword search fails or the user explicitly needs meaning-level matches (e.g., paraphrases, synonyms, broader concepts, recent documents).',
-        inputSchema: {
+        inputSchema: z.object({
           query: z.string(),
-        },
+        }),
       },
       async ({ query }, req) => {
         query = query.trim();
@@ -122,7 +122,7 @@ export class WorkspaceMcpProvider {
             type: 'text',
             text: clearEmbeddingChunk(doc).content,
           })),
-        };
+        } as const;
       }
     );
 
@@ -132,9 +132,9 @@ export class WorkspaceMcpProvider {
         title: 'Keyword Search',
         description:
           'Fuzzy search all workspace documents for the exact keyword or phrase supplied and return passages ranked by textual match. Use this tool by default whenever a straightforward term-based or keyword-base lookup is sufficient.',
-        inputSchema: {
+        inputSchema: z.object({
           query: z.string(),
-        },
+        }),
       },
       async ({ query }) => {
         query = query.trim();
@@ -161,7 +161,7 @@ export class WorkspaceMcpProvider {
             type: 'text',
             text: JSON.stringify(pick(doc, 'docId', 'title', 'createdAt')),
           })),
-        };
+        } as const;
       }
     );
 

packages/common/debug/package.json

@@ -10,7 +10,7 @@
   },
   "devDependencies": {
     "@types/debug": "^4.1.12",
-    "vitest": "3.1.3"
+    "vitest": "^3.2.4"
   },
   "version": "0.25.7"
 }

packages/common/env/package.json

@@ -3,7 +3,7 @@
   "private": true,
   "type": "module",
   "devDependencies": {
-    "vitest": "3.1.3"
+    "vitest": "^3.2.4"
   },
   "exports": {
     "./automation": "./src/automation.ts",
@@ -20,7 +20,7 @@
     "@blocksuite/affine": "workspace:*"
   },
   "dependencies": {
-    "zod": "^3.24.1"
+    "zod": "^3.25.76"
   },
   "version": "0.25.7"
 }

packages/common/error/package.json

@@ -11,6 +11,6 @@
     "graphql": "^16.9.0"
   },
   "devDependencies": {
-    "vitest": "3.1.3"
+    "vitest": "^3.2.4"
   }
 }

packages/common/graphql/package.json

@@ -18,7 +18,7 @@
     "@graphql-codegen/typescript-operations": "^4.4.0",
     "@types/lodash-es": "^4.17.12",
     "prettier": "^3.4.2",
-    "vitest": "3.1.3"
+    "vitest": "^3.2.4"
   },
   "scripts": {
     "build": "gql-gen --errors-only"

packages/common/infra/package.json

@@ -29,7 +29,7 @@
     "nanoid": "^5.0.9",
     "react": "19.1.0",
     "yjs": "^13.6.21",
-    "zod": "^3.24.1"
+    "zod": "^3.25.76"
   },
   "devDependencies": {
     "@affine/templates": "workspace:*",
@@ -39,7 +39,7 @@
     "@types/react": "^19.0.1",
     "fake-indexeddb": "^6.0.0",
     "rxjs": "^7.8.1",
-    "vitest": "3.1.3"
+    "vitest": "^3.2.4"
   },
   "peerDependencies": {
     "electron": "*",

packages/common/nbstore/package.json

@@ -37,7 +37,7 @@
     "fake-indexeddb": "^6.0.0",
     "idb": "^8.0.0",
     "socket.io-client": "^4.8.1",
-    "vitest": "3.1.3"
+    "vitest": "^3.2.4"
   },
   "peerDependencies": {
     "@affine/error": "workspace:*",

packages/common/reader/package.json

@@ -19,7 +19,7 @@
   },
   "devDependencies": {
     "@blocksuite/affine": "workspace:*",
-    "vitest": "3.1.3"
+    "vitest": "^3.2.4"
   },
   "peerDependencies": {
     "@blocksuite/affine": "workspace:*"

packages/frontend/admin/package.json

@@ -55,7 +55,7 @@
     "sonner": "^2.0.0",
     "swr": "^2.2.5",
     "vaul": "^1.1.1",
-    "zod": "^3.24.1"
+    "zod": "^3.25.76"
   },
   "devDependencies": {
     "@types/lodash-es": "^4.17.12",

packages/frontend/apps/electron/package.json

@@ -74,8 +74,8 @@
     "tree-kill": "^1.2.2",
     "ts-node": "^10.9.2",
     "uuid": "^11.0.3",
-    "vitest": "3.1.3",
-    "zod": "^3.24.1"
+    "vitest": "^3.2.4",
+    "zod": "^3.25.76"
   },
   "dependencies": {
     "async-call-rpc": "^6.4.2",

packages/frontend/component/package.json

@@ -68,7 +68,7 @@
     "react-transition-state": "^2.2.0",
     "sonner": "^2.0.0",
     "swr": "^2.2.5",
-    "zod": "^3.24.1"
+    "zod": "^3.25.76"
   },
   "devDependencies": {
     "@affine-tools/utils": "workspace:*",
@@ -86,7 +86,7 @@
     "typescript": "^5.7.2",
     "unplugin-swc": "^1.5.1",
     "vite": "^7.0.0",
-    "vitest": "3.1.3"
+    "vitest": "^3.2.4"
   },
   "version": "0.25.7"
 }

packages/frontend/core/package.json

@@ -94,7 +94,7 @@
     "tinykeys": "patch:tinykeys@npm%3A2.1.0#~/.yarn/patches/tinykeys-npm-2.1.0-819feeaed0.patch",
     "y-protocols": "^1.0.6",
     "yjs": "^13.6.21",
-    "zod": "^3.24.1"
+    "zod": "^3.25.76"
   },
   "devDependencies": {
     "@blocksuite/affine-ext-loader": "workspace:*",
@@ -108,6 +108,6 @@
     "@vanilla-extract/css": "^1.17.0",
     "fake-indexeddb": "^6.0.0",
     "lodash-es": "^4.17.21",
-    "vitest": "3.1.3"
+    "vitest": "^3.2.4"
   }
 }

packages/frontend/i18n/package.json

@@ -30,6 +30,6 @@
     "@affine-tools/cli": "workspace:*",
     "@affine-tools/utils": "workspace:*",
     "glob": "^11.0.0",
-    "vitest": "3.1.3"
+    "vitest": "^3.2.4"
   }
 }

packages/frontend/media-capture-playground/package.json

@@ -25,7 +25,7 @@
     "multer": "^2.0.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
-    "react-markdown": "^10.0.0",
+    "react-markdown": "^10.1.0",
     "socket.io": "^4.7.4",
     "socket.io-client": "^4.7.4",
     "swr": "^2.3.2",

packages/frontend/routes/package.json

@@ -14,7 +14,7 @@
     "@affine-tools/utils": "workspace:*",
     "path-to-regexp": "^8.2.0",
     "query-string": "^9.1.1",
-    "vitest": "^3.0.6"
+    "vitest": "^3.2.4"
   },
   "peerDependencies": {
     "react": "^19.1.0",

packages/frontend/track/package.json

@@ -15,6 +15,6 @@
   "devDependencies": {
     "@types/mixpanel-browser": "^2.50.2",
     "@types/react": "^19.0.1",
-    "vitest": "3.1.3"
+    "vitest": "^3.2.4"
   }
 }