build(deps): bump the minor-and-patch group across 7 directories with 42 updates

[dependabot]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[greptile-apps]

Greptile Summary

This PR updates dependency versions across the Bun workspace. The main changes are:

• Frontend UI, editor, charting, styling, and test packages.
• API, graph/PDF, AI, files, and logger runtime packages.
• Root build, lint, format, and Turbo tooling packages.
• The shared Bun lockfile resolutions.

Confidence Score: 4/5

The dependency bump needs a lockfile fix before merging.

• package.json and bun.lock disagree on two root tooling packages.
• Frozen installs can fail or run the old formatter and TypeScript lint plugin.
• The rest of the reviewed dependency surfaces did not show a concrete changed-code break.

bun.lock

Important Files Changed

Filename	Overview
package.json	Root tooling versions were updated for formatting, linting, TypeScript lint integration, and Turbo.
bun.lock	Most dependency resolutions were updated, but the root lock entries for oxfmt and oxlint-tsgolint still point at the old versions.
apps/frontend/package.json	Frontend package versions were bumped for Radix UI, Tiptap, rendering, styling, testing, and related libraries.
apps/api/package.json	The API app bumps Elysia by one patch version.
packages/graph/package.json	Graph document-processing dependencies were updated for PDF parsing and rasterization.
packages/ai/package.json	The AI package bumps jsonrepair by one minor version.
packages/files/package.json	The files package bumps uuid by one patch version.
packages/logger/package.json	Logger OpenTelemetry packages were updated together.

Prompt To Fix All With AI

Fix the following 1 code review issue. Work through them one at a time, proposing concise fixes.

---

### Issue 1 of 1
bun.lock:47-49
**Root Tool Lock Mismatch**

The root manifest now asks for `oxfmt ^0.58.0` and `oxlint-tsgolint ^0.24.0`, but this lockfile still records `oxfmt ^0.54.0` and `oxlint-tsgolint ^0.23.0`. A frozen Bun install can reject the manifest/lock mismatch, and the upgraded `oxlint@1.73.0` lock entry expects `oxlint-tsgolint >=0.24.0`, so lint can run with an incompatible plugin version.

_{Reviews (1): Last reviewed commit: "build(deps): bump the minor-and-patch gr..." | Re-trigger Greptile}

[greptile-apps]

Root Tool Lock Mismatch

The root manifest now asks for oxfmt ^0.58.0 and oxlint-tsgolint ^0.24.0, but this lockfile still records oxfmt ^0.54.0 and oxlint-tsgolint ^0.23.0. A frozen Bun install can reject the manifest/lock mismatch, and the upgraded oxlint@1.73.0 lock entry expects oxlint-tsgolint >=0.24.0, so lint can run with an incompatible plugin version.

Context Used: AGENTS.md (source)

Prompt To Fix With AI

This is a comment left during a code review.
Path: bun.lock
Line: 47-49

Comment:
**Root Tool Lock Mismatch**

The root manifest now asks for `oxfmt ^0.58.0` and `oxlint-tsgolint ^0.24.0`, but this lockfile still records `oxfmt ^0.54.0` and `oxlint-tsgolint ^0.23.0`. A frozen Bun install can reject the manifest/lock mismatch, and the upgraded `oxlint@1.73.0` lock entry expects `oxlint-tsgolint >=0.24.0`, so lint can run with an incompatible plugin version.

**Context Used:** AGENTS.md ([source](https://app.greptile.com/offis-e-v/github/offis-rit/kiwi/-/custom-context?memory=c62589a8-3308-4b87-9dfc-0a3651d36033))

How can I resolve this? If you propose a fix, please make it concise.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml