[scttbnsn]

Carries #376 to main: next 16.4.1, vite 8.2.4, sharp 0.35.5, dompurify 3.4.17, the MCP SDK 1.32.2 and proxy-addr 2.0.8. The website and docs deploy from main, so this is what puts the next and dompurify fixes live. Nothing in the npm runtime package changes and no tag follows. Review scope: single-user local desktop app.

🔒 Security

• Promote the dependency security updates from dev/v0.16 to main.
• Update Next.js to 16.4.1, Vite to 8.2.4, Sharp to 0.35.5, DOMPurify to 3.4.17, the MCP SDK to 1.32.2, and proxy-addr to 2.0.8.
• The DOMPurify, MCP SDK, and proxy-addr updates are lockfile-only. The npm runtime package does not change, and no tag follows.

🔧 Changed

• Update the Next.js dependency in apps/docs/package.json and apps/website/package.json.

• Update Vite and Sharp dependency declarations in the web, website, and root package files.

• Test status is not provided.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
careerrat-website	Ready	Preview	Oct 26, 2026 4:21am UTC

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: CodesWhat/careerrat
• Branch: main
• File: .coderabbit.yaml
• Commit: 6e52093
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 09d8158c-235d-4a4b-a466-3ee26d129c7c

Commits

Reviewing files that changed from the base of the PR and between 6e52093 and af6cf27.

Files ignored due to path filters: 1

• package-lock.json is excluded by !**/package-lock.json, !**/package-lock.json

Files selected for processing: 4

• apps/docs/package.json
• apps/web/package.json
• apps/website/package.json
• package.json

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Walkthrough

The package manifests update Next.js from 16.3.3 to 16.4.1, Vite from 8.2.2 to 8.2.4, and Sharp from 0.35.4 to 0.35.5.

Possibly related issues

• Issue 11 tracks Renovate dependency updates. This pull request updates dependencies in the docs, web, website, and root manifests.

Suggested labels: second-opinion

Priority: Normal

Change: Bug fix

Merge Risk: Minimal · up to af6cf

No actionable merge risk was found in these dependency updates.

Pre-merge checks: 2

Check name	Status	Explanation
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

@greptileai Review exact head af6cf27ccace09ce12ced0d2ffa8bb80bfe65613. Review for correctness, security issues, and cross-file regressions.

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The dependency updates appear safe to merge; no actionable regressions were found.

Summary

Updates website, docs, and build dependencies at head af6cf27ccace09ce12ced0d2ffa8bb80bfe65613.

• The website, docs, and web build now use updated security dependencies.

_{Reviews (1) · Last reviewed commit: "Merge pull request #378 from CodesWhat/c..." · Reviewed by Greptile}

[biggest-littlest]

Approving af6cf27: promotion of #376 plus the #378 reconcile, all checks green.

[ALARGECOMPANY]

Approving af6cf27: promotion of #376 plus the #378 reconcile, all checks green.