chore: bump up deps (#3285)

package.json

@@ -44,18 +44,18 @@
     "yaml": "^2.8.1"
   },
   "scripts": {
-    "test:backend": "vitest run --config src/backend/vitest.config.ts ",
-    "test:backend:postgres": "PUTER_TEST_DB_ENGINE=postgres vitest run --config src/backend/vitest.config.ts ",
+    "test:backend": "npm run setupExtensions && vitest run --config src/backend/vitest.config.ts ",
+    "test:backend:postgres": "npm run setupExtensions && PUTER_TEST_DB_ENGINE=postgres vitest run --config src/backend/vitest.config.ts ",
     "start=gui": "nodemon --exec \"node dev-server.js\" ",
     "start": "node --enable-source-maps -r ./dist/src/backend/telemetry.js ./dist/src/backend/index.js",
-    "prestart": "npm run build:ts",
+    "prestart": "npm run setupExtensions && npm run build:ts",
     "dev": "npm start",
-    "build": "npm run build:ts && cd src/gui && node ./build.js && cd ../puter-js && npm run build",
+    "build": "npm run setupExtensions && npm run build:ts && cd src/gui && node ./build.js && cd ../puter-js && npm run build",
     "build:workerLib": "cd src/puter-js && npm run build && cd ../worker && npm run build",
     "check-translations": "node tools/check-translations.js",
     "prepare": "husky",
     "build:ts": "tsc -p tsconfig.build.json && node ./tools/write-dist-package-json.mjs",
-    "postinstall": "node ./tools/extensionSetup.mjs"
+    "setupExtensions": "node ./tools/extensionSetup.mjs"
   },
   "workspaces": [
     "src/*",
@@ -82,5 +82,11 @@
   },
   "engines": {
     "node": ">=24.0.0"
+  },
+  "allowScripts": {
+    "protobufjs@7.6.4": true,
+    "workerd@1.20260617.1": true,
+    "@google/genai": false,
+    "esbuild@0.28.1": true
   }
 }

src/backend/package.json

@@ -22,13 +22,13 @@
     "@heyputer/putility": "^1.0.0",
     "@mistralai/mistralai": "^1.15.1",
     "@opentelemetry/api": "^1.9.0",
-    "@opentelemetry/auto-instrumentations-node": "^0.52.0",
-    "@opentelemetry/exporter-metrics-otlp-grpc": "^0.55.0",
-    "@opentelemetry/exporter-trace-otlp-grpc": "^0.55.0",
-    "@opentelemetry/resources": "^1.28.0",
-    "@opentelemetry/sdk-metrics": "^1.28.0",
-    "@opentelemetry/sdk-node": "^0.55.0",
-    "@opentelemetry/sdk-trace-base": "^1.28.0",
+    "@opentelemetry/auto-instrumentations-node": "^0.77.0",
+    "@opentelemetry/exporter-metrics-otlp-grpc": "^0.219.0",
+    "@opentelemetry/exporter-trace-otlp-grpc": "^0.219.0",
+    "@opentelemetry/resources": "^2.8.0",
+    "@opentelemetry/sdk-metrics": "^2.8.0",
+    "@opentelemetry/sdk-node": "^0.219.0",
+    "@opentelemetry/sdk-trace-base": "^2.8.0",
     "@opentelemetry/semantic-conventions": "^1.28.0",
     "@pagerduty/pdjs": "^2.2.4",
     "@smithy/node-http-handler": "^2.5.0",
@@ -57,7 +57,7 @@
     "mime-types": "^2.1.35",
     "murmurhash": "^2.0.1",
     "mysql2": "^3.22.4",
-    "nodemailer": "^8.0.7",
+    "nodemailer": "^9.0.1",
     "openai": "^6.34.0",
     "otpauth": "^9.2.4",
     "parse-domain": "^8.2.2",
@@ -69,8 +69,8 @@
     "svg-captcha": "^1.4.0",
     "together-ai": "^0.33.0",
     "ua-parser-js": "^1.0.41",
-    "undici": "^7.25.0",
     "uglify-js": "^3.17.4",
+    "undici": "^7.25.0",
     "uuid": "^14.0.0",
     "validator": "^13.15.35"
   },

src/gui/package.json

@@ -45,11 +45,13 @@
     ]
   },
   "dependencies": {
+    "@opentelemetry/auto-instrumentations-node": "0.77.0",
+    "@opentelemetry/sdk-node": "0.219.0",
     "@thumbmarkjs/thumbmarkjs": "1.9.1",
     "file-type": "21.3.3",
     "json-colorizer": "^3.0.1",
     "music-metadata": "11.12.3",
-    "nodemailer": "8.0.7",
+    "nodemailer": "^9.0.1",
     "string-template": "^1.0.0",
     "uuid": "^14.0.0"
   }

src/mcp-connector/package.json

@@ -15,7 +15,7 @@
     "terser-webpack-plugin": "^5.3.14",
     "webpack": "^5.88.2",
     "webpack-cli": "^5.1.1",
-    "wrangler": "^3.90.0"
+    "wrangler": "^4.103.0"
   },
   "author": "Puter Technologies Inc.",
   "license": "AGPL-3.0-only"