fix: apply audit quick wins (Next 16.3.5, dead deps, login catch-all, CI gates)

.github/workflows/ci.yml

@@ -33,7 +33,7 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: '1.3.6'
+          bun-version: '1.4.2'
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -69,7 +69,7 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: '1.3.6'
+          bun-version: '1.4.2'
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -95,7 +95,7 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: '1.3.6'
+          bun-version: '1.4.2'
 
       - name: Install dependencies
         run: bun install --frozen-lockfile

.github/workflows/deploy.yml

@@ -29,7 +29,7 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: '1.3.6'
+          bun-version: '1.4.2'
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -40,6 +40,9 @@ jobs:
       - name: Run type checking
         run: bun x tsc --noEmit
 
+      - name: Run tests
+        run: bun run test:ci
+
       - name: Test build
         run: bun run build
         env:
@@ -59,7 +62,7 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: '1.3.6'
+          bun-version: '1.4.2'
       - name: Install dependencies
         run: bun install --frozen-lockfile
       - name: Deploy Convex functions to prod

.github/workflows/pr-checks.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: "1.3.6"
+          bun-version: "1.4.2"
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -51,7 +51,7 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: "1.3.6"
+          bun-version: "1.4.2"
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -72,7 +72,7 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: "1.3.6"
+          bun-version: "1.4.2"
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -99,7 +99,7 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: "1.3.6"
+          bun-version: "1.4.2"
 
       - name: Install dependencies
         run: bun install --frozen-lockfile

.gitignore

@@ -48,3 +48,6 @@ next-env.d.ts
 .source/
 # plan/ 
 
+
+# convex prod snapshot (contains PII)
+prod-snapshot.zip

jest.config.js

@@ -35,10 +35,10 @@ const config = {
   // Coverage thresholds - Start low and gradually increase
   coverageThreshold: {
     global: {
-      branches: 10,
-      functions: 10,
-      lines: 10,
-      statements: 10,
+      branches: 36,
+      functions: 28,
+      lines: 33,
+      statements: 33,
     },
   },
 

package.json

@@ -2,40 +2,37 @@
   "name": "firstdevjob",
   "version": "1.0.0",
   "private": true,
-  "packageManager": "bun@1.1.30",
+  "packageManager": "bun@1.4.2",
   "scripts": {
     "dev": "bun --bun next dev --turbopack",
-    "build": "bun --bun next build",
+    "build": "next build",
     "start": "bun --bun next start",
     "lint": "eslint .",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
-    "analyze": "ANALYZE=true bun --bun next build",
+    "analyze": "ANALYZE=true next build",
     "lint:fix": "eslint . --fix",
     "type-check": "bun x tsc --noEmit --watch",
     "test": "jest",
     "test:watch": "jest --watch",
     "test:coverage": "jest --coverage",
     "test:ci": "jest --ci --coverage --watchAll=false",
     "postinstall": "fumadocs-mdx",
-    "sync:prod-to-dev": "bunx convex export --prod --path prod-snapshot.zip && bunx convex import --replace prod-snapshot.zip && rm prod-snapshot.zip"
+    "sync:prod-to-dev": "bunx convex export --prod --path prod-snapshot.zip && bunx convex import --replace prod-snapshot.zip; rm -f prod-snapshot.zip"
   },
   "dependencies": {
-    "@auth/core": "^0.37.4",
     "@clerk/nextjs": "^6.37.1",
-    "@convex-dev/auth": "^0.0.90",
     "@convex-dev/resend": "^0.2.3",
     "@types/mdx": "^2.0.13",
     "convex": "^1.31.7",
     "fumadocs-core": "^16.5.0",
     "fumadocs-mdx": "^14.2.6",
     "fumadocs-ui": "^16.5.0",
     "lucide-react": "^0.513.0",
-    "next": "16.1.6",
+    "next": "16.3.5",
     "next-themes": "^0.4.6",
     "react": "^19.2.4",
-    "react-dom": "^19.2.4",
-    "swr": "^2.3.8"
+    "react-dom": "^19.2.4"
   },
   "devDependencies": {
     "@eslint/eslintrc": "^3.3.3",