chore(deps): bump the production-minor-patch group across 1 directory with 11 updates

Bumps the production-minor-patch group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.45.2` | `5.48.1` |
| [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.8` |
| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.62.2` | `4.62.4` |
| [@neon-rs/load](https://github.com/neon-bindings/neon-rs) | `0.1.82` | `0.2.6` |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.212` | `0.3.226` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.111.0` | `0.116.0` |
| [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.5.17` | `7.7.1` |
| [next](https://github.com/vercel/next.js) | `15.5.21` | `15.5.23` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.11` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.4` | `8.2.1` |



Updates `pg` from 8.22.0 to 8.23.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg)

Updates `posthog-node` from 5.45.2 to 5.48.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.48.1/packages/node)

Updates `jose` from 6.2.3 to 6.2.8
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.3...v6.2.8)

Updates `@rollup/rollup-linux-x64-gnu` from 4.62.2 to 4.62.4
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.62.2...v4.62.4)

Updates `@neon-rs/load` from 0.1.82 to 0.2.6
- [Release notes](https://github.com/neon-bindings/neon-rs/releases)
- [Commits](neon-bindings/neon-rs@v0.1.82...v0.2.6)

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.212 to 0.3.226
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.212...v0.3.226)

Updates `@anthropic-ai/sdk` from 0.111.0 to 0.116.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.111.0...sdk-v0.116.0)

Updates `@clerk/nextjs` from 7.5.17 to 7.7.1
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.7.1/packages/nextjs)

Updates `next` from 15.5.21 to 15.5.23
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.21...v15.5.23)

Updates `tsx` from 4.23.0 to 4.23.11
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.0...v4.23.11)

Updates `vite` from 8.1.4 to 8.2.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.1/packages/vite)

---
updated-dependencies:
- dependency-name: pg
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: posthog-node
  dependency-version: 5.48.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: jose
  dependency-version: 6.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@rollup/rollup-linux-x64-gnu"
  dependency-version: 4.62.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@neon-rs/load"
  dependency-version: 0.2.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.226
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.116.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: next
  dependency-version: 15.5.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: vite
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

examples/basic/package.json

@@ -16,7 +16,7 @@
     "@cipherstash/stack-drizzle": "workspace:*",
     "drizzle-orm": "^0.45.2",
     "dotenv": "^17.4.2",
-    "pg": "8.22.0"
+    "pg": "8.23.0"
   },
   "devDependencies": {
     "stash": "workspace:*",

packages/bench/package.json

@@ -16,12 +16,12 @@
     "@cipherstash/stack": "workspace:*",
     "@cipherstash/stack-drizzle": "workspace:*",
     "drizzle-orm": "0.45.2",
-    "pg": "^8.22.0"
+    "pg": "^8.23.0"
   },
   "devDependencies": {
     "@cipherstash/test-kit": "workspace:*",
     "@types/node": "^22.20.1",
-    "@types/pg": "^8.20.0",
+    "@types/pg": "^8.21.0",
     "tsx": "catalog:repo",
     "typescript": "catalog:repo",
     "vitest": "catalog:repo"

packages/cli/package.json

@@ -52,9 +52,9 @@
 		"@clack/prompts": "1.7.0",
 		"dotenv": "17.4.2",
 		"jiti": "2.7.0",
-		"pg": "8.22.0",
+		"pg": "8.23.0",
 		"picocolors": "^1.1.1",
-		"posthog-node": "^5.41.0",
+		"posthog-node": "^5.48.1",
 		"zod": "^3.25.76"
 	},
 	"//optionalDependencies": "@cipherstash/auth ships per-platform native bindings as optional peerDependencies. pnpm does not auto-install platform-matched optional peer deps, so we declare them here as optionalDependencies — pnpm then picks the binary matching the host's os/cpu (from each sub-package's own package.json) and ignores the rest. All seven names share a single catalog entry to keep them in lockstep.",
@@ -76,7 +76,7 @@
 	},
 	"devDependencies": {
 		"@cipherstash/stack": "workspace:*",
-		"@types/pg": "^8.20.0",
+		"@types/pg": "^8.21.0",
 		"node-pty": "^1.1.0",
 		"strip-ansi": "^7.2.0",
 		"tsup": "catalog:repo",

packages/migrate/package.json

@@ -56,9 +56,9 @@
   },
   "devDependencies": {
     "@cipherstash/stack": "workspace:*",
-    "@types/pg": "^8.20.0",
+    "@types/pg": "^8.21.0",
     "dotenv": "^17.4.2",
-    "pg": "8.22.0",
+    "pg": "8.23.0",
     "tsup": "catalog:repo",
     "typescript": "catalog:repo",
     "vitest": "catalog:repo"

packages/nextjs/package.json

@@ -52,9 +52,9 @@
 		"access": "public"
 	},
 	"optionalDependencies": {
-		"@rollup/rollup-linux-x64-gnu": "4.62.2"
+		"@rollup/rollup-linux-x64-gnu": "4.62.4"
 	},
 	"dependencies": {
-		"jose": "^6.2.3"
+		"jose": "^6.2.8"
 	}
 }

packages/protect-ffi/package.json

@@ -98,7 +98,7 @@
     "vitest": "catalog:repo"
   },
   "dependencies": {
-    "@neon-rs/load": "^0.1.82"
+    "@neon-rs/load": "^0.2.6"
   },
   "optionalDependencies": {
     "@cipherstash/protect-ffi-darwin-x64": "workspace:*",

packages/stack-supabase/package.json

@@ -74,10 +74,10 @@
 		"fta-cli": "3.0.0",
 		"@supabase/postgrest-js": "2.110.2",
 		"@supabase/supabase-js": "^2.110.2",
-		"@types/pg": "^8.20.0",
+		"@types/pg": "^8.21.0",
 		"fast-check": "^4.9.0",
 		"dotenv": "17.4.2",
-		"pg": "8.22.0",
+		"pg": "8.23.0",
 		"postgres": "^3.4.8",
 		"tsup": "catalog:repo",
 		"typescript": "catalog:repo",

packages/stack/package.json

@@ -208,15 +208,15 @@
 		"@clerk/backend": "3.11.3",
 		"@supabase/postgrest-js": "2.110.2",
 		"@supabase/supabase-js": "^2.110.2",
-		"@types/pg": "^8.20.0",
+		"@types/pg": "^8.21.0",
 		"@types/uuid": "^11.0.0",
 		"dotenv": "17.4.2",
 		"drizzle-orm": "^0.45.2",
 		"execa": "^9.5.2",
 		"fast-check": "^4.9.0",
 		"fta-cli": "3.0.0",
 		"json-schema-to-typescript": "^15.0.2",
-		"pg": "8.22.0",
+		"pg": "8.23.0",
 		"postgres": "^3.4.8",
 		"tsup": "catalog:repo",
 		"tsx": "catalog:repo",

packages/wizard/package.json

@@ -30,14 +30,14 @@
 		"lint": "biome check ."
 	},
 	"dependencies": {
-		"@anthropic-ai/claude-agent-sdk": "^0.3.207",
-		"@anthropic-ai/sdk": "^0.111.0",
+		"@anthropic-ai/claude-agent-sdk": "^0.3.226",
+		"@anthropic-ai/sdk": "^0.116.0",
 		"@cipherstash/auth": "catalog:repo",
 		"@clack/prompts": "1.7.0",
 		"dotenv": "17.4.2",
-		"pg": "8.22.0",
+		"pg": "8.23.0",
 		"picocolors": "^1.1.1",
-		"posthog-node": "^5.41.0",
+		"posthog-node": "^5.48.1",
 		"zod": "^3.25.76"
 	},
 	"//optionalDependencies": "@cipherstash/auth ships per-platform native bindings as optional peerDependencies. pnpm does not auto-install platform-matched optional peer deps, so we declare them here as optionalDependencies — pnpm then picks the binary matching the host's os/cpu (from each sub-package's own package.json) and ignores the rest. All seven names share a single catalog entry to keep them in lockstep.",
@@ -50,7 +50,7 @@
 		"@cipherstash/auth-win32-x64-msvc": "catalog:repo"
 	},
 	"devDependencies": {
-		"@types/pg": "^8.20.0",
+		"@types/pg": "^8.21.0",
 		"tsup": "catalog:repo",
 		"tsx": "catalog:repo",
 		"typescript": "catalog:repo",