Update dependencies and fix what the new lint rules caught

Every package moves to its newest in-major version, plus React 19.3, @convex-dev/auth 0.0.96 and next-plausible 4. The backend declares @auth/core and generates sign-in codes without oslo, which @convex-dev/auth no longer pulls in. The UseSend patch now actually removes the crypto import Convex refuses to bundle. The stricter react-hooks and typescript-eslint rules flagged the carousel, chart, image crop and mobile hook, which now pass.

apps/expo/package.json

@@ -20,26 +20,26 @@
     "@expo/vector-icons": "^15.1.1",
     "@gib/backend": "workspace:*",
     "@legendapp/list": "^2.0.19",
-    "@react-navigation/bottom-tabs": "^7.15.8",
-    "@react-navigation/elements": "^2.9.13",
-    "@react-navigation/native": "^7.2.1",
+    "@react-navigation/bottom-tabs": "^7.20.0",
+    "@react-navigation/elements": "^2.9.44",
+    "@react-navigation/native": "^7.5.0",
     "@sentry/react-native": "^7.13.0",
     "convex": "catalog:convex",
-    "expo": "~54.0.33",
+    "expo": "~54.0.37",
     "expo-apple-authentication": "~8.0.8",
-    "expo-constants": "~18.0.13",
-    "expo-dev-client": "~6.0.20",
-    "expo-font": "~14.0.11",
+    "expo-constants": "~18.0.14",
+    "expo-dev-client": "~6.0.21",
+    "expo-font": "~14.0.12",
     "expo-haptics": "~15.0.8",
     "expo-image": "~3.0.11",
-    "expo-linking": "~8.0.11",
-    "expo-router": "~6.0.23",
+    "expo-linking": "~8.0.12",
+    "expo-router": "~6.0.24",
     "expo-secure-store": "~15.0.8",
     "expo-splash-screen": "~31.0.13",
     "expo-status-bar": "~3.0.9",
     "expo-symbols": "~1.0.8",
     "expo-system-ui": "~6.0.9",
-    "expo-web-browser": "~15.0.10",
+    "expo-web-browser": "~15.0.11",
     "nativewind": "5.0.0-preview.2",
     "react": "catalog:react19",
     "react-dom": "catalog:react19",
@@ -49,7 +49,7 @@
     "react-native-reanimated": "~4.1.7",
     "react-native-safe-area-context": "~5.6.2",
     "react-native-screens": "~4.16.0",
-    "react-native-web": "~0.21.2",
+    "react-native-web": "~0.21.3",
     "react-native-worklets": "~0.5.2"
   },
   "devDependencies": {

apps/expo/tsconfig.json

@@ -3,6 +3,7 @@
   "compilerOptions": {
     "jsx": "react-native",
     "checkJs": false,
+    "types": ["node"],
     "moduleSuffixes": [".ios", ".android", ".native", ""],
     "paths": {
       "~/*": ["./src/*"]

apps/next/package.json

@@ -23,20 +23,21 @@
     "@convex-dev/auth": "catalog:convex",
     "@gib/backend": "workspace:*",
     "@gib/ui": "workspace:*",
-    "@payloadcms/db-postgres": "^3.80.0",
-    "@payloadcms/live-preview-react": "^3.80.0",
-    "@payloadcms/next": "^3.80.0",
-    "@payloadcms/richtext-lexical": "^3.80.0",
-    "@sentry/nextjs": "^10.46.0",
+    "@payloadcms/db-postgres": "^3.90.2",
+    "@payloadcms/live-preview-react": "^3.90.2",
+    "@payloadcms/next": "^3.90.2",
+    "@payloadcms/richtext-lexical": "^3.90.2",
+    "@sentry/nextjs": "^10.75.3",
     "@t3-oss/env-nextjs": "^0.13.11",
     "convex": "catalog:convex",
-    "next": "^16.2.1",
-    "next-plausible": "^3.12.5",
-    "payload": "^3.80.0",
+    "next": "^16.3.8",
+    "next-plausible": "^4.0.0",
+    "payload": "^3.90.2",
+    "posthog-js": "^1.435.6",
     "react": "catalog:react19",
     "react-dom": "catalog:react19",
     "require-in-the-middle": "^7.5.2",
-    "superjson": "2.2.3",
+    "superjson": "2.2.6",
     "ws": "catalog:",
     "zod": "catalog:"
   },
@@ -50,7 +51,7 @@
     "@types/node": "catalog:",
     "@types/react": "catalog:react19",
     "@types/react-dom": "catalog:react19",
-    "baseline-browser-mapping": "^2.10.11",
+    "baseline-browser-mapping": "^2.11.26",
     "eslint": "catalog:",
     "jsdom": "catalog:test",
     "prettier": "catalog:",

apps/next/payload-types.ts

@@ -137,6 +137,7 @@ export interface User {
   resetPasswordExpiration?: string | null;
   salt?: string | null;
   hash?: string | null;
+  resetPasswordRequestedAt?: string | null;
   loginAttempts?: number | null;
   lockUntil?: string | null;
   sessions?:
@@ -230,6 +231,7 @@ export interface UsersSelect<T extends boolean = true> {
   resetPasswordExpiration?: T;
   salt?: T;
   hash?: T;
+  resetPasswordRequestedAt?: T;
   loginAttempts?: T;
   lockUntil?: T;
   sessions?: