chore(deps): absorb the gouncer releases the pins had fallen behind

[SirLouen]

The pins lagged three brick trains: authkit v0.5.0 and ratelimit v0.3.0 name every refusal with a stable code, and react-auth 0.4.0 speaks the reader language through its own catalogue. The bump proved purely additive, no assertion anywhere held the old refusal shapes. react-auth 0.4.0 asks for @wordpress/i18n 6.26.0 while @wordpress/components pulled 6.25.0 transitively, so the workspace now pins one shared 6.26.0 copy, which is the shape that avoids the two-instance silent-English hazard.

Testing instructions

1. Run GOWORK=off go test ./... with the compose database up. Expect 1348 tests across 30 packages.

2. Run fnm exec --using=26 pnpm peers check. Expect no issues, where main reports react-auth 0.4.0 wanting @wordpress/i18n 6.26.0 if you bump without the override.

3. Run fnm exec --using=26 pnpm why @wordpress/i18n | grep @wordpress/i18n@ | sort -u. Expect exactly one line, 6.26.0.

4. Run fnm exec --using=26 pnpm -r cover, pnpm typecheck, pnpm lint and pnpm lint:css from frontend. Expect 430 tests and 100 percent on all four metrics.

5. Run fnm exec --using=26 make generate and confirm git status stays clean, then fnm exec --using=26 make e2e for 37 specs.

Closes #79

Summary by CodeRabbit

• Chores
  • Updated authentication components to their latest compatible versions.
  • Updated rate-limiting support for improved compatibility.
  • Applied a compatibility pin for the WordPress internationalization package.
  • Synchronized authentication updates across frontend and SDK packages.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 5ed2f329-a020-4358-8367-af4e8bf05829

📥 Commits

Reviewing files that changed from the base of the PR and between 3331ba1 and 57fc6ba.

⛔ Files ignored due to path filters (2)

• go.sum is excluded by !**/*.sum
• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (4)

• frontend/package.json
• go.mod
• pnpm-workspace.yaml
• sdk/frontend/package.json

Included review availability: Your plan provides up to 10 included reviews per hour; 9 remain after this review.

---

📝 Walkthrough

Walkthrough

The pull request updates frontend authentication dependencies to 0.4.0, updates Gouncer Go modules, and pins @wordpress/i18n to 6.26.0.

Changes

Dependency refresh

Layer / File(s)	Summary
Frontend dependency pins frontend/package.json, sdk/frontend/package.json, pnpm-workspace.yaml	Both frontend packages now require @gopherium/react-auth 0.4.0. The workspace excludes that version from release-age checks and pins @wordpress/i18n to 6.26.0.
Go dependency pins go.mod	authkit changes to v0.5.0 and authkit/ratelimit changes to v0.3.0. authkit/postgres remains at v0.3.0.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Merge Risk: ⚪ Minimal · up to 57fc6

This PR updates dependency pins and aligns the shared frontend dependency version; no actionable merge-blocking risk remains, so it is merge-ready after normal checks.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Out of Scope Changes check	⚠️ Warning	The @wordpress/i18n override is not part of the dependency updates requested by linked issue #79.	Move the @wordpress/i18n pin to a linked issue or remove it from this pull request.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the dependency update and the outdated pins described in the pull request.
Linked Issues check	✅ Passed	The Go and frontend dependency pins match issue #79, and the PR states that older refusal-shape assertions need no changes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/79

---

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!