Prune unused deps, bump safe minors, add server-only guards.

Remove unused translate/jpeg types packages; refresh patch updates; mark Redis/site-settings/gamedata hotel as server-only with a Vitest stub.

Co-authored-by: Cursor <[email protected]>

package.json

@@ -28,7 +28,7 @@
 		"@hookform/resolvers": "^5.4.0",
 		"@prisma/adapter-mariadb": "^7.8.0",
 		"@prisma/client": "^7.8.0",
-		"@tanstack/react-virtual": "^3.14.5",
+		"@tanstack/react-virtual": "^3.14.6",
 		"bcryptjs": "^3.0.2",
 		"class-variance-authority": "^0.7.1",
 		"clsx": "^2.1.1",
@@ -40,42 +40,41 @@
 		"jpeg-js": "^0.4.4",
 		"json5": "^2.2.3",
 		"jszip": "^3.10.1",
-		"lucide-react": "^1.23.0",
+		"lucide-react": "^1.25.0",
 		"lzma": "^2.3.2",
-		"music-metadata": "^11.13.0",
-		"mysql2": "^3.22.6",
+		"music-metadata": "^11.14.0",
+		"mysql2": "^3.23.0",
 		"next": "^16.2.10",
 		"next-auth": "5.0.0-beta.31",
-		"next-intl": "^4.13.1",
+		"next-intl": "^4.13.2",
 		"nodemailer": "^9.0.3",
 		"otplib": "^12.0.1",
 		"react": "^19.2.0",
 		"react-dom": "^19.2.0",
 		"react-hook-form": "^7.81.0",
-		"resend": "^6.17.1",
-		"sanitize-html": "^2.17.5",
+		"resend": "^6.17.2",
+		"sanitize-html": "^2.17.6",
+		"server-only": "^0.0.1",
 		"sonner": "^2.0.7",
 		"tailwind-merge": "^3.6.0",
 		"tailwindcss-animate": "^1.0.7",
 		"zod": "^3.24.0"
 	},
 	"devDependencies": {
-		"@biomejs/biome": "2.5.3",
+		"@biomejs/biome": "2.5.4",
 		"@tailwindcss/forms": "^0.5.11",
-		"@tailwindcss/postcss": "^4.3.2",
+		"@tailwindcss/postcss": "^4.3.3",
 		"@tailwindcss/typography": "^0.5.20",
-		"@types/jpeg-js": "^0.3.7",
 		"@types/node": "^22.10.0",
 		"@types/nodemailer": "^6.4.0",
 		"@types/react": "^19.2.0",
 		"@types/react-dom": "^19.2.0",
 		"@types/sanitize-html": "^2.16.1",
-		"@vitalets/google-translate-api": "^9.2.1",
 		"dotenv": "^16.4.0",
-		"postcss": "^8.5.16",
+		"postcss": "^8.5.19",
 		"prisma": "^7.8.0",
-		"tailwindcss": "^4.3.2",
-		"tsx": "^4.22.5",
+		"tailwindcss": "^4.3.3",
+		"tsx": "^4.23.1",
 		"typescript": "^5.7.0",
 		"vitest": "^2.1.0"
 	}

src/lib/redis.ts

@@ -1,3 +1,5 @@
+import "server-only";
+
 import Redis from "ioredis";
 
 const globalForRedis = globalThis as unknown as { redis?: Redis | null };

src/lib/services/habbo-gamedata-hotel.ts

@@ -1,3 +1,5 @@
+import "server-only";
+
 import {
 	DEFAULT_HABBO_GAMEDATA_HOTEL,
 	HABBO_GAMEDATA_HOTEL_SETTING_KEY,

src/lib/services/site-settings.ts

@@ -1,3 +1,5 @@
+import "server-only";
+
 import { prisma } from "@/lib/prisma";
 import { redis } from "@/lib/redis";
 

src/test/server-only-stub.ts

@@ -0,0 +1,2 @@
+/** Vitest stub — real `server-only` throws outside the React Server runtime. */
+export {};

vitest.config.ts

@@ -7,6 +7,10 @@ export default defineConfig({
 	resolve: {
 		alias: {
 			"@": fileURLToPath(new URL("./src", import.meta.url)),
+			// server-only throws in Node; tests don't need the Next client guard.
+			"server-only": fileURLToPath(
+				new URL("./src/test/server-only-stub.ts", import.meta.url),
+			),
 		},
 	},
 	test: {