Release: staging -> main (2026-07-22 04:06)

[github-actions]

Summary

Promotes staging into main.

• Source branch: staging
• Target branch: main
• Generated by npm run pr:promote

Included PRs

• 🧹 Extract setupOrgApiMock logic into smaller helper functions #1145: 🧹 Extract setupOrgApiMock logic into smaller helper functions (@is0692vs)
• chore(deps-dev): bump @testing-library/jest-dom from 6.9.1 to 7.0.0 #1139: chore(deps-dev): bump @testing-library/jest-dom from 6.9.1 to 7.0.0 (@app/dependabot)
• chore(deps-dev): bump the npm-development-minor-patch group with 7 updates #1137: chore(deps-dev): bump the npm-development-minor-patch group with 7 updates (@app/dependabot)
• chore(deps): bump the github-actions-all group with 2 updates #1135: chore(deps): bump the github-actions-all group with 2 updates (@app/dependabot)
• Guard character-counter accessibility contract (no live regions) and align palette guidance #1124: Guard character-counter accessibility contract (no live regions) and align palette guidance (@app/copilot-swe-agent)
• Sanitize invitee email lookup error logging in papers invites route #1123: Sanitize invitee email lookup error logging in papers invites route (@app/copilot-swe-agent)
• Restore sanitized invite-route error logging and tighten regression assertions #1122: Restore sanitized invite-route error logging and tighten regression assertions (@app/copilot-swe-agent)
• chore: sync main into staging #1121: chore: sync main into staging (@app/github-actions)

Compare

• https://github.com/Hiroki-org/OpenShelf/compare/main...staging?expand=1

Greptile Summary

This PR promotes staging changes into main. The main changes are:

• GitHub Actions and npm development dependencies updated.
• Invite-route and paper-invite error logging normalized.
• Org settings API test mocks split into smaller helpers.
• Character-counter tests aligned with the no-live-region accessibility contract.

Confidence Score: 5/5

This looks safe to merge after a small logging cleanup.

• No blocking issues found in the changed code.
• The only follow-up is preserving diagnostics when a caught value is a plain object.

apps/api/src/routes/invites.ts

Important Files Changed

Filename	Overview
apps/api/src/routes/invites.ts	Adds local caught-error formatting for invite response failures; non-Error object diagnostics can now collapse to a generic string.
apps/api/src/routes/papers.ts	Uses the same caught-error formatting for invitee email lookup failures while keeping the client response generic.
apps/web/src/app/orgs/[slug]/settings/tests/page.test.tsx	Refactors the org settings API mock into org, member, and paper request helpers.
apps/web/src/app/tests/collections-new.test.tsx	Adds assertions that collection character counters do not use live-region attributes.
apps/web/src/app/tests/orgs-new.test.tsx	Adds assertions that the org description counter does not use live-region attributes.
.github/workflows/ci.yml	Updates checkout and setup-node action references used by CI jobs.
package-lock.json	Updates locked versions for dependency bumps across the workspace.

Prompt To Fix All With AI

Fix the following 1 code review issue. Work through them one at a time, proposing concise fixes.

---

### Issue 1 of 1
apps/api/src/routes/invites.ts:19
**Plain Objects Lose Diagnostics**

`String(error)` turns a thrown plain object into `"[object Object]"`. If a runtime or DB helper rejects with an object carrying fields like `code`, `cause`, or request context, this changed logger drops those fields and leaves the 500 path much harder to debug.

_{Reviews (1): Last reviewed commit: "Merge pull request #1145 from Hiroki-org..." | Re-trigger Greptile}

Greptile also left 1 inline comment on this PR.

Context used (3)

• Knowledge Base — Collections, Orgs, and Invites
• Knowledge Base — Paper Upload, Storage, and Viewing Flow
• Knowledge Base — Web Frontend Shell

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
open-shelf	Ignored		Jul 22, 2026 4:06am

[greptile-apps]

Plain Objects Lose Diagnostics

String(error) turns a thrown plain object into "[object Object]". If a runtime or DB helper rejects with an object carrying fields like code, cause, or request context, this changed logger drops those fields and leaves the 500 path much harder to debug.

Prompt To Fix With AI

This is a comment left during a code review.
Path: apps/api/src/routes/invites.ts
Line: 19

Comment:
**Plain Objects Lose Diagnostics**

`String(error)` turns a thrown plain object into `"[object Object]"`. If a runtime or DB helper rejects with an object carrying fields like `code`, `cause`, or request context, this changed logger drops those fields and leaves the 500 path much harder to debug.

How can I resolve this? If you propose a fix, please make it concise.

[is0692vs]

Closing this generated staging-to-main release PR per policy; staging is not merged into main by this review loop.