chore(deps): update dependencies and fix security vulnerabilities

Updated: ioredis 5.9.3, nodemailer 7.0.13, recharts 3.7.0,
drizzle-kit 0.31.9, eslint 9.39.3, prettier 3.8.1,
@types/node 22.19.11, @types/nodemailer 7.0.11

Security overrides (pnpm.overrides):
- minimatch >=10.2.1 (CVE-2026-26996 ReDoS)
- esbuild >=0.25.0 (GHSA-67mh-4wv8-2f99)
- ajv >=8.18.0 (GHSA-2g4f-4pwh-qvx6 ReDoS)
- ioredis 5.9.3 (fix BullMQ type mismatch)

Added Codex CLI remote orchestration docs to CLAUDE.md

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

CLAUDE.md

@@ -410,4 +410,36 @@ Credentials in `~/.pgpass` (chmod 600), nie Klartext in `.env`.
 ### Scripts & Backup
 - `scripts/backup/README.md` - Backup-System Dokumentation
 
-*Letzte Aktualisierung: 14.02.2026*
+## Codex CLI — Remote-Orchestrierung (sv-frontend)
+
+OpenAI Codex CLI (`v0.101.0`, Model `gpt-5.3-codex`) ist auf sv-frontend installiert und kann von sv-payload aus non-interaktiv gesteuert werden. **Nutze Codex für Frontend-Aufgaben um Arbeit zu parallelisieren.**
+
+**Wichtig:** Mehrere Codex-Sessions können parallel laufen — nutze dies für unabhängige Aufgaben in verschiedenen Projekten.
+
+```bash
+# Einzelne Aufgabe (JSON-Output für Parsing):
+ssh sv-frontend "codex exec -s danger-full-access -C ~/frontend.blogwoman.de 'prompt' --json 2>&1"
+
+# Aufgabe mit Ergebnis-Datei:
+ssh sv-frontend "codex exec -s danger-full-access -C ~/projekt -o /tmp/result.txt 'prompt' 2>&1"
+
+# Parallele Aufgaben (in separaten SSH-Sessions):
+ssh sv-frontend "codex exec -s danger-full-access -C ~/frontend.blogwoman.de 'task1' --json" &
+ssh sv-frontend "codex exec -s danger-full-access -C ~/frontend.porwoll.de 'task2' --json" &
+wait
+```
+
+**Wann Codex delegieren:**
+- Frontend-Komponenten erstellen/ändern
+- Lint/Format-Fehler in Frontend-Repos beheben
+- Code-Reviews in Frontend-Projekten
+- Tests schreiben für Frontend-Code
+- Refactoring in Frontend-Repos
+
+**Einschränkungen:**
+- **MUSS** `-s danger-full-access` verwenden (`workspace-write` hat Landlock-Fehler)
+- `rg` (ripgrep) nicht installiert — Codex nutzt `find` als Fallback
+- Keine `~/.codex/config.toml` — Konfiguration nur via CLI-Flags
+- Kein Git-Commit durch Codex — nur Code-Änderungen, Commit/Push über SSH
+
+*Letzte Aktualisierung: 22.02.2026*

package.json

@@ -44,40 +44,40 @@
     "@payloadcms/richtext-lexical": "3.76.1",
     "@payloadcms/translations": "3.76.1",
     "@payloadcms/ui": "3.76.1",
-    "@types/pdfkit": "^0.17.4",
-    "bullmq": "^5.65.1",
+    "@types/pdfkit": "^0.17.5",
+    "bullmq": "^5.70.0",
     "cross-env": "^7.0.3",
     "date-fns": "^4.1.0",
     "dotenv": "16.4.7",
     "exceljs": "^4.4.0",
-    "googleapis": "^170.0.0",
-    "ioredis": "^5.8.2",
+    "googleapis": "^170.1.0",
+    "ioredis": "^5.9.3",
     "next": "16.2.0-canary.41",
     "node-cron": "^4.2.1",
-    "nodemailer": "^7.0.11",
+    "nodemailer": "^7.0.13",
     "payload": "3.76.1",
     "payload-oapi": "^0.2.5",
     "pdfkit": "^0.17.2",
     "react": "19.2.3",
     "react-dom": "19.2.3",
-    "recharts": "^3.6.0",
+    "recharts": "^3.7.0",
     "sharp": "0.34.5"
   },
   "devDependencies": {
     "@playwright/test": "1.57.0",
-    "@types/node": "^22.10.2",
+    "@types/node": "^22.19.11",
     "@types/node-cron": "^3.0.11",
-    "@types/nodemailer": "^7.0.4",
+    "@types/nodemailer": "^7.0.11",
     "@types/react": "19.2.7",
     "@types/react-dom": "19.2.3",
     "@vitejs/plugin-react": "4.5.2",
     "@vitest/coverage-v8": "4.0.15",
-    "drizzle-kit": "^0.31.8",
-    "eslint": "^9.39.2",
+    "drizzle-kit": "^0.31.9",
+    "eslint": "^9.39.3",
     "eslint-config-next": "16.2.0-canary.41",
     "jsdom": "26.1.0",
     "playwright": "1.57.0",
-    "prettier": "^3.7.4",
+    "prettier": "^3.8.1",
     "tsx": "^4.21.0",
     "typescript": "5.9.3",
     "vite-tsconfig-paths": "6.0.0",
@@ -92,6 +92,12 @@
       "sharp",
       "esbuild",
       "unrs-resolver"
-    ]
+    ],
+    "overrides": {
+      "minimatch": ">=10.2.1",
+      "esbuild": ">=0.25.0",
+      "ajv": ">=8.18.0",
+      "ioredis": "5.9.3"
+    }
   }
 }