Bump Babel, TypeScript, React Native and assorted dependencies; refresh lockfile (#1606)

* Update dependency versions

* Fix gesture handler Android dependency (#1611)

* Patch screens codegen type (#1609)

* Downgrade Sentry React Native (#1612)

* fix patches and packages

* downgrade versions for gesture handler and screens

* agent feedback

* fix ios building

* allow ios tets to pass

* formatting

* make cache more resilient

* Address CodeRabbitAI review comments

This commit addresses all 7 unresolved CodeRabbitAI comments on PR #1606:

Patch-package error handling (comments #1, #2, #3):
- stderr capture already implemented in both root and workspace patch runs
- Add CI warning when patches fail silently instead of exiting with 0
- Log completion status in CI mode for visibility

Critical Mixpanel dependency fix (comment #5):
- Add explicit Mixpanel-swift pod declaration to fix E2E build failures
- Ensures Mixpanel is available even when NFCPassportReader is skipped during E2E testing

React-native-web validation (comment #4):
- Verified no usage of deprecated findNodeHandle, pointerEvents: 'box-none', or createPortal
- Safe to upgrade from 0.19 to 0.21.2

CI workflow improvements (comments #6, #7):
- Create cache-sdk-build composite action for consistent SDK build artifact caching
- Replace all direct actions/cache@v4 usage with cache-yarn composite action
- Replace all direct actions/cache/restore@v4 and save@v4 with cache-sdk-build
- Add nested require() validation step before tests to fail fast on problematic patterns

All changes follow repository coding guidelines for CI caching and test memory optimization.

* Extend cache composite actions to all SDK workflows

This commit extends the caching standardization from PR #1606 to include
mobile-sdk-ci.yml and core-sdk-ci.yml workflows.

New composite actions created:
- cache-mobile-sdk-build: For mobile SDK build artifacts
- cache-core-sdk-build: For core SDK build artifacts

Workflow updates:
- mobile-sdk-ci.yml: Replaced 5 instances of direct actions/cache with cache-mobile-sdk-build
- core-sdk-ci.yml: Replaced 4 instances of direct actions/cache with cache-core-sdk-build

All SDK CI workflows now use consistent caching patterns via composite actions,
following the AGENTS.md guideline: "Use shared composite actions from .github/actions
for CI caching instead of calling actions/cache directly."

Benefits:
- Consistent caching across all SDK workflows (qrcode, mobile, core)
- Centralized cache configuration - easier to maintain
- Follows established patterns from qrcode-sdk-ci.yml

* downgrade react-native-svg

* update pod lock file

* sort

app/ios/PassportReader.swift

@@ -11,9 +11,9 @@ import Foundation
 import React
 #if !E2E_TESTING
 import NFCPassportReader
+import Mixpanel
 #endif
 import Security
-import Mixpanel
 import Sentry
 
 #if !E2E_TESTING

app/ios/Podfile

@@ -53,8 +53,6 @@ end
 target "Self" do
   # Native module exclusion for E2E testing is handled in react-native.config.cjs
   config = use_native_modules!
-
-  use_frameworks!
   # Skip NFCPassportReader for e2e testing to avoid build issues
   unless ENV["E2E_TESTING"] == "1"
     # Check if we're running in a selfxyz repo or an external fork
@@ -79,10 +77,13 @@ target "Self" do
     pod "NFCPassportReader", git: nfc_repo_url, commit: "9eff7c4e3a9037fdc1e03301584e0d5dcf14d76b"
   end
 
+  # Explicitly declare Mixpanel to ensure it's available even in E2E builds
+  # (NFCPassportReader also includes Mixpanel, but is skipped during E2E testing)
+  pod "Mixpanel-swift", :modular_headers => true
+
   pod "QKMRZScanner"
   pod "lottie-ios"
   pod "SwiftQRScanner", :git => "https://github.com/vinodiOS/SwiftQRScanner"
-  pod "Mixpanel-swift", "~> 5.0.0"
   # RNReactNativeHapticFeedback is handled by autolinking
 
   use_react_native!(

app/ios/Podfile.lock

@@ -1558,7 +1558,7 @@ PODS:
     - React-Core
   - react-native-netinfo (11.4.1):
     - React-Core
-  - react-native-nfc-manager (3.16.3):
+  - react-native-nfc-manager (3.17.2):
     - React-Core
   - react-native-passkey (3.3.1):
     - DoubleConversion
@@ -1984,7 +1984,7 @@ PODS:
     - ReactCommon/turbomodule/bridging
     - ReactCommon/turbomodule/core
     - Yoga
-  - RNDeviceInfo (14.1.1):
+  - RNDeviceInfo (15.0.1):
     - React-Core
   - RNFBApp (19.3.0):
     - Firebase/CoreOnly (= 10.24.0)
@@ -2042,7 +2042,7 @@ PODS:
     - ReactCommon/turbomodule/bridging
     - ReactCommon/turbomodule/core
     - Yoga
-  - RNLocalize (3.6.0):
+  - RNLocalize (3.6.1):
     - DoubleConversion
     - glog
     - hermes-engine
@@ -2129,7 +2129,7 @@ PODS:
     - ReactCommon/turbomodule/bridging
     - ReactCommon/turbomodule/core
     - Yoga
-  - RNSentry (7.0.1):
+  - RNSentry (7.0.0):
     - DoubleConversion
     - glog
     - hermes-engine
@@ -2152,7 +2152,7 @@ PODS:
     - ReactCommon/turbomodule/core
     - Sentry/HybridSDK (= 8.53.2)
     - Yoga
-  - RNSVG (15.15.0):
+  - RNSVG (15.12.1):
     - DoubleConversion
     - glog
     - hermes-engine
@@ -2172,9 +2172,9 @@ PODS:
     - ReactCodegen
     - ReactCommon/turbomodule/bridging
     - ReactCommon/turbomodule/core
-    - RNSVG/common (= 15.15.0)
+    - RNSVG/common (= 15.12.1)
     - Yoga
-  - RNSVG/common (15.15.0):
+  - RNSVG/common (15.12.1):
     - DoubleConversion
     - glog
     - hermes-engine
@@ -2223,7 +2223,7 @@ DEPENDENCIES:
   - hermes-engine (from `../node_modules/react-native/sdks/hermes-engine/hermes-engine.podspec`)
   - lottie-ios
   - lottie-react-native (from `../node_modules/lottie-react-native`)
-  - Mixpanel-swift (~> 5.0.0)
+  - Mixpanel-swift
   - "NFCPassportReader (from `git@github.com:selfxyz/NFCPassportReader.git`, commit `9eff7c4e3a9037fdc1e03301584e0d5dcf14d76b`)"
   - QKMRZScanner
   - RCT-Folly (from `../node_modules/react-native/third-party-podspecs/RCT-Folly.podspec`)
@@ -2626,7 +2626,7 @@ SPEC CHECKSUMS:
   react-native-get-random-values: d16467cf726c618e9c7a8c3c39c31faa2244bbba
   react-native-mobilesdk-module: 4770cb45fdd19dc4eed04615f0fcdab013b3dfe2
   react-native-netinfo: cec9c4e86083cb5b6aba0e0711f563e2fbbff187
-  react-native-nfc-manager: 66a00e5ddab9704efebe19d605b1b8afb0bb1bd7
+  react-native-nfc-manager: c8891e460b4943b695d63f7f4effc6345bbefc83
   react-native-passkey: 8853c3c635164864da68a6dbbcec7148506c3bcf
   react-native-safe-area-context: a7aad44fe544b55e2369a3086e16a01be60ce398
   react-native-sqlite-storage: 0c84826214baaa498796c7e46a5ccc9a82e114ed
@@ -2660,18 +2660,18 @@ SPEC CHECKSUMS:
   ReactCommon: b2eb96a61b826ff327a773a74357b302cf6da678
   RNCAsyncStorage: 0003b916f1a69fe2d20b7910e0d08da3d32c7bd6
   RNCClipboard: a4827e134e4774e97fa86f7f986694dd89320f13
-  RNDeviceInfo: bcce8752b5043a623fe3c26789679b473f705d3c
+  RNDeviceInfo: 36d7f232bfe7c9b5c494cb7793230424ed32c388
   RNFBApp: 4097f75673f8b42a7cd1ba17e6ea85a94b45e4d1
   RNFBMessaging: 92325b0d5619ac90ef023a23cfd16fd3b91d0a88
   RNFBRemoteConfig: a569bacaa410acfcaba769370e53a787f80fd13b
   RNGestureHandler: a63b531307e5b2e6ea21d053a1a7ad4cf9695c57
   RNInAppBrowser: 6d3eb68d471b9834335c664704719b8be1bfdb20
   RNKeychain: 471ceef8c13f15a5534c3cd2674dbbd9d0680e52
-  RNLocalize: 4f5e4a46d2bccd04ccb96721e438dcb9de17c2e0
+  RNLocalize: 2760999d1e2fc95fb7b7e5247631feb3c08156dc
   RNReactNativeHapticFeedback: e526ac4a7ca9fb23c7843ea4fd7d823166054c73
   RNScreens: 806e1449a8ec63c2a4e4cf8a63cc80203ccda9b8
-  RNSentry: 6ad982be2c8e32dab912afb4132b6a0d88484ea0
-  RNSVG: 39476f26bbbe72ffe6194c6fc8f6acd588087957
+  RNSentry: f79dd124cc49088445c16d23955860dd0d1db6f3
+  RNSVG: 0c1fc3e7b147949dc15644845e9124947ac8c9bb
   segment-analytics-react-native: 0eae155b0e9fa560fa6b17d78941df64537c35b7
   Sentry: 59993bffde4a1ac297ba6d268dc4bbce068d7c1b
   SocketRocket: d4aabe649be1e368d1318fdf28a022d714d65748
@@ -2681,6 +2681,6 @@ SPEC CHECKSUMS:
   TwilioVideo: 9f51085d4e4fb3aff8e168b8215b31cb0f486a2f
   Yoga: 1259c7a8cbaccf7b4c3ddf8ee36ca11be9dee407
 
-PODFILE CHECKSUM: f03c12b5d96fb6e22afe20fba517840fef44e76f
+PODFILE CHECKSUM: 8cfd84595c3e826f512f5c545d232a27f1850ff3
 
 COCOAPODS: 1.16.2

app/ios/SelfAnalytics.swift

@@ -1,9 +1,9 @@
 // SPDX-License-Identifier: BUSL-1.1; Copyright (c) 2025 Social Connect Labs, Inc.; Licensed under BUSL-1.1 (see LICENSE); Apache-2.0 from 2029-06-11
 
 import Foundation
-import Mixpanel
 
 #if !E2E_TESTING
+import Mixpanel
 import NFCPassportReader
 
 public class SelfAnalytics: Analytics {

app/package.json

@@ -85,13 +85,13 @@
     "react-native-webview": "13.16.0"
   },
   "dependencies": {
-    "@babel/runtime": "^7.28.3",
-    "@ethersproject/shims": "^5.7.0",
+    "@babel/runtime": "^7.28.6",
+    "@ethersproject/shims": "^5.8.0",
     "@noble/hashes": "^1.5.0",
     "@openpassport/zk-kit-imt": "^0.0.5",
     "@openpassport/zk-kit-lean-imt": "^0.0.6",
     "@openpassport/zk-kit-smt": "^0.0.1",
-    "@peculiar/x509": "^1.13.0",
+    "@peculiar/x509": "^1.14.3",
     "@react-native-async-storage/async-storage": "^2.2.0",
     "@react-native-clipboard/clipboard": "1.16.3",
     "@react-native-community/blur": "^4.4.1",
@@ -108,7 +108,7 @@
     "@selfxyz/euclid": "^0.6.1",
     "@selfxyz/mobile-sdk-alpha": "workspace:^",
     "@sentry/react": "^9.32.0",
-    "@sentry/react-native": "7.0.1",
+    "@sentry/react-native": "7.0.0",
     "@stablelib/cbor": "^2.0.1",
     "@sumsub/react-native-mobilesdk-module": "1.40.2",
     "@tamagui/animations-css": "1.126.14",
@@ -122,7 +122,7 @@
     "@turnkey/react-native-wallet-kit": "1.1.5",
     "@walletconnect/react-native-compat": "^2.23.0",
     "@xstate/react": "^5.0.3",
-    "asn1js": "^3.0.6",
+    "asn1js": "^3.0.7",
     "axios": "^1.13.2",
     "buffer": "^6.0.3",
     "country-emoji": "^1.5.6",
@@ -136,8 +136,8 @@
     "js-sha512": "^0.9.0",
     "lottie-react": "^2.4.1",
     "lottie-react-native": "7.2.2",
-    "node-forge": "^1.3.1",
-    "pkijs": "^3.2.5",
+    "node-forge": "^1.3.3",
+    "pkijs": "^3.3.3",
     "poseidon-lite": "^0.2.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
@@ -147,7 +147,7 @@
     "react-native-blur-effect": "^1.1.3",
     "react-native-check-version": "^1.3.0",
     "react-native-cloud-storage": "^2.2.2",
-    "react-native-device-info": "^14.0.4",
+    "react-native-device-info": "^15.0.1",
     "react-native-dotenv": "^3.4.11",
     "react-native-edge-to-edge": "^1.7.0",
     "react-native-gesture-handler": "2.19.0",
@@ -156,18 +156,18 @@
     "react-native-inappbrowser-reborn": "^3.7.0",
     "react-native-keychain": "^10.0.0",
     "react-native-linear-gradient": "^2.8.3",
-    "react-native-localize": "^3.5.2",
-    "react-native-logs": "^5.3.0",
-    "react-native-nfc-manager": "3.16.3",
-    "react-native-passkey": "^3.3.1",
+    "react-native-localize": "^3.6.1",
+    "react-native-logs": "^5.5.0",
+    "react-native-nfc-manager": "3.17.2",
+    "react-native-passkey": "^3.3.2",
     "react-native-passport-reader": "1.0.3",
-    "react-native-safe-area-context": "^5.6.1",
+    "react-native-safe-area-context": "^5.6.2",
     "react-native-screens": "4.15.3",
     "react-native-sqlite-storage": "^6.0.1",
-    "react-native-svg": "15.15.0",
+    "react-native-svg": "15.12.1",
     "react-native-svg-web": "1.0.9",
     "react-native-url-polyfill": "^3.0.0",
-    "react-native-web": "^0.19.0",
+    "react-native-web": "^0.21.2",
     "react-native-webview": "^13.16.0",
     "react-qr-barcode-scanner": "^2.1.8",
     "socket.io-client": "^4.8.3",
@@ -177,14 +177,14 @@
     "zustand": "^4.5.2"
   },
   "devDependencies": {
-    "@babel/core": "^7.28.3",
-    "@babel/plugin-syntax-flow": "^7.27.1",
-    "@babel/plugin-transform-classes": "^7.27.1",
+    "@babel/core": "^7.28.6",
+    "@babel/plugin-syntax-flow": "^7.28.6",
+    "@babel/plugin-transform-classes": "^7.28.6",
     "@babel/plugin-transform-export-namespace-from": "^7.27.1",
     "@babel/plugin-transform-flow-strip-types": "^7.27.1",
-    "@babel/plugin-transform-private-methods": "^7.27.1",
-    "@babel/preset-env": "^7.28.3",
-    "@babel/preset-react": "^7.27.1",
+    "@babel/plugin-transform-private-methods": "^7.28.6",
+    "@babel/preset-env": "^7.28.6",
+    "@babel/preset-react": "^7.28.5",
     "@react-native-community/cli": "^16.0.3",
     "@react-native/babel-preset": "0.76.9",
     "@react-native/eslint-config": "0.76.9",
@@ -210,11 +210,11 @@
     "@types/react-test-renderer": "^18",
     "@typescript-eslint/eslint-plugin": "^8.39.0",
     "@typescript-eslint/parser": "^8.39.0",
-    "@vitejs/plugin-react-swc": "^3.10.2",
+    "@vitejs/plugin-react-swc": "^4.2.2",
     "babel-plugin-module-resolver": "^5.0.2",
     "babel-plugin-transform-remove-console": "^6.9.4",
     "constants-browserify": "^1.0.0",
-    "dompurify": "^3.2.6",
+    "dompurify": "^3.3.1",
     "eslint": "^8.57.0",
     "eslint-config-prettier": "10.1.8",
     "eslint-import-resolver-typescript": "^3.7.0",
@@ -229,14 +229,15 @@
     "jest": "^30.2.0",
     "path-browserify": "^1.0.1",
     "prettier": "^3.5.3",
-    "react-native-svg-transformer": "^1.5.1",
+    "prop-types": "^15.8.1",
+    "react-native-svg-transformer": "^1.5.2",
     "react-test-renderer": "^18.3.1",
-    "rollup-plugin-visualizer": "^6.0.3",
+    "rollup-plugin-visualizer": "^6.0.5",
     "stream-browserify": "^3.0.0",
     "ts-morph": "^22.0.0",
     "ts-node": "^10.9.2",
-    "typescript": "^5.9.2",
-    "vite": "^7.0.0",
+    "typescript": "^5.9.3",
+    "vite": "^7.3.1",
     "vite-plugin-svgr": "^4.5.0"
   },
   "packageManager": "yarn@4.12.0",