chore(local-testing-project): Update to Cedar v4.1.0

[Tobbe]

Bump to latest published Cedar version

[netlify]

✅ Deploy Preview for cedarjs canceled.

Name	Link
🔨 Latest commit	c80b846
🔍 Latest deploy log	https://app.netlify.com/projects/cedarjs/deploys/6a03148b88f44c0008393bd5

[greptile-apps]

Greptile Summary

This PR bumps all @cedarjs/* dependencies in the local testing project from 2.8.0 to 4.1.0 and regenerates the lockfile. The version jump skips the v3.x line but that is expected given Cedar's release cadence.

• Package bumps: @cedarjs/api, @cedarjs/graphql-server, @cedarjs/auth-dbauth-*, @cedarjs/forms, @cedarjs/router, @cedarjs/web, @cedarjs/vite, @cedarjs/core, @cedarjs/eslint-config, @cedarjs/project-config, and @cedarjs/testing are all pinned to 4.1.0.
• Lockfile changes: Transitive Babel dependencies are bumped (e.g. @babel/preset-env 7.29.2 → 7.29.5, @babel/register 7.28.6 → 7.29.3). Notably, srvx, rou3, and @universal-deploy/store are no longer direct dependencies of the @cedarjs/api-server tarball; rou3 and @universal-deploy/store appear to have moved into @cedarjs/vite instead, while srvx has no clear new home in the resolved graph.

Documentation check (per custom instruction): docs/implementation-docs/2026-03-26-cedarjs-project-overview.md describes an "opt-in srvx/WinterTC path via cedar serve api --ud" in both the CONVENTIONS section and the api-server package row. Because srvx is no longer a resolved dependency of the v4.1.0 api-server tarball, that description may no longer be accurate and should be verified and updated if the feature was removed or relocated.

Confidence Score: 4/5

Routine dependency bump safe to merge; the only item worth a follow-up is whether the srvx/WinterTC docs still reflect how the api-server works in v4.1.0.

All changes are version pins in package.json files and the corresponding lockfile regeneration. The package bumps themselves are consistent and internally coherent. The one open question is whether docs/implementation-docs/2026-03-26-cedarjs-project-overview.md is still accurate: the v4.1.0 api-server tarball no longer lists srvx as a direct dependency, yet the doc still describes an opt-in srvx/WinterTC serve path for that package.

The lockfile diff around @cedarjs/api-server deserves a second look to confirm the srvx/WinterTC behavior is handled elsewhere or intentionally dropped.

Important Files Changed

Filename	Overview
local-testing-project/api/package.json	Bumps @cedarjs/api, @cedarjs/auth-dbauth-api, and @cedarjs/graphql-server from 2.8.0 → 4.1.0; no other changes.
local-testing-project/package.json	Bumps @cedarjs/core, @cedarjs/eslint-config, @cedarjs/project-config, and @cedarjs/testing from 2.8.0 → 4.1.0; no other changes.
local-testing-project/web/package.json	Bumps @cedarjs/auth-dbauth-web, @cedarjs/forms, @cedarjs/router, @cedarjs/web, and @cedarjs/vite from 2.8.0 → 4.1.0; no other changes.
local-testing-project/yarn.lock	Lockfile regenerated for v4.1.0 tarballs; notable: srvx, rou3, and @universal-deploy/store were dropped from @cedarjs/api-server's resolved deps (rou3 and @universal-deploy/store moved to @cedarjs/vite), which may affect documented srvx/WinterTC opt-in behavior.

_{Reviews (1): Last reviewed commit: "chore(local-testing-project): Update to ..." | Re-trigger Greptile}

[nx-cloud]

🤖 Nx Cloud AI Fix

Ensure the fix-ci command is configured to always run in your CI pipeline to get automatic fixes in future runs. For more information, please see https://nx.dev/ci/features/self-healing-ci

---

View your CI Pipeline Execution ↗ for commit c80b846

Command	Status	Duration	Result
nx run-many -t build:pack --exclude create-ceda...	✅ Succeeded	5s	View ↗
nx run-many -t build	✅ Succeeded	4m 26s	View ↗

---

☁️ Nx Cloud last updated this comment at 2026-05-12 13:33:19 UTC

[nx-cloud]

🤖 Nx Cloud AI Fix

Ensure the fix-ci command is configured to always run in your CI pipeline to get automatic fixes in future runs. For more information, please see https://nx.dev/ci/features/self-healing-ci

---

View your CI Pipeline Execution ↗ for commit c80b846

Command	Status	Duration	Result
nx run-many -t build:pack --exclude create-ceda...	✅ Succeeded	6s	View ↗
nx run-many -t build	✅ Succeeded	6s	View ↗
nx run-many -t test --minWorkers=1 --maxWorkers=4	✅ Succeeded	7s	View ↗
nx run-many -t test:types	✅ Succeeded	13s	View ↗

---

☁️ Nx Cloud last updated this comment at 2026-05-12 12:03:37 UTC

[github-actions]

The changes in this PR are now available on npm.

Try them out by running yarn cedar upgrade -t 5.0.0-canary.2323

Or try it in a new app with yarn dlx create-cedar-app@5.0.0-canary.2323