Release v5.2.8 (#3375)

Upgrades to Better Auth 1.7, expands Custom Styles coverage of item headers, and adds a human-approval step to the AI agent's resume edits.

Breaking for self-hosters using a custom OAuth provider: the callback path changes from /api/auth/oauth2/callback/custom to /api/auth/callback/custom, and installs using OAUTH_DISCOVERY_URL need one additional UPDATE after upgrading. Both are documented in docs/self-hosting/sso.mdx.

- Better Auth 1.7, with the account issuer migration and the jwks alg/crv columns the 1.7 jwt plugin requires
- Agent edits gated behind an approval step, with crash-safe runs and context pruning
- item-header now covers every section header row on every template; adds the item-header-row part
- Fixes provider unlinking, auth error messages, and version conflicts on freshly created resumes
- New /auth/error page, translated across all 53 target locales
- DeepSeek Harness plugin moved into packages/dsh-plugin
- Dependency bumps across the workspace

package.json

@@ -1,7 +1,7 @@
 {
 	"name": "reactive-resume",
 	"description": "Reactive Resume is a free and open-source resume builder that simplifies the process of creating, updating, and sharing your resume.",
-	"version": "5.2.7",
+	"version": "5.2.8",
 	"private": true,
 	"license": "MIT",
 	"author": {
@@ -13,7 +13,7 @@
 		"type": "git",
 		"url": "https://github.com/amruthpillai/reactive-resume.git"
 	},
-	"packageManager": "pnpm@11.22.0",
+	"packageManager": "pnpm@11.24.0+sha512.bd27e345e976dcb0be0b7a1228217b049a817e21b1f355c90dbe7dc46671895a8bc1e6d06c24554505ea93ea0b45f489a27ec1bfbc8de6a9659fca0f16fa0000",
 	"workspaces": [
 		"apps/*",
 		"packages/*",
@@ -42,7 +42,7 @@
 		"test:agent": "turbo run test:agent --concurrency=4"
 	},
 	"devDependencies": {
-		"@biomejs/biome": "^2.5.8",
+		"@biomejs/biome": "^2.5.10",
 		"@commitlint/cli": "^21.2.2",
 		"@commitlint/config-conventional": "^21.2.2",
 		"@playwright/test": "^1.62.1",
@@ -50,18 +50,18 @@
 		"@testing-library/dom": "^10.4.1",
 		"@testing-library/jest-dom": "^7.0.1",
 		"@testing-library/react": "^16.3.2",
-		"@testing-library/user-event": "^14.6.4",
+		"@testing-library/user-event": "^14.6.6",
 		"@types/node": "^26.2.0",
-		"@types/pg": "^8.23.0",
-		"@vitest/coverage-v8": "^4.1.10",
+		"@types/pg": "^8.23.1",
+		"@vitest/coverage-v8": "^4.1.11",
 		"github-actionlint": "1.7.12",
-		"happy-dom": "^20.11.2",
+		"happy-dom": "^20.11.6",
 		"knip": "^6.32.2",
 		"lefthook": "^2.1.10",
 		"markdownlint-cli2": "0.23.2",
 		"pg": "^8.23.0",
-		"turbo": "^2.10.10",
+		"turbo": "^2.10.11",
 		"typescript": "^7.0.2",
-		"vitest": "^4.1.10"
+		"vitest": "^4.1.11"
 	}
 }