chore: deps update (#11968)

# Which Problems Are Solved
This pr updates major and minor dependencies and is the first step on
getting our dependabot alerts cut down.

# How the Problems Are Solved

Depedency updates across the board eg:
- Upgrade Angular to v21
- Upgrade next.js to v16.2
- Upgrade tailwind to v4 in the login
- Upgrade vitest to v4 in the login

This is an uncompleted list refer to the changed files for a full
overview of all the updates.

# Additional Changes

Migrated all control flow in the console to the modern control flow
syntax.
Fixed the dependsOn setting for the @zitadel/login:test-unit nx target.

# Additional Context

- Closes https://github.com/zitadel/zitadel/issues/11274

---------

Co-authored-by: Max Peintner <[email protected]>

packages/zitadel-client/package.json

@@ -80,18 +80,18 @@
   },
   "devDependencies": {
     "@bufbuild/protocompile": "^0.0.1",
-    "@eslint/js": "^10.0.0",
-    "@types/node": "^24.10.9",
-    "@typescript-eslint/eslint-plugin": "^8.57.0",
-    "@typescript-eslint/parser": "^8.57.0",
-    "eslint": "^10.0.0",
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^25.5.0",
+    "@typescript-eslint/eslint-plugin": "^8.58.0",
+    "@typescript-eslint/parser": "^8.58.0",
+    "eslint": "^10.1.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-import-resolver-typescript": "^4.4.4",
     "eslint-plugin-import": "^2.32.0",
-    "globals": "^17.0.0",
-    "knip": "^5.82.1",
+    "globals": "^17.4.0",
+    "knip": "^5.88.1",
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
-    "vitest": "^2.1.9"
+    "vitest": "^4.1.2"
   }
-}
+}

packages/zitadel-client/project.json

@@ -33,9 +33,19 @@
     }, 
     "build": {
       "description": "Builds the TypeScript client library",
+      "cache": true,
       "inputs": [
         "default",
-        "{workspaceRoot}/pnpm-lock.yaml"
+        "{workspaceRoot}/pnpm-lock.yaml",
+        {
+          "dependentTasksOutputFiles": "packages/zitadel-proto/cjs/**/*"
+        },
+        {
+          "dependentTasksOutputFiles": "packages/zitadel-proto/es/**/*"
+        },
+        {
+          "dependentTasksOutputFiles": "packages/zitadel-proto/types/**/*"
+        }
       ],
       "outputs": ["{projectRoot}/dist"],
       "dependsOn": ["^generate"]

packages/zitadel-client/src/node.ts

@@ -19,7 +19,7 @@ import { NewAuthorizationBearerInterceptor } from "./interceptors.js";
  */
 export function createServerTransport(
   token: string,
-  opts: GrpcTransportOptions
+  opts: GrpcTransportOptions,
 ) {
   return createGrpcTransport({
     ...opts,
@@ -39,7 +39,10 @@ function toPKCS8(pem: string): string {
   if (pem.includes("BEGIN PRIVATE KEY")) {
     return pem;
   }
-  return createPrivateKey(pem).export({ type: "pkcs8", format: "pem" }) as string;
+  return createPrivateKey(pem).export({
+    type: "pkcs8",
+    format: "pem",
+  }) as string;
 }
 
 export async function newSystemToken({
@@ -79,14 +82,14 @@ export async function verifyJwt<T = JWTPayload>(
     publicHost?: string;
   },
 ): Promise<T & JWTPayload> {
-   const headers: Record<string, string> = {};
-   if (options?.instanceHost) {
-     headers["x-zitadel-instance-host"] = options.instanceHost;
-   }
-   if (options?.publicHost) {
-     headers["x-zitadel-public-host"] = options.publicHost;
-   }
-  const JWKS = createRemoteJWKSet(new URL(keysEndpoint), {headers: headers});
+  const headers: Record<string, string> = {};
+  if (options?.instanceHost) {
+    headers["x-zitadel-instance-host"] = options.instanceHost;
+  }
+  if (options?.publicHost) {
+    headers["x-zitadel-public-host"] = options.publicHost;
+  }
+  const JWKS = createRemoteJWKSet(new URL(keysEndpoint), { headers: headers });
 
   const { payload } = await jwtVerify(token, JWKS, {
     issuer: options?.issuer,

packages/zitadel-proto/.gitignore

@@ -1,8 +1,3 @@
-zitadel
-google
-protoc-gen-openapiv2
-validate
-node_modules
 cjs
 es
 types

packages/zitadel-proto/.nxignore

@@ -0,0 +1,3 @@
+!cjs
+!es
+!types

packages/zitadel-proto/package.json

@@ -83,7 +83,6 @@
     "@bufbuild/protobuf": "^2.11.0"
   },
   "devDependencies": {
-    "@bufbuild/protoc-gen-es": "^2.11.0",
-    "glob": "^11.1.0"
+    "@bufbuild/protoc-gen-es": "^2.11.0"
   }
-}
+}

packages/zitadel-proto/project.json

@@ -3,13 +3,13 @@
   "targets": {
     "generate": {
       "executor": "nx:run-commands",
+      "cache": true,
       "options": {
         "command": "pnpm exec buf generate ../../proto",
         "cwd": "packages/zitadel-proto"
       },
       "inputs": [
-        "{projectRoot}/buf.gen.yaml",
-        "{projectRoot}/package.json",
+        "default",
         "{workspaceRoot}/pnpm-lock.yaml",
         "{workspaceRoot}/proto/**/*"
       ],