| Area | Package | Current | Latest | Risk | Action |
|------|---------|---------|--------|------|--------|
| API | zod | 3.23.x | 4.x | Breaking | Pin to v3 now; plan v4 migration |
| API | stripe | 16.x | 19.x | Breaking | Review API changes; upgrade behind flag |
| API | openai | 4.x | 6.x | Medium | Validate API client changes |
| API | @google-cloud/firestore | 7.x | 8.x | Medium | Check Node 20 compat, typings |
| API | @fastify/cors | 10.x | 11.x | Low | Safe minor upgrade |
| API | @fastify/helmet | 12.x | 13.x | Low | Safe minor upgrade |
| Web | pinia | 2.3.x | 3.x | Medium | Review breaking changes |
| Web | vue-i18n | 9.x | 11.x | Medium | Review migration guide |
| Web | apexcharts | 3.x | 5.x | Medium | Validate API surface |
| Root | @types/node | 22.x | 24.x | Low | Upgrade aligned to Node 20 runtime |

| Recommendation | Command |
|----------------|---------|
| Generate full outdated list | `pnpm -r outdated` |
| Apply safe patch/minor bumps | `pnpm -r up --latest --filter "@my-roadtrip/*"` |
| Run quality gates after bump | `pnpm type-check && pnpm lint && pnpm test && pnpm build` |
| Audit vulnerabilities | `pnpm audit --audit-level=moderate` |

| CI/CD Improvements | Detail |
|-------------------|--------|
| Monorepo CI | `.github/workflows/ci.yml` → pnpm + turbo + cache |
| Frontend CI | `.github/workflows/frontend-ci.yml` → apps/web + pnpm |
| Coverage artifacts | Upload from all workspaces |
| Concurrency | Cancel in-progress runs per ref |

| Test Fix | File | Change |
|----------|------|--------|
| Vitest integration setup path | `apps/api/vitest.integration.config.ts` | `setupFiles` → `./src/test/setup.ts` |

