fix: resolve E2E test dependency graph failures

.snyk

@@ -3,7 +3,7 @@ ignore:
   'SNYK-JS-SIRV-12558119':
     - '* > sirv@2.0.4':
         reason: 'Transitive dependency in Docusaurus; not exploitable in static site serving context (dev-only asset handler)'
-        expires: '2026-07-28T00:00:00.000Z'
+        expires: '2027-01-31T00:00:00.000Z'
         created: '2025-11-06T15:57:00.000Z'
   'SNYK-JS-JSYAML-13961110':
     - '* > js-yaml':
@@ -40,7 +40,7 @@ ignore:
   'SNYK-JS-PNPMNPMCONF-14897556':
     - '* > @pnpm/npm-conf@2.3.1':
         reason: 'Transitive dependency in @docusaurus/core; not exploitable in current usage.'
-        expires: '2026-07-28T00:00:00.000Z'
+        expires: '2027-01-31T00:00:00.000Z'
         created: '2026-01-08T11:04:00.000Z'
   'SNYK-JS-UNDICI-14943963':
     - '* > undici':
@@ -162,7 +162,7 @@ ignore:
   'SNYK-JS-OPENTELEMETRYCORE-17373280':
     - '* > @opentelemetry/core':
         reason: 'The fix requires migrating the Azure Functions telemetry stack from OpenTelemetry 1.x to 2.8.0 or newer. The current Azure exporter and 0.57.x SDK packages require the 1.x API family; a forced major override is type-compatible at build time but leaves mixed SDK internals. Accepted temporarily while the existing OTEL 2.x migration is completed.'
-        expires: '2026-07-18T00:00:00.000Z'
+        expires: '2027-01-31T00:00:00.000Z'
         created: '2026-06-18T00:00:00.000Z'
   'SNYK-JS-BRACEEXPANSION-17706650':
     - '* > brace-expansion@1.1.13':
@@ -174,3 +174,8 @@ ignore:
         reason: 'The transitive dependency of @opentelemetry does not have a fixed upgrade path. Accepted temporarily until upgrade paths are made available.'
         expires: '2026-07-18T00:00:00.000Z'
         created: '2026-06-18T00:00:00.000Z'
+  'SNYK-JS-REACTROUTER-18313151':
+    - '* > react-router@7.18.0':
+        reason: 'react-router-dom 7.18.0 requires matching react-router 7.18.0. React Router 8 removes react-router-dom and requires a separate source migration.'
+        expires: '2027-01-31T00:00:00.000Z'
+        created: '2026-07-30T00:00:00.000Z'

apps/server-mongodb-memory-mock/src/seed/seed.ts

@@ -32,30 +32,30 @@ async function upsertSeedDocuments(connection: Connection, collectionName: strin
 export async function seedDatabase(connection: Connection): Promise<void> {
 	const users = endUsers.map((u: EndUser) => ({
 		...u,
-		_id: toObjectId(u._id as string),
+		_id: toObjectId(String(u._id)),
 	}));
 	await upsertSeedDocuments(connection, 'users', users);
 	console.log(`  Seeded ${users.length} users`);
 
 	const comms = communities.map((c: Community) => ({
 		...c,
-		_id: toObjectId(c._id as string),
+		_id: toObjectId(String(c._id)),
 		createdBy: toObjectId(String(c.createdBy)),
 	}));
 	await upsertSeedDocuments(connection, 'communities', comms);
 	console.log(`  Seeded ${comms.length} communities`);
 
 	const roles = endUserRoles.map((r: EndUserRole) => ({
 		...r,
-		_id: toObjectId(r._id as string),
+		_id: toObjectId(String(r._id)),
 		community: toObjectId(String(r.community)),
 	}));
 	await upsertSeedDocuments(connection, 'roles', roles);
 	console.log(`  Seeded ${roles.length} roles`);
 
 	const mems = members.map((m: Member) => ({
 		...m,
-		_id: toObjectId(m._id as string),
+		_id: toObjectId(String(m._id)),
 		community: toObjectId(String(m.community)),
 		role: m.role ? toObjectId(String(m.role)) : undefined,
 		accounts: m.accounts.map((a) => ({
@@ -70,7 +70,7 @@ export async function seedDatabase(connection: Connection): Promise<void> {
 
 	const props = properties.map((p: Property) => ({
 		...p,
-		_id: toObjectId(p._id as string),
+		_id: toObjectId(String(p._id)),
 		community: toObjectId(String(p.community)),
 		owner: p.owner ? toObjectId(String(p.owner)) : undefined,
 	}));
@@ -79,7 +79,7 @@ export async function seedDatabase(connection: Connection): Promise<void> {
 
 	const svcs = services.map((s: Service) => ({
 		...s,
-		_id: toObjectId(s._id as string),
+		_id: toObjectId(String(s._id)),
 		community: toObjectId(String(s.community)),
 	}));
 	await upsertSeedDocuments(connection, 'services', svcs);

apps/server-mongodb-memory-mock/turbo.json

@@ -3,13 +3,13 @@
 	"tags": ["mock"],
 	"tasks": {
 		"dev": {
-			"dependsOn": ["build"],
+			"dependsOn": ["^build"],
 			"persistent": true,
 			"interruptible": true,
 			"inputs": []
 		},
 		"dev:worktree": {
-			"dependsOn": ["build"],
+			"dependsOn": ["^build"],
 			"persistent": true,
 			"interruptible": true,
 			"inputs": []

apps/server-oauth2-mock/turbo.json

@@ -5,13 +5,13 @@
 			"inputs": ["$TURBO_EXTENDS$", "../**/mock-oidc*.json"]
 		},
 		"dev": {
-			"dependsOn": ["build"],
+			"dependsOn": ["^build"],
 			"interruptible": true,
 			"persistent": true,
 			"inputs": ["$TURBO_DEFAULT$", "../**/mock-oidc*.json"]
 		},
 		"dev:worktree": {
-			"dependsOn": ["build"],
+			"dependsOn": ["^build"],
 			"interruptible": true,
 			"persistent": true,
 			"inputs": ["$TURBO_DEFAULT$", "../**/mock-oidc*.json"]

packages/cellix/serenity-framework/package.json

@@ -147,7 +147,7 @@
 		"@types/react": "^19.1.8",
 		"@vitest/coverage-istanbul": "catalog:",
 		"playwright": "catalog:",
-		"react": "^19.1.0",
+		"react": "catalog:",
 		"rimraf": "catalog:",
 		"typescript": "catalog:",
 		"vitest": "catalog:"

packages/cellix/service-queue-storage/package.json

@@ -31,7 +31,7 @@
 	},
 	"dependencies": {
 		"@azure/identity": "^4.13.1",
-		"@azure/storage-queue": "12.29.0",
+		"@azure/storage-queue": "catalog:",
 		"@opentelemetry/api": "1.9.0",
 		"ajv": "^8.12.0",
 		"ajv-formats": "^2.1.1",

packages/cellix/ui-core/package.json

@@ -50,6 +50,8 @@
 		"@vitest/browser-playwright": "catalog:",
 		"@vitest/coverage-istanbul": "catalog:",
 		"jsdom": "catalog:",
+		"react": "catalog:",
+		"react-dom": "catalog:",
 		"react-oidc-context": "^3.3.0",
 		"react-router-dom": "catalog:",
 		"rimraf": "catalog:",

packages/ocom-verification/acceptance-ui/package.json

@@ -20,8 +20,8 @@
 		"@serenity-js/serenity-bdd": "catalog:",
 		"antd": "catalog:",
 		"graphql": "catalog:",
-		"react": "^19.1.0",
-		"react-dom": "^19.1.0",
+		"react": "catalog:",
+		"react-dom": "catalog:",
 		"react-oidc-context": "^3.3.0",
 		"react-router-dom": "catalog:",
 		"std-env": "^4.0.0"

packages/ocom-verification/e2e-tests/turbo.json

@@ -2,7 +2,7 @@
 	"extends": ["//"],
 	"tasks": {
 		"test:e2e": {
-			"dependsOn": ["^build"],
+			"dependsOn": ["^build", "@apps/api#build", "@apps/server-mongodb-memory-mock#build", "@apps/server-oauth2-mock#build", "@apps/ui-community#build", "@apps/ui-staff#build"],
 			"inputs": [
 				"src/**/*.ts",
 				"config/**",
@@ -16,7 +16,7 @@
 			"cache": false
 		},
 		"test:e2e:ci": {
-			"dependsOn": ["^build"],
+			"dependsOn": ["^build", "@apps/api#build", "@apps/server-mongodb-memory-mock#build", "@apps/server-oauth2-mock#build", "@apps/ui-community#build", "@apps/ui-staff#build"],
 			"inputs": ["src/**/*.ts", "cucumber.js", "package.json"],
 			"cache": false
 		},

packages/ocom/persistence/src/datasources/domain/user/staff-role/staff-role.repository.test.ts

@@ -85,7 +85,7 @@ test.for(feature, ({ Scenario, Background, BeforeEachScenario }) => {
 		};
 		Object.assign(ModelMock, {
 			findById: vi.fn((id: string) => ({
-				exec: vi.fn(() => (id === staffRoleDoc._id ? staffRoleDoc : null)),
+				exec: vi.fn(() => (id === String(staffRoleDoc._id) ? staffRoleDoc : null)),
 			})),
 			findOne: vi.fn((query: { roleName?: string; enterpriseAppRole?: string; isDefault?: boolean }) => ({
 				exec: vi.fn(() => {

packages/ocom/persistence/src/datasources/readonly/mongo-data-source.ts

@@ -1,8 +1,13 @@
 import type { MongooseSeedwork } from '@cellix/mongoose-seedwork';
-import { type FilterQuery, type FlattenMaps, isValidObjectId, type Model, type PipelineStage, type QueryOptions, type Require_id } from 'mongoose';
+import { type FilterQuery, isValidObjectId, type Model, type PipelineStage, type QueryOptions, type Require_id } from 'mongoose';
 
-type LeanBase<T> = Readonly<Require_id<FlattenMaps<T>>>;
+// FlattenMaps is unnecessary for these schemas and recursively transforms embedded
+// Mongoose documents in ways that make lean results incompatible with converters.
+type LeanBase<T> = Readonly<Require_id<T>>;
 type Lean<T> = LeanBase<T> & { id: string };
+type ObjectIdLike = { toHexString: () => string };
+
+const hasToHexString = (value: unknown): value is ObjectIdLike => typeof value === 'object' && value !== null && 'toHexString' in value && typeof value.toHexString === 'function';
 
 export type FindOptions = {
 	fields?: string[] | undefined;
@@ -49,9 +54,14 @@ export class MongoDataSourceImpl<TDoc extends MongooseSeedwork.Base> implements
 	}
 
 	private appendId(doc: LeanBase<TDoc>): Lean<TDoc> {
+		const id = doc._id;
+		const stringId = typeof id === 'string' ? id : hasToHexString(id) ? id.toHexString() : null;
+		if (stringId === null) {
+			throw new TypeError('MongoDB document is missing a string-compatible _id');
+		}
 		return {
 			...doc,
-			id: String(doc._id),
+			id: stringId,
 		};
 	}
 

packages/ocom/service-queue-storage/turbo.json

@@ -8,7 +8,7 @@
 			"outputs": ["src/**/*.schema.generated.ts"]
 		},
 		"build": {
-			"dependsOn": ["gen"],
+			"dependsOn": ["gen", "^build"],
 			"inputs": ["$TURBO_EXTENDS$"],
 			"outputs": ["$TURBO_EXTENDS$"]
 		}