Merge remote-tracking branch 'origin/main' into fix/managed-record-capabilities

# Conflicts:
#	public/sw.js

package.json

@@ -1,6 +1,6 @@
 {
   "name": "healthlog",
-  "version": "1.38.11",
+  "version": "1.38.13",
   "description": "Self-hosted personal-health-tracking PWA with Withings integration, AI insights, and doctor-report PDF export.",
   "license": "PolyForm-Noncommercial-1.0.0",
   "homepage": "https://healthlog.dev",
@@ -80,9 +80,9 @@
     "jspdf-autotable": "^5.0.8",
     "lucide-react": "^1.34.0",
     "mmdb-lib": "^3.0.2",
-    "next": "16.2.11",
+    "next": "16.3.4",
     "next-themes": "^0.4.6",
-    "nodemailer": "9.0.3",
+    "nodemailer": "9.1.1",
     "otpauth": "^9.5.1",
     "p-limit": "^7.3.1",
     "pg": "^8.23.0",
@@ -135,6 +135,6 @@
     "testcontainers": "^12.1.0",
     "tw-animate-css": "^1.4.0",
     "typescript": "^6",
-    "vitest": "^4.1.5"
+    "vitest": "^4.1.11"
   }
 }