chore(demos): track @next for esign and template-builder

- bump superdoc to 1.38.0-next.2 in esign and template-builder
- pin the version via overrides so transitive resolutions stay on next
- widen renovate followTag:next to include esign and template-builder
- drop path filter on deploy workflow so any push to main publishes

Author: caiopizzol

.github/workflows/ci.yml

@@ -15,7 +15,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - uses: oven-sh/setup-bun@v2
-      - run: bun install
+      - run: bun install --frozen-lockfile
       - run: bunx biome check .
       - run: bunx tsc --noEmit
 
@@ -32,7 +32,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - uses: oven-sh/setup-bun@v2
-      - run: bun install
+      - run: bun install --frozen-lockfile
       - run: bunx vite build
 
   build-rag-web:
@@ -42,7 +42,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - uses: oven-sh/setup-bun@v2
-      - run: bun install
+      - run: bun install --frozen-lockfile
         working-directory: rag
       - run: bunx vite build
         working-directory: rag/apps/web
@@ -61,7 +61,7 @@ jobs:
       - name: Build demo
         working-directory: ${{ matrix.demo }}
         run: |
-          bun install
+          bun install --frozen-lockfile
           bunx vite build
       - name: Install Playwright
         working-directory: tests

.github/workflows/deploy-rag.yml

@@ -4,11 +4,6 @@ on:
   workflow_dispatch:
   push:
     branches: [main]
-    paths:
-      - "rag/**"
-      - "esign/**"
-      - "template-builder/**"
-      - ".github/workflows/deploy-rag.yml"
 
 env:
   CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
@@ -24,7 +19,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - uses: oven-sh/setup-bun@v2
-      - run: bun install
+      - run: bun install --frozen-lockfile
       - run: bunx biome check .
       - run: bunx tsc --noEmit
 
@@ -41,7 +36,7 @@ jobs:
         with:
           node-version: 22
       - uses: oven-sh/setup-bun@v2
-      - run: bun install
+      - run: bun install --frozen-lockfile
       - run: bunx wrangler deploy
         working-directory: rag/apps/api
 
@@ -57,7 +52,7 @@ jobs:
       - uses: oven-sh/setup-bun@v2
 
       # Build DocRAG
-      - run: bun install
+      - run: bun install --frozen-lockfile
         working-directory: rag
       - run: bunx vite build
         working-directory: rag/apps/web
@@ -66,15 +61,15 @@ jobs:
           BASE_PATH: /docrag/
 
       # Build eSign
-      - run: bun install
+      - run: bun install --frozen-lockfile
         working-directory: esign
       - run: bunx vite build
         working-directory: esign
         env:
           BASE_PATH: /esign/
 
       # Build Template Builder
-      - run: bun install
+      - run: bun install --frozen-lockfile
         working-directory: template-builder
       - run: bunx vite build
         working-directory: template-builder

esign/bun.lock

@@ -12,7 +12,10 @@
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "signature_pad": "^5.1.1",
-    "superdoc": "^1.29.1"
+    "superdoc": "1.38.0-next.2"
+  },
+  "overrides": {
+    "superdoc": "1.38.0-next.2"
   },
   "devDependencies": {
     "@types/react": "^19.0.0",

esign/package.json

@@ -13,8 +13,13 @@
 		{
 			"description": "Demos that ship from the @next channel follow the next dist-tag",
 			"matchPackageNames": ["superdoc", "@superdoc-dev/**"],
-			"matchFileNames": ["rag/**/package.json"],
-			"followTag": "next"
+			"matchFileNames": [
+				"esign/package.json",
+				"template-builder/package.json",
+				"rag/**/package.json"
+			],
+			"followTag": "next",
+			"rangeStrategy": "pin"
 		}
 	]
 }

renovate.json

@@ -10,7 +10,10 @@
     "@superdoc-dev/template-builder": "1.12.0-next.2",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
-    "superdoc": "^1.29.1"
+    "superdoc": "1.38.0-next.2"
+  },
+  "overrides": {
+    "superdoc": "1.38.0-next.2"
   },
   "devDependencies": {
     "@types/react": "^19.0.0",