fix: refresh CLI template npm lockfiles for package manager parity

[devin-ai-integration]

What

The CLI Template Package Manager Parity workflow compares the versions npm installs (from the committed package-lock.json) against what pnpm resolves fresh from the ranges in package.json. Upstream releases within the declared ranges have drifted the two apart again, so the check fails. Same fix as #1145 / #1136 / #1123.

Changes

• npm update --package-lock-only in templates/openui-cloud and templates/openui-self-hosted — lockfile-only refresh, no package.json changes.

Test Plan

• Verified locally: reproduced the CI job (npm ci on a copy with the lockfile, pnpm install on a copy without it, then compare-template-installs.mjs) — both templates report identical versions for all direct dependencies (18 and 13 respectively).

Checklist

• I linked a related issue, if applicable
• I updated docs/README when needed (n/a)
• I considered backwards compatibility (lockfile only, ranges unchanged)

Link to Devin session: https://app.devin.ai/sessions/83f066b78e1640e3bb6dfaef95982ac7
Open in Devin Desktop: https://app.devin.ai/desktop/session/83f066b78e1640e3bb6dfaef95982ac7?variant=devin

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
openui-docs	Ready	Preview	Sep 15, 2026 12:51pm UTC