chore(deps): lock file maintenance

[its-miso]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (in timezone America/Edmonton)

• Branch creation
  • "before 5am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

Superseded by a newer automated review for this pull request.

[its-saffron]

AI Automated Review

Full PR review.

Analysis engine: MiniMax-M2.7@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)

Review Summary

Recommendation: Approve. This is a standard Renovate lock file maintenance PR that updates transitive dependencies without modifying any direct dependency versions or source code.

---

Change Overview

This PR refreshes package-lock.json via Renovate's lock file maintenance workflow. The diff shows 495 additions and 313 deletions across transitive dependencies. All direct dependencies in package.json remain unchanged.

Notable transitive updates (all minor/patch):

• @babel/* packages: 7.29.7 → 7.29.8 (patch)
• @rolldown/* packages: 1.1.5 → 1.2.2 (minor, WASM bindings reorganized)
• rolldown: 1.1.5 → 1.2.2 (minor)
• vite: 8.1.5 → 8.2.0 (minor)
• @typescript-eslint/*: 8.65.0 → 8.66.0 (patch)
• Various dev-only tooling: lightningcss, electron-to-chromium, and others updated via vite 8.2.0

---

Required Checks

✅ Check for breaking API changes in updated dependencies

Status: Verified — No breaking changes.

• No semver-major updates appear in the diff. All version bumps are minor or patch, and all are transitive dependencies (dev tooling), not production runtime deps.
• rolldown 1.1.5 → 1.2.2: The @rolldown/binding-wasm32-wasi optional platform package was removed and replaced by a more standard binding structure; this affects only the WASM32 WASI target (not linux-x64, darwin, or win32). The primary binding packages for linux, darwin, and windows remain present and are properly version-bumped to 1.2.2.
• @emnapi/runtime moved from peer: true to a direct optional dependency of @emnapi/core — this is a dependency graph normalization, not an API change.
• package.json direct deps unchanged; no lock→manifest drift.

✅ Run full test suite after upgrade

Status: Verified — CI ran and passed.

All CI checks succeeded on this commit per the CI Check Results:

Check	State
Lint	✅ success
Build	✅ success
Tests	✅ success
Typecheck	✅ success
Docker Build	✅ success

---

Standards Compliance

• Lock file maintenance is a recognized, automated Renovate workflow; no manual testing required beyond CI validation.
• No source files changed; package.json pinned versions unaffected.
• No secrets, auth paths, database migrations, or runtime paths touched.
• Repository conventions for dependency management (per AGENTS.md) are not violated.

---

Unknowns / Needs Verification

None. This is a purely mechanical lock file refresh with CI confirmation of build/test/lint/typecheck pass. The PR is low-risk and ready to merge.