chore(deps): rolling dependency update

[socket-pr-bot]

Rolling dependency update

One long-lived PR, rebuilt from main on every run so it stays
mergeable. Each run appends its dependency delta below, newest first.

2026-09-21 — run · 10 updated

package	from	to
@anthropic-ai/claude-code	2.1.251	2.1.270
@mdn/browser-compat-data	8.1.0	8.1.1
bun-types	1.4.0	1.4.2
compromise	14.16.0	14.17.0
ecc-agentshield	1.4.0	1.6.0
fast-check	4.9.0	4.10.0
magic-string	1.2.3	1.3.1
rolldown-plugin-dts	0.28.4	0.28.5
vite	8.2.2	8.3.0
yaml	2.9.0	2.9.1

commits

• chore(deps): apply weekly update fixes

2026-09-20 — run · 10 updated

package	from	to
@anthropic-ai/claude-code	2.1.251	2.1.270
@mdn/browser-compat-data	8.1.0	8.1.1
bun-types	1.4.0	1.4.2
compromise	14.16.0	14.17.0
ecc-agentshield	1.4.0	1.6.0
fast-check	4.9.0	4.10.0
magic-string	1.2.3	1.3.1
rolldown-plugin-dts	0.28.4	0.28.5
vite	8.2.2	8.3.0
yaml	2.9.0	2.9.1

commits

• chore(deps): apply weekly update fixes

2026-09-19 — run · 10 updated

package	from	to
@anthropic-ai/claude-code	2.1.251	2.1.269
@mdn/browser-compat-data	8.1.0	8.1.1
bun-types	1.4.0	1.4.2
compromise	14.16.0	14.17.0
ecc-agentshield	1.4.0	1.6.0
fast-check	4.9.0	4.10.0
magic-string	1.2.3	1.3.1
rolldown-plugin-dts	0.28.4	0.28.5
vite	8.2.2	8.3.0
yaml	2.9.0	2.9.1

commits

• chore(deps): apply weekly update fixes

2026-09-18 — run · 9 updated

package	from	to
@anthropic-ai/claude-code	2.1.251	2.1.268
@mdn/browser-compat-data	8.1.0	8.1.1
bun-types	1.4.0	1.4.2
compromise	14.16.0	14.17.0
ecc-agentshield	1.4.0	1.6.0
fast-check	4.9.0	4.10.0
magic-string	1.2.3	1.3.1
rolldown-plugin-dts	0.28.4	0.28.5
vite	8.2.2	8.3.0

commits

• chore(deps): apply weekly update fixes

---

Note

Low Risk
Routine pinned dev/tooling and lockfile updates; the Vite minor bump is the main behavioral surface for tests/builds, with no application runtime or auth changes in the diff.

Overview
This PR applies the 2026-09-18 weekly dependency roll: fleet catalog pins and the lockfile move nine packages forward, with Vite 8.2.2 → 8.3.0 (and matching transitive Vitest/mocker resolutions), plus bumps to @anthropic-ai/claude-code, ecc-agentshield, compromise, fast-check, magic-string, rolldown-plugin-dts, @mdn/browser-compat-data, and bun-types.

Node is patched via .node-version (26.8.1 → 26.8.2). package.json also changes devEngines.packageManager from a single pnpm entry to an array that accepts npm (^11.19.0 || >=12.0.2) as well as pnpm, aligned with existing engines.npm. The lockfile refreshes catalog versions and records pnpm 12.4.1 for packageManagerDependencies (down from 12.4.2 in the prior lock snapshot).

^{Reviewed by Cursor Bugbot for commit a714466. Configure here.}