chore(deps): rolling dependency update

[socket-pr-bot]

Rolling dependency update

One long-lived PR, rebuilt from main on every run so it stays
mergeable. Each run appends its dependency delta below, newest first.

2026-09-21 — run · 4 updated

package	from	to
@anthropic-ai/claude-code	2.1.268	2.1.270
fast-check	4.9.0	4.10.0
vite	8.2.2	8.3.0
yaml	2.9.0	2.9.1

commits

• chore(deps): apply weekly update fixes

2026-09-20 — run · 4 updated

package	from	to
@anthropic-ai/claude-code	2.1.268	2.1.270
fast-check	4.9.0	4.10.0
vite	8.2.2	8.3.0
yaml	2.9.0	2.9.1

commits

• chore(deps): apply weekly update fixes

2026-09-19 — run · 4 updated

package	from	to
@anthropic-ai/claude-code	2.1.268	2.1.269
fast-check	4.9.0	4.10.0
vite	8.2.2	8.3.0
yaml	2.9.0	2.9.1

commits

• chore(deps): apply weekly update fixes

2026-09-18 — run · 2 updated

package	from	to
fast-check	4.9.0	4.10.0
vite	8.2.2	8.3.0

commits

• chore(deps): apply weekly update fixes

---

Note

Medium Risk
The vite minor bump propagates through vitest and vitiate, so CI and local test bundling behavior could shift; runtime app code is unaffected.

Overview
This rolling dependency run bumps the Node toolchain pin in .node-version from 26.8.1 to 26.8.2 and refreshes the lockfile to match.

Catalog and override pins move vite 8.2.2 → 8.3.0 (including vitest, @vitest/*, and vitiate peer resolutions) and fast-check 4.9.0 → 4.10.0 for property-based tests. magic-string is aligned to 1.3.1 via the workspace catalog/override, with transitive source-map codec cleanup (@jridgewell/sourcemap-codec 1.6.0). The lockfile also records pnpm 12.4.2 → 12.4.1 for the root package-manager dependency.

^{Reviewed by Cursor Bugbot for commit f7dd166. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​anthropic-ai/​claude-code@​2.1.268 ⏵ 2.1.270	+1		+1
	yaml@​2.9.0 ⏵ 2.9.1	+1
	fast-check@​4.9.0 ⏵ 4.10.0	+1		+1	-2
	magic-string@​1.2.3 ⏵ 1.3.1			+1	+1

View full report

[socket-security-staging]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​anthropic-ai/​claude-code@​2.1.268 ⏵ 2.1.270	+1		+1
	fast-check@​4.9.0 ⏵ 4.10.0	+1
	yaml@​2.9.0 ⏵ 2.9.1	+1			+6
	magic-string@​1.2.3 ⏵ 1.3.1			+1	+1

View full report