chore(deps): bump the minor-patch group across 1 directory with 12 updates

[dependabot]

Summary

• Fixes CI for Dependabot minor-patch group bump (12 packages)
• Time to review: 15 minutes

Changes proposed

Two manual fixes were required to make this Dependabot PR pass CI:

1. json-schema-faker 0.5→0.6 async migration

json-schema-faker 0.6.x removed the JSONSchemaFaker class export and made generate() return Promise<unknown>. Changes across ~10 test files in lib/ts-sdk/__tests__/:

• Changed import to import { createGenerator } from "json-schema-faker" (named export)
• Removed the createSeededRandom() helper — seeding is now via createGenerator({ seed })
• Made checkZodMatchesJsonSchema and expectZodMatchesJsonSchema async
• Propagated async/await to all downstream test callers in schemas/zod/*.spec.ts
• No test logic or assertions changed — only sync→async conversion

2. Astro v5→v6 companion upgrade

The minor-patch group bumped starlight-links-validator from 0.14.3 to 0.23.0, which requires Astro v6/Zod 4. Additional companion bumps applied:

Package	From	To	Why
astro	^5.18.1	^6.1.5	Required by starlight-links-validator 0.23.0
@astrojs/react	^4.4.2	^5.0.3	Required for Astro v6 compatibility
@astrojs/starlight	^0.37.7	^0.38.3	Required for Astro v6 compatibility

Also bumped Node 20→22 in ci-website-preview.yml and cd-deploy-website.yml (Astro v6 requires Node >=22.12.0).

3. Prettier 3.8 reformatting (cosmetic)

The prettier bump auto-reformatted 2 MDX files (blank line removal in ordered lists) and 2 TypeScript types files (collapsed multi-line extends). No logic changes.

Context for reviewers

Astro v6 breaking change audit — no issues found:

Removed/Deprecated API	Used in this site?
Astro.glob()	No
<ViewTransitions />	No
Legacy content collections	No — already on Content Layer API (docsLoader/docsSchema)
emitESMImage()	No
handleForms on <ClientRouter />	No
import.meta.env.ASSETS_PREFIX	No
z from astro:content	No
.errorsMap (Zod 4)	No
z.string().email() / .url() / .uuid() (Zod 4 deprecated)	Yes — in a code example in guides/using-typescript.mdx. Still works (deprecated, not removed). Docs update can be done separately.

@astrojs/react v4→v5: The site uses 4 React islands (client:load and client:only="react"). The client:* directive API is unchanged between v4 and v5. React components use standard hooks — no breaking surface.

Verification:

• pnpm run ci:sdk — 380 tests pass across 22 test files (covers json-schema-faker async migration)
• pnpm run ci:website — full build + checks + test pass (covers Astro v6 upgrade)
• starlight-links-validator runs during build and catches broken anchor links from Astro v6's heading ID changes — build passes, so links are intact

Additional information

This PR conflicts with #692 (website-framework group) in pnpm-lock.yaml. Merge one first, then @dependabot rebase the other.

---

Original Dependabot description

Bumps the minor-patch group with 12 updates:

Package	From	To
@changesets/changelog-github	0.5.2	0.6.0
@typescript-eslint/eslint-plugin	8.57.2	8.58.1
@typescript-eslint/parser	8.57.2	8.58.1
prettier	3.4.2	3.8.1
typescript-eslint	8.57.2	8.58.1
json-schema-faker	0.5.9	0.6.1
@apidevtools/json-schema-ref-parser	15.3.2	15.3.5
sharp	0.33.5	0.34.5
swagger-ui-react	5.32.1	5.32.2
eslint-plugin-astro	1.6.0	1.7.0
starlight-links-validator	0.14.3	0.23.0
wrangler	4.77.0	4.81.1

[bryan-thompsoncodes]

@dependabot rebase

[github-actions]

🚀 Website Preview Deployed!

Preview your changes at: https://cg-pr-681.billy-daly.workers.dev

This preview will be automatically deleted when the PR is closed.