chore(deps): batch dependabot updates (closes #12 #13 #14 #15 #18 #20 #32 #33 #34 #35)

[Ron537]

Batch-applies 10 of the 12 open Dependabot PRs after typecheck + test:unit + full Playwright test:e2e (10/10 passing) validation locally.

Closes

GitHub Actions

• chore(deps): bump actions/checkout from 4 to 6 #15 actions/checkout 4 → 6
• chore(deps): bump actions/setup-node from 4 to 6 #14 actions/setup-node 4 → 6
• chore(deps): bump actions/upload-artifact from 4 to 7 #12 actions/upload-artifact 4 → 7 — matrix uses name: dplex-${{ matrix.os }}, so the v5+ unique-name requirement is already satisfied.
• chore(deps): bump github/codeql-action from 3 to 4 #13 github/codeql-action 3 → 4

Minor / patch group (#32)

• lucide-react 1.7.0 → 1.14.0
• monaco-editor 0.52.2 → 0.55.1
• zustand 5.0.12 → 5.0.13
• @tailwindcss/vite 4.2.2 → 4.2.4
• @vitest/coverage-v8 4.1.4 → 4.1.5
• eslint-plugin-react-hooks 7.0.1 → 7.1.1
• eslint-plugin-react-refresh 0.4.26 → 0.5.2
• prettier 3.8.1 → 3.8.3
• react / react-dom 19.2.5 → 19.2.6

Transitive

• chore(deps-dev): bump @xmldom/xmldom from 0.8.12 to 0.8.13 #35 @xmldom/xmldom 0.8.12 → 0.8.13
• chore(deps-dev): bump postcss from 8.5.9 to 8.5.14 #34 postcss 8.5.9 → 8.5.14
• chore(deps-dev): bump ip-address from 10.1.0 to 10.2.0 #33 ip-address 10.1.0 → 10.2.0

Major bumps with code changes

#18 typescript 5.9.3 → 6.0.3
TS 6 deprecates baseUrl (will stop functioning in TS 7). Removed it from tsconfig.web.json and rewrote the paths entry as a relative path so @renderer/* still resolves.

#20 electron 39.8.7 → 42.0.0
No code changes required. APIs we use (BrowserWindow, ipcMain/ipcRenderer, app.getPath, webContents, nativeTheme, safeStorage, powerMonitor, MenuItem, etc.) are unchanged. Validated by running the full Playwright e2e suite (10/10 passing) against an Electron 42 build.

Skipped (left open with reason)

• chore(deps-dev): bump eslint from 9.39.4 to 10.3.0 #17 eslint 9 → 10 — eslint-plugin-react@7.37.5 (latest) only declares peer support up to ESLint ^9.7 and crashes at load time under ESLint 10 (TypeError: contextOrFilename.getFilename is not a function). Wait for an eslint-plugin-react release that supports ESLint 10.
• chore(deps-dev): bump @vitejs/plugin-react from 5.2.0 to 6.0.1 #19 @vitejs/plugin-react 5 → 6 — requires vite ^8.0.0, but electron-vite@5.0.0 pins vite to ^5 || ^6 || ^7. Wait for an electron-vite release that supports vite 8.

Validation

• npm run typecheck ✅
• npm run test:unit ✅ (246 / 246)
• npm run test:e2e ✅ (10 / 10, ran against Electron 42 binary)
• npm run build ✅
• npm run lint — same baseline failures as main (pre-existing, unrelated)