chore(deps): batch upgrade dependencies within existing semver ranges

[gre]

Summary

• Supersedes chore(deps): bump next from 15.5.18 to 15.5.21 in /examples/next-js #516 (next.js security patch) and chore(deps-dev): bump postcss from 8.5.15 to 8.5.18 #517 (postcss) — both bumped further than those PRs targeted.
• examples/next-js: next 15.5.18 → 15.5.22, the latest 15.5.x security backport (fixes several High/Moderate advisories: Server Actions DoS, Turbopack middleware bypass, SSRF in rewrites/Server Actions, cache confusion, SVG image-opt DoS). Stayed on the 15.5.x line rather than jumping to next 16, since the example still pins React 18.
• Rest of the workspace: ran pnpm update -r, which bumps every dependency to the latest version still satisfying its existing package.json semver range (no major-version jumps). Notable: react/react-dom → 19.2.8, postcss → 8.5.25, vite → 8.2.0, @vitejs/plugin-react → 6.0.5, @typescript-eslint/* → 8.65.0, playwright → 1.62.1, prop-types → 15.8.1 (published packages), typescript → 5.9.3, prettier → 3.9.6, gl-transitions → 1.71.0, and others.
• Manually bumped eslint-plugin-react-refresh 0.4.26 → 0.5.3 (a semver-major jump for a 0.x package, so outside the automatic update range) — checked its peerDependencies still support our eslint 9.x.

No changeset included, consistent with prior dependency-only batches (#509, #513): these are devDependency/tooling bumps plus minor transitive-range widening in publishable packages, not user-facing API changes.

Deliberately left out (major-version bumps, want separate scrutiny)

• Babel 7 → 8 (build pipeline)
• Jest 29 → 30 (test runner)
• ESLint 9 → 10
• TypeScript 5 → 7 (skips a whole major)
• Tailwind 3 → 4 (breaking config format changes)
• React Router 6 → 7 (breaking API changes)
• Expo 54 → 57 / React Native 0.81 → 0.86 (needs device/simulator testing)
• @types/node 22 → 26
• react-gl-transition 1 → 2

Happy to follow up with any of these individually if wanted.

Test plan

• pnpm build — succeeds
• pnpm test — 42/42 passing
• packages/cookbook tsc --noEmit — identical error set to master baseline (pre-existing, unrelated source issues: unused React imports, ImportMeta.env)
• packages/cookbook Playwright e2e — 47/47 passing (mirrors ci-cookbook.yml)
• examples/next-js: yarn install (Yarn 1) + next build — succeeds

🤖 Generated with Claude Code

[Copilot]

Pull request overview

Batch-upgrades dependency versions across the gl-react pnpm-workspaces monorepo while staying within existing semver ranges, and updates the examples/next-js app to the latest Next.js 15.5.x security backport.

Changes:

• Updated examples/next-js to Next.js 15.5.22 (plus lockfile refresh).
• Bumped React/React DOM, PropTypes, and a few WebGL-related deps across core/test packages.
• Refreshed Cookbook/Cookbook-Expo dev tooling (TypeScript, Vite, Playwright, ESLint, etc.) and a handful of Expo/RN community deps.

Reviewed changes

Copilot reviewed 10 out of 12 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
packages/tests/package.json	Updates Babel presets and runtime deps used by the Jest-based test workspace.
packages/gl-react/package.json	Minor dependency bump (PropTypes).
packages/gl-react-native/package.json	Minor Expo GL dependency bumps.
packages/gl-react-headless/package.json	Minor dependency bump (PropTypes).
packages/gl-react-dom/package.json	Minor dependency bump (PropTypes).
packages/cookbook/package.json	Upgrades Cookbook runtime + dev tooling deps (React 19.2.x, Vite 8.2, TS/ESLint/Playwright, etc.).
packages/cookbook-expo/package.json	Minor Expo/RN dependency bumps + TypeScript patch bump.
packages/cookbook-expo-camera/package.json	Minor Expo/RN dependency bumps + TypeScript patch bump.
package.json	Updates root dev tooling versions (Babel, Changesets, TS, Prettier, types).
examples/next-js/yarn.lock	Updates Next.js 15.5.18 → 15.5.22 lock entries.
examples/next-js/package.json	Updates Next.js 15.5.18 → 15.5.22.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.