chore(deps): update dependencies except TypeScript 7

[ryota-murakami]

Summary

• update all direct dependencies and refresh transitive resolutions
• keep TypeScript on 6.0.3 and intentionally exclude the 7.x upgrade
• refresh the MSW worker and allow the required dependency build scripts

Verification

• pnpm test (1,377 tests)
• pnpm lint
• pnpm typecheck
• pnpm build
• pnpm e2e:parallel (12/12 shards)
• pnpm outdated --format json (TypeScript 7 is the only remaining update)

Summary by CodeRabbit

• Bug Fixes

  • Improved mock service worker handling for streaming text/event-stream responses to prevent incorrect response cloning.
  • Refreshed the service worker integrity metadata.

• Tests

  • Updated the logged-in maintenance inline editor Escape-key E2E test to validate cancelling unsaved edits and related UI behavior.
  • Strengthened the authenticated maintenance view-toggle E2E test to assert specific headings remain/are hidden correctly when switching views.

• Chores

  • Updated runtime and development dependency versions.
  • Expanded the workspace build allowlist for additional build-time packages.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
gitbox	Ready	Preview, Comment	Jul 16, 2026 1:57pm

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: f6a3072c-e142-4066-a81c-406c14c6c6f7

📥 Commits

Reviewing files that changed from the base of the PR and between 8473e0c and add2773.

📒 Files selected for processing (1)

• e2e/logged-in/maintenance-view-toggle.spec.ts

---

📝 Walkthrough

Walkthrough

Dependency versions and build permissions were updated. The mock service worker’s integrity metadata was refreshed, and its response handling now avoids cloning server-sent event streams. Maintenance E2E tests now cover Escape cancellation and project headings across grid and list views.

Changes

Dependency and build configuration

Layer / File(s)	Summary
Dependency versions and build permissions package.json, pnpm-workspace.yaml	Runtime and development dependencies were upgraded, and @code-inspector/core plus node-pty were added to the allowBuilds list.

Mock service worker response handling

Layer / File(s)	Summary
Event-stream response handling public/mockServiceWorker.js	Integrity metadata was updated. text/event-stream responses are no longer cloned, and their response payload body and transfer list are set accordingly.

Maintenance E2E coverage

Layer / File(s)	Summary
Unsaved comment cancellation e2e/logged-in/maintenance-project-info.spec.ts	The test covers Escape cancellation from either comment trigger state and verifies that unsaved text is discarded.
Maintenance view toggle assertions e2e/logged-in/maintenance-view-toggle.spec.ts	The test verifies project headings in grid and list views and confirms the grid headings are hidden after switching.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Sequence Diagram(s)

sequenceDiagram
  participant handleRequest
  participant Response
  participant Client
  handleRequest->>Response: inspect content-type
  handleRequest->>Response: skip clone for text/event-stream
  handleRequest->>Client: send RESPONSE with null body

Loading

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the dependency update and the explicit exclusion of TypeScript 7.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/update-dependencies-except-typescript-7

---

_{Comment @coderabbitai help to get the list of available commands.}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.39%. Comparing base (4603e4f) to head (add2773).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #204      +/-   ##
==========================================
- Coverage   71.19%   70.39%   -0.81%     
==========================================
  Files         171      171              
  Lines        4742     4732      -10     
  Branches     1239     1265      +26     
==========================================
- Hits         3376     3331      -45     
- Misses       1347     1382      +35     
  Partials       19       19              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

🧪 E2E Coverage Report (Sharded: 12 parallel jobs)

Metric	Coverage
Lines	93.22%
Functions	21%
Branches	17.48%
Statements	30.65%

📊 Full report available in workflow artifacts