chore(deps-dev): bump @types/node from 22.19.17 to 26.4.1 in /sdk/typescript

[dependabot]

Summary

Upgrade the SDK’s Node.js declarations from 22.19.17 to 26.4.1 and keep the filesystem identity test compatible with the new stat(path) overload.

Changes

• Update @types/node, undici-types, and the corresponding lockfile peer bindings.
• Merge main so validation covers the already-merged TypeScript 7 upgrade.
• Make the existing filesystem spy’s options argument optional, matching Node’s API while preserving bigint inode collision coverage.

Testing

• Passed SDK types, format, build:ci, build:examples, and package build with TypeScript 7 after merging main.
• Passed both focused numeric-identity collision tests with TypeScript 7 and Node 26 types.
• Passed compiled plugin source compatibility checks and their 9 Node tests.
• Passed pnpm pack and check:package, including installed consumer types, CLI/SDK lifecycle, credential locking, MCP initialization, dashboard assets, and nested worker behavior.
• Local Bun suite before merging main (--seed 12345): 2,995 passed, 50 skipped, 0 failed. Retested with standard Git and fixture permissions after environment-specific failures.

Risk and rollout

The new declarations support both TypeScript 5.7 and 7. Reviewed the exact shipped old/new declarations, upstream Node 26.4 type changes, and the relevant Node release notes. Production APIs used by the SDK remain available on supported Node 22, 24, and 26 runtimes; CI exercises the supported versions. This change adds no runtime API use or public CLI surface.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-09-11T20:27:57.408033Z	5ba6694	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[mldangelo-oai]

Reviewed the exact Node declaration upgrade and its filesystem overload change. The optional spy argument preserves bigint identity coverage without adding runtime behavior.

Current-head CI passes across all configured jobs. Local type, formatting, build, package, collision and source compatibility checks pass with TypeScript 7. Both full local Bun suites passed before the main merge (2,995 passed, 50 skipped, 0 failed each); the latest combined main tree also passes types and build:ci. No unresolved findings or public disclosure issues identified.