Update dependencies

[rkistner]

Updates:

• Node 22.19.0
• Debian trixie-slim base image
• vitest, vite, esbuild

This also moves vitest to a devDependency in one place to completely exclude esbuild from the production image (regression from #339 / 1.15.3).

This silences security checks for:

• CVE-2025-22871 (esbuild, not used in production)
• CVE-2023-31484 (perl, not used in production)
• CVE-2025-4802 (glibc, potential privilege escalation)

[changeset-bot]

🦋 Changeset detected

Latest commit: c6771ff

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 17 packages

Name	Type
@powersync/service-core-tests	Patch
@powersync/service-sync-rules	Patch
@powersync/lib-services-framework	Patch
@powersync/service-jpgwire	Patch
@powersync/service-image	Patch
@powersync/service-module-mongodb-storage	Patch
@powersync/service-module-mongodb	Patch
@powersync/service-module-mysql	Patch
@powersync/service-module-postgres-storage	Patch
@powersync/service-module-postgres	Patch
@powersync/service-core	Patch
@powersync/service-rsocket-router	Patch
@powersync/lib-service-mongodb	Patch
@powersync/lib-service-postgres	Patch
@powersync/service-module-core	Patch
test-client	Patch
@powersync/service-schema	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR