deps: batch 21 Dependabot updates; hold TypeScript 7

Consolidates the 26 open Dependabot PRs into one change, same methodology
as #726: versions applied declaratively and lockfiles regenerated.

Landed: @anthropic-ai/sdk 0.115.0, @openai/agents 0.13.5, @tanstack/
react-query 5.101.4, @testing-library/jest-dom 7.0.0, jsdom 30.0.0,
lucide-react 1.27.0, react 19.2.8, react-dom 19.2.8, smol-toml 1.7.1,
@vitejs/plugin-react 6.0.4, agents 0.19.0, @cloudflare/workers-types
5.20260727.1.

@openai/agents 0.13.5 lands where #726 held 0.13.2 — the harness
modelSettings break is fixed upstream; the tests/agent/ coverage that
caught it passes. react and react-dom move together, which resolves the
peer mismatch that failed Dependabot's solo react bump.

TypeScript 7.0.2 stays held at 6.0.3 across all five workspaces, as in
#726 — now with a concrete break: the TS 7 package no longer exposes the
compiler API Canopy's parser imports (canopy/parsers/typescript.ts), per
Dependabot #692's own CI failure. That is a standalone migration.

Gate: lint + fast suite 636 pass / 0 fail; build:verify OK.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: sirkirby

package-lock.json

@@ -30,10 +30,10 @@
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.207",
-    "@anthropic-ai/sdk": "^0.111.0",
+    "@anthropic-ai/sdk": "^0.115.0",
     "@inquirer/prompts": "^8.5.2",
     "@modelcontextprotocol/sdk": "^1.28.0",
-    "@openai/agents": "^0.12.0",
+    "@openai/agents": "^0.13.5",
     "chokidar": "^5.0.0",
     "gray-matter": "^4.0.3",
     "openai": "^6.46.0",
@@ -43,20 +43,20 @@
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "^0.18.4",
-    "@tanstack/react-query": "^5.101.2",
+    "@tanstack/react-query": "^5.101.4",
     "@testing-library/dom": "^10.4.1",
-    "@testing-library/jest-dom": "^6.9.1",
+    "@testing-library/jest-dom": "^7.0.0",
     "@testing-library/react": "^16.3.2",
     "@types/bun": "^1.3.14",
     "@types/node": "^26.1.1",
     "@types/semver": "^7.7.1",
     "@vscode/ripgrep": "1.18.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
-    "jsdom": "^29.1.1",
-    "lucide-react": "^1.23.0",
-    "react": "^19.2.7",
-    "react-dom": "^19.2.7",
+    "jsdom": "^30.0.0",
+    "lucide-react": "^1.27.0",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8",
     "react-router-dom": "^7.18.1",
     "sqlite-vec": "^0.1.8",
     "tailwind-merge": "^3.6.0",

package.json

@@ -8,20 +8,20 @@
     "preview": "vite preview"
   },
   "dependencies": {
-    "@tanstack/react-query": "^5.101.2",
+    "@tanstack/react-query": "^5.101.4",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "lucide-react": "^1.25.0",
-    "react": "^19.2.7",
-    "react-dom": "^19.2.7",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8",
     "react-router-dom": "^7.18.1",
     "tailwind-merge": "^3.6.0"
   },
   "devDependencies": {
     "@tailwindcss/vite": "^4.3.3",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.0.0",
-    "@vitejs/plugin-react": "^6.0.3",
+    "@vitejs/plugin-react": "^6.0.4",
     "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
     "vite": "^8.1.5"

packages/myco-collective/ui/package-lock.json

@@ -10,13 +10,13 @@
     "check": "tsc --noEmit"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^5.20260719.1",
+    "@cloudflare/workers-types": "^5.20260727.1",
     "typescript": "^6.0.3",
     "wrangler": "^4.112.0"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "agents": "^0.17.4",
+    "agents": "^0.19.0",
     "zod": "^4.4.3"
   }
 }

packages/myco-collective/ui/package.json

@@ -10,13 +10,13 @@
     "check": "tsc --noEmit"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^5.20260719.1",
+    "@cloudflare/workers-types": "^5.20260727.1",
     "typescript": "^6.0.3",
     "wrangler": "^4.112.0"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "agents": "^0.17.4",
+    "agents": "^0.19.0",
     "zod": "^4.4.3"
   }
 }