chore(deps): rolling dependency update

[socket-pr-bot]

Rolling dependency update

One long-lived PR, rebuilt from main on every run so it stays
mergeable. Each run appends its dependency delta below, newest first.

---

Note

Medium Risk
Vite 8.3.0 and Claude Code / ecc-agentshield bumps affect the whole test bundler stack and agent install paths, though changes are version-pin only with no application code edits.

Overview
This rolling dependency refresh bumps the fleet Node pin to 26.8.2 and advances catalog pins in pnpm-workspace.yaml, with pnpm-lock.yaml regenerated to match.

Notable catalog bumps: @anthropic-ai/claude-code (2.1.220 → 2.1.268), vite (8.2.2 → 8.3.0), ecc-agentshield (1.4.0 → 1.6.0), plus smaller updates to @mdn/browser-compat-data, compromise, magic-string, and rolldown-plugin-dts. Matching overrides move with several transitives (magic-string, ansi-regex, content-type, markdown-it, picomatch, protobufjs, sharp).

The Vite bump propagates through Vitest, @vitiate/core, and related lockfile entries. The lockfile also records pnpm package-manager metadata at 12.4.1 (down from 12.4.2 in the prior lock snapshot).

^{Reviewed by Cursor Bugbot for commit 8e70735. Configure here.}

2026-09-22 — run · 15 updated

package	from	to
@anthropic-ai/claude-code	2.1.220	2.1.272
@mdn/browser-compat-data	8.1.0	8.1.1
@socketregistry/packageurl-js	1.5.2	1.5.3
@socketregistry/packageurl-js-stable	npm:@socketregistry/packageurl-js@1.5.2	npm:@socketregistry/packageurl-js@1.5.3
@socketsecurity/lib	7.0.2	7.0.3
@socketsecurity/lib-stable	npm:@socketsecurity/lib@7.0.2	npm:@socketsecurity/lib@7.0.3
brace-expansion	5.0.9	5.0.12
compromise	14.16.0	14.17.0
ecc-agentshield	1.4.0	1.6.0
fast-check	4.9.0	4.10.0
magic-string	1.2.3	1.4.1
rolldown-plugin-dts	0.28.4	0.28.5
typebox	1.3.30	1.3.31
vite	8.2.2	8.3.0
yaml	2.9.0	2.9.1

commits

• chore(deps): apply weekly update fixes

2026-09-21 — run · 9 updated

package	from	to
@anthropic-ai/claude-code	2.1.220	2.1.270
@mdn/browser-compat-data	8.1.0	8.1.1
compromise	14.16.0	14.17.0
ecc-agentshield	1.4.0	1.6.0
fast-check	4.9.0	4.10.0
magic-string	1.2.3	1.3.1
rolldown-plugin-dts	0.28.4	0.28.5
vite	8.2.2	8.3.0
yaml	2.9.0	2.9.1

commits

• chore(deps): apply weekly update fixes

2026-09-20 — run · 9 updated

package	from	to
@anthropic-ai/claude-code	2.1.220	2.1.270
@mdn/browser-compat-data	8.1.0	8.1.1
compromise	14.16.0	14.17.0
ecc-agentshield	1.4.0	1.6.0
fast-check	4.9.0	4.10.0
magic-string	1.2.3	1.3.1
rolldown-plugin-dts	0.28.4	0.28.5
vite	8.2.2	8.3.0
yaml	2.9.0	2.9.1

commits

• chore(deps): apply weekly update fixes

2026-09-19 — run · 9 updated

package	from	to
@anthropic-ai/claude-code	2.1.220	2.1.269
@mdn/browser-compat-data	8.1.0	8.1.1
compromise	14.16.0	14.17.0
ecc-agentshield	1.4.0	1.6.0
fast-check	4.9.0	4.10.0
magic-string	1.2.3	1.3.1
rolldown-plugin-dts	0.28.4	0.28.5
vite	8.2.2	8.3.0
yaml	2.9.0	2.9.1

commits

• chore(deps): apply weekly update fixes

2026-09-18 — run · 8 updated

package	from	to
@anthropic-ai/claude-code	2.1.220	2.1.268
@mdn/browser-compat-data	8.1.0	8.1.1
compromise	14.16.0	14.17.0
ecc-agentshield	1.4.0	1.6.0
fast-check	4.9.0	4.10.0
magic-string	1.2.3	1.3.1
rolldown-plugin-dts	0.28.4	0.28.5
vite	8.2.2	8.3.0

commits

• chore(deps): apply weekly update fixes

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	yaml@​2.9.0 ⏵ 2.9.1	+1
	fast-check@​4.9.0 ⏵ 4.10.0	+1		+1	-2
	compromise@​14.16.0 ⏵ 14.17.0				+1
	@​socketsecurity/​lib@​7.0.2 ⏵ 7.0.3	-2		+1	+1
	@​socketregistry/​packageurl-js@​1.5.2 ⏵ 1.5.3				+3
	typebox@​1.3.30 ⏵ 1.3.31			+1
	magic-string@​1.2.3 ⏵ 1.4.1			+1
	@​mdn/​browser-compat-data@​8.1.0 ⏵ 8.1.1

View full report

[socket-security-staging]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	compromise@​14.16.0 ⏵ 14.17.0				-1
	fast-check@​4.9.0 ⏵ 4.10.0	+1
	yaml@​2.9.0 ⏵ 2.9.1	+1			+6
	@​socketsecurity/​lib@​7.0.2 ⏵ 7.0.3	-2		+1	+1
	@​socketregistry/​packageurl-js@​1.5.2 ⏵ 1.5.3
	magic-string@​1.2.3 ⏵ 1.4.1			+1
	typebox@​1.3.30 ⏵ 1.3.31	+1		+1
	@​mdn/​browser-compat-data@​8.1.0 ⏵ 8.1.1

View full report