3 Commits

Include renames

Author	SHA1	Message	Date
james.maes	a8c7f1a09b	chore(deps): batch Dependabot bumps — fiber + plugin-react + jsdom + vite (#144, #145, #147, #148, #160) ... Lands four SAFE-MERGE Dependabot bumps in one commit. Each was confirmed SAFE-MERGE by the H' triage on PR #155, then re-verified locally on the new lockfile baseline (vitest@3 + vite@8 + esbuild dropped) from PR #159. - @react-three/fiber 9.6.0 → 9.6.1 (closes #148) - @vitejs/plugin-react 5.x → 6.0.1 (closes #147) - jsdom 25.x → 29.1.1 (closes #144) - vite pinned to >=8.0.12 via pnpm.overrides (closes #145) 37/37 bus + 101/101 hud tests; both workspaces build; production webview bundle stamps cleanly. PR #146 (TypeScript 6) NOT included; deferred for focused evaluation.	2026-05-13 06:47:16 -05:00
james.maes	08095281fc	fix(deps): close vite + esbuild CVEs via pnpm.overrides + vitest@3 bump (#159) ... Closes Dependabot alerts #1 (esbuild dev-server response read) and #2 (Vite path traversal). Adds pnpm.overrides pinning vite >= 8.0.5 (drops esbuild transitive) + bumps vitest 2.1 → 3 in root + bus workspaces (vitest 2 incompat with vite 8 SSR transform). 37/37 bus + 101/101 hud tests pass; both workspaces build cleanly. Deferred to v0.2: vitest 4 major + oxc plugin migration.	2026-05-13 06:41:52 -05:00
james.maes	6ce4754142	test(02-02): add failing round-trip suite + pnpm workspace scaffold ... - Scaffold webview/ pnpm workspace (pnpm 10.30.2, TS 5.9, Vitest 2.1) - @jarvis/bus package with strict tsconfig inheritance - 14 fixture JSONs byte-identical to Plan 01 Swift mirror (no trailing NL) - RED: round-trip.test.ts has 19 failing assertions against stub decoders	2026-04-23 17:12:38 -05:00