Lands four Dependabot bumps in one commit (one PR), supersedes PRs
#144, #145, #147, #148. Each Dependabot PR was confirmed SAFE-MERGE
by the H' triage report; this batch applies them with the lockfile
already on vitest@3 + vite@8 from PR #159.
- @react-three/fiber: 9.6.0 -> 9.6.1 (patch — closes#148)
- @vitejs/plugin-react: 5.x -> 6.0.1 (major — closes#147)
- jsdom: 25.x -> 29.1.1 (multi-major — closes#144)
- vite: bumped pnpm.overrides floor from >=8.0.5 to >=8.0.12 so the
lockfile floats to vite@8.0.12 (closes#145)
PR #146 (TypeScript 5.9 -> 6.0.3) NOT included — Lane H flagged it
NEEDS-INVESTIGATION (typecheck errors on SegmentedRing.tsx:92 etc).
The same typecheck errors surfaced in the CI workflow (PR #154), but
those were a typecheck-without-build-first ordering bug, not a TS6
incompatibility. TS 6 evaluation deferred to a separate focused PR.
Verified:
- `pnpm -r build` — both workspaces build cleanly.
- `pnpm --filter @jarvis/bus test` — 37/37 pass.
- `pnpm --filter @jarvis/hud test` — 101/101 pass.
- `bash scripts/build-webview.sh` — production bundle builds; new
asset hash stamped in App/Resources/webview/index.html.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
james.maesandClaude Opus 4.7