chore: update Node, pnpm, and compatible dependencies

[ydj515]

Summary

Align the project on Node 24.19.0 and pnpm 11.22.0, remove all pnpm audit findings, and consolidate compatible open Dependabot updates.

Changes

• Pin Node 24.19.0 and pnpm 11.22.0 across mise, .nvmrc, package metadata, and documentation
• Apply dependency updates from Dependabot PRs chore(deps): bump @tanstack/react-router from 1.170.18 to 1.170.19 in the tanstack group #31, chore(deps): bump react-hook-form from 7.83.0 to 7.85.0 #36, chore(deps): bump lucide-react from 1.27.0 to 1.33.0 #39, chore(deps): bump @hookform/resolvers from 5.5.7 to 5.9.1 #40, chore(deps): bump zustand from 5.0.14 to 5.0.15 #41, and the compatible portion of chore(deps-dev): bump the dev-dependencies group across 1 directory with 24 updates #42
• Keep TypeScript 6.0.3 because typescript-eslint 8.67.0 does not support TypeScript 7
• Upgrade jsdom to 30.0.1 now that Node 24.19.0 satisfies its runtime requirement
• Refresh transitive dependencies to brace-expansion 5.0.9 and nanoid 3.3.18 so pnpm audit reports zero vulnerabilities

Background

The repository had two high-severity transitive audit findings and multiple open Dependabot PRs. The grouped development dependency PR also included TypeScript 7, which breaks the current tsconfig and exceeds the supported typescript-eslint peer range. This PR combines the compatible updates while preserving the supported compiler version.

Test Results

• pnpm verify: pass (23 test files, 80 tests, Storybook build, 4 Playwright tests)
• pnpm peers check: pass
• pnpm audit --audit-level high: pass
• pnpm audit --json: 0 vulnerabilities across all severity levels
• Independent read-only code review: no Critical, Important, or Minor findings

Review Points

• Confirm Node and pnpm version sources remain synchronized
• Confirm TypeScript stays on 6.0.3 while jsdom moves to 30.0.1
• Review the lockfile refresh for the intended Dependabot and audit changes

Notes

• This PR supersedes the compatible dependency changes in open Dependabot PRs chore(deps): bump @tanstack/react-router from 1.170.18 to 1.170.19 in the tanstack group #31, chore(deps): bump react-hook-form from 7.83.0 to 7.85.0 #36, chore(deps): bump lucide-react from 1.27.0 to 1.33.0 #39, chore(deps): bump @hookform/resolvers from 5.5.7 to 5.9.1 #40, chore(deps): bump zustand from 5.0.14 to 5.0.15 #41, and chore(deps-dev): bump the dev-dependencies group across 1 directory with 24 updates #42.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 0ee2eb5e-7c1c-449d-86ac-f6ad2768ddf0

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}