chore(deps): bring every dependency current and supersede the failing Dependabot PRs (MMR-408)

[dbtlr]

Summary

Updates all project dependencies to their current minor and patch releases and supersedes the open, failing Dependabot PRs (MMR-408). All bumps are within minor/patch ranges — no major version upgrades.

What Changed

• CLI & MCP server: Upgraded to MCP SDK 1.31, pg 8.23.1, and zod 4.6
• Console: Upgraded to React 19.3 plus the current TanStack Query, Router, and Form releases
• Sandbox: Upgraded to loom 0.6
• Build & test toolchains: Upgraded to Vite 8.3, vite-plus 0.2.9, and Playwright 1.63
• Formatting: Source formatting updated to follow the newer bundled formatter
• Changelog: Added .changes/mmr-408.md entry documenting the dependency updates

Impact

Brings the entire workspace onto current dependency versions in a single, coordinated update rather than piecemeal Dependabot PRs. Automated code review completed with no issues found.

[kody-ai]

Kody Review Complete

Great news! 🎉
No issues were found that match your current review configurations.

Keep up the excellent work! 🚀

Kody Guide: Usage and Configuration

Interacting with Kody

• Request a Review: Ask Kody to review your PR manually by adding a comment with the @kody start-review command at the root of your PR.

• Validate Business Logic: Ask Kody to validate your code against business rules by adding a comment with the @kody -v business-logic command.

• Provide Feedback: Help Kody learn and improve by reacting to its comments with a 👍 for helpful suggestions or a 👎 if improvements are needed.

Current Kody Configuration

Review Options

The following review options are enabled or disabled:

Options	Enabled
Bug	✅
Performance	✅
Security	✅
Business Logic	✅

Access your configuration settings here.

​

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Warning

Review limit reached

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

Next included review available in 55 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available. Your 87 included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Essentials

Run ID: 33b26ce4-3bad-4b72-b155-5c823f644b69

📥 Commits

Reviewing files that changed from the base of the PR and between 8b6fcdf and 4ce8b33.

⛔ Files ignored due to path filters (1)

• bun.lock is excluded by !**/*.lock

📒 Files selected for processing (10)

• .changes/mmr-408.md
• package.json
• packages/bin/package.json
• packages/bin/src/cli/help.ts
• packages/bin/src/core/store-conformance.transfer.test.ts
• packages/bin/src/core/store-postgres/transfer.ts
• packages/bin/src/core/store-postgres/transitions.ts
• packages/bin/src/core/store-postgres/working-set.ts
• packages/sandbox/package.json
• packages/ui/package.json

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Essentials

Run ID: 5261a3ea-5b1f-41dd-8bc2-1ddeefd219df

📥 Commits

Reviewing files that changed from the base of the PR and between 8b6fcdf and 4ce8b33.

⛔ Files ignored due to path filters (1)

• bun.lock is excluded by !**/*.lock

📒 Files selected for processing (10)

• .changes/mmr-408.md
• package.json
• packages/bin/package.json
• packages/bin/src/cli/help.ts
• packages/bin/src/core/store-conformance.transfer.test.ts
• packages/bin/src/core/store-postgres/transfer.ts
• packages/bin/src/core/store-postgres/transitions.ts
• packages/bin/src/core/store-postgres/working-set.ts
• packages/sandbox/package.json
• packages/ui/package.json

Included review availability: This review used your included allowance. 0 included reviews remain after this review. Your included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

---

📝 Summary

Summary by CodeRabbit

• Updates
  • Updated the versions of packages used by the command-line tools, sandbox, and web interface, including React, TanStack, Vite, and Playwright.
  • No user-visible behavior changes are noted.

Walkthrough

Dependency versions were updated across the root, CLI, sandbox, and UI packages. Several CLI and Postgres-store callbacks and test generators were reformatted; their described behavior remains unchanged.

Changes

Maintenance Updates

Layer / File(s)	Summary
Dependency version updates .changes/mmr-408.md, package.json, packages/bin/package.json, packages/sandbox/package.json, packages/ui/package.json	Updated dependency versions across the package manifests and added the MMR-408 changelog entry.
Callback formatting packages/bin/src/cli/help.ts, packages/bin/src/core/store-conformance.transfer.test.ts, packages/bin/src/core/store-postgres/transfer.ts, packages/bin/src/core/store-postgres/transitions.ts, packages/bin/src/core/store-postgres/working-set.ts	Reformatted callback mappings and invalid-case generators. Their described output, fields, and generated cases remain unchanged.

Priority: ➖ Normal

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 4ce8b

No actionable issue remains from the reviewed changes; the PR is mergeable after normal checks.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 50.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 4 functions across 5 files. (5 skipped: 5…	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies a dependency update and the related MMR-408 work. It accurately summarizes the main change.
Description check	✅ Passed	The description directly explains the dependency updates, held-back upgrade, formatting changes, and verification results.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

Docstring coverage is 50.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 4 functions across 5 files. (5 skipped: 5 unsupported.)

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

_{Comment @coderabbitai help to get the list of available commands.}

[dbtlr]

@coderabbitai full review

[coderabbitai]

⚠️ Action not completed

Review rate limited.

---

Your included review limit is currently reached under our Fair Usage Limits Policy. Your current included review allowance is based on your included PR review attempts over the past 7 days. This review may still proceed through usage-based billing if eligible. Your next included review will be available in 55 minutes.