chore(deps): apply Dependabot bumps across example apps

next 16, react/react-dom 19.2.7, typescript 6, @types/node 26 (per the open
Dependabot PRs), plus the CI actions (checkout v7, setup-node v6). lucide-react
was not in scope. Regenerated the chat/imagine lockfiles to match.

Author: spacedevin

.github/workflows/ci.yml

@@ -17,10 +17,10 @@ jobs:
         app: [auth-demo, chat, fiber, imagine, justmakeit, vercel-demo]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: "22"
           cache: npm
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Gitleaks (CLI — the action requires an org license)

auth-demo/package.json

@@ -9,18 +9,18 @@
   },
   "dependencies": {
     "@hypery/sdk": "^1.0.0",
-    "next": "^15.5.20",
-    "react": "19.1.0",
-    "react-dom": "19.1.0"
+    "next": "^16.2.10",
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7"
   },
   "devDependencies": {
     "@tailwindcss/postcss": "^4",
-    "@types/node": "^22",
+    "@types/node": "^26.1.0",
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "tailwindcss": "^4",
     "tw-animate-css": "^1.0.2",
-    "typescript": "^5.7.2"
+    "typescript": "^6.0.3"
   },
   "license": "PIF"
 }