chore(deps): resolve all 42 dependency advisories

Security-focused update pass — takes `pnpm audit` from 42 advisories
(14 high, 20 moderate, 8 low) to 0, without any major-version bumps.

- next / eslint-config-next 16.2.4 → 16.2.10 (patch; fixes 7 high Next.js
  advisories)
- refreshed all in-range (^) deps to latest: posthog-js → 1.400.1 (fixes
  dompurify/protobufjs/opentelemetry), @supabase/supabase-js → 2.110.5
  (fixes ws), vitest → 4.1.10 + vite → 8.1.4 (fixes undici/vite,
  dev-only), @typescript-eslint/* → 8.64.0, react → 19.2.7, and others
- pnpm override postcss@<8.5.10 → >=8.5.10 for the one advisory bundled
  inside Next's build tooling

Deliberately NOT bumped (no advisory; major/render-risk): eslint 10,
@types/node 26, katex 0.17. Left for a separate, non-security pass.

Verified: pnpm audit 0, eslint + tsc + prettier clean, 202 tests pass,
production build + offline manifest succeed.

Author: malikpiara

package.json

@@ -22,51 +22,56 @@
     "visual:compare": "node scripts/compare-visual-snapshots.mjs"
   },
   "dependencies": {
-    "@radix-ui/react-accordion": "^1.2.12",
-    "@radix-ui/react-dialog": "^1.1.15",
-    "@radix-ui/react-navigation-menu": "^1.2.14",
-    "@radix-ui/react-progress": "^1.1.8",
-    "@radix-ui/react-slot": "^1.2.4",
-    "@supabase/ssr": "^0.10.2",
-    "@supabase/supabase-js": "^2.105.1",
+    "@radix-ui/react-accordion": "^1.2.16",
+    "@radix-ui/react-dialog": "^1.1.19",
+    "@radix-ui/react-navigation-menu": "^1.2.18",
+    "@radix-ui/react-progress": "^1.1.12",
+    "@radix-ui/react-slot": "^1.3.0",
+    "@supabase/ssr": "^0.10.3",
+    "@supabase/supabase-js": "^2.110.5",
     "@types/katex": "^0.16.8",
     "class-variance-authority": "^0.7.1",
     "classnames": "^2.5.1",
     "clsx": "^2.1.1",
-    "katex": "^0.16.45",
-    "lucide-react": "^1.14.0",
-    "next": "16.2.4",
+    "katex": "^0.16.47",
+    "lucide-react": "^1.24.0",
+    "next": "16.2.10",
     "next-themes": "^0.4.6",
-    "posthog-js": "^1.372.5",
-    "react": "^19.2.5",
-    "react-dom": "^19.2.5",
+    "posthog-js": "^1.400.1",
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7",
     "sonner": "^2.0.7",
-    "tailwind-merge": "^3.5.0",
+    "tailwind-merge": "^3.6.0",
     "tailwindcss-animate": "^1.0.7",
     "vaul": "^1.1.2"
   },
   "devDependencies": {
-    "@playwright/test": "^1.56.1",
-    "@tailwindcss/postcss": "^4.2.4",
-    "@tailwindcss/typography": "^0.5.19",
+    "@playwright/test": "^1.61.1",
+    "@tailwindcss/postcss": "^4.3.2",
+    "@tailwindcss/typography": "^0.5.20",
     "@testing-library/react": "^16.3.2",
-    "@types/node": "^25.6.0",
-    "@types/react": "^19.2.14",
+    "@types/node": "^25.9.5",
+    "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
-    "@typescript-eslint/eslint-plugin": "^8.59.1",
-    "@typescript-eslint/parser": "^8.59.1",
-    "autoprefixer": "^10.5.0",
-    "eslint": "^9.39.4",
-    "eslint-config-next": "16.2.4",
+    "@typescript-eslint/eslint-plugin": "^8.64.0",
+    "@typescript-eslint/parser": "^8.64.0",
+    "autoprefixer": "^10.5.3",
+    "eslint": "^9.39.5",
+    "eslint-config-next": "16.2.10",
     "eslint-config-prettier": "^10.1.8",
     "jsdom": "^29.1.1",
-    "pixelmatch": "^7.1.0",
+    "pixelmatch": "^7.2.0",
     "pngjs": "^7.0.0",
-    "postcss": "^8.5.13",
-    "prettier": "^3.8.3",
-    "tailwindcss": "^4.2.4",
+    "postcss": "^8.5.19",
+    "prettier": "^3.9.5",
+    "tailwindcss": "^4.3.2",
     "typescript": "^6.0.3",
-    "vite": "^8.0.10",
-    "vitest": "^4.1.5"
+    "vite": "^8.1.4",
+    "vitest": "^4.1.10"
+  },
+  "pnpm": {
+    "overrides": {
+      "postcss@<8.5.10": ">=8.5.10"
+    }
   }
 }