chore(deps): roll up dependabot npm bumps

[j-rafique]

No description provided.

[Copilot]

Pull request overview

This PR rolls up several Dependabot-driven npm dependency bumps, primarily updating the HTTP client (undici) and the test tooling stack (Vitest / @vitest/browser), along with the corresponding pnpm-lock.yaml resolution updates.

Changes:

• Bump undici to ^6.28.0.
• Upgrade vitest and @vitest/browser to ^3.2.7.
• Refresh pnpm-lock.yaml to reflect the new dependency graph (notably pulling in newer vite, esbuild, and rollup trees).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Updates direct dependency and devDependency versions for undici + vitest tooling.
pnpm-lock.yaml	Updates resolved versions/transitive graph to match the bumped dependencies.

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

Suppressed comments (1)

package.json:112

• vitest/@vitest/browser upgrade pulls in vite@7.3.6, which requires Node ^20.19.0 || >=22.12.0 (see pnpm-lock.yaml entries). At the same time, the runtime dependency undici@6.28.0 requires Node >=18.17, but this package still advertises "engines": { "node": ">=18" }, which allows unsupported Node 18 minors (and suggests contributors can run pnpm test on Node 18).

At minimum, bump engines.node to >=18.17.0 to match undici; also consider raising it further (or documenting a higher dev/test Node requirement) since Vite 7 won’t run on Node 18.

    "vitest": "^3.2.7"
  },
  "engines": {
    "node": ">=18"
  },

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.