chore(deps): weekly dependency update 2026-w29

[ZL-Asica]

Dependency Update

Weekly dependency refresh for ISO week 29 of 2026.

Dependency Changes

Dependency	Old Version	New Version	Reason
pnpm	11.5.1	11.12.0	Latest stable package manager metadata
next / @next/*	16.2.7	16.2.10	Next.js patch update
cloudflare	6.3.0	7.0.0	Major SDK update; removes runtime dependencies and migrates v7 call signatures
sharp	0.34.5	0.35.3	Image runtime update; migrated failOnError to failOn
Routine packages	various	latest policy-eligible	Weekly patch/minor refresh

Migrations / Typegen

• Ran pnpm exec cloudflare migrate ./src once for the Cloudflare SDK 7 migration.
• Updated src/utils/image-convert.ts for the sharp 0.35 option rename.
• Added narrow pnpm overrides for mdast-util-to-hast@13.2.1 and postcss@8.5.17.
• No generation/typegen script exists in package.json.

Deferred

• typescript 6.0.3 -> 7.0.2: deferred because current @typescript-eslint/parser peer constraints still require TypeScript <6.1.0.
• @types/node 24 -> 26: deferred because the repo declares Node >=22.x; updated within the compatible 24.x line instead.
• d3-color advisory via react-simple-maps: deferred because the patched major is outside the upstream D3 dependency ranges.

Checks

• CI=true pnpm install --frozen-lockfile
• CI=true pnpm lint:fix
• CI=true pnpm typecheck
• CI=true pnpm build
• sharp runtime smoke test
• pnpm audit --json reports only the deferred d3-color advisory.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[github-actions]

🚦 PR Checks

• 🎨 Lint: ✅ success
• 🔎 Typecheck: ✅ success
• 🏗️ Build: ✅ success

🔗 Run: https://github.com/NUDelta/dtr-web/actions/runs/29220341121