chore: update in-range dev dependencies

[evilmachina]

Summary

Bumps in-range dev dependencies to latest patch/minor versions via `npm update`. No `package.json` changes — the existing caret ranges already covered these, so only `package-lock.json` is updated.

Package	Before	After
`@types/node`	24.7.0	24.13.2
`prettier`	3.6.2	3.8.4
`typescript`	5.9.2	5.9.3

Verification

• ✅ `npm test` — 236 tests pass
• ✅ `npm run build` — clean `tsc` compile under TS 5.9.3

Intentionally left out

• Major bumps (commitlint 19→21, vitest 3→4, typescript 6, changelog-github 0.5→0.7): deserve separate, deliberate upgrades with their own testing.
• zod 4: held — the MCP SDK ecosystem is still on zod 3.
• js-yaml audit alert (13 moderate): dev-only, transitive through changesets (`@manypkg/get-packages → read-yaml-file → js-yaml@3.14.2`). No clean upstream fix yet, and `npm audit fix --force` would downgrade changesets several majors. Left alone.

🤖 Generated with Claude Code

[coderabbitai]

📝 Walkthrough

Walkthrough

A new changeset file .changeset/calm-ghosts-relate.md is added with two lines of content. No existing files are modified.

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the main change: updating in-range dev dependencies.
Description check	✅ Passed	The description is directly related to the dependency update and matches the changeset.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 001fb373-9014-452a-b8f9-09cbbc2ff038

📥 Commits

Reviewing files that changed from the base of the PR and between 9941b2a and 05b23d0.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json, !package-lock.json

📒 Files selected for processing (1)

• .changeset/calm-ghosts-relate.md

[evilmachina]

CodeRabbit Autofix Review Complete

Reviewed 1 CodeRabbit feedback item and did not apply code changes in this run.

Dismissed: "Empty changeset is malformed" (.changeset/calm-ghosts-relate.md).

The empty changeset is intentional and valid:

• It follows this repo's documented convention in AGENTS.md: "For changes that don't affect the published package (docs, internal tooling), add an empty changeset with npx changeset add --empty."
• Empty changesets are a first-class Changesets feature. npx changeset status --since=origin/main accepts it cleanly (exit 0, "NO packages to be bumped").
• This PR only updates in-range dev dependencies in package-lock.json, so no version bump should be released. The suggested patch bump would trigger an unwanted release.