Run maintenance pass and consolidate updates

[llbbl]

Summary

• group and supersede Dependabot PRs Bump vite from 8.0.13 to 8.0.16 #27, Bump sharp from 0.34.5 to 0.35.0 #28, Bump next from 16.2.6 to 16.2.11 #29, and Bump postcss from 8.5.14 to 8.5.18 #30 in one reviewed maintenance change
• bring dependencies, pnpm, and supporting config forward while keeping the app and test stack green
• clear the security audit to zero vulnerabilities and close the maintenance tracking issue

Changes

Dependencies

• package.json: upgrade Next, Vite, Sharp, PostCSS, pnpm, and compatible supporting packages in one pass
• pnpm-lock.yaml: refresh the lockfile for the consolidated dependency set
• pnpm-workspace.yaml: update workspace package manager metadata

Build System

• vitest.config.mts: move Vitest to an explicit ESM config file
• next.config.mjs: fix iframe loading telemetry behavior required by the upgraded stack
• biome.json: address configuration warnings surfaced during the maintenance pass
• .gitignore: keep the local maintenance context workspace ignored

Bug Fixes

• pages/index.tsx: fix accessibility regressions and related page behavior exposed by the upgrade sweep
• components/Copyright.tsx: remove stale output affecting the footer
• public/favicon.svg: add missing SVG title metadata
• public/luddy.svg: add missing SVG title metadata
• public/next.svg: add missing SVG title metadata
• public/placeholder.svg: add missing SVG title metadata
• public/vercel.svg: add missing SVG title metadata

Tests

• tests/smoke.test.tsx: add focused regression coverage for the maintenance changes

Test plan

• pnpm install --frozen-lockfile
• pnpm audit
• pnpm lint
• pnpm typecheck
• pnpm test
• pnpm build
• git diff --check

Closes #31

[railway-app]

🚅 Deployed to the luddy.dance-pr-33 environment in superb-amazement

Service	Status	Web	Updated (UTC)
luddy.dance	✅ Success (View Logs)	Web	Aug 6, 2026 at 1:11 pm

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	next@​16.3.0
	@​types/​react-dom@​19.2.4
	@​vitest/​ui@​4.1.10
	@​types/​react@​19.2.18
	vitest@​4.1.10
	postcss@​8.5.25
	vite@​8.2.0
	tailwindcss@​4.3.3
	react@​19.2.8
	@​next/​bundle-analyzer@​16.3.0
	sharp@​0.35.3
	react-dom@​19.2.8
	@​vitejs/​plugin-react@​6.0.5
	@​tailwindcss/​postcss@​4.3.3
	@​biomejs/​biome@​2.5.7

View full report