fix(deps): update frontend dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@anthropic-ai/sdk	^0.122.0 → ^0.123.0
@types/react-dom (source)	19.2.5 → 19.2.7
postcss (source)	8.5.26 → 8.5.28
zod (source)	4.5.1 → 4.5.4

---

Release Notes

anthropics/anthropic-sdk-typescript (@​anthropic-ai/sdk)

v0.123.0

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

• api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)
• api: manual updates (c6f0bda)
• api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

• keep credential file access out of non-Node bundles (ab6a4b2)

Chores

• internal: codegen related update (788ea8b)

Documentation

• changelog: detail the beta files/skills GA-shape change (#​1175) (4951de0)

postcss/postcss (postcss)

v8.5.28

Compare Source

• Fixes types regression.

v8.5.27

Compare Source

• Fixed removing any comments starting with /*# (by @​dylanpulver).
• Fixed * hack before a comment in Custom Properties (by @​Jaybhade).
• Fixed empty values in the middle of list.comma() (by @​MahinAnowar).
• Fixed whitespace-only values in list.space() (by @​MahinAnowar).
• Fixed rule’s end position on space before semicolon (by @​maximilliangrand).
• Fixed types (by @​romainmenke).
• Fixed Chinese text in deprecation warning (by @​Jesse205).

colinhacks/zod (zod)

v4.5.4

Compare Source

Commits:

• 84e416f fix(v4): stop the cycle walk from firing a default factory (#​6500)
• e8e206f 4.5.4

v4.5.3

Compare Source

v4.5.2

Compare Source

Commits:

• a354314 fix(docs): keep blog posts out of the docs collection (#​6484)
• d378c42 ci: drop canary publishing from the release workflow (#​6487)
• 212b941 fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#​6488)
• e7576f5 docs(blog): let the page show through the navbar in dark mode (#​6489)
• fedb06f fix(docs): match the blog TOC hover bar to the 2px active indicator
• 6c932fc chore: bump devcontainer image to Node 24 (#​6470)
• 6635d9d docs(blog): soften the "method memoization" attribution
• 019ae29 fix(docs): drop ISR on the docs route so the home page hydrates
• 652bb43 chore(docs): drop the scroll log from the route-change scroller
• 571c8e8 fix(docs): render blog tabs with the stock fumadocs tab card
• 9a193aa 4.5.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 06:59 AM, only on Monday (* 0-6 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[lonniev]

Dependency bump reviewed: CI green and the frontend build verified for this lockfile.

[dpyc-agentic-desk]

✅ Deploy verified live: version 0.30.7, serving 9bcc4c8c (matches the merge).