chore(deps): pin dependencies

[renovate-ce-paramount-engineering]

This PR contains the following updates:

Package	Type	Update	Change
@electron/notarize	devDependencies	pin	^2.2.1 → 2.5.0
concurrently	devDependencies	pin	^10.0.0 → 10.0.4
cross-env	devDependencies	pin	^10.0.0 → 10.1.0
docker/dockerfile	syntax	pinDigest	→ 87999aa
electron-builder (source)	devDependencies	pin	^26.0.0 → 26.15.3
jsdom	devDependencies	pin	^29.0.0 → 29.1.1
node	final	pinDigest	→ 6c74791
node	stage	pinDigest	→ 6c74791
sharp (source, changelog)	devDependencies	pin	^0.35.0 → 0.35.3
tsx (source)	devDependencies	pin	^4.21.0 → 4.23.1
typescript (source)	devDependencies	pin	^5.7.3 → 5.9.3
vite (source)	devDependencies	pin	^8.0.0 → 8.1.5
vite-plugin-solid	devDependencies	pin	^2.11.6 → 2.11.14
wait-on	devDependencies	pin	^9.0.0 → 9.1.0

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate CE.

[Copilot]

Pull request overview

Pins key development/build dependencies and Docker base images to exact versions/digests to improve build reproducibility across the monorepo.

Changes:

• Pinned TypeScript to 5.9.3 across multiple workspace packages.
• Pinned desktop app devDependencies (e.g., vite, tsx, electron-builder, jsdom, sharp) to exact versions and updated package-lock.json accordingly.
• Pinned Dockerfile syntax and node:22-bookworm-slim image references to specific digests.

Reviewed changes

Copilot reviewed 7 out of 8 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
packages/roku-dev-studio-remote-server/package.json	Pin typescript devDependency to 5.9.3.
packages/roku-dev-studio-platform/package.json	Pin typescript devDependency to 5.9.3.
packages/roku-dev-studio-network-inspector/package.json	Pin typescript devDependency to 5.9.3.
packages/roku-dev-studio-mcp/package.json	Pin typescript devDependency to 5.9.3.
packages/roku-dev-studio-api/package.json	Pin typescript devDependency to 5.9.3.
apps/roku-dev-studio/package.json	Pin multiple devDependencies to exact versions for reproducible tooling/builds.
package-lock.json	Lockfile updates to reflect pinned versions and updated transitive dependencies.
Dockerfile	Pin Dockerfile syntax + Node base image digests for deterministic builds.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.