chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
@types/react (source)	devDependencies	pin	^19.0.0 → 19.2.17
@types/react-dom (source)	devDependencies	pin	^19.0.0 → 19.2.3

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: (in timezone America/Boise)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	aerealith	a5e3386	Commit Preview URL Branch Preview URL	Jul 05 2026, 09:12 AM

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/@types/react	19.2.17	🟢 6.5	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 8 Found 25/28 approved changesets -- score normalized to 8 Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Security-Policy 🟢 10 security policy file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed
npm/@types/react-dom	19.2.3	🟢 6.5	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 8 Found 25/28 approved changesets -- score normalized to 8 Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Security-Policy 🟢 10 security policy file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed

Scanned Files

• package.json

[github-code-quality]

Code Coverage Overview

Languages: TypeScript

TypeScript / code-coverage/vitest

The overall coverage remains at 92%, unchanged from the master branch.

---

_{Updated July 05, 2026 09:16 UTC
Code Coverage is in Public Preview. Learn more and provide us with your feedback.}

[codecov]

Bundle Report

Bundle size has no change ✅

[github-actions]

Coverage Report for Aerealith Vitest Coverage (.)

Status	Category	Percentage	Covered / Total
🔵	Lines	91.78%	893 / 973
🔵	Statements	91.79%	895 / 975
🔵	Functions	86.41%	267 / 309
🔵	Branches	87.2%	402 / 461

File Coverage

No changed files found.

Generated in workflow #209 for commit a5e3386 by the Vitest Coverage Report Action

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

[github-actions]

Aerealith CI

Overall result: ✅ Passed
Run: #209

Check	Result
Dependency install	✅ Passed
Nx installation	✅ Passed
Nx workspace reset	✅ Passed
Git comparison range	✅ Passed
Nx affected validation	✅ Passed
MegaLinter	✅ Passed

Cache

• pnpm store: miss
• Nx task cache: managed by Nx Cloud when configured for this workspace.

Run details

• Base SHA: 29f4bb5372032cd5a0e975601929da430abcc9dc
• Head SHA: a5e3386dad4891d7449b9d2ba00c7e10ad06751e
• Validation targets: lint, typecheck, test, build
• Logs: download the ci-logs artifact from the workflow run.

[alwaysmeticulous]

Test suite: Aerealith

✅ Meticulous spotted 0 visual differences across 2 screens tested: view results.

_{Expected differences? Click here. Last updated for commit a5e3386 chore(deps): pin dependencies. This comment will update as new commits are pushed.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud