chore(deps): consolidate dependency updates

[altaywtf]

Summary

Consolidates dependency updates from #52, #53, and #54 into one coherent update, fixes the Vite+ core split that broke TypeScript 7 declaration generation, and refreshes the pinned checkout action used by verification and release.

Changed

• update roku-deploy from 3.17.7 to 3.18.2
• update @types/node from 26.1.1 to 26.1.2
• update TypeScript from 6.0.3 to 7.0.2
• update Vite+ and its core/catalog/override from 0.2.4/0.2.2 to 0.2.6
• regenerate pnpm-lock.yaml from the existing main lock for the combined dependency set while preserving the Effect beta.97 graph
• update both actions/checkout pins from v7.0.0 to v7.0.1 with the existing full-SHA and same-line version convention

Review aids

Area	Before	After
Roku packaging	roku-deploy 3.17.7	3.18.2
compiler	TypeScript 6.0.3	7.0.2
toolchain	Vite+ 0.2.4 / core 0.2.2	Vite+ 0.2.6 / core 0.2.6
declarations	split core graph crashed on useCaseSensitiveFileNames	one core graph emits both declaration entrypoints
workflow checkout	v7.0.0 at 9c091bb	v7.0.1 at 3d3c42e
Effect	beta.97 package graph	unchanged

Risks

TypeScript 7 remains experimental upstream. Vite+ 0.2.6 declares TypeScript 7 support, the package emits declarations successfully, and the peer dependency graph is clean. The checkout update preserves the existing workflow inputs and pin/comment conventions.

Verification

• pnpm exec vp install --frozen-lockfile
• pnpm peers check
• git diff --check
• actionlint .github/workflows/ci.yml
• uvx zizmor .github/workflows/ci.yml
• pnpm exec vp run verify — 12 files and 85 tests pass; declarations and npm pack dry run succeed
• pnpm exec vp run smoke
• shipped CLI describe success and unknown-command failure surfaces
• dry-run package contains dist/index.mjs, dist/index.d.mts, dist/rokit.mjs, and dist/rokit.d.mts

Complexity

Low: dependency manifests, workspace catalog/override resolution, one targeted lockfile update, and two SHA-pin replacements in the existing workflow.

Follow-Ups

Close #52 after this replacement PR is green. #53 and #54 are already closed as superseded.

[Copilot]

Pull request overview

Consolidates previously separate dependency update PRs into a single, consistent dependency set and lockfile, aligning the Vite+ core/catalog/override graph so TypeScript 7 declaration generation succeeds.

Changes:

• Bump typescript to ^7.0.2 and refresh the lockfile graph accordingly.
• Update @voidzero-dev/vite-plus-core / vite-plus to 0.2.6 via workspace catalog to avoid the prior split core graph.
• Update roku-deploy to 3.18.2 and @types/node to ^26.1.2.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File	Description
pnpm-workspace.yaml	Updates workspace catalog pins for Vite+ core and vite-plus to keep the toolchain graph coherent.
pnpm-lock.yaml	Regenerates lockfile to reflect the consolidated dependency set (TypeScript 7 + updated Vite+ core + updated roku-deploy).
package.json	Applies the dependency version bumps (roku-deploy, @types/node, typescript, vite-plus) that drive the lockfile change.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 4 changed files in this pull request and generated no new comments.

[putio-releaser]

🎉 This PR is included in version 2.4.3 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀