[LunaUrsa]

Summary

Bumps every outdated direct dependency to its latest release and refreshes the lockfile. Fixes WEB-026.

• Minor/patch: react and react-dom 19.3, @tanstack/react-query, tailwindcss, swiper, eslint 10.14, typescript-eslint 8.72, prettier, lint-staged, @testing-library/react and user-event, @types/*.
• apexcharts 5 → 8: 6–8 moved some chart types and features into separate imports. rangeBar, the only type we use, stays in the default bundle.
• Removes the @babel/helper-plugin-utils: 7.26.5 override. Tests and coverage pass on 7.29.7 with @babel/core 7.29.7.
• Security: clears both high advisories (zod, brace-expansion). npm audit --omit=dev stays clean.

Supersedes the Dependabot PRs #263 (eslint) and #262 (@testing-library/user-event).

Not upgraded

• TypeScript 7: typescript-eslint supports <6.1.0 (already in dependabot.yml's ignore list).
• 27 moderate / 3 low advisories remain, all under eslint and jest:
  • minimatch and glob are fixed only in new majors (11, 14), which eslint and jest don't accept yet. minimatch 11 changes the partial matching that eslint uses to walk directories, so forcing it with an override could silently change which files get linted.
  • deepmerge has no fixed release.
  • Notes are in WEB-026.

Type of change

• Bug fix
• New feature
• Documentation
• Refactor / chore
• Other (describe above)

Checklist

• Branch is up to date with uat (this PR targets uat, not main)
• Lint passes (npx eslint .): 0 errors; the 2 warnings are WEB-025's
• npx next build succeeds locally (also type-checks)
• No secrets, .env values, or user data included

Test plan

• npm ci from a clean node_modules: OK
• npx tsc --noEmit: OK
• npx eslint .: 0 errors, 2 known warnings (WEB-025)
• npm test and npm run test:coverage: 9 suites, 37 tests pass
• npx next build: OK
• next start, then opened /factsheets/lsd: the Dosages and Durations range-bar charts render, and nothing is logged to the console

🤖 Generated with Claude Code