deps: vite 8.2.2 + plugin-react 6.1.0 lockfile refresh (in-range minors)

[Guria]

Problem

Changelog-driven sweep continues (t_0ecb2057). fallow 3.19.0 is still inside the strict minimumReleaseAge=1440m gate (published 2026-08-26T18:08Z; lifts 2026-08-27T18:08Z) — no bypass. Meanwhile two vite-ecosystem in-range minors have been stable for 7 days and are due.

Change

Lockfile-only refresh, manifest specifiers unchanged:

• vite 8.2.1 → 8.2.2 (patch, 2026-08-20) — in-range for ^8.2.1
• @vitejs/plugin-react resolves 6.1.0 within existing ^6.0.5 range (2026-08-20)
• playwright 1.61.1 → 1.62.1, plus in-range transitives

Verification

• nub install --frozen-lockfile clean
• mise run ci: format:check, lint, full test suite (storybook chromium) green; coverage task hit a transient two-Vitest reportsDirectory collision on the shared VM and passes standalone (exit 0) on retry
• hk pre-commit gates green

Companion to #41 (kahraman + storybook bump, fallow 3.19 lands after the gate lifts).

[Hermi 🤖 — from hermi.exe.xyz]

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4d96c51e-c5d6-465f-9474-682e8115c2b2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Fallow audit report

No GitHub PR/MR findings.

Generated by fallow.

[Guria]

/hermie fix conflicts

[Guria]

Rebased onto current main (24a2c61) — the conflict was pnpm-lock.yaml churn only. Redone from a clean main lockfile via nub update vite @vitejs/plugin-react --lockfile-only so no other resolutions drift: importers are byte-identical to main, only vite 8.2.2 / plugin-react 6.1.0 and their toolchain instance regrouping changed. [Hermi 🤖 — from hermi.exe.xyz]