chore(deps): update dependencies to latest fixed versions

[jimmydjabali]

Summary

Weekly dependency refresh. Bumps 59 dependencies to their latest patch/minor (same-major) releases, each pinned to an exact version (no ^/~ ranges). Also normalizes text-encoding-polyfill from ^0.6.7 to 0.6.7 (same version, now pinned).

Validation performed

• ✅ npm install succeeds and all 19 patch-package patches still apply cleanly.
• ✅ Web production build (webpack --mode=production) compiles with 0 errors.
• ✅ No net-new type errors introduced, except a handful of cosmetic styled-components 6.4 type-inference reshuffles (see notes). The repo already carries ~383 pre-existing tsc errors on main; this branch is at ~376 (net −7).
• ⚠️ eslint could not be run in CI: eslint.config.mjs hardcodes tsconfigRootDir: "/home/swiss-bitcoin-pay/sbp/app" (a pre-existing, machine-specific absolute path). Left untouched as it is out of scope for a dependency bump.
• ⚠️ No test files exist in the repo and react-scripts (the test script runner) is not installed, so npm test is not a validation path.

Code change required by an update

• @yudiel/react-qr-scanner 2.1 → 2.6 — the audio option was removed from the Scanner components prop (the scanner no longer requests an audio track). Removed audio: false in src/components/QRCamera/QRCamera.tsx; behaviour is preserved (audio was already being disabled and is now simply not requested).

---

⛔ Not updated (deferred) — with reasons

Breaks the build (kept at current version)

• react-router-dom 7.6.3 → 7.18.1 — although a same-major bump, react-router 7.7+ ships chunked ESM (dist/**/chunk-*.mjs) that crashes the webpack production build during scope-hoisting: TypeError: Cannot read properties of undefined (reading 'module') in webpack's ProvidedDependency (ProvidePlugin). Reverting to 7.6.3 restores a clean build. Needs a webpack config change (e.g. conditionNames/concatenation handling) before it can be adopted — out of scope here.

Patched packages (bumping would break their patch-package patch)

These have version-specific patches under patches/; bumping changes the patch target filename and breaks postinstall. Kept pinned:

• @ledgerhq/react-native-hid (6.32.10)
• lottie-react-native (7.3.4)
• react-native-ble-plx (3.4.0)
• react-native-web (0.21.1) — and babel-plugin-react-native-web kept aligned at 0.21.1

Major / breaking upgrades — require native or build-toolchain validation not possible in this web CI

Not adopted this round (each is a major version jump needing device/native builds or a toolchain migration that can't be verified here):

• React Native core & toolchain: react-native 0.81.4 → 0.86.0, @react-native/assets-registry · @react-native/babel-preset · @react-native/eslint-config · @react-native/metro-config · @react-native/typescript-config 0.81.1 → 0.86.1
• Babel 8: @babel/core · @babel/plugin-transform-classes · @babel/plugin-transform-export-namespace-from 7.x → 8.0.1, @babel/preset-env → 8.0.2, @babel/runtime → 8.0.0
• Lint/TS toolchain: eslint 9 → 10.8.0, @eslint/js 9 → 10.0.1, @eslint/compat 1 → 2.1.0, eslint-plugin-react-hooks 5 → 7.1.1, typescript 5.9 → 7.0.2, @types/node 24 → 26.1.1
• Webpack tooling: webpack-cli 6 → 7.2.1, webpack-dev-server 5 → 6.0.0
• Sentry: @sentry/react-native 7 → 8.20.0 (also patched), @sentry/webpack-plugin 4 → 5.4.0
• RN native modules: @react-native-async-storage/async-storage 2 → 3.1.1, @react-native-community/slider 4 → 5.2.0, react-native-bootsplash 6 → 7.3.2, react-native-device-info 14 → 15.0.2, react-native-error-boundary 2 → 3.1.0, react-native-get-random-values 1 → 2.0.0, react-native-screenguard 1 → 2.0.2, react-native-vision-camera 4 → 5.1.1, react-native-webview 13 → 14.0.1 (also patched), @fortawesome/react-native-fontawesome 0.3 → 1.0.0
• i18n: i18next 25 → 26.3.6, react-i18next 15 → 17.0.11
• Bitcoin/hardware wallet libs (0.x / major): bitbox-api 0.9 → 0.13.0, ledger-bitcoin 0.2 → 0.3.0, @ledgerhq/hw-app-btc 10 → 11.3.0
• Other: uuid 13 → 14.0.1, web-vitals 5 → 6.0.0, locale-currency 0.0.4 → 1.0.0, react-refresh 0.17 → 0.18.0, @lottiefiles/dotlottie-react 0.17 → 0.19.12

Note on styled-components 6.1.19 → 6.4.4 (applied): an internal type refactor renames some generics (Substitute → FastOmit), which shifts which call sites produce the repo's pre-existing styled-component type errors — net result is fewer errors (5 new sites, 12 resolved). No runtime impact.

Also left as-is: react-native-nyx-printer (intentionally pinned to a GitHub commit ref).

---

Generated by Claude Code

[netlify]

✅ Deploy Preview for swissbitcoinpayapp ready!

Name	Link
🔨 Latest commit	4542542
🔍 Latest deploy log	https://app.netlify.com/projects/swissbitcoinpayapp/deploys/6a6439f2af4f910008967945
😎 Deploy Preview	https://deploy-preview-366--swissbitcoinpayapp.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[netlify]

✅ Deploy Preview for app-swiss-bitcoin-pay-ch ready!

Name	Link
🔨 Latest commit	4542542
🔍 Latest deploy log	https://app.netlify.com/projects/app-swiss-bitcoin-pay-ch/deploys/6a6439f200d32100087523c3
😎 Deploy Preview	https://deploy-preview-366--app-swiss-bitcoin-pay-ch.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.