chore(deps): update dependency @types/node to v26

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node (source)	^25.9.2 → ^26.0.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[greptile-apps]

PR author is in the excluded authors list.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 859df19

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​node@​25.9.2 ⏵ 26.3.0			+1	-1

View full report

[cursor]

Risk: low. This is a types-only @types/node dev dependency bump with all CI checks passing. Approved.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}

[devin-ai-integration]

Devin Review found 1 potential issue.

[devin-ai-integration]

🔍 Major @types/node bump may not match supported Node runtimes

This is a devDependency-only major bump of @types/node from ^25 to ^26 (lockfile updated in the same commit). package.json declares no engines field, so there is no explicit statement of which Node runtimes the SDK supports; typing against v26 can silently allow use of APIs unavailable in older runtimes consumers might still run. Worth confirming CI typecheck/build passes and that the intended minimum Node version is documented.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[devin-ai-integration]

Devin Review found 1 new potential issue.

[devin-ai-integration]

🔍 CONTRIBUTING documents pnpm but repo uses an npm lockfile

CONTRIBUTING.md instructs contributors to use pnpm install / pnpm test, yet the repo tracks package-lock.json and this bot bump edits it. This mismatch is pre-existing, not introduced here, but dependency-bump PRs will keep touching the npm lockfile while docs point elsewhere; worth aligning the docs or the tooling.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This is a narrow Renovate update confined to ignored dependency metadata, affecting dev-time typechecking and lockfile resolution rather than production source behavior. Review by the core-team owners is warranted because both changed files are outside the author's ownership and the major type-package bump raises an unresolved Node-runtime compatibility question.

Not approved because:

• Credit balance exhausted. Approvability relies on correctness review in order to determine eligibility

^{Review your spending limits in Billing settings. You can add or adjust custom eligibility rules. Learn more.}

[wave-bugbot]

🟢 WAVE BugBot — clear

No confident findings on the changed lines.

_{Local review · $0 inference · wave-dispatch}

[codeant-ai]

Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI.