chore(deps): wave 1 safe minor/patch bumps

[JevonThompsonx]

Wave 1 SAFE minor/patch updates (non-breaking only).

Version table (before -> after):

• next 16.3.3 -> 16.3.4
• eslint-config-next 16.3.3 -> 16.3.4
• zod 4.5.2 -> 4.5.4
• @types/node 26.4.0 -> 26.4.1
• @types/react-dom 19.2.5 -> 19.2.7
• @libsql/client 0.17.4 -> 0.18.0 (npm latest; repo uses basic createClient({url, authToken}) + execute surface in src/lib/db.ts, drizzle/migrate.ts)

Held (none this wave): @libsql/client 0.18.0 INCLUDED — gates green, basic API surface unaffected.
Forbidden untouched: lucide-react (stays 0.577.0), eslint (stays 9.39.4), typescript (stays 5.9.3), vitest (stays 4.1.11), node/bun engines unchanged.

Gates (all pass, 0 repair cycles):

• vitest run: 6 files, 89/89 passed
• tsc --noEmit: exit 0
• eslint .: exit 0
• prettier --check .: pass
• next build (CI-equivalent, migrate skipped): exit 0, all routes built
• bun install --frozen-lockfile: in sync (Checked 570 installs, no changes)

Audit delta: NONE — 0 HIGH/CRITICAL, 1 moderate esbuild (dev-only via drizzle-kit/vitest chains, both untouched).

Notes:

• bun 1.4.0 used for install (repo pins bun 1.3.10 via packageManager/engines; lockfile generated cleanly, frozen check passes).
• Commit contains ONLY package.json + bun.lock (pre-existing AGENTS.md worktree change excluded).
• Do NOT merge here; awaiting review.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
web-dev-blogsite	Ready	Preview	Sep 3, 2026 2:31pm UTC