chore(deps): major updates -- typescript 7, better-sqlite3 13

[thewrz]

This was written agentically; verify its assertions:

Why

Renovate's grouped major PR (#130) bundled @vitest/coverage-v8 5.x, which requires vitest 5 and would break the test job against vitest 4.1.x, and dependabot's per-package majors (#132, #133) conflict with the lockfile after #153 and #155. Landing the two majors that are actually safe, fresh on main.

What

Package	From → To	Notes
typescript	6.0.3 → 7.0.2	the native compiler; tsc, tsc --noEmit, and tsc -p tsconfig.scripts.json pass unchanged under strict mode
better-sqlite3	12.10.0 → 13.0.3	first N-API release; SQLite 3.53.4; in-process smoke opens an in-memory DB and queries it
@types/better-sqlite3	7.6.13 → 9.6.0	tracks the runtime major

Deliberately left out: @vitest/coverage-v8 5.x (needs vitest 5). Resolved with npm install --before=2026-09-08 so each release clears the 7-day minimumReleaseAge gate. No source changes. Supersedes #130, #132, #133, which are closed as outdated.

Testing

• npm run typecheck, typecheck:scripts, build, check:node-pin pass on TypeScript 7.0.2
• better-sqlite3 13 native module loads and queries (select sqlite_version() → 3.53.4)
• npm run test:coverage: 1670 passed, 11 skipped
• npm audit --audit-level=high: 0 vulnerabilities
• CI green on every head (typecheck, test, audit, node-pin, CodeQL, dependency-review)
• Note: the final commit is an empty ci: retrigger. GitHub generated two refs/pull/157/merge commits one second apart at the previous push; CodeQL scanned the first while the PR's merge ref settled on the second, so the pre-merge gate could not match the analysis to the PR's merge commit. A rerun reuses the original checkout SHA, so a fresh push was the only way to get a scan of the settled merge commit.

🤖 Co-authored by Claude Fable 5.1.
🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: c4a9578e-438b-4fc4-be1c-4b9145bb2f98

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[thewrz]

This was written agentically; verify its assertions:

Adversarial review receipt

• Reviewer: provider=codex; model=gpt-5.6-sol; effort=xhigh; mode=cross-provider (reason: n/a)
• Counts: P1=0; P2=0; total=0
• Reviewed head: c5880f6
• Confirmed finding: none confirmed
• Verified-skip rationale: Manifest+lockfile-only major dependency bump with no source changes; the compiler and native-module majors are exercised end to end by the declared verification rather than judged by reading a lockfile, and the user-specified verification standard for this triage is smoke tests plus local CI.; mechanical oracle=git diff origin/main..HEAD --stat touches only server/package.json and server/package-lock.json; clean npm ci; tsc 7.0.2 passes typecheck, typecheck:scripts and build under strict mode; better-sqlite3 13.0.3 native module loads and answers select sqlite_version() = 3.53.4; check:node-pin consistent; test:coverage = 1670 passed / 11 skipped; npm audit --audit-level=high = 0; resolved with npm install --before=2026-09-08 (7-day release age).

🤖 Co-authored by Claude Fable 5.1.

[thewrz]

This was written agentically; verify its assertions:

Review ledger

Machine-readable record of every review already performed on this PR.

{
  "version": 1,
  "pr": 157,
  "repo": "wrzonance/DMXr",
  "reviews": [
    {
      "kind": "adversarial",
      "provider": "codex",
      "model": "gpt-5.6-sol",
      "effort": "xhigh",
      "mode": "cross-provider",
      "harness": "claude",
      "head_sha": "c5880f60ef007b8783ede2719856e0a10dee5543",
      "covered_heads": [
        "353f3026ccc6c8dbffd921ae507e8f14bbe8bde6",
        "57fd500c0d3761030cd43d22a9c90b006587e160",
        "c5880f60ef007b8783ede2719856e0a10dee5543"
      ],
      "counts": {
        "p1": 0,
        "p2": 0
      },
      "reviewed_at": "2026-09-15T17:31:05Z",
      "coverage": [
        {
          "sha": "353f3026ccc6c8dbffd921ae507e8f14bbe8bde6",
          "reason": "merge-down:fd3de2ebd44fa256fa272d3a79a1d994bd5e3e8c",
          "covered_at": "2026-09-15T17:34:03Z"
        },
        {
          "sha": "57fd500c0d3761030cd43d22a9c90b006587e160",
          "reason": "fix:ci-retrigger-after-github-test-merge-race",
          "covered_at": "2026-09-15T17:43:22Z"
        }
      ]
    }
  ]
}

🤖 Co-authored by Claude Fable 5.1.