chore(deps): update dependency graph

[steipete]

Summary

• Update all direct runtime and development dependencies reported by pnpm.
• Refresh pinned transitive overrides, including Fast URI 4 and protobufjs 8.
• Move the package-manager pin to the latest pnpm 10 release.

pnpm 11.20.0 was evaluated but is intentionally deferred: its default 24-hour minimum-release-age policy rejects several packages published today. Keeping that security gate is preferable to disabling it repository-wide.

Proof

• pnpm outdated --format json → {}
• pnpm run lint
• pnpm run docs:check
• pnpm run docs:site
• pnpm run test → 151 files / 1,675 tests passed
• pnpm run build
• pnpm run test:packed-cli
• pnpm run test:mcp → unit tests plus live MCP schema/session discovery passed
• Built CLI OpenAI smoke: GPT-5.6 returned ok in 1.3s, exit 0
• Built CLI browser smoke: signed-in GPT-5.6 Sol returned ok in 29.2s with verified model selection
• Built docs site served locally and returned HTTP 200 with the expected askoracle canonical metadata
• Codex autoreview: clean, no accepted/actionable findings

[clawsweeper]

ClawSweeper status: review started.

I am starting a fresh review of this pull request: chore(deps): update dependency graph This is item 1/1 in the current shard. Shard 0/1.

This placeholder means the worker is alive and reading the current context. I will edit this same comment with the actual review when the claws are done clicking.

Crustacean status: shell secured, claws on keyboard, evidence pebbles being sorted.

[steipete]

Landed with full dependency and runtime proof.

• Freshness: pnpm outdated --format json returned {}; all six workspace overrides match current stable releases.
• Local gate: lint/typecheck, docs check/site build, 151 test files / 1,675 tests, build, packed CLI, and MCP unit plus live schema/session discovery all passed.
• OpenAI API: the built CLI called GPT-5.6 through the updated SDK and received ok in 1.3s, exit 0.
• Browser/CDP: the built CLI used the signed-in Chrome profile, verified GPT-5.6 Sol, and received ok in 29.2s.
• Docs: the built site served locally with HTTP 200 and the expected askoracle canonical metadata.
• Review: Codex autoreview was clean with no accepted/actionable findings.
• Exact-head CI: https://github.com/steipete/oracle/actions/runs/31008400457 passed Linux, macOS, Windows, the Chromium CDP proof, and GitGuardian for fc7d16e94c1fbc1dae51a2ef2b51c305363de34c.

pnpm 11.20.0 remains intentionally deferred because its default 24-hour minimum-release-age policy rejects several dependencies published today; pnpm was updated to the newest compatible 10.x release instead. Squash-merged as d0898f4bd7652f54556d9e632b4b8cf621e26f7e.