package,declared,locked,registry_latest,candidate,decision
@biomejs/biome,2.5.14,2.5.14,2.5.15,2.5.15,候选升级，未验证
@earendil-works/pi-agent-core,0.87.1,0.87.1,0.99.2,0.99.2,同步升级并验证嵌入接口；另评估 pi-mcp SDK
@earendil-works/pi-ai,0.87.1,0.87.1,0.99.2,0.99.2,同步升级并验证嵌入接口；另评估 pi-mcp SDK
@fontsource-variable/inter-tight,^5.2.7,5.3.0,5.3.0,5.3.0,保持
@fontsource-variable/space-grotesk,^5.2.10,5.3.0,5.3.0,5.3.0,保持
@hono/swagger-ui,0.6.1,0.6.1,0.6.1,0.6.1,保持
@hono/zod-openapi,1.6.3,1.6.3,1.6.3,1.6.3,保持
@modelcontextprotocol/sdk,1.30.1,1.30.1,1.31.0,1.31.0,候选升级，未验证
@react-router/dev,7.12.0,7.12.0,8.4.0,7.18.4,先同主版本安全修复；8.4.0 另评估
@react-router/node,7.12.0,7.12.0,8.4.0,7.18.4,先同主版本安全修复；8.4.0 另评估
@simplewebauthn/browser,^13.3.0,13.3.0,14.0.0,14.0.0,独立兼容评估后决定，不直接更新
@simplewebauthn/server,13.3.3,13.3.3,14.0.3,14.0.3,独立兼容评估后决定，不直接更新
@tailwindcss/vite,^4.1.13,4.3.3,4.3.3,4.3.3,保持
@tanstack/react-query,^5.90.21,5.104.0,5.104.0,5.104.0,保持
@types/node,24.19.0,24.19.0,26.6.3,24.x,维持与 Node 24 兼容目标；不跟随 26
@types/nunjucks,3.2.6,3.2.6,3.2.6,3.2.6,保持
@types/pg,8.23.1,8.23.1,8.23.1,8.23.1,保持
@types/react,^19.2.7,19.3.0,19.3.0,19.3.0,保持
@types/react-dom,^19.2.3,19.3.0,19.3.0,19.3.0,保持
@xmldom/xmldom,0.9.12,0.9.12,0.9.12,0.9.12,保持
cheerio,1.2.0,1.2.0,1.2.0,1.2.0,保持
class-variance-authority,~0.7.1,0.7.1,0.7.1,0.7.1,保持
clsx,^2.1.1,2.1.1,2.1.1,2.1.1,保持
date-fns,^4.1.0,4.4.0,4.4.0,4.4.0,保持
fast-xml-parser,5.11.1,5.11.1,5.11.2,5.11.2,候选升级，未验证
hash-wasm,4.12.0,4.12.0,4.12.0,4.12.0,保持
hono,4.13.9,4.13.9,4.13.12,4.13.12,候选升级，未验证
isbot,^5.1.31,5.2.2,5.2.2,5.2.2,保持
jpeg-js,0.4.4,0.4.4,0.4.4,0.4.4,保持
kysely,0.29.6,0.29.6,0.29.6,0.29.6,保持
lucide-react,0.576,0.576.0,1.49.0,1.49.0,独立兼容评估后决定，不直接更新
next-themes,~0.4.6,0.4.6,0.4.6,0.4.6,保持
nunjucks,3.2.4,3.2.4,3.2.4,3.2.4,保持
openworkflow,0.10.1,0.10.1,0.10.1,0.10.1,保持
pg,8.23.0,8.23.0,8.23.1,8.23.1,候选升级，未验证
pino,10.3.1,10.3.1,10.3.1,10.3.1,保持
pino-pretty,13.1.3,13.1.3,13.1.3,13.1.3,保持
playwright-core,1.63.0,1.63.0,1.63.0,1.63.0,保持
postgres,3.4.9,3.4.9,3.4.9,3.4.9,保持
qr-code-styling,^1.9.2,1.9.2,1.9.2,1.9.2,保持
radix-ui,^1.4.3,1.6.7,1.6.7,1.6.7,保持
react,^19.2.4,19.3.0,19.3.0,19.3.0,保持
react-day-picker,^10.0.1,10.0.1,10.0.2,10.0.2,候选升级，未验证
react-dom,^19.2.4,19.3.0,19.3.0,19.3.0,保持
react-router,7.12.0,7.12.0,8.4.0,7.18.4,先同主版本安全修复；8.4.0 另评估
recharts,^3.10.1,3.10.1,3.10.1,3.10.1,保持
sonner,^2.0.7,2.0.8,2.0.8,2.0.8,保持
tailwind-merge,^3.5.0,3.7.0,3.7.0,3.7.0,保持
tailwindcss,^4.1.13,4.3.3,4.3.3,4.3.3,保持
tw-animate-css,^1.4.0,1.4.0,1.4.0,1.4.0,保持
typebox,1.3.27,1.3.27,1.3.34,1.3.34,候选升级，未验证
typescript,7.0.2,7.0.2,7.0.2,7.0.2,保持
vite,^7.1.7,7.3.6,8.3.1,8.3.1,独立兼容评估后决定，不直接更新
vite-tsconfig-paths,^5.1.4,5.1.4,6.1.1,6.1.1,独立兼容评估后决定，不直接更新
vitest,5.0.2,5.0.2,5.0.3,5.0.3,候选升级，未验证
xpath,0.0.34,0.0.34,0.0.34,0.0.34,保持
yaml,2.9.1,2.9.1,2.9.1,2.9.1,保持
zod,4.6.5;^4.3.6,4.6.5,4.6.5,4.6.5,保持