chore(deps): bump library dependencies within semver range

[Phoenixrr2113]

Routine pnpm update -r across the workspace — latest in-range, no majors.

Bumped (caret floors rewritten to tested versions): typescript 5.7→5.9, ai 6.0.0→6.0.193, zod 3.23→3.25, vitest 3.x→3.2.4 / 4.0→4.1.7, tsx→4.22.3, turbo→2.9.16, falkordb→6.6.2, @modelcontextprotocol/sdk→1.29, hono→4.12, and others.

Held back (majors, intentionally): commander 12→15, glob 10→13, typescript 6, @hono/node-server 1→2, @huggingface/transformers 3→4, recharts/sonner/etc. The apps/web landing app pins exact versions and is untouched (Vercel-gated).

Verified locally: build 17/17 (tsc clean on TS 5.9), @codegraph/core 149/149, and graph/plugin-nlp test tallies unchanged vs the pre-bump baseline (no new failures).

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
v0-landing-page-build	Ready	Preview, Comment, Open in v0	May 29, 2026 3:04pm

[augmentcode]

🤖 Augment PR Summary

Summary: Routine dependency refresh across the monorepo using pnpm update -r, keeping updates within existing major versions.

Changes:

• Bumped core toolchain/dev deps (e.g., typescript ~5.9, @types/node 22.19.19, vitest 3.2.x / 4.1.x, turbo, tsx, prettier).
• Updated key runtime deps across packages (e.g., ai, zod, hono, falkordb, @modelcontextprotocol/sdk, glob, tree-sitter grammars).
• Refreshed apps/web frontend dependencies (e.g., hookform, framer-motion, tailwind/postcss toolchain, shiki/sonner).
• Regenerated pnpm-lock.yaml to capture updated resolved versions.

Technical Notes: Most workspace packages move to TypeScript 5.9, while apps/web remains pinned to 5.7.3.

_{🤖 Was this summary useful? React with 👍 or 👎}

[augmentcode]

Review completed. 1 suggestion posted.

Comment augment review to trigger a new review at any time.

[augmentcode]

The PR description says the apps/web landing app is “untouched”, but this PR does update its dependencies (and still leaves typescript pinned at 5.7.3). Consider updating the PR description to reflect that apps/web was included and whether the TypeScript pin is intentional.

Severity: low

_{🤖 Was this useful? React with 👍 or 👎, or 🚀 if it prevented an incident/outage.}