[arosasg]

Problem

15 dependabot PRs (#571-#585) are open. Merging them one by one conflicts on pnpm-lock.yaml, and the majors need changes: vite-plugin-dts 5 renamed outDir to outDirs (typecheck failed, which is why #576 was red).
The repo's CI script chains steps with ;, so a green check does not prove lint and typecheck pass.

Solution

One grouped PR with all 15 bumps: vite 8.3.5, vite-plugin-dts 5.1.2 (outDirs), vite-plugin-svgr 5.2.0, eslint-plugin-react-hooks 7.1.1, eslint-plugin-react-refresh 0.5.7, commitlint cli / config-conventional / cz-commitlint 21.2.4, plus the minors and patches.
Only devDependencies and vite.config.ts change. No changeset is needed: the published package version stays 1.3.4 and the Publish workflow finds nothing unpublished.

Verification

Node 22.22.2, each step run separately:

• pnpm lint: exit 0 (0 warnings, all react-hooks 7 rules active).
• pnpm typecheck: exit 0.
• pnpm build: exit 0, three clean builds.
• pnpm build-storybook: exit 0.
• dist public surface vs main: every exports target exists; the named exports of all 27 entry points, ESM and CJS, are identical; all .d.ts files are identical after normalising quote style.
• npm view diditui version is 1.3.4 and package.json is 1.3.4, so merging publishes nothing.

Supersedes #571-#585.

🤖 Generated with Claude Code

[arosasg]

Codex review (codex CLI, account codex-3, model gpt-5.6-sol)

---

💡 Code review

Reviewed commit: e6211b6

No blocking findings in commit e6211b6.

Verdict: APPROVE