chore(deps): bump the npm-production group across 1 directory with 8 updates

data/repo-awareness-snapshot.json

@@ -1,8 +1,8 @@
 {
   "version": "repo-awareness-snapshot-v1",
   "captured_revision": {
-    "sha": "3e4f966015b826e0f84e3f1439e9e751f237fc1f",
-    "committed_at": "2026-08-27T07:49:35+00:00"
+    "sha": "f122f0e3a247cd751cd0806cd77c473dbdcbed6c",
+    "committed_at": "2026-08-27T10:49:10+00:00"
   },
   "routes": {
     "modes": [
@@ -3903,6 +3903,22 @@
         "outcome": "mergeable; snapshot regenerated; 5 premature inbox done requests removed; dev-drive-cache fails closed; Medication pin /medications",
         "checks": "vitest session-start-hook+sidebar-production 18/18; check:dev-drive-cache; check:outstanding-issues-snapshot"
       },
+      {
+        "date": "2026-08-27",
+        "ref": "dependabot/npm_and_yarn/npm-production-9d7c78ff3c (PR #2296)",
+        "head": "493c018d8f90f441265b74d4b72c216b969a0c0b",
+        "scope": "Run PR sweep: CI fix + threads + drift",
+        "outcome": "Before: mergeable_state=behind (19 commits behind main), pre-merge head CI already fully green (PR required success), 0 unresolved review threads. Action: merged origin/main (clean, no conflicts — git merge-tree confirmed clean beforehand); ran npm ci, lint, typecheck, full unit test suite, and a full production build + bundle-budget check offline, all green; pushed merge commit 493c018d. No CI failures to fix, no review threads to address. After: new head 493c018d re-triggered CI (in progress at push time), no local guardrailed action taken.",
+        "checks": "lint: PASS (0 warnings); typecheck: PASS; test: PASS (892 files, 10817 passed, 4 skipped); build: PASS (next build --webpack, compiled successfully); check:bundle-budget: PASS (production 1665.9 KiB gzip within tolerance, mockups within tolerance, routes / and /documents/search within tolerance); no provider-backed checks run"
+      },
+      {
+        "date": "2026-08-27",
+        "ref": "dependabot/npm_and_yarn/npm-production-9d7c78ff3c (PR #2296)",
+        "head": "4b82338a3a29c650ec2d757265142821dddd28d4",
+        "scope": "Run PR sweep: CI fix + threads + drift",
+        "outcome": "Before: head f7527ac (prior sweep's own ledger-append commit) failing required Static PR checks — check:repo-awareness-snapshot stale because that prior ledger append changed the review-ledger record count without regenerating the committed snapshot; 0 unresolved review threads; mergeable_state behind by 1 commit on main (603da96, clean per git merge-tree). Action: regenerated data/repo-awareness-snapshot.json (commit bd6afd1), merged origin/main cleanly with zero conflicts (commit 4b82338, only files touched came from main's own already-CI-validated diff), pushed. No review threads existed to address. After: new head 4b82338, check:repo-awareness-snapshot passes locally; full CI re-triggered by the push and left to settle there.",
+        "checks": "check:repo-awareness-snapshot: PASS locally (both before-fix repro and after-fix confirmation); git merge-tree origin/main <tip>: clean (no conflict markers); npm run lint: started locally but did not finish within this session's window on the large first-run eslint cache build (~4+ min, no result to report) — not relied on, CI's static-pr job is authoritative for lint/typecheck on the pushed head; no provider-backed checks run"
+      },
       {
         "date": "2026-08-27",
         "ref": "ds-hazard-1-2-sweep (PR #2416)",
@@ -24937,7 +24953,7 @@
       }
     ],
     "counts": {
-      "records": 2631,
+      "records": 2633,
       "refs": 1608
     }
   }

docs/branch-review-records/52b3db9a323c66874de07e917279fec71c22c185ad3e2dfc67d2caf2b6abcaa5.record.md

@@ -0,0 +1 @@
+| 2026-08-27 | dependabot/npm_and_yarn/npm-production-9d7c78ff3c (PR #2296) | 493c018d8f90f441265b74d4b72c216b969a0c0b | Run PR sweep: CI fix + threads + drift | Before: mergeable_state=behind (19 commits behind main), pre-merge head CI already fully green (PR required success), 0 unresolved review threads. Action: merged origin/main (clean, no conflicts — git merge-tree confirmed clean beforehand); ran npm ci, lint, typecheck, full unit test suite, and a full production build + bundle-budget check offline, all green; pushed merge commit 493c018d. No CI failures to fix, no review threads to address. After: new head 493c018d re-triggered CI (in progress at push time), no local guardrailed action taken. | lint: PASS (0 warnings); typecheck: PASS; test: PASS (892 files, 10817 passed, 4 skipped); build: PASS (next build --webpack, compiled successfully); check:bundle-budget: PASS (production 1665.9 KiB gzip within tolerance, mockups within tolerance, routes / and /documents/search within tolerance); no provider-backed checks run |

docs/branch-review-records/5ee53229348bcb5b1501b3c918995fa3f9d9d541efa0600d72747debb37cc668.record.md

@@ -0,0 +1 @@
+| 2026-08-27 | dependabot/npm_and_yarn/npm-production-9d7c78ff3c (PR #2296) | 4b82338a3a29c650ec2d757265142821dddd28d4 | Run PR sweep: CI fix + threads + drift | Before: head f7527ac (prior sweep's own ledger-append commit) failing required Static PR checks — check:repo-awareness-snapshot stale because that prior ledger append changed the review-ledger record count without regenerating the committed snapshot; 0 unresolved review threads; mergeable_state behind by 1 commit on main (603da96, clean per git merge-tree). Action: regenerated data/repo-awareness-snapshot.json (commit bd6afd1), merged origin/main cleanly with zero conflicts (commit 4b82338, only files touched came from main's own already-CI-validated diff), pushed. No review threads existed to address. After: new head 4b82338, check:repo-awareness-snapshot passes locally; full CI re-triggered by the push and left to settle there. | check:repo-awareness-snapshot: PASS locally (both before-fix repro and after-fix confirmation); git merge-tree origin/main <tip>: clean (no conflict markers); npm run lint: started locally but did not finish within this session's window on the large first-run eslint cache build (~4+ min, no result to report) — not relied on, CI's static-pr job is authoritative for lint/typecheck on the pushed head; no provider-backed checks run |