Refresh test dependencies with compatible Node and release-age policy

.nvmrc

@@ -1 +1 @@
-25
+26

CONTRIBUTING.md

@@ -5,8 +5,10 @@
 This repo is a pnpm workspace ([`pnpm-workspace.yaml`](./pnpm-workspace.yaml)).
 pnpm is the only supported package manager — the exact version is pinned in
 `packageManager` in [`package.json`](./package.json), and CI installs pnpm from
-that field rather than a hard-coded version. Node comes from
-[`.nvmrc`](./.nvmrc).
+that field rather than a hard-coded version. Development and CI use Node 26
+from [`.nvmrc`](./.nvmrc), which satisfies the test tooling's supported runtime.
+Use `nvm use` before installing dependencies. The app's production runtime
+minimum is recorded separately in each package's `engines` field.
 
 ## Run from source
 

README.md

@@ -84,7 +84,7 @@ The prose documentation lives at [docs.mantis.privacykey.org](https://docs.manti
 
 ## Contributing
 
-The repo is a pnpm workspace and pnpm is the only supported package manager — the version is pinned in `packageManager` and CI reads it from there. Node comes from [`.nvmrc`](./.nvmrc).
+The repo is a pnpm workspace and pnpm is the only supported package manager — the version is pinned in `packageManager` and CI reads it from there. Development and CI use Node 26 from [`.nvmrc`](./.nvmrc); run `nvm use` before installing. Production runtime minimums are recorded separately in each package's `engines` field.
 
 ```bash
 pnpm install --frozen-lockfile

cli/package.json

@@ -30,6 +30,6 @@
     "@types/qrcode": "^1.5.6",
     "tsx": "^4.23.0",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.10"
+    "vitest": "^5.0.2"
   }
 }

mantis-edge/package.json

@@ -15,7 +15,7 @@
   "devDependencies": {
     "@cloudflare/workers-types": "^5.20260706.1",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.10",
+    "vitest": "^5.0.2",
     "wrangler": "^4.118.0"
   }
 }

package.json

@@ -60,10 +60,10 @@
     "@types/qrcode": "^1.5.6",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
-    "@vitest/coverage-v8": "^4.1.10",
+    "@vitest/coverage-v8": "^5.0.2",
     "drizzle-kit": "^0.31.10",
     "pino-pretty": "^13.0.0",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.10"
+    "vitest": "^5.0.2"
   }
 }