chore: update dependencies to latest versions

[sapientpants]

Summary

Updates all dependencies to their latest versions while pinning zod to match the @modelcontextprotocol/sdk version.

Production Dependencies

• @modelcontextprotocol/sdk: 1.20.0 → 1.20.1
• zod: pinned to 3.25.76 (matching @modelcontextprotocol/sdk version)

Dev Dependencies

• @cyclonedx/cdxgen: 11.9.0 → 11.10.0
• @types/node: 24.7.2 → 24.8.1
• eslint: 9.37.0 → 9.38.0
• vite: 7.1.10 → 7.1.11

Documentation

Added comprehensive documentation to CLAUDE.md explaining:

• Why zod is pinned to the exact MCP SDK version
• How to check and maintain the zod version when updating dependencies
• Command to verify zod version: pnpm list zod --depth=1

Testing

• ✅ All tests passing (1986 passed)
• ✅ Type checking successful
• ✅ Linting clean
• ✅ Coverage maintained at 80%+
• ✅ All workflow validations passing

Changeset

• Changeset added (patch version bump for production dependency updates)

🤖 Generated with Claude Code

[Copilot]

Pull Request Overview

This PR updates project dependencies to their latest versions, with a key focus on pinning the zod version to match the @modelcontextprotocol/sdk dependency. The PR also adds comprehensive documentation explaining the zod version pinning strategy.

• Updates @modelcontextprotocol/sdk from 1.20.0 to 1.20.1
• Pins zod to exact version 3.25.76 (removing caret to prevent automatic updates)
• Updates four development dependencies to latest versions
• Adds documentation explaining zod version management strategy

Reviewed Changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File	Description
package.json	Updates production dependencies (@modelcontextprotocol/sdk, zod) and dev dependencies (@cyclonedx/cdxgen, @types/node, eslint, vite)
CLAUDE.md	Adds new "Dependency Management" section documenting zod version pinning strategy and maintenance procedures
.changeset/update-dependencies-20251020.md	Documents dependency updates in changeset for patch version bump

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[deepsource-io]

Here's the code health analysis summary for commits 548a6f5..3d6a47a. View details on DeepSource ↗.

Analysis Summary

Analyzer	Status	Summary	Link
Test coverage	✅ Success		View Check ↗
JavaScript	✅ Success		View Check ↗

Code Coverage Report

Metric	Aggregate	Javascript
Branch Coverage	88.5%	88.5%
Composite Coverage	88.7%	88.7%
Line Coverage	88.7%	88.7%

---

💡 If you’re a repository administrator, you can configure the quality gates from the settings.