chore(deps): pin dependencies

[renovate]

This pull request was authored by a coding agent.

This pins the CodeMirror development packages to the versions currently verified by the project, making installs reproducible while keeping the published peer dependency ranges broad for consumers.

The explicit @codemirror/state development pin is required because the newer view package otherwise installs a second state implementation. CodeMirror state objects contain private type identity, so duplicate versions break typechecking and editor behavior.

The branch is rebased onto the merged Vite, Vitest, and grouped maintenance updates and preserves their lockfile state.

Written by gpt-5.6-sol on Codex

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Progress: resolved 1, reused 0, downloaded 0, added 0
.                                        |  WARN  deprecated @types/diff@8.0.0
Progress: resolved 13, reused 0, downloaded 0, added 0
 ERR_PNPM_TRUST_DOWNGRADE  High-risk trust downgrade for "vite@7.0.8" (possible package takeover)

This error happened while installing a direct dependency of /tmp/renovate/repos/github/marimo-team/codemirror-ai

Trust checks are based solely on publish date, not semver. A package cannot be installed if any earlier-published version had stronger trust evidence. Earlier versions had trusted publisher, but this version has provenance attestation. A trust downgrade may indicate a supply chain incident.

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	48.77%	1037 / 2126
🔵	Statements	48.77%	1037 / 2126
🔵	Functions	42.74%	56 / 131
🔵	Branches	87.55%	190 / 217

File Coverage

No changed files found.

Generated in workflow #503 for commit ce5743c by the Vitest Coverage Report Action

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.