[repo-assist] build: bump patch/minor dev dependencies

[github-actions]

Summary

Applies safe patch/minor dependency bumps not covered by existing open Dependabot PRs:

• @types/node 26.2.0 -> 26.4.1 (patch)
• @typescript-eslint/eslint-plugin 8.68.0 -> 8.69.0 (patch)
• @typescript-eslint/parser 8.68.0 -> 8.69.0 (patch)

These are dev-only dependencies with no breaking API changes. The larger major-version bumps (tree-sitter, typescript) remain tracked by open Dependabot PRs #501 and #455 respectively, and are intentionally left out of this change.

Test Status

• npm run compile: clean
• npm run lint: clean
• npm run test:unit (xvfb): 241/241 tests passing
• Coverage: 98.76% stmts / 95.67% branch / 99.08% funcs / 98.76% lines (thresholds 95/88/97/95, all met)
• npm audit --omit=dev: 0 vulnerabilities

---

🤖 This PR was created automatically by Repo Assist, an AI assistant, as part of routine engineering maintenance. A human maintainer should review before merging.

---

Warning

Protected Files — Push Permission Denied

This was originally intended as a pull request, but the patch modifies protected files. A human must create the pull request manually.

Protected files

• package-lock.json

• package.json

The push was rejected because GitHub Actions does not have workflows permission to push these changes, and is never allowed to make such changes, or other authorization being used does not have this permission.

Create the pull request manually

# Download the patch from the workflow run
gh run download 33717665047 -n agent -D /tmp/agent-33717665047

# Create a new branch
git checkout -b repo-assist/eng-patch-deps-20260903-442c011097fa5707 main

# Apply the patch (--3way handles cross-repo patches)
git am --3way /tmp/agent-33717665047/aw-repo-assist-eng-patch-deps-20260903.patch

# Push the branch and create the pull request
git push origin repo-assist/eng-patch-deps-20260903-442c011097fa5707
gh pr create --title '[repo-assist] build: bump patch/minor dev dependencies' --base main --head repo-assist/eng-patch-deps-20260903-442c011097fa5707 --repo askpt/code-metrics

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• releaseassets.githubusercontent.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "releaseassets.githubusercontent.com"

See Network Configuration for more information.

Generated by 🌈 Repo Assist, see workflow run. Learn more.
_{Comment /repo-assist to run again}

_{Add this agentic workflow to your repo}

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/repo-assist.md@42c2ab5b4e4c9273534c39259b2e0df7f20f07e9