[repo-assist] build: bump `@types/node`, `@typescript-eslint`, eslint (patch versions)

[github-actions]

🤖 This pull request was created by Repo Assist, an automated AI assistant.

Summary

Routine patch-version dependency bumps:

• @types/node: 26.1.2 -> 26.2.0
• @typescript-eslint/eslint-plugin: 8.66.0 -> 8.67.0
• @typescript-eslint/parser: 8.66.0 -> 8.67.0
• eslint: 10.8.0 -> 10.8.1

All are patch-level updates with no known breaking changes. @types/vscode, typescript, and tree-sitter* are intentionally left as-is per prior repo memory (pinned / blocked pending major-version alignment work — see open PR #501 for tree-sitter and PR #455 for typescript 7.x).

Note: there is an existing open issue (#535) proposing the same patch bumps from a previous run that was blocked by protected-file restrictions on package.json/package-lock.json. This PR supersedes/duplicates that intent — if this PR is created successfully, issue #535 can be closed by a maintainer.

Test Status

npm run compile   ✅ (0 errors)
npm run lint      ✅ (0 warnings)
npm run test:unit ✅ 217 passing, 0 failing

Coverage unchanged (analyzer/language files remain above configured thresholds).

npm audit still reports pre-existing dev-only transitive vulnerabilities (via mocha -> diff/serialize-javascript) that require a breaking mocha major bump to resolve; left untouched per minimal-scope guidance.

Trade-offs

None expected — patch-level bumps only, all existing tests and lint pass unchanged.

---

Warning

Protected Files — Push Permission Denied

This was originally intended as a pull request, but the patch modifies protected files. A human must create the pull request manually.

Protected files

• package-lock.json

• package.json

The push was rejected because GitHub Actions does not have workflows permission to push these changes, and is never allowed to make such changes, or other authorization being used does not have this permission.

Create the pull request manually

# Download the patch from the workflow run
gh run download 31605078842 -n agent -D /tmp/agent-31605078842

# Create a new branch
git checkout -b repo-assist/eng-patch-deps-20260812-e098834eafeeb127 main

# Apply the patch (--3way handles cross-repo patches)
git am --3way /tmp/agent-31605078842/aw-repo-assist-eng-patch-deps-20260812.patch

# Push the branch and create the pull request
git push origin repo-assist/eng-patch-deps-20260812-e098834eafeeb127
gh pr create --title '[repo-assist] build: bump `@types/node`, `@typescript-eslint`, eslint (patch versions)' --base main --head repo-assist/eng-patch-deps-20260812-e098834eafeeb127 --repo askpt/code-metrics

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• releaseassets.githubusercontent.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "releaseassets.githubusercontent.com"

See Network Configuration for more information.

Generated by 🌈 Repo Assist, see workflow run. Learn more.
_{Comment /repo-assist to run again}

_{Add this agentic workflow to your repo}

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/repo-assist.md@42c2ab5b4e4c9273534c39259b2e0df7f20f07e9