[aurora-buildcanada]

Updates TradingPost dependencies to their latest minor/patch versions (requested by Brendan in Slack).

What changed

• pnpm update for everything within the existing semver ranges, and specifiers bumped to match
• Pinned packages bumped within their major: next + eslint-config-next 16.1.6 → 16.4.6, react / react-dom 19.2.3 → 19.3.1, next-auth 4.24.13 → 4.24.15
• tsx pinned to 4.21.0: every newer 4.x release (4.21.1+) breaks pnpm test:polls because JSON imports get transformed into JS (SyntaxError: Unexpected token 'v', "var age=..." is not valid JSON) when run with --conditions=import
• eslint-plugin-react-hooks 7.0.1 → 7.1.1 (pulled in by eslint-config-next) newly flags react-hooks/set-state-in-effect as an error in 4 existing spots. I added targeted eslint-disable-next-line comments so behaviour stays identical. Worth refactoring later:
  • src/app/bills/BillExplorer.tsx
  • src/app/bills/components/ui/use-mobile.ts
  • src/app/memos/[slug]/MemoEngagement.tsx
  • src/components/subscribe/ui/SubscribeForm.tsx

Verification (local, Node 26)

• eslint: 0 errors, the same 4 warnings as main
• tsc --noEmit: passes
• test:feeds, test:sheet, test:polls: pass
• ⚠️ pnpm lint still fails on lint:tokens, but that failure was already on main (inline var(--…) in select.tsx / SurveyGrid.tsx) and isn't related to this PR
• ⚠️ I did not run next build (it crashed my sandbox), so please check the preview deploy before merging

Not included (major upgrades, need their own PRs)

eslint 10, typescript 7, @types/node 26, jose 6, mongoose 9, openai 7, @buildcanada/charts 1.x, @buildcanada/colours 1.x, three / @types/three 0.187