npm (lockfile + catalog): tanstack, @tauri-apps/*, turbo 2.9.x, biome, vite, @vitejs/plugin-react, vitest+coverage-v8 4.1.8 (lockstep), @playwright/test, and jsdom 26->29 (major). cargo: tauri 2.11.2, tauri-plugin-http 2.5.9, tauri-build 2.6.2, serde_json. github-actions: docker setup-qemu v4, setup-buildx v4, build-push v7. Validated: make ci-web, cargo-check, actionlint.