fix: update dependencies to latest versions

[sirrodgepodge]

Closes #79

Changes

• Updated all @tscircuit/* and circuit-json* dependencies to latest versions
• Removed lockfile and configured bunfig.toml to disable lockfile saving
• Added @react-hook/resize-observer as missing dependency (required by graphics-debug)

Updated packages

Package	Old	New
@tscircuit/3d-viewer	^0.0.450	^0.0.526
@tscircuit/circuit-json-util	^0.0.77	^0.0.78
@tscircuit/pcb-viewer	^1.11.343	^1.11.344
circuit-json	^0.0.326	^0.0.387
circuit-json-to-gerber	^0.0.44	^0.0.47
circuit-json-to-kicad	^0.0.27	^0.0.81
circuit-json-to-lbrn	^0.0.21	^0.0.66
circuit-json-to-step	^0.0.2	^0.0.18
tscircuit	^0.0.1012	^0.0.1389
easyeda	^0.0.231	^0.0.241

Verification

• ✅ vite build completes successfully
• ✅ No Vercel config changes needed (auto-detected Vite project)

/claim #79

[vercel]

@sirrodgepodge is attempting to deploy a commit to the tscircuit Team on Vercel.

A member of the Team first needs to authorize it.

[Copilot]

Pull request overview

Updates the project’s Bun/Vite app dependencies (primarily @tscircuit/* and circuit-json*) and changes install behavior to avoid committing a Bun lockfile, aligning with Issue #79’s Vercel-deployability goal.

Changes:

• Bumped @tscircuit/*, circuit-json*, tscircuit, and easyeda dependency ranges to newer versions.
• Added @react-hook/resize-observer as an explicit dependency (needed by a transitive consumer).
• Removed bun.lock and updated bunfig.toml to disable lockfile usage.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 3 comments.

File	Description
package.json	Updates dependency versions and adds @react-hook/resize-observer.
bunfig.toml	Disables Bun lockfile usage via install configuration.
bun.lock	Removes the lockfile from the repository.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

With the lockfile removed/disabled, using caret (^) ranges here means installs will resolve to different dependency versions over time, making Vercel and local builds non-reproducible and potentially breaking without any code change. Consider pinning these to exact versions (or at least using ~ for patch-only drift) if the intent is to run without a lockfile.

Suggested change

	"tscircuit": "^0.0.1389",
	"tscircuit": "0.0.1389",

[Copilot]

This switches from the older [install.lockfile] save = false style to lockfile = false. To avoid contributors using a Bun version that doesn't recognize this key and accidentally regenerating a lockfile, consider also adding bun lockfiles (e.g. bun.lock / bun.lockb) to .gitignore as part of this change.

Suggested change

	[install]
	lockfile = false
	[install.lockfile]
	save = false

[Copilot]

Disabling lockfiles via [install] lockfile = false combined with removing bun.lock makes every install resolve third-party dependencies to whatever the latest semver-matching versions are, which significantly increases supply chain attack surface (non‑deterministic builds). An attacker who compromises any dependency or transitive dependency within your semver ranges could silently inject malicious code into future CI or production builds with access to secrets or build artifacts. Re‑enable deterministic dependency pinning (e.g., commit and use a lockfile or otherwise pin dependencies to immutable versions) so that updates happen only through explicit, reviewable changes.