build(deps): combined major bumps (web react19/vite8/router7, server fastify/drizzle)

Combina los bumps de Renovate abiertos en 1 PR (1 pasada de CI):
web: react 18→19, react-dom 18→19, react-router-dom 6→7, @dnd-kit/sortable 9→10,
  @vitejs/plugin-react 4→6, vite 6→8, @types/react 18→19
server: @fastify/cors 10→11, @fastify/static 8→9, drizzle-orm 0.36→0.45, drizzle-kit 0.28→0.31, vitest 2→4

EXCLUIDO typescript v6 (#6): salto 5→6 rompe tsc, queda como duda.
Verificado local (node:24): server 'tsc' OK; web 'tsc && vite build' OK. Sin cambios de código.
Sustituye PRs #1,#2,#3,#4,#7,#8,#9,#11,#12,#13.

.gitea/workflows/ci.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@v4
         with:
-          node-version: '24'
+          node-version: '22'
 
       - name: Server — install & typecheck
         working-directory: server

Dockerfile

@@ -2,7 +2,7 @@
 # Imagen única: construye el front (Vite) y lo sirve desde el servidor (Fastify + Socket.IO).
 
 # ---- build del front ----
-FROM node:24-alpine AS web
+FROM node:22-alpine AS web
 WORKDIR /web
 COPY web/package.json web/package-lock.json* ./
 RUN npm install
@@ -10,7 +10,7 @@ COPY web/ ./
 RUN npm run build   # -> /web/dist
 
 # ---- producción ----
-FROM node:24-alpine AS production
+FROM node:22-alpine AS production
 WORKDIR /app
 # deps del servidor (incluye tsx y drizzle-kit; NODE_ENV se fija DESPUÉS para no
 # saltarse las devDependencies durante la instalación)

server/package-lock.json

@@ -18,7 +18,7 @@
         "drizzle-kit": "^0.31.0",
         "socket.io-client": "^4.8.1",
         "tsx": "^4.19.2",
-        "typescript": "^6.0.0",
+        "typescript": "^5.7.2",
         "vitest": "^4.0.0"
       }
     },
@@ -3888,9 +3888,9 @@
       }
     },
     "node_modules/typescript": {
-      "version": "6.0.3",
+      "version": "5.9.3",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-6.0.3.tgz",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
-      "integrity": "sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw==",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
       "dev": true,
       "license": "Apache-2.0",
       "bin": {

server/package.json

@@ -23,7 +23,7 @@
     "drizzle-kit": "^0.31.0",
     "socket.io-client": "^4.8.1",
     "tsx": "^4.19.2",
-    "typescript": "^6.0.0",
+    "typescript": "^5.7.2",
     "vitest": "^4.0.0"
   }
 }

web/package-lock.json

@@ -18,7 +18,7 @@
         "@types/react": "^19.0.0",
         "@types/react-dom": "^19.0.0",
         "@vitejs/plugin-react": "^6.0.0",
-        "typescript": "^6.0.0",
+        "typescript": "^5.7.2",
         "vite": "^8.0.0"
       }
     },
@@ -1099,9 +1099,9 @@
       "license": "0BSD"
     },
     "node_modules/typescript": {
-      "version": "6.0.3",
+      "version": "5.9.3",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-6.0.3.tgz",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
-      "integrity": "sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw==",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
       "dev": true,
       "license": "Apache-2.0",
       "bin": {

web/package.json

@@ -20,7 +20,7 @@
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "@vitejs/plugin-react": "^6.0.0",
-    "typescript": "^6.0.0",
+    "typescript": "^5.7.2",
     "vite": "^8.0.0"
   }
 }

web/src/vite-env.d.ts

@@ -1 +0,0 @@
-/// <reference types="vite/client" />