chore(deps): update @lifi/sdk to 4.6.0 and other dependencies to latest

[chybisov]

Which Linear task is linked to this PR?

n/a — routine dependency maintenance, following #852.

Why was it implemented this way?

@lifi/sdk → ^4.6.0 with every @lifi/sdk-provider-* at its latest. These move together
because each provider pins @lifi/sdk to an exact version, so bumping one alone splits the SDK.
That duplicate did appear on install (@lifi/sdk 4.5.0 + 4.6.0, @lifi/types 18.2.0 + 18.3.0,
@lifi/sdk-provider-ethereum 4.0.11 + 4.0.12) because the published
@lifi/widget-provider-ethereum@4.1.3 asks for @lifi/sdk-provider-ethereum: ^4.0.8. pnpm dedupe
collapsed it, as in #852. Note @lifi/sdk@4.6.0 loosened @lifi/types from an exact pin to
^18.3.0, so that one no longer dedupes for free — it is now checked explicitly.

Also bumped: @tanstack/react-query 5.102.5, @dynamic-labs/* 5.4.0, @privy-io/react-auth 3.38.0,
next 16.3.3 (playground only), and dev-only @types/node 26.3.0, eslint 10.9.1,
eslint-plugin-react-refresh 0.5.5, typescript-eslint 8.68.0.

Deliberately not bumped:

• vite-plugin-node-polyfills 0.26.0 → 0.28.0 — a two-minor 0.x jump, pinned exactly in
  widget-playground-vite and nft-checkout. A polyfill regression shows up in signing and
  address derivation, which the render-smoke example suite never reaches. Needs its own PR with
  real execution testing.
• examples/nextjs15: next: ^15 and typescript: ^6.0.3 — that pairing is the example's purpose.
• examples/svelte and examples/vue: typescript: ^6.0.3 — svelte-check and vue-tsc are
  coupled to the TS version.
• lodash.isequal (deprecation, not a version bump) and the db0 / ioredis root resolution pins.

No peer dependency ranges needed raising. Unmet peers are 24 on main and 24 here; every
apparent new entry pairs 1:1 with the predecessor it replaces (@dynamic-labs/wagmi-connector
5.3.2→5.4.0, @privy-io/*, typescript-eslint 8.67→8.68), and no @lifi/* package appears as an
unsatisfied requirer. The @dynamic-labs bump also collapsed four duplicated
@dynamic-labs-wallet/* packages.

pnpm install added @dynamic-labs/legacy-client@5.4.0 to minimumReleaseAgeExclude on its own —
a young transitive the @dynamic-labs 5.4.0 bump pulled in. Kept with the bump that needs it, so a
later install does not re-add it. Flagging it since it records accepting a package below the age gate.

Verified: frozen install in sync, check, build, check:types, check:circular-deps, 333 tests
across 6 packages, 18/18 active examples render, dedupe --check and knip:check clean, no package
anywhere in the tree gained a copy. Skipped deposit-flow and nuxt (status: broken) and the
playground e2e suites (they hit live APIs). The example suite is render smoke — it does not exercise
route execution or signing.

Changeset note: I retitled #852's update-lifi-sdk-4-5-0.md to ^4.6.0 rather than add a third SDK
line. .changeset/sdk-4-4-0.md still says ^4.4.0 and is not mine to edit — say the word and I'll
fold it in too.

Visual showcase (Screenshots or Videos)

n/a — no UI changes.

Checklist before requesting a review

• I have performed a self-review and testing of my code.
• This pull request is focused and addresses a single problem.
• If this PR modifies the Widget API or adds new features that require documentation, I have updated the documentation in the public-docs repository.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 83fe58f

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes changesets to release 31 packages

Name	Type
@lifi/widget	Patch
@lifi/wallet-management	Patch
@lifi/widget-checkout	Patch
@lifi/widget-provider	Patch
@lifi/widget-provider-bitcoin	Patch
@lifi/widget-provider-ethereum	Patch
@lifi/widget-provider-solana	Patch
@lifi/widget-provider-stellar	Patch
@lifi/widget-provider-sui	Patch
@lifi/widget-provider-tron	Patch
connectkit	Patch
deposit-flow	Patch
dynamic	Patch
nextjs	Patch
nextjs15	Patch
nft-checkout	Patch
nuxt-app	Patch
privy-ethers-example	Patch
privy	Patch
rainbowkit	Patch
react-router	Patch
remix	Patch
reown	Patch
svelte	Patch
tanstack-router-example	Patch
vite-project	Patch
vue	Patch
zustand-widget-config	Patch
vite-iframe	Patch
@lifi/widget-provider-mesh	Patch
@lifi/widget-provider-transak	Patch

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[github-actions]

✅ E2E Dev Smoke — passing

Check	Result
Dev server start (pnpm dev)	✅ started
Smoke tests	✅ passed

4 passed · 0 failed · 0 skipped · 36s

View run

[github-actions]

E2E Playground results

 158 passed

Details

 158 tests across 10 suites
 2 minutes, 7 seconds
 83fe58f

📥 Download full HTML report (open the run → Artifacts → playwright-report)

[github-actions]

E2E Examples — all passed

All examples passed in the latest run.