[aaltshuler]

Refresh dependencies across Orbit's five packages and three apps, and migrate the adapters to Cosmos 3.5.1 and OmniGraph SDK/server 0.14.0. The OmniGraph adapter now reads the 0.14 export/schema/query formats and bounded commit-history head; regenerate generated types and upgrade the server alongside the SDK.

• Upgrade React/React DOM to 19.3, Vite to 8, Storybook to 10.6, Vitest to 5, jsdom to 30, Playwright to 1.64, pnpm to 12, and the remaining direct dependencies to their current compatible releases. Refresh transitive dependencies; the final lockfile audit has no known vulnerabilities.
• Use native TypeScript 7 for workspace typechecks and generated-code tests. Retain root TypeScript 6.0.3 for tsup/ESLint's compiler API, and Luma 9.3.6 to satisfy Cosmos's ~9.3.0 peer requirements. These are the only intentional latest-version exceptions.
• Preserve React 18 consumer support, export the public types needed by inferred consumer declarations, add a packed TypeScript consumer regression gate, and migrate Vitest's JSX configuration to Vite 8's Oxc options.
• Update CI/release action majors and Changesets v2 inputs/authentication. Fix the invalid workflow context that previously prevented CI from starting. Pin the live integration server to verified OmniGraph 0.14.0 binaries.

Development requires Node.js 22.18+, 24.11+, or 26+. The published Cosmos/OmniGraph adapters require Node.js 22+. A changeset releases all five Orbit packages as 0.19.0.

Validation: pnpm check (1,932 package tests plus 23 performance-gate tests), builds for all packages/demo/Storybook, package smoke checks, Node probes, SVG fixture, and all 255 React tests against both React 19 and isolated React 18 passed locally. The stable full demo browser rerun passed all 51 tests, including live OmniGraph 0.14 integration; a transient deep-link failure during the initial run passed both isolated and full reruns. All 10 headful Cosmos probe tests passed on Apple M5 Pro / ANGLE Metal / Chromium 156. Known synchronous-readback timing and native-context-restore limitations remain diagnostic; no new performance claim.