chore(deps): update all non-major dependencies (#130)

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs
from Renovate will soon appear from 'Mend'. Learn more
[here](https://redirect.github.com/renovatebot/renovate/discussions/37842).

This PR contains the following updates:

| Package | Change | Age | Confidence | Type | Update |
|---|---|---|---|---|---|
| [eslint](https://eslint.org)
([source](https://redirect.github.com/eslint/eslint)) | [`9.35.0` ->
`9.36.0`](https://renovatebot.com/diffs/npm/eslint/9.35.0/9.36.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/eslint/9.36.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint/9.35.0/9.36.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | minor |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| `v3.30.3` -> `v3.30.5` |
[![age](https://developer.mend.io/api/mc/badges/age/github-tags/github%2fcodeql-action/v3.30.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/github%2fcodeql-action/v3.30.3/v3.30.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| action | patch |

---

### Release Notes

<details>
<summary>eslint/eslint (eslint)</summary>

###
[`v9.36.0`](https://redirect.github.com/eslint/eslint/compare/v9.35.0...b4857e54e54b5dba96d156cd8d8b4d42dc5a3bf4)

[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v9.35.0...v9.36.0)

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.30.5`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.5)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3.30.4...v3.30.5)

##### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

##### 3.30.5 - 26 Sep 2025

- We fixed a bug that was introduced in `3.30.4` with `upload-sarif`
which resulted in files without a `.sarif` extension not getting
uploaded.
[#&#8203;3160](https://redirect.github.com/github/codeql-action/pull/3160)

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.5/CHANGELOG.md)
for more information.

###
[`v3.30.4`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.4)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3.30.3...v3.30.4)

##### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

##### 3.30.4 - 25 Sep 2025

- We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
`codeql-action/init` step if different versions of the CodeQL Action are
detected in the workflow file. Additionally, an error will now be thrown
by the other CodeQL Action steps if they load a configuration file that
was generated by a different version of the `codeql-action/init` step.
[#&#8203;3099](https://redirect.github.com/github/codeql-action/pull/3099)
and
[#&#8203;3100](https://redirect.github.com/github/codeql-action/pull/3100)
- We added support for reducing the size of dependency caches for Java
analyses, which will reduce cache usage and speed up workflows. This
will be enabled automatically at a later time.
[#&#8203;3107](https://redirect.github.com/github/codeql-action/pull/3107)
- You can now run the latest CodeQL nightly bundle by passing `tools:
nightly` to the `init` action. In general, the nightly bundle is
unstable and we only recommend running it when directed by GitHub staff.
[#&#8203;3130](https://redirect.github.com/github/codeql-action/pull/3130)
- Update default CodeQL bundle version to 2.23.1.
[#&#8203;3118](https://redirect.github.com/github/codeql-action/pull/3118)

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.4/CHANGELOG.md)
for more information.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on Sunday" (UTC), Automerge - At any
time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/8hobbies/commitrack).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQxLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/trivy.yml

@@ -55,13 +55,13 @@ jobs:
         continue-on-error: true
 
       - name: Upload Trivy fs scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v3.30.3
+        uses: github/codeql-action/upload-sarif@v3.30.5
         with:
           category: "trivy-fs"
           sarif_file: "fs.sarif"
 
       - name: Upload Trivy image scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v3.30.3
+        uses: github/codeql-action/upload-sarif@v3.30.5
         with:
           category: "trivy-image"
           sarif_file: "image.sarif"

package-lock.json

@@ -27,7 +27,7 @@
     "@prisma/client": "6.16.2",
     "@types/eslint": "9.6.1",
     "@types/node": "22.18.6",
-    "eslint": "9.35.0",
+    "eslint": "9.36.0",
     "globals": "16.4.0",
     "prettier": "3.6.2",
     "prisma": "6.16.2",

package.json

@@ -21,7 +21,7 @@
     "@types/jest": "30.0.0",
     "@types/node": "22.18.6",
     "@vitest/coverage-v8": "3.2.4",
-    "eslint": "9.35.0",
+    "eslint": "9.36.0",
     "globals": "16.4.0",
     "prettier": "3.6.2",
     "prisma": "6.16.2",

packages/api-server/package-lock.json

@@ -20,7 +20,7 @@
     "@types/jest": "30.0.0",
     "@types/node": "22.18.6",
     "@vitest/coverage-v8": "3.2.4",
-    "eslint": "9.35.0",
+    "eslint": "9.36.0",
     "globals": "16.4.0",
     "prettier": "3.6.2",
     "prisma": "6.16.2",

packages/api-server/package.json

@@ -23,7 +23,7 @@
     "@types/jest": "30.0.0",
     "@types/node": "22.18.6",
     "@vitest/coverage-v8": "3.2.4",
-    "eslint": "9.35.0",
+    "eslint": "9.36.0",
     "globals": "16.4.0",
     "prettier": "3.6.2",
     "prisma": "6.16.2",