chore: dependency updates

[Sam Gammon (sgammon)]

Applies pending Dependabot updates, plus a pnpm update run.

[Copilot]

Pull Request Overview

Applies pending Dependabot updates and runs pnpm update to keep dependencies and CI actions current.

• Bumps project dependencies and devDependencies in package.json to newer versions.
• Updates various GitHub Actions in workflow YAML files to the latest revisions.

Reviewed Changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
package.json	Updated dependency and devDependency versions (commitlint, ESLint, TypeScript, actions, etc.)
.github/workflows/scorecards.yml	Upgraded github/codeql-action/upload-sarif to v3.28.18
.github/workflows/dependency-review.yml	Updated actions/dependency-review-action to v4.7.1
.github/workflows/codeql-analysis.yml	Upgraded CodeQL actions (init, autobuild, analyze) to v3.28.18
.github/workflows/ci.yml	Updated actions/setup-node, SonarCloud action, and codecov-action to newer versions
.github/workflows/check-dist.yml	Updated actions/setup-node to v4.4.0

Comments suppressed due to low confidence (3)

package.json:40

• [nitpick] Major version bumps for commitlint core and its conventional config may introduce breaking changes; ensure your commitlint configuration file is updated and validated against v19 syntax.

"@commitlint/cli": "19.8.1",

package.json:45

• [nitpick] Updating ESLint plugin and parser from v6 to v8 may include deprecated rule changes; verify your ESLint configuration and CI linting passes with these new versions.

"@typescript-eslint/eslint-plugin": "8.32.1",

.github/workflows/ci.yml:72

• The Codecov action major version bump from v3 to v5 may change supported inputs and environment variables; ensure the workflow syntax is updated to match v5 requirements.

uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 93.78%. Comparing base (fd72b94) to head (e85440f).
Report is 12 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #153      +/-   ##
==========================================
+ Coverage   93.22%   93.78%   +0.56%     
==========================================
  Files           7        7              
  Lines         177      177              
  Branches       20       20              
==========================================
+ Hits          165      166       +1     
+ Misses         11       10       -1     
  Partials        1        1              

see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.