deps: batch update 7 dependencies (#246)

Consolidates the following dependabot updates:

- #234 -- bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.1
- #235 -- bump msys2/setup-msys2 from 2.30.0 to 2.31.0
- #236 -- bump marked from 17.0.4 to 17.0.5 in /frontend
- #237 -- bump vitest from 4.1.0 to 4.1.1 in /frontend
- #238 -- bump jsdom from 29.0.0 to 29.0.1 in /frontend
- #239 -- bump vite from 8.0.1 to 8.0.2 in /frontend
- #240 -- bump svelte from 5.54.0 to 5.55.0 in /frontend

Closes #234, #235, #236, #237, #238, #239, #240

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: 3 people

.github/workflows/ci.yml

@@ -49,7 +49,7 @@ jobs:
 
       - name: Setup MinGW (Windows)
         if: runner.os == 'Windows'
-        uses: msys2/setup-msys2@4f806de0a5a7294ffabaff804b38a9b435a73bda  # v2
+        uses: msys2/setup-msys2@cafece8e6baf9247cf9b1bf95097b0b983cc558d  # v2
         with:
           msystem: MINGW64
           update: false

.github/workflows/desktop-artifacts.yml

@@ -53,7 +53,7 @@ jobs:
 
       - name: Setup MinGW (Windows)
         if: matrix.platform == 'windows'
-        uses: msys2/setup-msys2@4f806de0a5a7294ffabaff804b38a9b435a73bda  # v2
+        uses: msys2/setup-msys2@cafece8e6baf9247cf9b1bf95097b0b983cc558d  # v2
         with:
           msystem: MINGW64
           update: false

.github/workflows/desktop-release.yml

@@ -138,7 +138,7 @@ jobs:
           node-version: "24"
 
       - name: Setup MinGW
-        uses: msys2/setup-msys2@4f806de0a5a7294ffabaff804b38a9b435a73bda  # v2
+        uses: msys2/setup-msys2@cafece8e6baf9247cf9b1bf95097b0b983cc558d  # v2
         with:
           msystem: MINGW64
           update: false

.github/workflows/msys2-update-check.yml

@@ -22,7 +22,7 @@ jobs:
           go-version-file: go.mod
 
       - name: Setup MinGW (with updates)
-        uses: msys2/setup-msys2@4f806de0a5a7294ffabaff804b38a9b435a73bda  # v2
+        uses: msys2/setup-msys2@cafece8e6baf9247cf9b1bf95097b0b983cc558d  # v2
         with:
           msystem: MINGW64
           update: true

.github/workflows/release.yml

@@ -125,7 +125,7 @@ jobs:
 
       - name: Setup MinGW (Windows)
         if: matrix.goos == 'windows'
-        uses: msys2/setup-msys2@4f806de0a5a7294ffabaff804b38a9b435a73bda  # v2
+        uses: msys2/setup-msys2@cafece8e6baf9247cf9b1bf95097b0b983cc558d  # v2
         with:
           msystem: MINGW64
           update: false

frontend/package-lock.json

@@ -17,18 +17,18 @@
   "dependencies": {
     "@tanstack/virtual-core": "3.13.23",
     "dompurify": "3.3.3",
-    "marked": "17.0.4"
+    "marked": "17.0.5"
   },
   "devDependencies": {
     "@playwright/test": "1.58.2",
     "@sveltejs/vite-plugin-svelte": "7.0.0",
     "@tsconfig/svelte": "5.0.8",
     "@types/dompurify": "3.2.0",
-    "jsdom": "29.0.0",
-    "svelte": "5.54.0",
+    "jsdom": "29.0.1",
+    "svelte": "5.55.0",
     "svelte-check": "4.4.5",
     "typescript": "5.9.3",
-    "vite": "8.0.1",
-    "vitest": "4.1.0"
+    "vite": "8.0.2",
+    "vitest": "4.1.1"
   }
 }

frontend/package.json

@@ -7,7 +7,7 @@ require (
 	github.com/fsnotify/fsnotify v1.9.0
 	github.com/google/go-cmp v0.7.0
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510
-	github.com/jackc/pgx/v5 v5.8.0
+	github.com/jackc/pgx/v5 v5.9.1
 	github.com/mattn/go-sqlite3 v1.14.37
 	github.com/stretchr/testify v1.11.1
 	github.com/tidwall/gjson v1.18.0

go.mod

@@ -14,8 +14,8 @@ github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsI
 github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg=
 github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 h1:iCEnooe7UlwOQYpKFhBabPMi4aNAfoODPEFNiAnClxo=
 github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM=
-github.com/jackc/pgx/v5 v5.8.0 h1:TYPDoleBBme0xGSAX3/+NujXXtpZn9HBONkQC7IEZSo=
-github.com/jackc/pgx/v5 v5.8.0/go.mod h1:QVeDInX2m9VyzvNeiCJVjCkNFqzsNb43204HshNSZKw=
+github.com/jackc/pgx/v5 v5.9.1 h1:uwrxJXBnx76nyISkhr33kQLlUqjv7et7b9FjCen/tdc=
+github.com/jackc/pgx/v5 v5.9.1/go.mod h1:mal1tBGAFfLHvZzaYh77YS/eC6IX9OWbRV1QIIM0Jn4=
 github.com/jackc/puddle/v2 v2.2.2 h1:PR8nw+E/1w0GLuRFSmiioY6UooMp6KJv0/61nB7icHo=
 github.com/jackc/puddle/v2 v2.2.2/go.mod h1:vriiEXHvEE654aYKXXjOvZM39qJ0q+azkZFrfEOc3H4=
 github.com/kr/pretty v0.3.0 h1:WgNl7dwNpEZ6jJ9k1snq4pZsg7DOEN8hP9Xw0Tsjwk0=