chore: Bump the "dependencies" group with 3 updates across multiple ecosystems

.github/workflows/codeql.yml

@@ -34,13 +34,13 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
+        uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
           queries: security-and-quality
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
+        uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
         with:
           category: "/language:${{matrix.language}}"

.github/workflows/docker.yml

@@ -63,7 +63,7 @@ jobs:
           sbom: true
 
       - name: Attest image
-        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
+        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0
         with:
           subject-name: ${{ env.IMAGE }}
           subject-digest: ${{ steps.build.outputs.digest }}

.github/workflows/quality.yml

@@ -20,7 +20,7 @@ jobs:
         uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
 
       - name: Use Node.js 25.x ⚙️
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 25.x
           cache: "pnpm"

.github/workflows/security.yml

@@ -19,4 +19,4 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
+        uses: zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 # v0.6.0

Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=$BUILDPLATFORM ghcr.io/pnpm/pnpm:11.10.0 AS install-deps
+FROM --platform=$BUILDPLATFORM ghcr.io/pnpm/pnpm:11.13.0 AS install-deps
 
 WORKDIR /app
 COPY package.json ./

package.json

@@ -15,16 +15,16 @@
 	},
 	"dependencies": {
 		"@orama/orama": "^3.1.18",
-		"@tanstack/react-router": "1.170.17",
+		"@tanstack/react-router": "1.170.18",
 		"@tanstack/react-router-devtools": "1.167.0",
-		"@tanstack/react-start": "1.168.27",
-		"@tanstack/start-static-server-functions": "1.167.18",
+		"@tanstack/react-start": "1.168.28",
+		"@tanstack/start-static-server-functions": "1.167.19",
 		"clsx": "^2.1.1",
-		"fumadocs-core": "16.11.1",
-		"fumadocs-mdx": "15.1.0",
-		"fumadocs-ui": "16.11.1",
-		"lucide-react": "^1.23.0",
-		"lucide-static": "^1.23.0",
+		"fumadocs-core": "16.11.5",
+		"fumadocs-mdx": "15.2.0",
+		"fumadocs-ui": "16.11.5",
+		"lucide-react": "^1.24.0",
+		"lucide-static": "^1.24.0",
 		"motion": "^12.42.2",
 		"react": "^19.2.7",
 		"react-dom": "^19.2.7",
@@ -39,8 +39,8 @@
 		"@types/react": "^19.2.17",
 		"@types/react-dom": "^19.2.3",
 		"@vitejs/plugin-react": "^6.0.3",
-		"oxfmt": "^0.58.0",
-		"oxlint": "^1.73.0",
+		"oxfmt": "^0.59.0",
+		"oxlint": "^1.74.0",
 		"oxlint-tsgolint": "^0.24.0",
 		"tailwindcss": "^4.3.2",
 		"typescript": "^7.0.2"