📦：bump all

.github/workflows/codeql-analysis.yml

@@ -29,12 +29,12 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+        uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         with:
           languages: ${{ matrix.language }}
           queries: security-extended,security-and-quality
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+        uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         with:
           category: '/language:${{matrix.language}}'

.github/workflows/commit-queue.yml

@@ -54,7 +54,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Node.js runtime
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: 'package.json'
 

.github/workflows/deploy.yml

@@ -33,7 +33,7 @@ jobs:
           # which a single-commit checkout cannot answer.
           fetch-depth: 0
       - name: Set up Node.js runtime
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: 'package.json'
       - name: Install

.github/workflows/lint-and-test.yml

@@ -32,7 +32,7 @@ jobs:
           # no dependency is git-hosted.
           persist-credentials: false
       - name: Set up Node.js runtime
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: 'package.json'
       - name: Install

.github/workflows/pull-request-policy.yml

@@ -34,7 +34,7 @@ jobs:
           # thing that could be picked up by something that should not have it.
           persist-credentials: false
       - name: Set up Node.js runtime
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: 'package.json'
       # No install step: the task imports one module from this package and

.github/workflows/sdk-api-drift.yml

@@ -48,7 +48,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Node.js runtime
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: 'package.json'
 

.github/workflows/sdk-api-sync.yml

@@ -85,7 +85,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Node.js runtime
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: 'package.json'
 

.github/workflows/vendored-sync.yml

@@ -42,7 +42,7 @@ jobs:
           # thing that could be picked up by something that should not have it.
           persist-credentials: false
       - name: Set up Node.js runtime
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version-file: 'package.json'
       # The task reads only what node ships with, so there is nothing to

package.json

@@ -3,10 +3,10 @@
   "author": "The OpenINF Authors & Friends",
   "private": true,
   "description": "The front door to everything OpenINF makes",
-  "packageManager": "pnpm@12.9.1",
+  "packageManager": "pnpm@12.12.1",
   "engines": {
     "node": "24.21.0",
-    "pnpm": "12.9.1"
+    "pnpm": "12.12.1"
   },
   "exports": {
     "./build/commit-message": "./build/shared/commit-message.mts",
@@ -34,7 +34,7 @@
     "@shopify/prettier-plugin-liquid": "1.11.2",
     "@tsconfig/node-lts": "24.0.1",
     "@types/console-log-level": "1.4.5",
-    "@types/node": "24.19.1",
+    "@types/node": "24.19.2",
     "@types/prismjs": "1.26.6",
     "@types/sanitize-html": "2.16.2",
     "@yarnpkg/shell": "4.1.3",
@@ -43,12 +43,12 @@
     "browserslist-lint": "0.4.0",
     "console-log-level": "1.4.1",
     "cspell": "10.3.6",
-    "cssnano": "9.2.2",
-    "dprint": "0.60.1",
+    "cssnano": "9.6.0",
+    "dprint": "0.62.0",
     "editorconfig-checker": "7.0.0",
     "html-minifier-terser": "7.2.0",
     "htmlparser2": "12.0.0",
-    "js-yaml": "5.4.2",
+    "js-yaml": "5.4.3",
     "markdown-it-abbr": "2.0.0",
     "markdown-it-anchor": "10.0.0",
     "markdown-it-footnote": "4.0.0",
@@ -59,8 +59,8 @@
     "markdownlint-cli2": "0.23.3",
     "markdownlint-cli2-formatter-default": "0.0.6",
     "nps": "5.10.0",
-    "postcss": "8.5.28",
-    "prettier": "3.9.9",
+    "postcss": "8.5.29",
+    "prettier": "3.9.10",
     "prismjs": "1.30.0",
     "remark": "15.0.1",
     "remark-cli": "12.0.1",
@@ -101,9 +101,9 @@
     "terser": "5.51.2",
     "typescript": "7.0.2",
     "unified": "11.0.5",
-    "vnu-jar": "26.10.2",
+    "vnu-jar": "26.10.11",
     "yaml": "2.9.1",
-    "zod": "4.6.5",
+    "zod": "4.6.6",
     "zod-validation-error": "5.0.0"
   }
 }