fix(deps): batch dependency bumps 2026-07-21 (#224)

* chore(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.3.2 to 9.0.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@11f9893...c771a70)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump github/codeql-action/upload-sarif

Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.1 to 4.37.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e064762)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2

Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.37.1 to 4.37.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e064762)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps-dev): bump wrangler in the cloudflare group

Bumps the cloudflare group with 1 update: [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler).


Updates `wrangler` from 4.112.0 to 4.113.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.113.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: wrangler
  dependency-version: 4.113.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cloudflare
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps-dev): bump prettier from 3.9.5 to 3.9.6

Bumps [prettier](https://github.com/prettier/prettier) from 3.9.5 to 3.9.6.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.5...3.9.6)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2

Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.1 to 4.37.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e064762)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: kellenmurphy

.github/workflows/ci.yml

@@ -64,15 +64,15 @@ jobs:
 
             - name: Setup uv
               # astral-sh/setup-uv v8.1.0
-              uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990
+              uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9
 
             - name: Scan with GuardDog
               run: uvx guarddog npm verify package-lock.json --output-format sarif > guarddog.sarif
 
             - name: Upload GuardDog SARIF
               if: always()
               # github/codeql-action v3.28.13
-              uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a
+              uses: github/codeql-action/upload-sarif@e0647621c2984b5ed2f768cb892365bf2a616ad1
               with:
                   sarif_file: guarddog.sarif
                   category: guarddog
@@ -140,7 +140,7 @@ jobs:
             - name: Upload Grype SARIF
               if: always()
               # github/codeql-action v3.28.13
-              uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a
+              uses: github/codeql-action/upload-sarif@e0647621c2984b5ed2f768cb892365bf2a616ad1
               with:
                   sarif_file: ${{ steps.grype.outputs.sarif }}
                   category: grype

.github/workflows/codeql.yml

@@ -23,13 +23,13 @@ jobs:
 
             - name: Initialize CodeQL
               # github/codeql-action v3.28.13
-              uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a
+              uses: github/codeql-action/init@e0647621c2984b5ed2f768cb892365bf2a616ad1
               with:
                   languages: javascript-typescript
                   queries: security-extended
 
             - name: Analyze
               # github/codeql-action v3.28.13
-              uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a
+              uses: github/codeql-action/analyze@e0647621c2984b5ed2f768cb892365bf2a616ad1
               with:
                   category: /language:javascript-typescript

.github/workflows/scorecard.yml

@@ -39,6 +39,6 @@ jobs:
                   retention-days: 5
 
             - name: Upload to code scanning
-              uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a
+              uses: github/codeql-action/upload-sarif@e0647621c2984b5ed2f768cb892365bf2a616ad1
               with:
                   sarif_file: results.sarif

package-lock.json

@@ -30,7 +30,7 @@
         "globals": "^17.7.0",
         "happy-dom": "^20.11.0",
         "jsdom": "^29.1.1",
-        "prettier": "^3.9.5",
+        "prettier": "^3.9.6",
         "prettier-plugin-svelte": "^4.1.1",
         "svelte": "^5.56.7",
         "svelte-check": "^4.7.3",
@@ -39,7 +39,7 @@
         "typescript-eslint": "^8.65.0",
         "vite": "^8.1.5",
         "vitest": "^4.1.9",
-        "wrangler": "^4.112.0"
+        "wrangler": "^4.113.0"
     },
     "dependencies": {
         "pako": "^3.0.1"