build(deps): batch dependabot updates 2026-03-19 (#202)

## Summary

Batch of all 9 dependabot PRs from 2026-03-19:

- #191 — codecov/codecov-action 5.5.2 → 5.5.3
- #192 — softprops/action-gh-release 2.5.0 → 2.6.1
- #193 — github.com/jackc/pgx/v5 5.7.4 → 5.8.0
- #195 — github.com/mattn/go-sqlite3 1.14.34 → 1.14.37
- #194 — svelte 5.53.11 → 5.54.0
- #196 — @tanstack/virtual-core 3.13.21 → 3.13.23
- #197 — vitest 4.0.18 → 4.1.0
- #198 — jsdom 28.1.0 → 29.0.0
- #199 — vite 7.3.1 → 8.0.1 (with @sveltejs/vite-plugin-svelte 6.2.4 →
7.0.0)

## Test plan

- [ ] CI passes (Go tests, frontend build, lint, e2e)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: 3 people

.github/workflows/ci.yml

@@ -95,7 +95,7 @@ jobs:
 
       - name: Upload coverage
         id: codecov
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de  # v5.5.2
+        uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad  # v5.5.3
         with:
           files: coverage.out
         continue-on-error: true

.github/workflows/desktop-release.yml

@@ -353,7 +353,7 @@ jobs:
           cat artifacts/latest.json
 
       - name: Upload installers to versioned release
-        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b  # v2.5.0
+        uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe  # v2.6.1
         with:
           files: |
             artifacts/*.dmg

.github/workflows/release.yml

@@ -150,7 +150,7 @@ jobs:
           fi
 
       - name: Create Release
-        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b  # v2.5.0
+        uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe  # v2.6.1
         with:
           files: |
             artifacts/*.tar.gz