deps: update dependencies to latest (#386)

Go:
- github.com/lucasb-eyer/go-colorful: v1.4.0 -> v1.4.1
- github.com/google/pprof (indirect): 20260709232956 -> 20260802141513

Web (npm lockfile refresh, 51 transitive packages):
- vite: 8.1.3 -> 8.2.0
- rolldown: 1.1.5 -> 1.2.1
- lightningcss: 1.32.0 -> 1.33.0
- @astrojs/language-server: 2.16.11 -> 2.16.13
- postcss: 8.5.23 -> 8.5.25
- prettier: 3.9.4 -> 3.9.6
- @babel/parser, @babel/types: 7.29.7 -> 7.29.8
- ultrahtml: 1.6.0 -> 1.7.0
- devalue: 5.8.1 -> 5.9.0
- entities: 4.5.0 -> 6.0.1
- @oxc-project/types: 0.139.0 -> 0.142.0
- p-queue: 9.3.1 -> 9.3.3
- package-manager-detector: 1.7.0 -> 1.8.0

Lockfile correction: node_modules/typescript now resolves to the alias
package.json actually declares, @typescript/typescript6@6.0.2 (published
2026-07-06), instead of the stale hoisted typescript@6.0.3 (published
2026-04-16). The TypeScript 6 line moved to the scoped package after
6.0.3, so this is a forward move despite the lower version number. The
classic build still ships nested as @typescript/old.

Held back: cosign stays on v2.6.4 in release.yml. v3 forces the
single-file bundle format and breaks the detached .sig/.pem signatures
that install.sh and install.ps1 verify.

Already at latest, no change needed: both package.json manifests, every
pinned GitHub Action, golangci-lint v2.12.2, gofumpt v0.11.0, mage
v1.17.2, goreleaser v2.17.1, govulncheck v1.6.0, deadcode (x/tools
v0.48.0), Node 24 LTS, Go 1.26.5.

Validation: gofmt, gofumpt, go mod tidy, go vet, go build, go test,
golangci-lint (0 issues), govulncheck (0 vulnerabilities), deadcode,
cross-compile for all release targets, npm ci, npm audit (0
vulnerabilities), astro check (0 errors), astro build.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 7e11817c-e867-4318-a609-a1bb68bf206d

Author: jongio

go.mod

@@ -13,7 +13,7 @@ require (
 	github.com/creack/pty v1.1.24
 	github.com/fsnotify/fsnotify v1.10.1
 	github.com/github/copilot-sdk/go v1.0.8
-	github.com/lucasb-eyer/go-colorful v1.4.0
+	github.com/lucasb-eyer/go-colorful v1.4.1
 	golang.org/x/sync v0.22.0
 	golang.org/x/sys v0.47.0
 	modernc.org/sqlite v1.55.0
@@ -45,7 +45,7 @@ require (
 	github.com/go-logr/logr v1.4.4 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/google/jsonschema-go v0.4.3 // indirect
-	github.com/google/pprof v0.0.0-20260709232956-b9395ee17fa0 // indirect
+	github.com/google/pprof v0.0.0-20260802141513-ef3492d7dac3 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/gorilla/css v1.0.1 // indirect
 	github.com/mattn/go-isatty v0.0.24 // indirect

go.sum

@@ -67,8 +67,8 @@ github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/google/jsonschema-go v0.4.3 h1:/DBOLZTfDow7pe2GmaJNhltueGTtDKICi8V8p+DQPd0=
 github.com/google/jsonschema-go v0.4.3/go.mod h1:r5quNTdLOYEz95Ru18zA0ydNbBuYoo9tgaYcxEYhJVE=
-github.com/google/pprof v0.0.0-20260709232956-b9395ee17fa0 h1:du0WGc8xSKq/++e0cglxhS/mXVqsR7+c7jLEi5Vqduw=
-github.com/google/pprof v0.0.0-20260709232956-b9395ee17fa0/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
+github.com/google/pprof v0.0.0-20260802141513-ef3492d7dac3 h1:LMLX+LgTNWpfvCBdFebv6EsYotImrt/Ppc5cXIriCSo=
+github.com/google/pprof v0.0.0-20260802141513-ef3492d7dac3/go.mod h1:jl5iWTm0/hd5PjEYEOuwAJ57L/CibdZfrqZ5XA5GrCk=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/gorilla/css v1.0.1 h1:ntNaBIghp6JmvWnxbZKANoLyuXTPZ4cAMlo6RyhlbO8=
@@ -77,8 +77,8 @@ github.com/hashicorp/golang-lru/v2 v2.0.7 h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs
 github.com/hashicorp/golang-lru/v2 v2.0.7/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM=
 github.com/hexops/gotextdiff v1.0.3 h1:gitA9+qJrrTCsiCl7+kh75nPqQt1cx4ZkudSTLoUqJM=
 github.com/hexops/gotextdiff v1.0.3/go.mod h1:pSWU5MAI3yDq+fZBTazCSJysOMbxWL1BSow5/V2vxeg=
-github.com/lucasb-eyer/go-colorful v1.4.0 h1:UtrWVfLdarDgc44HcS7pYloGHJUjHV/4FwW4TvVgFr4=
-github.com/lucasb-eyer/go-colorful v1.4.0/go.mod h1:R4dSotOR9KMtayYi1e77YzuveK+i7ruzyGqttikkLy0=
+github.com/lucasb-eyer/go-colorful v1.4.1 h1:1EO+WB73+EH8EVbzlrG3KLAfEypQWVHIBqlTf+2hNss=
+github.com/lucasb-eyer/go-colorful v1.4.1/go.mod h1:R4dSotOR9KMtayYi1e77YzuveK+i7ruzyGqttikkLy0=
 github.com/mattn/go-isatty v0.0.24 h1:tGZZoVgT/KiqK1c8ocVLeDS8BSWMRd47J3Lbz7vsReI=
 github.com/mattn/go-isatty v0.0.24/go.mod h1:nMCL3Zebbrt45jsMDgnfIwz6ydEQApk5oEI3HqDio6A=
 github.com/mattn/go-runewidth v0.0.27 h1:Feg/Oou5zI/wnpgDF6omIU0OokC9GxLC/WRknhVlIR0=