chore: update dependencies

[dobby-coder]

Dependency updates

npm audit reports 4 moderate vulnerabilities in the dev/build chain:

Security advisories (moderate)

• esbuild ≤ 0.24.2 — GHSA-67mh-4wv8-2f99 (dev server can be reached cross-origin)
• vite ≤ 6.4.1 — GHSA-4w7w-66w2-5vf9 (path traversal in optimized deps .map handling)
• vitepress ≤ 1.6.4 — pulls vulnerable vite
• vitepress-plugin-mermaid — pulls vulnerable vitepress

fixAvailable: false from npm audit means it can't auto-resolve — vitepress must be bumped to a version pulling vite ≥ 6.4.2.

Other

• mermaid and vitepress-plugin-mermaid show in npm outdated (lockfile drift; current may be behind wanted/latest).

Instructions

Bump vitepress (and vitepress-plugin-mermaid to the matching version) to versions that pull a non-vulnerable vite/esbuild. Run npm install, build the docs site (npm run build), and verify locally. Open a draft PR; if CI passes, mark it ready with gh pr ready. Assign @rubenhensen as reviewer. No tests to verify beyond the build.

[dobby-coder]

/dobby

[dobby-coder]

Dobby is reporting for duty! Dobby will bump vitepress and vitepress-plugin-mermaid to fix the npm audit vulnerabilities, build the docs, and open a draft PR for the kind master to review!

[dobby-coder]

Opened #72 (now ready for review). Used npm overrides to force esbuild ^0.25.0 and vite ^6.4.2 — npm audit reports 0 vulnerabilities, npm run docs:build succeeds, CI green. Bumping vitepress itself wasn't an option: latest stable 1.6.4 pins vite ^5.4.14, the vite advisory wasn't backported to 5.x, and vitepress 2.x is alpha-only (the mermaid plugin doesn't support it yet).