chore(deps): consolidate dependency bumps (supersedes #34-53)

npm (lockfile + catalog): tanstack, @tauri-apps/*, turbo 2.9.x, biome, vite,
@vitejs/plugin-react, vitest+coverage-v8 4.1.8 (lockstep), @playwright/test,
and jsdom 26->29 (major). cargo: tauri 2.11.2, tauri-plugin-http 2.5.9,
tauri-build 2.6.2, serde_json. github-actions: docker setup-qemu v4,
setup-buildx v4, build-push v7. Validated: make ci-web, cargo-check, actionlint.

.github/workflows/docker-publish.yml

@@ -16,8 +16,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: docker/setup-qemu-action@v3
-      - uses: docker/setup-buildx-action@v3
+      - uses: docker/setup-qemu-action@v4
+      - uses: docker/setup-buildx-action@v4
 
       - uses: docker/login-action@v3
         with:
@@ -35,7 +35,7 @@ jobs:
             type=raw,value=latest
             type=sha,format=short
 
-      - uses: docker/build-push-action@v6
+      - uses: docker/build-push-action@v7
         with:
           context: .
           platforms: linux/amd64,linux/arm64

package.json

@@ -27,17 +27,17 @@
 	},
 	"devDependencies": {
 		"@biomejs/biome": "catalog:",
-		"@commitlint/cli": "~20.5.2",
-		"@commitlint/config-conventional": "~20.5.0",
-		"@semantic-release/changelog": "^6.0.0",
-		"@semantic-release/commit-analyzer": "^13.0.0",
+		"@commitlint/cli": "~20.5.3",
+		"@commitlint/config-conventional": "~20.5.3",
+		"@semantic-release/changelog": "^6.0.3",
+		"@semantic-release/commit-analyzer": "^13.0.1",
 		"@semantic-release/exec": "^7.1.0",
-		"@semantic-release/git": "^10.0.0",
-		"@semantic-release/github": "^10.0.0",
+		"@semantic-release/git": "^10.0.1",
+		"@semantic-release/github": "^10.3.5",
 		"@semantic-release/npm": "^13.1.5",
-		"@semantic-release/release-notes-generator": "^14.0.0",
+		"@semantic-release/release-notes-generator": "^14.1.1",
 		"husky": "~9.1.7",
 		"semantic-release": "catalog:",
-		"turbo": "^2"
+		"turbo": "^2.9.16"
 	}
 }

pnpm-workspace.yaml

@@ -5,7 +5,7 @@ allowBuilds:
 
 catalog:
   # Standard tooling
-  "@biomejs/biome": "^2.4.0"
+  "@biomejs/biome": "^2.4.16"
 
   # Testing
   "@playwright/test": "^1.59.1"
@@ -15,16 +15,16 @@ catalog:
   "@types/react": "^19.2.14"
   "@types/react-dom": "^19.2.3"
   "@vitejs/plugin-react": "^6.0.1"
-  "@vitest/coverage-v8": "^4.0.0"
-  jsdom: "^26.1.0"
+  "@vitest/coverage-v8": "^4.1.8"
+  jsdom: "^29.1.1"
 
   # React
   react: "^19.2.5"
   react-dom: "^19.2.5"
-  semantic-release: "^25.0.0"
+  semantic-release: "^25.0.3"
   typescript: "~6.0.2"
 
   # Vite
   vite: "^8.0.10"
-  vitest: "^4.0.0"
+  vitest: "^4.1.8"
   zod: "^4.0.0"