chore(deps): update Dependabot queue

[BartWaardenburg]

Summary

• consolidate the open Dependabot updates for commitlint, napi, srcmap-generator, wasm-runtime, typos, and install-action
• use a compatible napi/napi-derive pair instead of the broken partial update
• update transitive Rust dependencies to resolve the current crossbeam-epoch and quick-xml advisories
• regenerate both npm lockfiles so clean installs remain reproducible

Supersedes #155, #156, #157, #158, #159, #160, and #161.

Closes

N/A

Verification

• npm ci --ignore-scripts --no-audit --no-fund
• npm --prefix crates/oxc-coverage-instrument-napi ci --ignore-scripts --no-audit --no-fund
• cargo check --workspace
• cargo +1.92.0 check --workspace
• cargo fmt --all --check
• cargo clippy --workspace --all-targets -- -D warnings
• cargo test --workspace --all-targets
• cargo test --workspace --doc
• cargo audit
• cargo deny check
• native napi build and test suite
• upstream Istanbul smoke

[github-actions]

oxc-coverage-instrument Binary Size

Details

Benchmark suite	Current: 107a3ae	Previous: 498f961	Ratio
Binary Size (oxc-coverage-instrument CLI)	87063280 bytes	87047216 bytes	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[codspeed-hq]

Merging this PR will not alter performance

✅ 48 untouched benchmarks
⏩ 33 skipped benchmarks¹

---

_{Comparing chore/dependabot-queue-cleanup (107a3ae) with main (498f961)²}

Footnotes

1. 33 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

2. No successful run was found on main (f05911d) during the generation of this report, so 498f961 was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩