chore(deps): lock file maintenance

[AdamXweb]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (in timezone Australia/Melbourne)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[adamXbot]

✅ Good to merge. This is the PR that resolves Dependabot alert #19 — and #18 as well:

• serde_with 3.20.0 → 3.21.0 (src-tauri/Cargo.lock) — fixes alert Build(deps-dev): bump @tauri-apps/cli from 2.11.1 to 2.11.2 #19 (GHSA-7gcf-g7xr-8hxj, vulnerable < 3.21.0)
• js-yaml 4.1.1 → 4.3.0 (pnpm-lock.yaml) — fixes alert Build(deps): bump actions/attest-build-provenance from 96b4a1ef7235a096b17240c259729fdd70c83d45 to e8998f949152b193b063cb0ec769d69d929409be #18 (GHSA-h67p-54hq-rp68, patched in 4.2.0)

All 16 CI checks are green, and I verified locally on this branch (macOS, Node 26, pnpm 11.1.2):

• pnpm install --frozen-lockfile — clean, lockfile consistent with package.json
• pnpm lint, pnpm typecheck, pnpm lint:i18n — all pass
• pnpm test — 442 tests: 438 pass, 4 skipped, 0 fail
• pnpm build — production build succeeds
• cargo metadata --locked OK; cargo tree -i serde_with resolves v3.21.0 (via tauri-utils; tauri floats to 2.11.5 in-range)

Suggest merging this one before #125 — Renovate will rebase #125 over it on its next run.

Tested via Claude Code