chore(deps): lock file maintenance

[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • Between 12:00 AM and 05:59 AM, only on Monday (* 0-5 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Note

Low Risk
Lockfile-only refresh with patch-level transitive updates; the notable exception is a major bump to @nodable/entities under XML parsing, which is still low risk for typical test/tooling usage.

Overview
Renovate lock file maintenance only updates pnpm-lock.yaml; there are no package.json range changes.

Resolved versions move forward for several transitive packages, including patch bumps for fast-xml-parser, tldts, modern-tar, es-module-lexer, obug, ast-v8-to-istanbul, and fast-uri, plus @nodable/entities 2.2.0 → 3.0.0 (pulled in via fast-xml-parser and used by paths like just-bash, Vitest coverage, and tough-cookie / jsdom).

^{Reviewed by Cursor Bugbot for commit 45998bb. Bugbot is set up for automated code reviews on this repo. Configure here.}