fix(deps): update all dependencies

.github/workflows/api.yml

@@ -24,7 +24,7 @@ jobs:
       - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.04
         with:
           node-version: '20'
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - name: Install
         run: yarn --frozen-lockfile
       - name: Unit Test
@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: build_test_and_package
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
         with:
           node-version: '20'      
@@ -86,7 +86,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [aws_cdk, data_dog]
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
         with:
           node-version: '20'      

.github/workflows/codeql-analysis.yml

@@ -26,11 +26,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@cf5b0a9041d3c1d336516f1944c96d96598193cc
+      uses: github/codeql-action/init@af56b044b5d41c317aef5d19920b3183cb4fbbec
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -41,7 +41,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@cf5b0a9041d3c1d336516f1944c96d96598193cc
+      uses: github/codeql-action/autobuild@af56b044b5d41c317aef5d19920b3183cb4fbbec
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -55,4 +55,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@cf5b0a9041d3c1d336516f1944c96d96598193cc
+      uses: github/codeql-action/analyze@af56b044b5d41c317aef5d19920b3183cb4fbbec

.github/workflows/pullrequest.yml

@@ -12,7 +12,7 @@ jobs:
     permissions:
       contents: write 
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
         with:
           node-version: '20'      

.github/workflows/scorecard.yml

@@ -32,12 +32,12 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
         with:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
+        uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
         with:
           results_file: results.sarif
           results_format: sarif
@@ -59,7 +59,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@97a0fba1372883ab732affbe8f94b823f91727db # v3.pre.node20
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.pre.node20
         with:
           name: SARIF file
           path: results.sarif
@@ -68,6 +68,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@cf5b0a9041d3c1d336516f1944c96d96598193cc
+        uses: github/codeql-action/upload-sarif@af56b044b5d41c317aef5d19920b3183cb4fbbec
         with:
           sarif_file: results.sarif

.github/workflows/version.yml

@@ -13,8 +13,8 @@ jobs:
     permissions:
       contents: write 
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1    
-      - uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1    
+      - uses: actions/create-github-app-token@25cc3bdc279c3498f554da7599deab2213b272e6
         id: app-token
         with:
           app-id: ${{ vars.VERSION_BUMPER_APPID }}

.github/workflows/web.yml

@@ -22,7 +22,7 @@ jobs:
       - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.04
         with:
           node-version: '20'
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - name: Install
         run: yarn --frozen-lockfile
       - name: Unit Test
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: build_test_and_package
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
         with:
           node-version: '20'      
@@ -84,7 +84,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [aws_cdk, data_dog]
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
         with:
           node-version: '20'      
@@ -101,7 +101,7 @@ jobs:
     name: Publish to Cloudflare Pages
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
         with:
           node-version: '20'
@@ -118,7 +118,7 @@ jobs:
           API_PROTOCOL: "https" 
           API_DOMAIN: "api.prod.tranmere-web.com"
 
-      - uses: chrnorm/deployment-action@55729fcebec3d284f60f5bcabbd8376437d696b1
+      - uses: chrnorm/deployment-action@51e93982518dc06e500fe65559032a439663aaac
         name: Create GitHub deployment
         id: deployment
         with:
@@ -129,7 +129,7 @@ jobs:
 
       - name: Deploy
         id: deploy
-        uses: cloudflare/wrangler-action@9681c2997648301493e78cacbfb790a9f19c833f
+        uses: cloudflare/wrangler-action@cd8a317efbc7fab418e9bd7092c8643d88c03321
         with:
           apiToken: ${{ secrets.CLOUDFLARE_AUTH_KEY }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}

package.json

@@ -31,11 +31,11 @@
     "@types/node": "^22.7.5"
   },
   "resolutions": {
-    "**/path-to-regexp": "6.3.0",
+    "**/path-to-regexp": "8.2.0",
     "**/semver": "^7.5.3",
-    "**/jose": "^4.15.5",
-    "**/tar": "^6.2.1",
-    "**/cookie": "^0.7.0",
+    "**/jose": "^5.0.0",
+    "**/tar": "^7.0.0",
+    "**/cookie": "^1.0.0",
     "**/debug": "^4.3.1"
   }
 }

packages/site/package.json

@@ -47,7 +47,7 @@
     "algoliasearch": "^5.2.5",
     "autoprefixer": "^10.4.19",
     "date-fns": "^4.0.0",
-    "eslint": "9.12.0",
+    "eslint": "9.13.0",
     "eslint-config-next": "14.2.15",
     "framer-motion": "^11.11.9",
     "instantsearch.css": "^8.3.0",

packages/vectorize/package.json

@@ -21,7 +21,7 @@
     "typescript-eslint": "^8.9.0"
   },
   "overrides": {
-    "@types/node": "20.16.11"
+    "@types/node": "20.16.13"
   },
   "dependencies": {
     "@contentful/rich-text-plain-text-renderer": "^16.1.3",