fix(security): patch all Dependabot alerts and update dependencies

Add pnpm overrides for 8 new vulnerable transitive deps:
- vite >=6.4.2 (arbitrary file read via WebSocket)
- defu >=6.1.5 (prototype pollution via __proto__)
- picomatch >=2.3.2 / >=4.0.4 (ReDoS + method injection)
- yaml >=2.8.3 (stack overflow via deeply nested collections)
- smol-toml >=1.6.1 (DoS via consecutive commented lines)
- h3 >=1.15.9 (path traversal + SSE injection)
- immutable >=4.3.8 (prototype pollution)
- fast-xml-parser >=5.5.7 (entity expansion bypass)

Update existing overrides: minimatch >=3.1.4, brace-expansion >=2.0.3.

Update direct deps: @astrojs/rss, @astrojs/sitemap, @astrojs/tailwind,
@headlessui/react, lodash, sass, slugify, pagefind, @types/dompurify,
@types/lodash.

Author: yasinmiran

package.json

@@ -21,10 +21,10 @@
     "@astrojs/markdown-remark": "^6.0.0",
     "@astrojs/mdx": "^4.0.0",
     "@astrojs/react": "^4.0.0",
-    "@astrojs/rss": "^4.0.17",
-    "@astrojs/sitemap": "^3.7.0",
-    "@astrojs/tailwind": "^6.0.0",
-    "@headlessui/react": "^2.2.9",
+    "@astrojs/rss": "^4.0.18",
+    "@astrojs/sitemap": "^3.7.2",
+    "@astrojs/tailwind": "^6.0.2",
+    "@headlessui/react": "^2.2.10",
     "@heroicons/react": "^2.1.3",
     "@react-three/drei": "9.117.0",
     "@react-three/fiber": "8.17.10",
@@ -36,36 +36,44 @@
     "framer-motion": "^12.38.0",
     "gray-matter": "^4.0.3",
     "leaflet": "^1.9.4",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "marked": "^17.0.5",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "react-icons": "^5.2.1",
     "react-is": "^18.3.1",
     "react-leaflet": "^4.2.1",
-    "sass": "^1.77.8",
-    "slugify": "^1.6.8",
+    "sass": "^1.99.0",
+    "slugify": "^1.6.9",
     "tailwindcss": "^3.4.3",
     "three": "^0.183.2",
     "typescript": "^5.4.5"
   },
   "devDependencies": {
     "@tailwindcss/typography": "^0.5.14",
-    "@types/dompurify": "^3.0.5",
-    "@types/lodash": "^4.17.12",
+    "@types/dompurify": "^3.2.0",
+    "@types/lodash": "^4.17.24",
     "@types/react": "^18.2.37",
     "@types/react-dom": "^18.2.15",
     "npm-run-all": "^4.1.5",
-    "pagefind": "^1.1.1"
+    "pagefind": "^1.5.0"
   },
   "pnpm": {
     "overrides": {
-      "minimatch@<9.0.9": "9.0.9",
-      "minimatch@>=3.0.0 <3.1.3": "3.1.3",
+      "minimatch@>=3.0.0 <3.1.4": "3.1.4",
+      "minimatch@>=4.0.0 <9.0.9": "9.0.9",
       "svgo@<3.3.3": "3.3.3",
-      "fast-xml-parser@<5.2.2": "5.2.2",
-      "brace-expansion@<2.0.2": "2.0.2",
-      "ajv@<8.17.1": "8.17.1"
+      "fast-xml-parser@<5.5.7": "5.5.7",
+      "brace-expansion@<2.0.3": "2.0.3",
+      "ajv@<8.17.1": "8.17.1",
+      "vite@>=6.0.0 <6.4.2": "6.4.2",
+      "defu@<6.1.5": "6.1.5",
+      "picomatch@>=2.0.0 <2.3.2": "2.3.2",
+      "picomatch@>=4.0.0 <4.0.4": "4.0.4",
+      "yaml@>=2.0.0 <2.8.3": "2.8.3",
+      "smol-toml@<1.6.1": "1.6.1",
+      "h3@<1.15.9": "1.15.9",
+      "immutable@<4.3.8": "4.3.8"
     }
   }
 }