diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2fc62ebe6..c265ffec8 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -180,9 +180,6 @@ catalogs:
     lint-staged:
       specifier: 16.1.6
       version: 16.1.6
-    magic-string:
-      specifier: 0.30.19
-      version: 0.30.19
     micromatch:
       specifier: 4.0.8
       version: 4.0.8
@@ -246,17 +243,41 @@ catalogs:
 
 overrides:
   '@socketregistry/packageurl-js': npm:@socketregistry/packageurl-js@1.4.2
-  '@socketsecurity/lib': 6.0.7
+  '@socketsecurity/lib': 6.0.8
   '@socketsecurity/registry': npm:@socketsecurity/registry@2.0.2
   '@socketsecurity/sdk': npm:@socketsecurity/sdk@4.0.1
+  chalk@>=5: 5.6.2
+  es-define-property: npm:@socketregistry/es-define-property@1.0.7
+  es-set-tostringtag: npm:@socketregistry/es-set-tostringtag@1.0.10
+  function-bind: npm:@socketregistry/function-bind@1.0.7
+  glob: 13.0.6
+  gopd: npm:@socketregistry/gopd@1.0.7
+  has-symbols: npm:@socketregistry/has-symbols@1.0.7
+  has-tostringtag: npm:@socketregistry/has-tostringtag@1.0.7
+  hasown: npm:@socketregistry/hasown@1.0.7
+  iconv-lite: 0.7.2
+  isexe@>=3: 4.0.0
+  lru-cache@>=10: 11.3.6
+  magic-string: 0.30.21
+  mime-db: 1.54.0
+  mime-types@>=3: 3.0.2
+  minipass@>=4: 7.1.3
+  safe-buffer: npm:@socketregistry/safe-buffer@1.0.9
+  safer-buffer: npm:@socketregistry/safer-buffer@1.0.10
   semver@>=5.0.0 <7.6.0: 7.8.1
+  side-channel: npm:@socketregistry/side-channel@1.0.10
+  ssri@>=12: 13.0.1
+  string-width@>=5: 8.1.0
   update-notifier@>=4.0.0: 7.3.1
   uuid: 11.1.1
+  which@>=4: 7.0.0
+  wrap-ansi@>=8: 9.0.2
+  yaml@2: 2.9.0
   '@octokit/graphql': 9.0.1
   '@octokit/request-error': 7.0.0
   '@sigstore/sign': 4.1.0
   '@socketregistry/packageurl-js-stable': npm:@socketregistry/packageurl-js@1.4.2
-  '@socketsecurity/lib-stable': npm:@socketsecurity/lib@6.0.7
+  '@socketsecurity/lib-stable': npm:@socketsecurity/lib@6.0.8
   '@socketsecurity/registry-stable': npm:@socketsecurity/registry@2.0.2
   '@socketsecurity/sdk-stable': npm:@socketsecurity/sdk@4.0.1
   aggregate-error: npm:@socketregistry/aggregate-error@^1.0.15
@@ -264,19 +285,11 @@ overrides:
   brace-expansion: 5.0.5
   defu: '>=6.1.7'
   emoji-regex: 10.6.0
-  es-define-property: npm:@socketregistry/es-define-property@^1.0.7
-  es-set-tostringtag: npm:@socketregistry/es-set-tostringtag@^1.0.10
   fast-uri: '>=3.1.2'
-  function-bind: npm:@socketregistry/function-bind@^1.0.7
-  glob: '>=13.0.6'
   globalthis: npm:@socketregistry/globalthis@^1.0.8
-  gopd: npm:@socketregistry/gopd@^1.0.7
   graceful-fs: 4.2.11
   has-property-descriptors: npm:@socketregistry/has-property-descriptors@^1.0.7
   has-proto: npm:@socketregistry/has-proto@^1.0.7
-  has-symbols: npm:@socketregistry/has-symbols@^1.0.7
-  has-tostringtag: npm:@socketregistry/has-tostringtag@^1.0.7
-  hasown: npm:@socketregistry/hasown@^1.0.7
   hono: '>=4.12.23'
   https-proxy-agent: 7.0.6
   indent-string: npm:@socketregistry/indent-string@^1.0.14
@@ -290,12 +303,9 @@ overrides:
   postcss: '>=8.5.15'
   qs: '>=6.15.2'
   rolldown: 1.1.0
-  safe-buffer: npm:@socketregistry/safe-buffer@^1.0.9
-  safer-buffer: npm:@socketregistry/safer-buffer@^1.0.10
   semver: 7.7.2
   set-function-length: npm:@socketregistry/set-function-length@^1.0.10
   shell-quote: 1.8.4
-  side-channel: npm:@socketregistry/side-channel@^1.0.10
   signal-exit: 4.1.0
   string-width: 8.1.0
   string_decoder: 0.10.31
@@ -303,7 +313,7 @@ overrides:
   tiny-colors: 2.1.3
   typedarray: npm:@socketregistry/typedarray@^1.0.8
   undici: 6.21.3
-  vite: 8.0.14
+  vite: 8.0.16
   wrap-ansi: 9.0.2
   xml2js: 0.6.2
   yaml: 2.8.1
@@ -408,11 +418,11 @@ importers:
         specifier: 'catalog:'
         version: 1.0.25
       '@socketsecurity/lib':
-        specifier: 6.0.7
-        version: 6.0.7(typescript@5.9.3)
+        specifier: 6.0.8
+        version: 6.0.8(typescript@5.9.3)
       '@socketsecurity/lib-stable':
-        specifier: npm:@socketsecurity/lib@6.0.7
-        version: '@socketsecurity/lib@6.0.7(typescript@5.9.3)'
+        specifier: npm:@socketsecurity/lib@6.0.8
+        version: '@socketsecurity/lib@6.0.8(typescript@5.9.3)'
       '@socketsecurity/registry':
         specifier: npm:@socketsecurity/registry@2.0.2
         version: 2.0.2(typescript@5.9.3)
@@ -504,8 +514,8 @@ importers:
         specifier: 'catalog:'
         version: 16.1.6
       magic-string:
-        specifier: 'catalog:'
-        version: 0.30.19
+        specifier: 0.30.21
+        version: 0.30.21
       micromatch:
         specifier: 'catalog:'
         version: 4.0.8
@@ -574,7 +584,7 @@ importers:
         version: 0.1.0
       vitest:
         specifier: 'catalog:'
-        version: 4.1.8(@types/node@24.9.2)(@vitest/coverage-v8@4.1.8)(vite@8.0.14(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1))
+        version: 4.1.8(@types/node@24.9.2)(@vitest/coverage-v8@4.1.8)(vite@8.0.16(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1))
       yaml:
         specifier: 2.8.1
         version: 2.8.1
@@ -768,14 +778,14 @@ importers:
         specifier: 'catalog:'
         version: 0.34.49
       '@socketsecurity/lib':
-        specifier: 6.0.7
-        version: 6.0.7(typescript@5.9.3)
+        specifier: 6.0.8
+        version: 6.0.8(typescript@5.9.3)
       '@socketsecurity/lib-stable':
-        specifier: npm:@socketsecurity/lib@6.0.7
-        version: '@socketsecurity/lib@6.0.7(typescript@5.9.3)'
+        specifier: npm:@socketsecurity/lib@6.0.8
+        version: '@socketsecurity/lib@6.0.8(typescript@5.9.3)'
       magic-string:
-        specifier: 'catalog:'
-        version: 0.30.19
+        specifier: 0.30.21
+        version: 0.30.21
 
   packages/cli:
     devDependencies:
@@ -828,11 +838,11 @@ importers:
         specifier: 'catalog:'
         version: 1.0.25
       '@socketsecurity/lib':
-        specifier: 6.0.7
-        version: 6.0.7(typescript@5.9.3)
+        specifier: 6.0.8
+        version: 6.0.8(typescript@5.9.3)
       '@socketsecurity/lib-stable':
-        specifier: npm:@socketsecurity/lib@6.0.7
-        version: '@socketsecurity/lib@6.0.7(typescript@5.9.3)'
+        specifier: npm:@socketsecurity/lib@6.0.8
+        version: '@socketsecurity/lib@6.0.8(typescript@5.9.3)'
       '@socketsecurity/registry':
         specifier: npm:@socketsecurity/registry@2.0.2
         version: 2.0.2(typescript@5.9.3)
@@ -900,8 +910,8 @@ importers:
         specifier: 'catalog:'
         version: 7.0.5
       lru-cache:
-        specifier: 11.2.6
-        version: 11.2.6
+        specifier: 11.3.6
+        version: 11.3.6
       micromatch:
         specifier: 'catalog:'
         version: 4.0.8
@@ -957,8 +967,8 @@ importers:
   packages/package-builder:
     dependencies:
       '@socketsecurity/lib':
-        specifier: 6.0.7
-        version: 6.0.7(typescript@5.9.3)
+        specifier: 6.0.8
+        version: 6.0.8(typescript@5.9.3)
       build-infra:
         specifier: workspace:*
         version: link:../build-infra
@@ -2162,8 +2172,8 @@ packages:
     resolution: {integrity: sha512-f8AqJMH1+BL15G6bHDzb1jyY+wW4gOYQs5JumSxmnE/H/+KgqbIZgaPwDdRwoeciDGojoSVrRHiTZjbe7n7dJA==}
     engines: {node: '>=18'}
 
-  '@socketsecurity/lib@6.0.7':
-    resolution: {integrity: sha512-W7lhNnZ6areTQLWG2Bh3r3hs2F9hvRqtUp1zj79KxBFGB39KUvO3Mc9Kqqvwlu9T91qQtIxf00JlzLbVd16KMg==}
+  '@socketsecurity/lib@6.0.8':
+    resolution: {integrity: sha512-cHQy7siiqNocfdxHd+l1VlhiTdv+nbnI/L+dSKsfLujSMZHPwxN6y++UGoqArQaeu9KqksRFohXDgK3Tm6x2MA==}
     engines: {node: '>=22', npm: '>=11.16.0', pnpm: '>=11.5.1'}
     hasBin: true
     peerDependencies:
@@ -2347,7 +2357,7 @@ packages:
     resolution: {integrity: sha512-LEiN/xe4OSIbKe9HQIp5OC24agGD9J5CnmMgsLohVVoOPWL9a2sBoR6VBx43jQZb7Kr1l4RCuyCJzcAa0+dojw==}
     peerDependencies:
       msw: ^2.4.9
-      vite: 8.0.14
+      vite: 8.0.16
     peerDependenciesMeta:
       msw:
         optional: true
@@ -3296,10 +3306,6 @@ packages:
   isexe@2.0.0:
     resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
 
-  isexe@3.1.5:
-    resolution: {integrity: sha512-6B3tLtFqtQS4ekarvLVMZ+X+VlvQekbe4taUkf/rhVO3d/h0M2rfARm/pXLcPEsjjMsFgrFgSrhQIxcSVrBz8w==}
-    engines: {node: '>=18'}
-
   isexe@4.0.0:
     resolution: {integrity: sha512-FFUtZMpoZ8RqHS3XeXEmHWLA4thH+ZxCv2lOiPIn1Xc7CxrqhWzNSDzD+/chS/zbYezmiwWLdQC09JdQKmthOw==}
     engines: {node: '>=20'}
@@ -3493,11 +3499,8 @@ packages:
   long@5.3.2:
     resolution: {integrity: sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==}
 
-  lru-cache@10.4.3:
-    resolution: {integrity: sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==}
-
-  lru-cache@11.2.6:
-    resolution: {integrity: sha512-ESL2CrkS/2wTPfuend7Zhkzo2u0daGJ/A2VucJOgQ/C48S/zB8MMeMHSGKYpXhIjbPxfuezITkaBH1wqv00DDQ==}
+  lru-cache@11.3.6:
+    resolution: {integrity: sha512-Gf/KoL3C/MlI7Bt0PGI9I+TeTC/I6r/csU58N4BSNc4lppLBeKsOdFYkK+dX0ABDUMJNfCHTyPpzwwO21Awd3A==}
     engines: {node: 20 || >=22}
 
   lru-cache@5.1.1:
@@ -3507,9 +3510,6 @@ packages:
     resolution: {integrity: sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==}
     engines: {node: '>=10'}
 
-  magic-string@0.30.19:
-    resolution: {integrity: sha512-2N21sPY9Ws53PZvsEpVtNuSW+ScYbQdp4b9qUaL+9QkHUrGFKo56Lg9Emg5s9V/qrtNBmiR01sYhUOwu3H+VOw==}
-
   magic-string@0.30.21:
     resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
 
@@ -3567,10 +3567,6 @@ packages:
     resolution: {integrity: sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==}
     engines: {node: '>=8.6'}
 
-  mime-db@1.52.0:
-    resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==}
-    engines: {node: '>= 0.6'}
-
   mime-db@1.54.0:
     resolution: {integrity: sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==}
     engines: {node: '>= 0.6'}
@@ -4397,6 +4393,10 @@ packages:
     resolution: {integrity: sha512-pn99VhoACYR8nFHhxqix+uvsbXineAasWm5ojXoN8xEwK5Kd3/TrhNn1wByuD52UxWRLy8pu+kRMniEi6Eq9Zg==}
     engines: {node: '>=12.0.0'}
 
+  tinyglobby@0.2.17:
+    resolution: {integrity: sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==}
+    engines: {node: '>=12.0.0'}
+
   tinypool@2.1.0:
     resolution: {integrity: sha512-Pugqs6M0m7Lv1I7FtxN4aoyToKg1C4tu+/381vH35y8oENM/Ai7f7C4StcoK4/+BSw9ebcS8jRiVrORFKCALLw==}
     engines: {node: ^20.0.0 || >=22.0.0}
@@ -4556,8 +4556,8 @@ packages:
     resolution: {integrity: sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==}
     engines: {node: '>= 0.8'}
 
-  vite@8.0.14:
-    resolution: {integrity: sha512-s4BJJ+5y1pYL6Otw51FHhVJQhPnuRinKig64g/1+EUNaJsd3gCKdD31IPFvswUgW9/60QT9oFHbZHbQK5imcxw==}
+  vite@8.0.16:
+    resolution: {integrity: sha512-h9bXPmJichP5fLmVQo3PyaGSDE2n3aPuomeAlVRm0JLmt4rY6zmPKd59HYI4LNW8oTK7tlTsuC7l/m7awx9Jcw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     hasBin: true
     peerDependencies:
@@ -4615,7 +4615,7 @@ packages:
       '@vitest/ui': 4.1.8
       happy-dom: '*'
       jsdom: '*'
-      vite: 8.0.14
+      vite: 8.0.16
     peerDependenciesMeta:
       '@edge-runtime/vm':
         optional: true
@@ -4662,16 +4662,6 @@ packages:
     engines: {node: '>= 8'}
     hasBin: true
 
-  which@5.0.0:
-    resolution: {integrity: sha512-JEdGzHwwkrbWoGOlIHqQ5gtprKGOenpDHpxE9zVR1bWbOtYRyPPHMe9FaP6x61CmNaTThSkb0DAJte5jD+DmzQ==}
-    engines: {node: ^18.17.0 || >=20.5.0}
-    hasBin: true
-
-  which@6.0.1:
-    resolution: {integrity: sha512-oGLe46MIrCRqX7ytPUf66EAYvdeMIZYn3WaocqqKZAxrBpkqHfL/qvTyJ/bTk5+AqHCjXmrv3CEWgy368zhRUg==}
-    engines: {node: ^20.17.0 || >=22.9.0}
-    hasBin: true
-
   which@7.0.0:
     resolution: {integrity: sha512-RancgH2dmbLdHl6LRhEqvklWMgl/Hdnun0Y90KhBOLkMefg8Qa7/Zel8Sm+8HEcP6DEjzsWzpkuBQEZok58isA==}
     engines: {node: ^22.22.2 || ^24.15.0 || >=26.0.0}
@@ -5325,7 +5315,7 @@ snapshots:
       agent-base: 7.1.4
       http-proxy-agent: 7.0.2
       https-proxy-agent: 7.0.6
-      lru-cache: 11.2.6
+      lru-cache: 11.3.6
       socks-proxy-agent: 8.0.5
     transitivePeerDependencies:
       - supports-color
@@ -5349,7 +5339,7 @@ snapshots:
       common-ancestor-path: 2.0.0
       hosted-git-info: 9.0.2
       json-stringify-nice: 1.1.4
-      lru-cache: 11.2.6
+      lru-cache: 11.3.6
       minimatch: 10.2.5
       nopt: 9.0.0
       npm-install-checks: 8.0.0
@@ -5388,23 +5378,23 @@ snapshots:
     dependencies:
       '@npmcli/promise-spawn': 8.0.3
       ini: 5.0.0
-      lru-cache: 10.4.3
+      lru-cache: 11.3.6
       npm-pick-manifest: 10.0.0
       proc-log: 5.0.0
       promise-retry: 2.0.1
       semver: 7.7.2
-      which: 5.0.0
+      which: 7.0.0
 
   '@npmcli/git@7.0.2':
     dependencies:
       '@gar/promise-retry': 1.0.3
       '@npmcli/promise-spawn': 9.0.1
       ini: 6.0.0
-      lru-cache: 11.2.6
+      lru-cache: 11.3.6
       npm-pick-manifest: 11.0.3
       proc-log: 6.1.0
       semver: 7.7.2
-      which: 6.0.1
+      which: 7.0.0
 
   '@npmcli/installed-package-contents@4.0.0':
     dependencies:
@@ -5463,11 +5453,11 @@ snapshots:
 
   '@npmcli/promise-spawn@8.0.3':
     dependencies:
-      which: 5.0.0
+      which: 7.0.0
 
   '@npmcli/promise-spawn@9.0.1':
     dependencies:
-      which: 6.0.1
+      which: 7.0.0
 
   '@npmcli/query@5.0.0':
     dependencies:
@@ -5961,7 +5951,7 @@ snapshots:
     dependencies:
       yoctocolors-cjs: 2.1.3
 
-  '@socketsecurity/lib@6.0.7(typescript@5.9.3)':
+  '@socketsecurity/lib@6.0.8(typescript@5.9.3)':
     optionalDependencies:
       typescript: 5.9.3
 
@@ -6127,7 +6117,7 @@ snapshots:
       obug: 2.1.1
       std-env: 4.1.0
       tinyrainbow: 3.1.0
-      vitest: 4.1.8(@types/node@24.9.2)(@vitest/coverage-v8@4.1.8)(vite@8.0.14(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1))
+      vitest: 4.1.8(@types/node@24.9.2)(@vitest/coverage-v8@4.1.8)(vite@8.0.16(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1))
 
   '@vitest/expect@4.1.8':
     dependencies:
@@ -6138,13 +6128,13 @@ snapshots:
       chai: 6.2.2
       tinyrainbow: 3.1.0
 
-  '@vitest/mocker@4.1.8(vite@8.0.14(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1))':
+  '@vitest/mocker@4.1.8(vite@8.0.16(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1))':
     dependencies:
       '@vitest/spy': 4.1.8
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 8.0.14(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1)
+      vite: 8.0.16(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1)
 
   '@vitest/pretty-format@4.1.8':
     dependencies:
@@ -6447,7 +6437,7 @@ snapshots:
       '@npmcli/fs': 5.0.0
       fs-minipass: 3.0.3
       glob: 13.0.6
-      lru-cache: 11.2.6
+      lru-cache: 11.3.6
       minipass: 7.1.3
       minipass-collect: 2.0.1
       minipass-flush: 1.0.7
@@ -6978,11 +6968,11 @@ snapshots:
 
   hosted-git-info@8.1.0:
     dependencies:
-      lru-cache: 10.4.3
+      lru-cache: 11.3.6
 
   hosted-git-info@9.0.2:
     dependencies:
-      lru-cache: 11.2.6
+      lru-cache: 11.3.6
 
   hpagent@1.2.0: {}
 
@@ -7091,8 +7081,6 @@ snapshots:
 
   isexe@2.0.0: {}
 
-  isexe@3.1.5: {}
-
   isexe@4.0.0: {}
 
   istanbul-lib-coverage@3.2.2: {}
@@ -7247,9 +7235,7 @@ snapshots:
 
   long@5.3.2: {}
 
-  lru-cache@10.4.3: {}
-
-  lru-cache@11.2.6: {}
+  lru-cache@11.3.6: {}
 
   lru-cache@5.1.1:
     dependencies:
@@ -7259,10 +7245,6 @@ snapshots:
     dependencies:
       yallist: 4.0.0
 
-  magic-string@0.30.19:
-    dependencies:
-      '@jridgewell/sourcemap-codec': 1.5.5
-
   magic-string@0.30.21:
     dependencies:
       '@jridgewell/sourcemap-codec': 1.5.5
@@ -7334,13 +7316,11 @@ snapshots:
       braces: 3.0.3
       picomatch: 2.3.2
 
-  mime-db@1.52.0: {}
-
   mime-db@1.54.0: {}
 
   mime-types@2.1.35:
     dependencies:
-      mime-db: 1.52.0
+      mime-db: 1.54.0
 
   mime-types@3.0.2:
     dependencies:
@@ -7482,7 +7462,7 @@ snapshots:
       semver: 7.7.2
       tar: 7.5.13
       tinyglobby: 0.2.16
-      which: 6.0.1
+      which: 7.0.0
     transitivePeerDependencies:
       - supports-color
 
@@ -7731,7 +7711,7 @@ snapshots:
 
   path-scurry@2.0.2:
     dependencies:
-      lru-cache: 11.2.6
+      lru-cache: 11.3.6
       minipass: 7.1.3
 
   path-to-regexp@8.4.2: {}
@@ -8303,6 +8283,11 @@ snapshots:
       fdir: 6.5.0(picomatch@4.0.4)
       picomatch: 4.0.4
 
+  tinyglobby@0.2.17:
+    dependencies:
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4
+
   tinypool@2.1.0: {}
 
   tinyrainbow@3.1.0: {}
@@ -8420,7 +8405,7 @@ snapshots:
   unplugin-purge-polyfills@0.1.0:
     dependencies:
       defu: 6.1.7
-      magic-string: 0.30.19
+      magic-string: 0.30.21
       mlly: 1.8.2
       unplugin: 2.3.11
 
@@ -8468,23 +8453,23 @@ snapshots:
 
   vary@1.1.2: {}
 
-  vite@8.0.14(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1):
+  vite@8.0.16(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1):
     dependencies:
       lightningcss: 1.32.0
       picomatch: 4.0.4
       postcss: 8.5.15
       rolldown: 1.1.0
-      tinyglobby: 0.2.16
+      tinyglobby: 0.2.17
     optionalDependencies:
       '@types/node': 24.9.2
       fsevents: 2.3.3
       jiti: 2.7.0
       yaml: 2.8.1
 
-  vitest@4.1.8(@types/node@24.9.2)(@vitest/coverage-v8@4.1.8)(vite@8.0.14(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1)):
+  vitest@4.1.8(@types/node@24.9.2)(@vitest/coverage-v8@4.1.8)(vite@8.0.16(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1)):
     dependencies:
       '@vitest/expect': 4.1.8
-      '@vitest/mocker': 4.1.8(vite@8.0.14(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1))
+      '@vitest/mocker': 4.1.8(vite@8.0.16(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1))
       '@vitest/pretty-format': 4.1.8
       '@vitest/runner': 4.1.8
       '@vitest/snapshot': 4.1.8
@@ -8501,7 +8486,7 @@ snapshots:
       tinyexec: 1.1.2
       tinyglobby: 0.2.16
       tinyrainbow: 3.1.0
-      vite: 8.0.14(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1)
+      vite: 8.0.16(@types/node@24.9.2)(jiti@2.7.0)(yaml@2.8.1)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/node': 24.9.2
@@ -8526,14 +8511,6 @@ snapshots:
     dependencies:
       isexe: 2.0.0
 
-  which@5.0.0:
-    dependencies:
-      isexe: 3.1.5
-
-  which@6.0.1:
-    dependencies:
-      isexe: 4.0.0
-
   which@7.0.0:
     dependencies:
       isexe: 4.0.0
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index f3d6a0da1..fe531665f 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -175,7 +175,7 @@ catalog:
   unplugin-purge-polyfills: 0.1.0
   # vite 8.0.14 swaps esbuild → rolldown natively; the override forces its
   # bundled rolldown up to the catalog's 1.0.3.
-  vite: 8.0.14
+  vite: 8.0.16
   vitest: 4.1.8
   wrap-ansi: 9.0.2
   xml2js: 0.6.2