chore: update dependencies

[dobby-coder]

Closes #230

Patches the moderate brace-expansion advisory (GHSA-jxxr-4gwj-5jf2) and bumps the minor/patch versions listed in the tracking issue.

devDependencies

• @types/node ^25.7.0 → ^25.9.1
• @typescript-eslint/eslint-plugin ^8.59.3 → ^8.59.4
• @typescript-eslint/parser ^8.59.3 → ^8.59.4
• eslint ^10.3.0 → ^10.4.0
• lint-staged ^17.0.4 → ^17.0.5
• rollup ^4.60.3 → ^4.60.4
• svelte ^5.55.7 → ^5.55.8
• typescript-eslint ^8.59.3 → ^8.59.4
• vite ^8.0.12 → ^8.0.13

Transitive

• brace-expansion 5.0.x → 5.0.6 via npm audit fix (resolves GHSA-jxxr-4gwj-5jf2).

svelte-preprocess

6.0.3 is already the latest published release; its peerOptional typescript@^5 is unchanged. CI on main runs npm ci cleanly under the npm bundled with node 24, so no .npmrc or workflow change is needed.

Verified locally

• npm install clean
• npm audit reports 0 vulnerabilities
• npm run build — successful
• npm run lint — clean (prettier + eslint)
• npx svelte-check --threshold warning — 0 errors, 0 warnings, 477 files

Reviewer quickstart

git fetch origin && git checkout chore/dep-updates-2026-05-19 && npm install && npm run dev