Consolidates the dependabot PRs that are green with our current (TypeScript 6) toolchain, applied surgically (per-package bun update, lockfile preserved so nothing floats).

Included

• GitHub Actions: actions/checkout v7.0.0 (chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 #88), actions/setup-node v7.0.0 (chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 #86), actions/cache v6.1.0 (chore(deps): bump actions/cache from 5.0.5 to 6.1.0 #84), dorny/paths-filter v4.0.2 (chore(deps): bump dorny/paths-filter from 4.0.1 to 4.0.2 #87), softprops/action-gh-release v3.0.2 (chore(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.2 #85)
• npm: globals 17.7.0 (chore(deps-dev): bump globals from 17.6.0 to 17.7.0 #95)
• docs: @astrojs/starlight 0.41.3 (chore(deps): bump @astrojs/starlight from 0.39.2 to 0.41.3 #91), @tailwindcss/vite 4.3.2 (chore(deps): bump @tailwindcss/vite from 4.3.0 to 4.3.2 #96), astro 7.0.9 (chore(deps): bump astro from 6.4.7 to 7.0.9 #92), mermaid 11.16.0 (chore(deps): bump mermaid from 11.15.0 to 11.16.0 #90), sharp 0.35.3 (chore(deps): bump sharp from 0.34.5 to 0.35.3 #97), tailwindcss 4.3.2 (chore(deps): bump tailwindcss from 4.3.0 to 4.3.2 #98), wrangler 4.110.0 (chore(deps-dev): bump wrangler from 4.95.0 to 4.110.0 #94)

Verified locally

• bun run validate — green (typecheck + lint + format + test + e2e)
• astro build (docs) — green, 47 pages (proves the astro 6→7 major)

Skipped — need their own migration PRs

• chore(deps): bump the dev-toolchain group across 2 directories with 8 updates #89 dev-toolchain group — contains TypeScript 6→7 (no stable programmatic API until 7.1; breaks the proptest type-checker usage and typescript-eslint), plus TS7-built sonarjs/eslint. TS7 is worth adopting (Go compiler, much faster) but is a dedicated migration (alias @typescript/typescript6 for tooling + TS7's tsc for the CLI).
• chore(deps): bump fast-check from 3.23.2 to 4.9.0 #93 / chore(deps): bump fast-check from 3.23.2 to 4.9.0 in /packages/core #99 fast-check 4 — breaks the proptest oracle (generation timing).