Fix/pnpm security overrides (#501)

* chore: update deps

* fix: override transitives to patch advisories

Patch vulnerable transitive dependencies via pnpm.overrides. Each
parent is already latest/pins exact, so overrides are the only fix:

- hono ^4.12.25 — GHSA-88fw-hqm2-52qc (high, CORS) + 4 moderate;
  @prisma/dev@0.24.3 ranges ^4.12.8 but lockfile was stuck on 4.12.23
- @opentelemetry/{core,resources,sdk-trace-base} ^2.8.0 — core <2.8.0
  advisory; @sentry/node 10.57 pins the otel set at 2.6.1, overriding
  all three keeps the tree aligned
- js-yaml@4 ^4.2.0 — patches the cosmiconfig (commitlint) instance;
  scoped to v4 because gray-matter (prod) pins js-yaml ^3 and uses the
  removed safeLoad API — a global override breaks the build
- @babel/core@7 ^7.29.6 — low advisory via jest's istanbul tooling

Existing @hono/node-server and postcss overrides verified still
load-bearing (removal re-introduces findings); kept.

Known remaining: js-yaml 3.14.2 (moderate, no 3.x patch exists) via
gray-matter and jest coverage tooling. Below the prod --audit-level=high
gate; no upgrade path until gray-matter drops js-yaml 3.

Author: Shramkoweb

package.json

@@ -41,15 +41,15 @@
     "react-dom": "19.2.7",
     "reading-time": "1.5.0",
     "shiki": "4.2.0",
-    "swr": "2.4.1"
+    "swr": "2.4.2"
   },
   "devDependencies": {
     "@commitlint/cli": "21.0.2",
     "@commitlint/config-conventional": "21.0.2",
     "@commitlint/types": "21.0.1",
     "@shikijs/rehype": "4.2.0",
     "@shikijs/transformers": "4.2.0",
-    "@tailwindcss/postcss": "4.3.0",
+    "@tailwindcss/postcss": "4.3.1",
     "@tailwindcss/typography": "0.5.20",
     "@testing-library/dom": "10.4.1",
     "@testing-library/jest-dom": "6.9.1",
@@ -70,7 +70,7 @@
     "rehype-code-titles": "1.2.1",
     "rehype-slug": "6.0.0",
     "remark-gfm": "4.0.1",
-    "tailwindcss": "4.3.0",
+    "tailwindcss": "4.3.1",
     "typescript": "6.0.3"
   },
   "browserslist": [
@@ -80,11 +80,17 @@
     "node": "24.x",
     "pnpm": ">=10"
   },
-  "packageManager": "pnpm@10.34.3",
+  "packageManager": "pnpm@10.34.4",
   "pnpm": {
     "overrides": {
       "@hono/node-server": "^1.19.13",
-      "postcss": "^8.5.10"
+      "postcss": "^8.5.10",
+      "hono": "^4.12.25",
+      "@opentelemetry/core": "^2.8.0",
+      "@opentelemetry/resources": "^2.8.0",
+      "@opentelemetry/sdk-trace-base": "^2.8.0",
+      "js-yaml@4": "^4.2.0",
+      "@babel/core@7": "^7.29.6"
     },
     "onlyBuiltDependencies": [
       "@prisma/engines",