chore(deps): aggregated dependency updates

[Mossaka]

Summary

• Ran npm update and npm audit fix across root and docs-site directories
• Brings all dependencies to latest compatible versions within existing semver ranges
• Consolidates 14 individual dependency update PRs into a single update

Closed PRs

#1204, #1199, #1185, #1183, #1179, #1175, #1141, #1114, #1110, #1104, #1059, #1027, #1019, #976

Test plan

• npm run build passes
• npm test passes (834 tests)
• No package.json changes (all updates within semver ranges)
• CI passes

🤖 Generated with Claude Code

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	82.37%	82.51%	📈 +0.14%
Statements	82.27%	82.41%	📈 +0.14%
Functions	82.60%	82.60%	➡️ +0.00%
Branches	74.21%	74.30%	📈 +0.09%

📁 Per-file Coverage Changes (1 files)

File	Lines (Before → After)	Statements (Before → After)
src/docker-manager.ts	83.4% → 84.0% (+0.54%)	82.8% → 83.3% (+0.52%)

---

Coverage comparison generated by scripts/ci/compare-coverage.ts

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

🦀 Rust Build Test Results

Project	Build	Tests	Status
fd	✅	1/1	PASS
zoxide	✅	1/1	PASS

Overall: ✅ PASS

Generated by Build Test Rust for issue #1218

[github-actions]

Smoke Test Results — PASS

• ✅ GitHub MCP: fix(ci): resolve integration test suite failures on main #1151 fix(ci): resolve integration test suite failures on main, fix(security): eliminate TOCTOU race conditions in ssl-bump.ts #1159 fix(security): eliminate TOCTOU race conditions in ssl-bump.ts
• ✅ Playwright: GitHub page title verified
• ✅ File write: /tmp/gh-aw/agent/smoke-test-claude-22931035770.txt created
• ✅ Bash: File contents confirmed

💥 [THE END] — Illustrated by Smoke Claude for issue #1218

[github-actions]

C++ Build Test Results

Project	CMake	Build	Status
fmt	✅	✅	PASS
json	✅	✅	PASS

Overall: ✅ PASS

Generated by Build Test C++ for issue #1218

[github-actions]

🟢 Build Test: Node.js — PASS

Project	Install	Tests	Status
clsx	✅	PASS	✅ PASS
execa	✅	PASS	✅ PASS
p-limit	✅	PASS	✅ PASS

Overall: ✅ PASS

Generated by Build Test Node.js for issue #1218

[github-actions]

Go Build Test Results ✅

Project	Download	Tests	Status
color	✅	PASS	PASS
env	✅	PASS	PASS
uuid	✅	PASS	PASS

Overall: PASS

Generated by Build Test Go for issue #1218

[github-actions]

Smoke test results
fix(ci): resolve integration test suite failures on main — ✅
fix(security): eliminate TOCTOU race conditions in ssl-bump.ts — ✅
GitHub MCP merged PRs — ✅
safeinputs-gh pr list — ✅
Playwright title check — ✅
Tavily search — ❌
File write + cat — ✅
Discussion comment — ✅
Build (npm ci && npm run build) — ✅
Overall: FAIL

🔮 The oracle has spoken through Smoke Codex for issue #1218

[github-actions]

🦕 Deno Build Test Results

Project	Tests	Status
oak	1/1	✅ PASS
std	1/1	✅ PASS

Overall: ✅ PASS

Test output details

oak:

running 1 test from ./test.ts
oak test ... ok (0ms)
ok | 1 passed | 0 failed (2ms)
````

**std:**
````
running 1 test from ./test.ts
std test ... ok (0ms)
ok | 1 passed | 0 failed (2ms)

Deno version: 2.7.4

Generated by Build Test Deno for issue #1218

[github-actions]

Smoke test results for @Mossaka:

✅ GitHub MCP — Last 2 merged PRs: #1204 "chore(deps): bump the all-docs-site-dependencies group..." | #1199 "[Deps] Safe dependency updates 2026-03-10"
✅ Playwright — github.com title contains "GitHub"
✅ File Write — /tmp/gh-aw/agent/smoke-test-copilot-22931035748.txt created
✅ Bash — File verified via cat

Overall: PASS

📰 BREAKING: Report filed by Smoke Copilot for issue #1218

[github-actions]

🔵 Build Test: .NET Results

Project	Restore	Build	Run	Status
hello-world	✅	✅	✅	PASS
json-parse	✅	✅	✅	PASS

Overall: ✅ PASS

Run output

hello-world:

Hello, World!
```

**json-parse:**
```
{
  "Name": "AWF Test",
  "Version": 1,
  "Success": true
}
Name: AWF Test, Success: True

Generated by Build Test .NET for issue #1218

[github-actions]

🧪 Build Test: Bun — Results

Project	Install	Tests	Status
elysia	✅	1/1	PASS
hono	✅	1/1	PASS

Overall: ✅ PASS

Bun v1.3.10 — all tests passed across both projects.

Generated by Build Test Bun for issue #1218

[github-actions]

Java Build Test Results

Project	Compile	Tests	Status
gson	✅	1/1	PASS
caffeine	✅	1/1	PASS

Overall: ✅ PASS

All Java projects compiled and tested successfully via Maven with the AWF proxy.

Generated by Build Test Java for issue #1218

[github-actions]

Smoke Test Results

✅ GitHub MCP: PR #1160 "fix(squid): block direct IP connections that bypass domain filtering", PR #1099 "feat: add skip-cleanup flag and fix api-proxy shutdown delay"
✅ Playwright: github.com title contains "GitHub"
✅ File write: /tmp/gh-aw/agent/smoke-test-claude-22931180165.txt created
✅ Bash verify: file contents confirmed

Overall: PASS

💥 [THE END] — Illustrated by Smoke Claude for issue #1218

[github-actions]

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	❌	N/A	❌ FAIL
Bun	hono	❌	N/A	❌ FAIL
C++	fmt	❌	N/A	❌ FAIL
C++	json	❌	N/A	❌ FAIL
Deno	oak	❌	N/A	❌ FAIL
Deno	std	❌	N/A	❌ FAIL
.NET	hello-world	❌	N/A	❌ FAIL
.NET	json-parse	❌	N/A	❌ FAIL
Go	color	❌	N/A	❌ FAIL
Go	env	❌	N/A	❌ FAIL
Go	uuid	❌	N/A	❌ FAIL
Java	gson	❌	N/A	❌ FAIL
Java	caffeine	❌	N/A	❌ FAIL
Node.js	clsx	❌	N/A	❌ FAIL
Node.js	execa	❌	N/A	❌ FAIL
Node.js	p-limit	❌	N/A	❌ FAIL
Rust	fd	❌	N/A	❌ FAIL
Rust	zoxide	❌	N/A	❌ FAIL

Overall: 0/8 ecosystems passed — ❌ FAIL

❌ Error Details

All 8 test repository clones failed. The gh CLI is not authenticated — GH_TOKEN environment variable is not set in this workflow run.

gh: To use GitHub CLI in a GitHub Actions workflow, set the GH_TOKEN environment variable. Example:
  env:
    GH_TOKEN: ${{ github.token }}

Affected repositories:

• Mossaka/gh-aw-firewall-test-bun
• Mossaka/gh-aw-firewall-test-cpp
• Mossaka/gh-aw-firewall-test-deno
• Mossaka/gh-aw-firewall-test-dotnet
• Mossaka/gh-aw-firewall-test-go
• Mossaka/gh-aw-firewall-test-java
• Mossaka/gh-aw-firewall-test-node
• Mossaka/gh-aw-firewall-test-rust

Fix: Ensure GH_TOKEN is passed to the workflow step that runs this agent.

Generated by Build Test Suite for issue #1218 · ◷

[github-actions]

Merged PRs: fix(squid): block direct IP connections that bypass domain filtering; feat: combine all build-test workflows into single build-test.md
Tests: GitHub MCP ✅; safeinputs-gh ✅; Playwright ✅; Tavily search ❌; File write+cat ✅; Discussion comment ✅; Build ✅
Overall: FAIL

🔮 The oracle has spoken through Smoke Codex for issue #1218

[github-actions]

Smoke test results for run 22931180174 — @Mossaka

✅ GitHub MCP: Last 2 merged PRs:

• fix(squid): block direct IP connections that bypass domain filtering #1160: fix(squid): block direct IP connections that bypass domain filtering
• feat: combine all build-test workflows into single build-test.md #1157: feat: combine all build-test workflows into single build-test.md

✅ Playwright: github.com title contains "GitHub"
✅ File write: /tmp/gh-aw/agent/smoke-test-copilot-22931180174.txt created and verified
✅ Bash: cat confirmed file contents

Overall: PASS

📰 BREAKING: Report filed by Smoke Copilot for issue #1218