chore(deps): update dependency prettier to v3.9.10 - #336

* chore(deps): update actions/setup-node action to v7.1.0

* chore(deps): update dependency third_party/emsdk to v6.0.12

* chore(deps): update dependency python to 3.15

* chore(deps): update pnpm to v12.12.1 (#333)

Renovate proposed v12.11.2; v12.12.1 is the newest release that already
satisfies the one-day minimumReleaseAge policy.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* chore(deps): update js dependencies (#331, #332, #334, #336)

- electron 44.6.0 -> 44.7.0
- vite 8.3.3 -> 8.3.4 (postcss 8.5.30, source-map-js 1.2.2, rolldown 1.2.13)
- @types/node 24.19.1 -> 24.19.2
- prettier 3.9.9 -> 3.9.10

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* docs(changelog): record dependency updates in Unreleased

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* chore(deps): update electron to v44.7.2 (security)

Electron 44.7.1 and 44.7.2 carry upstream Chromium, V8, ANGLE and PDFium
security backports (electron/electron#54898) and roll Chromium to
152.0.7977.149. 44.7.2 is younger than the one-day minimumReleaseAge, so it
is exempted by exact version in minimumReleaseAgeExclude.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* fix(deps): update vulnerable transitive dependencies (security)

pnpm audit reported 62 advisories in transitive dependencies that Renovate
does not refresh. Update them within their existing ranges:

- js-yaml 4.2.0 -> 4.3.2 (electron-updater, shipped in the GUI; also
  electron-builder): GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj,
  GHSA-2883-xcg3-v3hh
- tar 7.5.16 -> 7.5.22 (electron-builder): GHSA-23hp-3jrh-7fpw and others
- undici 6.27.0 -> 6.29.0, 7.29.0 -> 7.30.0 (@electron/get, node-gyp)
- @xmldom/xmldom 0.8.13 -> 0.8.15, fast-uri 3.1.2 -> 3.1.8,
  http-cache-semantics 4.2.0 -> 4.3.0,
  brace-expansion 1.1.21 / 2.1.7 / 5.0.12 (electron-builder)

All fixed versions are older than the minimumReleaseAge window.
sprintf-js (GHSA via @electron/get > global-agent > roarr) has no fixed
release yet and remains.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* docs(changelog): record Electron 44.7.2 and transitive security fixes

Co-Authored-By: Claude Opus 5.5 <[email protected]>

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <[email protected]>