chore(deps): update all non-major dependencies (#147)

This PR contains the following updates:

| Package | Type | Update | Change | Pending | Age | Confidence |
|---|---|---|---|---|---|---|
| docker.io/node | final | patch | `24.11.0-bookworm-slim` ->
`24.11.1-bookworm-slim` | |
[![age](https://developer.mend.io/api/mc/badges/age/docker/docker.io%2fnode/24.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/docker.io%2fnode/24.11.0/24.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| docker.io/redis | | minor | `8.2.2-bookworm` -> `8.4.0-bookworm` | |
[![age](https://developer.mend.io/api/mc/badges/age/docker/docker.io%2fredis/8.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/docker.io%2fredis/8.2.2/8.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | patch | `v4.31.4` -> `v4.31.5` | |
[![age](https://developer.mend.io/api/mc/badges/age/github-tags/github%2fcodeql-action/v4.31.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/github%2fcodeql-action/v4.31.4/v4.31.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint)
([source](https://redirect.github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint))
| devDependencies | minor | [`8.46.4` ->
`8.47.0`](https://renovatebot.com/diffs/npm/typescript-eslint/8.46.4/8.47.0)
| `8.48.0` |
[![age](https://developer.mend.io/api/mc/badges/age/npm/typescript-eslint/8.47.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript-eslint/8.46.4/8.47.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v4.31.5`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.5)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.31.4...v4.31.5)

##### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

##### 4.31.5 - 24 Nov 2025

- Update default CodeQL bundle version to 2.23.6.
[#&#8203;3321](https://redirect.github.com/github/codeql-action/pull/3321)

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.31.5/CHANGELOG.md)
for more information.

</details>

<details>
<summary>typescript-eslint/typescript-eslint
(typescript-eslint)</summary>

###
[`v8.47.0`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/typescript-eslint/CHANGELOG.md#8470-2025-11-17)

[Compare
Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.46.4...v8.47.0)

This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.

You can read about our [versioning
strategy](https://typescript-eslint.io/users/versioning) and
[releases](https://typescript-eslint.io/users/releases) on our website.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on Sunday" (UTC), Automerge - At any
time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/8hobbies/commitrack).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xOS45IiwidXBkYXRlZEluVmVyIjoiNDIuMTkuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/trivy.yml

@@ -55,13 +55,13 @@ jobs:
         continue-on-error: true
 
       - name: Upload Trivy fs scan results to GitHub Security tab
-        uses: github/codeql-action/[email protected].4
+        uses: github/codeql-action/[email protected].5
         with:
           category: "trivy-fs"
           sarif_file: "fs.sarif"
 
       - name: Upload Trivy image scan results to GitHub Security tab
-        uses: github/codeql-action/[email protected].4
+        uses: github/codeql-action/[email protected].5
         with:
           category: "trivy-image"
           sarif_file: "image.sarif"

docker-compose.yml

@@ -61,7 +61,7 @@ services:
       - commitrack
 
   cache:
-    image: docker.io/redis:8.2.2-bookworm@sha256:4521b581dbddea6e7d81f8fe95ede93f5648aaa66a9dacd581611bf6fe7527bd
+    image: docker.io/redis:8.4.0-bookworm@sha256:43355efd22490e31ca14b9d569367d05121e2be61fd8e47937563ae2a80952ae
     container_name: commitrack-cache
     ports:
       - "6379:6379"

package-lock.json

@@ -33,7 +33,7 @@
     "prisma": "6.19.0",
     "tsx": "4.20.6",
     "typescript": "5.9.3",
-    "typescript-eslint": "8.46.4",
+    "typescript-eslint": "8.47.0",
     "vitest": "3.2.4"
   }
 }

package.json

@@ -27,7 +27,7 @@ COPY --from=root packages/common/ /common
 RUN npm install -g npm && npm ci && npm run build && rm dist/*.tsbuildinfo
 
 # Production image --------------
-FROM docker.io/node:24.11.0-bookworm-slim@sha256:76d0ed0ed93bed4f4376211e9d8fddac4d8b3fbdb54cc45955696001a3c91152 AS runner
+FROM docker.io/node:24.11.1-bookworm-slim@sha256:0afb7822fac7bf9d7c1bf3b6e6c496dee6b2b64d8dfa365501a3c68e8eba94b2 AS runner
 WORKDIR /app
 
 LABEL org.opencontainers.image.authors="8 Hobbies, LLC"