chore(deps): pin dependencies (#19)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@types/cors](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cors) ([source](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/cors)) | devDependencies | pin | [`^2.8.19` → `2.8.19`](https://renovatebot.com/diffs/npm/@types%2fcors/2.8.19/2.8.19) |
| [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/express) ([source](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express)) | devDependencies | pin | [`^5.0.3` → `5.0.6`](https://renovatebot.com/diffs/npm/@types%2fexpress/5.0.6/5.0.6) |
| [@typescript-eslint/eslint-plugin](https://typescript-eslint.io/packages/eslint-plugin) ([source](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin)) | devDependencies | pin | [`^8.37.0` → `8.55.0`](https://renovatebot.com/diffs/npm/@typescript-eslint%2feslint-plugin/8.55.0/8.55.0) |
| [@typescript-eslint/parser](https://typescript-eslint.io/packages/parser) ([source](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)) | devDependencies | pin | [`^8.37.0` → `8.55.0`](https://renovatebot.com/diffs/npm/@typescript-eslint%2fparser/8.55.0/8.55.0) |
| [actions/setup-node](https://github.com/actions/setup-node) | action | pinDigest |  → `a0853c2` |
| [cspell](https://cspell.org/) ([source](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell)) | devDependencies | pin | [`^9.1.5` → `9.6.4`](https://renovatebot.com/diffs/npm/cspell/9.6.4/9.6.4) |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | action | pinDigest |  → `8d2750c` |
| [eslint](https://eslint.org) ([source](https://github.com/eslint/eslint)) | devDependencies | pin | [`^9.31.0` → `9.39.2`](https://renovatebot.com/diffs/npm/eslint/9.39.2/9.39.2) |
| [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | devDependencies | pin | [`^2.32.0` → `2.32.0`](https://renovatebot.com/diffs/npm/eslint-plugin-import/2.32.0/2.32.0) |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | devDependencies | pin | [`^5.5.1` → `5.5.5`](https://renovatebot.com/diffs/npm/eslint-plugin-prettier/5.5.5/5.5.5) |
| [eslint-plugin-security](https://github.com/eslint-community/eslint-plugin-security) | devDependencies | pin | [`^3.0.1` → `3.0.1`](https://renovatebot.com/diffs/npm/eslint-plugin-security/3.0.1/3.0.1) |
| [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) | devDependencies | pin | [`^61.0.0` → `61.0.2`](https://renovatebot.com/diffs/npm/eslint-plugin-unicorn/61.0.2/61.0.2) |
| [typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint) ([source](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)) | devDependencies | pin | [`^8.37.0` → `8.55.0`](https://renovatebot.com/diffs/npm/typescript-eslint/8.55.0/8.55.0) |

⚠️ Renovate's pin functionality [does not currently](https://github.com/renovatebot/renovate/issues/40288) wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41LjQiLCJ1cGRhdGVkSW5WZXIiOiI0My41LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImFjdGlvbiIsImRlcHMiXX0=-->

Reviewed-on: https://gitea.t000-n.de/t.behrendt/outline-mcp/pulls/19
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

.gitea/workflows/cd.yaml

@@ -48,7 +48,7 @@ jobs:
     if: ${{ needs.check-changes.outputs.changes == 'true' }}
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: docker/setup-buildx-action@v3
+      - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
       - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
         with:
           registry: ${{ env.DOCKER_REGISTRY }}

.gitea/workflows/ci.yaml

@@ -15,7 +15,7 @@ jobs:
         with:
           bun-version-file: ".bun-version"
       # only required for cspell compatibility until a mature replacement is available
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
         with:
           node-version: 24
       - run: bun install --frozen-lockfile