Bump open dependency updates together #12

Copilot, please update all the packages listed below to the listed target versions in a single PR with a single commit.

• Make no other changes beyond the version updates (and the lockfile changes they require, if any).
• Never downgrade: if the default branch already has a version equal to or newer than the target, leave that reference as is.
• Keep the build and tests green.
• In the PR description, mention that it supersedes the Dependabot PRs listed below (Bump Readme from 1.2.1 to 1.2.2 #11).