build(deps): Go 1.27.0, and the dev dependencies catch up

axe-core/playwright 4.13.0, jsdom 30.0.1, npm-check-updates 23.1.0 — the
only three of the tree that were behind; Playwright itself and the rest
already sit on latest, and the audit stays at zero vulnerabilities. The
fsevents install script is approved and pinned, which the newer npm now
requires in so many words.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: Vonng

go.mod

@@ -1,5 +1,5 @@
 module github.com/pgsty/oink.pgsty.com
 
-go 1.26.6
+go 1.27.0
 
 require github.com/pgsty/oink v0.7.1

package-lock.json

@@ -51,17 +51,20 @@
     "update:packages": "npx npm-check-updates -u"
   },
   "devDependencies": {
-    "@axe-core/playwright": "^4.12.1",
+    "@axe-core/playwright": "^4.13.0",
     "@playwright/test": "^1.62.1",
     "afdocs": "^0.20.0",
     "cross-env": "^10.1.0",
-    "jsdom": "^29.1.1",
-    "npm-check-updates": "^19.6.3",
+    "jsdom": "^30.0.1",
+    "npm-check-updates": "^23.1.0",
     "rtlcss": "^4.3.0"
   },
   "engines": {
     "node": ">=24",
     "npm": ">=11.16.0"
   },
-  "cSpell:ignore": "- favicons goldens -"
+  "cSpell:ignore": "- favicons goldens -",
+  "allowScripts": {
+    "fsevents@2.3.2": true
+  }
 }