Close six advisories without walking a version backwards

npm audit reported six, five of them undici reached through miniflare
and wrangler, and its own suggested fix was to install wrangler 4.35.0
— eighty releases behind where we are. Taking a downgrade as a security
fix would have traded a real advisory for a year of missing fixes.

undici 7.29.0 is out and sits above the vulnerable range, so an
override pins it there and every dependency keeps moving forward. The
sixth, fast-uri, took the ordinary fix.

Worth being precise about the exposure: undici is build and dev
tooling. The deployed bundle was checked and does not contain a byte of
it — Workers run on workerd with its own fetch. This was never
reachable from the live site, which makes it worth fixing calmly rather
than not worth fixing.

Alongside: astro 7.1.6, @astrojs/cloudflare 14.1.7, wrangler 4.118.0,
workers-types, tsx and playwright-core. TypeScript stays on 6; a major
there is its own piece of work, not a tail on this one.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Author: sametbasbug

package-lock.json

@@ -63,22 +63,25 @@
     "orbit:publish": "node scripts/orbit-publish.mjs"
   },
   "dependencies": {
-    "@astrojs/cloudflare": "14.1.6",
+    "@astrojs/cloudflare": "14.1.7",
     "@astrojs/rss": "^4.0.19",
     "@astrojs/sitemap": "3.7.3",
-    "astro": "7.1.5",
+    "astro": "7.1.6",
     "gray-matter": "^4.0.3",
     "micromark": "^4.0.2",
     "uuid": "14.0.1"
   },
   "devDependencies": {
     "@astrojs/check": "0.9.10",
-    "@cloudflare/workers-types": "5.20260729.1",
+    "@cloudflare/workers-types": "5.20260804.1",
     "@hyperjump/json-schema": "1.17.7",
-    "playwright-core": "^1.62.0",
+    "playwright-core": "^1.62.1",
     "sharp": "^0.35.3",
-    "tsx": "4.23.1",
+    "tsx": "4.23.5",
     "typescript": "6.0.3",
-    "wrangler": "4.115.0"
+    "wrangler": "4.118.0"
+  },
+  "overrides": {
+    "undici": "^7.29.0"
   }
 }