feat: update dependencies (#1076)

Breaking changes that don't affect us:
- `npm-package-arg` and `which` require Node.js `^18.17.0 || >=20.5.0`
- `supports-color` requires at least Node.js 18

package.json

@@ -34,38 +34,38 @@
   },
   "license": "MIT",
   "dependencies": {
-    "async": "^3.2.5",
-    "bl": "^6.0.14",
-    "chalk": "^5.3.0",
+    "async": "^3.2.6",
+    "bl": "^6.0.16",
+    "chalk": "^5.4.0",
     "columnify": "^1.6.0",
-    "execa": "^9.3.0",
+    "execa": "^9.5.2",
     "lodash": "^4.17.21",
     "normalize-git-url": "^3.0.2",
-    "npm-package-arg": "^11.0.2",
+    "npm-package-arg": "^12.0.1",
     "npm-which": "^3.0.1",
-    "pnpm": "^9.5.0",
-    "read-package-json": "^7.0.0",
+    "pnpm": "^9.15.1",
+    "read-package-json": "^7.0.1",
     "root-check": "^2.0.0",
     "semver": "^7.6.3",
     "strip-ansi": "^7.1.0",
-    "supports-color": "^9.4.0",
-    "tar": "^7.4.0",
+    "supports-color": "^10.0.0",
+    "tar": "^7.4.3",
     "uid-number": "0.0.6",
-    "undici": "^6.19.2",
-    "which": "^4.0.0",
-    "winston": "^3.13.1",
-    "xml-sanitizer": "^2.0.1",
+    "undici": "^6.21.0",
+    "which": "^5.0.0",
+    "winston": "^3.17.0",
+    "xml-sanitizer": "^2.0.2",
     "xmlbuilder": "^15.1.1",
     "yargs": "^17.7.2",
     "yarn": "^1.22.22"
   },
   "devDependencies": {
-    "@eslint/js": "^9.7.0",
-    "ansi-regex": "^6.0.1",
-    "eslint": "^9.7.0",
+    "@eslint/js": "^9.17.0",
+    "ansi-regex": "^6.1.0",
+    "eslint": "^9.17.0",
     "eslint-config-prettier": "^9.1.0",
-    "globals": "^15.8.0",
-    "prettier": "^3.3.3",
+    "globals": "^15.14.0",
+    "prettier": "^3.4.2",
     "string-to-stream": "^3.0.1",
     "tap": "^20.0.3",
     "tap-parser": "^17.0.0",