Bump deps addressing Trivy vulns

[ZIJ]

Trivy report after:

Trivy report before:

Screen.Recording.2025-11-12.at.13.34.38.mov

🧠 AI Assistance Disclosure Policy

Important

Inspired by ghostty.
If you used any AI assistance while contributing to Digger, you must disclose it in this PR.

---

✅ AI Disclosure Checklist

• I understand that all AI assistance must be disclosed.
• I did not use AI tools in this contribution.
• I used AI tools and have disclosed details below.

Details (if applicable):

codex for bumping deps one by one

---

💡 Notes

• Trivial auto-completions (single words, short phrases) don’t need disclosure.
• Contributors must understand and take responsibility for any AI-assisted code.
• Failure to disclose is considered disrespectful to maintainers and may delay review.