chore(deps): bump shiki from 3.22.0 to 4.3.0

[dependabot]

Bumps shiki from 3.22.0 to 4.3.0.

Release notes

Sourced from shiki's releases.

v4.3.0

   🚀 Features

• stream: Add svelte renderer  -  by @​CNSeniorious000 and Anthony Fu (via agent) in shikijs/shiki#1291 (2d18a)

    View changes on GitHub

v4.2.0

   🚀 Features

• Add @​shikijs/stream and @​shikijs/magic-move packages  -  by @​antfu in shikijs/shiki#1283 (d031f)

   🐞 Bug Fixes

• transformers: Handle YAML comment prefixes correctly for v3  -  by @​AkaHarshit in shikijs/shiki#1266 (f694a)
• vitepress-twoslash: Scroll blocking on mobile viewports  -  by @​micaiguai in shikijs/shiki#1262 (9e0e8)

    View changes on GitHub

v4.1.0

   🐞 Bug Fixes

• twoslash: Forward tsModule to createTwoslasher  -  by @​arthurfiorette in shikijs/shiki#1271 (be89a)

    View changes on GitHub

v4.0.2

   🐞 Bug Fixes

• Support ANSI language with multiple themes  -  by @​dan-lee in shikijs/shiki#1259 (2a232)

    View changes on GitHub

v4.0.1

   🐞 Bug Fixes

• Try fix dts bundle, thanks @​sxzz  -  by @​antfu (1f26c)

    View changes on GitHub

v4.0.0

   🚨 Breaking Changes

• Drop Node v18 support, remove deprecated APIs  -  by @​antfu in shikijs/shiki#1249 (cdca9)

   🚀 Features

• A leaner @shikijs/primitive package  -  by @​antfu in shikijs/shiki#1251 (05a77)
• New @shikijs/markdown-exit package  -  by @​antfu (d1257)

... (truncated)

Commits

• e3cf080 chore: release v4.3.0
• 1d56dae chore: release v4.2.0
• c809af9 chore: release v4.1.0
• 95371cb chore: lint
• 7a1007d chore: release v4.0.2
• ef42a16 chore: update deps
• 2a23230 fix: support ANSI language with multiple themes (#1259)
• 69bec64 chore: release v4.0.1
• 2060ca8 chore: update deps
• 32f35b5 chore: release v4.0.0
• Additional commits viewable in compare view

[hasparus]

CI is green on all functional checks (lint, typecheck, build, Playwright e2e all pass). The only failing job step is Deploy Preview to Vercel (deploy.mjs: missing --token), which fails identically on every open Dependabot PR because secrets.VERCEL_TOKEN isn't available in pull_request runs triggered by dependabot — a pre-existing CI gap unrelated to this dependency bump. Approving and merging.

---

Generated by Claude Code

[hasparus]

·@·d·ependabot r·ebase

---

Generated by Claude Code

[hasparus]

CI was failing on build-and-deploy with deploy.mjs: missing --token, unrelated to this dependency bump. Root cause: Dependabot PRs run from a branch in this repo (not a fork), so the "fork-only" guard on the Vercel preview-deploy step let the step run — but GitHub withholds repository secrets from dependabot[bot]-authored runs, so VERCEL_TOKEN was empty.

Pushed a fix that also excludes github.actor == 'dependabot[bot]' from the "trusted" condition (matching the pattern already used for OG_IMAGE_SECRET), so build/lint/typecheck/test still run but the deploy/lighthouse steps are skipped until a maintainer labels the PR trusted. Re-running CI now.

---

Generated by Claude Code