chore: patch deps, CSP style nonces, otplib 13, and PR CI

Co-authored-by: Cursor <[email protected]>

package.json

@@ -31,7 +31,7 @@
 		"@prisma/adapter-mariadb": "^7.9.0",
 		"@prisma/client": "^7.9.0",
 		"@sentry/nextjs": "^10.67.0",
-		"@tanstack/react-virtual": "^3.14.6",
+		"@tanstack/react-virtual": "^3.14.7",
 		"bcrypt": "^6.0.0",
 		"class-variance-authority": "^0.7.1",
 		"clsx": "^2.1.1",
@@ -47,18 +47,18 @@
 		"lucide-react": "^1.25.0",
 		"lzma": "^2.3.2",
 		"music-metadata": "^11.14.0",
-		"mysql2": "^3.23.0",
+		"mysql2": "^3.23.1",
 		"next": "^16.2.11",
 		"next-auth": "5.0.0-beta.32",
 		"next-intl": "^4.13.3",
 		"next-view-transitions": "^0.3.5",
 		"nodemailer": "^7.0.13",
-		"otplib": "^12.0.1",
+		"otplib": "^13.4.1",
 		"pino": "^10.3.1",
 		"react": "^19.2.8",
 		"react-dom": "^19.2.8",
-		"react-hook-form": "^7.81.0",
-		"resend": "^6.17.2",
+		"react-hook-form": "^7.82.0",
+		"resend": "^6.18.0",
 		"sanitize-html": "^2.17.6",
 		"server-only": "^0.0.1",
 		"sharp": "^0.35.3",
@@ -68,7 +68,7 @@
 		"zod": "^4.4.3"
 	},
 	"devDependencies": {
-		"@biomejs/biome": "2.5.4",
+		"@biomejs/biome": "2.5.5",
 		"@next/bundle-analyzer": "^16.2.11",
 		"@tailwindcss/forms": "^0.5.11",
 		"@tailwindcss/postcss": "^4.3.3",
@@ -83,7 +83,7 @@
 		"dotenv": "^16.4.0",
 		"knip": "^6.27.0",
 		"pino-pretty": "^13.1.3",
-		"postcss": "^8.5.19",
+		"postcss": "^8.5.21",
 		"prisma": "^7.9.0",
 		"tailwindcss": "^4.3.3",
 		"tsx": "^4.23.1",