build(deps): combined dependency updates

[slisson]

Combines all newly opened Dependabot PRs whose checks passed, each cherry-picked as its own commit:

• build(deps): bump org.jetbrains.kotlinx:kotlinx-collections-immutable from 0.5.1 to 0.5.2 #214 kotlinx-collections-immutable 0.5.1 → 0.5.2
• build(deps): bump kotlinBenchmark from 0.4.17 to 0.5.0 #215 kotlinBenchmark 0.4.17 → 0.5.0
• build(deps): bump actions/setup-python from 6.3.0 to 7.0.0 #216 actions/setup-python 6.3.0 → 7.0.0
• build(deps): bump @semantic-release/changelog from 6.0.3 to 7.0.0 #217 @semantic-release/changelog 6.0.3 → 7.0.0
• build(deps): bump actions/setup-java from 5 to 6 #218 actions/setup-java 5 → 6
• build(deps): bump @commitlint/cli from 21.2.1 to 21.2.3 #219 @commitlint/cli 21.2.1 → 21.2.3
• build(deps): bump actions/checkout from 7.0.0 to 7.0.1 #220 actions/checkout 7.0.0 → 7.0.1
• build(deps): bump @semantic-release/git from 10.0.1 to 11.0.1 #221 @semantic-release/git 10.0.1 → 11.0.1
• build(deps): bump @commitlint/config-conventional from 21.2.0 to 21.2.3 #222 @commitlint/config-conventional 21.2.0 → 21.2.3
• build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 #223 actions/setup-node 6.4.0 → 7.0.0
• build(deps): bump semantic-release from 25.0.6 to 25.0.9 #224 semantic-release 25.0.6 → 25.0.9

The only conflicts were version bumps on adjacent lines (package.json, and the workflow files for #223). All bumps were kept. For #221, #222 and #224, package-lock.json was regenerated with npm install --package-lock-only.

Not included:

• build(deps): bump picomatch from 2.3.1 to 2.3.2 #166, build(deps): bump io.github.oshai:kotlin-logging from 7.0.14 to 8.0.4 #188, build(deps): bump undici from 6.24.1 to 6.27.0 #196, build(deps): bump tar and npm #199, build(deps): bump js-yaml from 4.3.0 to 4.3.2 #200, build(deps): bump actions/cache from 5.0.4 to 6.1.0 #202, build(deps): bump gradle-wrapper from 9.4.1 to 9.6.1 #205, build(deps): bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.38 #210, plus the conflicting build(deps): bump fast-uri from 3.1.0 to 3.1.2 #179 and build(deps): bump kotlinCoroutines from 1.10.2 to 1.11.0 #180: already merged into master via build(deps): combined dependency updates #213.
• build(deps): bump kotlin from 2.2.21 to 2.4.0 #192 (kotlin 2.4.0) and build(deps): bump minimatch and semantic-release #157 (minimatch and semantic-release): checks failing.

🤖 Generated with Claude Code