chore: update dependencies

[dobby-coder]

Security vulnerabilities (fix first)

None — `npm audit` returned 0 vulnerabilities across 181 dependencies.

Outdated packages

Package	Current	Latest	Bump type	Notes
libphonenumber-js	1.13.6	1.13.7	patch	prod dependency
vitest	4.1.7	4.1.9	patch	dev dependency

Worker instructions

1. CVEs first (all in one PR, severity order) — none this cycle, skip.

2. Update patch/minor packages together: bump `libphonenumber-js` to `^1.13.7` and `vitest` to `^4.1.9` in `package.json`, run `npm install`, then build + test.

3. Major bumps individually (none this cycle).

4. Open a DRAFT PR titled "chore: update dependencies", add reviewer rubenhensen, and include the line:

   Closes #<this issue number>
   

5. Monitor CI; fix any failures; when CI is green run `gh pr ready`.

[dobby-coder]

/dobby

[dobby-coder]

Dobby looked at this but isn't routing it anywhere: Event is a bare /dobby comment from the bot itself with no actionable content or flags If that's wrong, ping Dobby again or be explicit with /dobby review, /dobby fix, or /dobby ask.

[dobby-coder]

Dobby looked at this but isn't routing it anywhere: This is Dobbys own bot comment with no actionable content or flags just a self-referential routing notice If that's wrong, ping Dobby again or be explicit with /dobby review, /dobby fix, or /dobby ask.

[dobby-coder]

/dobby fix — Apply the patch dependency updates listed in this issue (libphonenumber-js 1.13.6→1.13.7, vitest 4.1.7→4.1.9) per the worker instructions in the issue body. Run the full test suite and open a draft PR.

[dobby-coder]

On it! I'''ll apply the dependency patch updates and open a draft PR for #141, then run it through review before marking it ready.

[dobby-coder]

Reviewed PR #149 (patch bump: libphonenumber-js → 1.13.8, vitest → 4.1.10) and it's clean — both deps are actually used, the title follows conventional commits, it closes #141 properly, and typecheck/build/tests all pass (212/212 on vitest 4.1.10). No findings, so I've marked it ready for review.