diff --git a/.config/fleet/pnpm-workspace.fleet.yaml b/.config/fleet/pnpm-workspace.fleet.yaml
index 6adbad4b3..6fa2cefe1 100644
--- a/.config/fleet/pnpm-workspace.fleet.yaml
+++ b/.config/fleet/pnpm-workspace.fleet.yaml
@@ -53,7 +53,7 @@ catalog:
   # .claude/skills/fleet/property-and-fuzz-testing.
   'fast-check': 4.9.0
   'magic-string': 1.1.0
-  'markdownlint-cli2': 0.23.1
+  'markdownlint-cli2': 0.23.2
   'mdast-util-from-markdown': 2.0.3
   'micromark': 4.0.2
   'neosanitize': 0.3.0
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 073f90441..a4faa6b37 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -33,8 +33,8 @@ pmOnFail: warn
 catalog:
   '@shadscan/cli': 0.5.0
   '@ultrathink/acorn.rs.wasm': 0.1.1
-  'brace-expansion': 5.0.7
-  'browserslist': 4.28.6
+  'brace-expansion': 5.0.8
+  'browserslist': 4.28.7
   'c8': 12.0.0
   'cacache': 20.0.4
   'chrome-devtools-mcp': 1.6.0
@@ -54,7 +54,7 @@ catalog:
   'fast-check': 4.9.0
   'fast-glob': 3.3.3
   'fast-sort': 3.4.1
-  'fs-extra': 11.3.6
+  'fs-extra': 11.4.0
   'get-east-asian-width': 1.6.0
   'globals': 16.5.0
   'iconv-lite': 0.6.3
@@ -78,9 +78,9 @@ catalog:
   'spdx-expression-parse': 4.0.0
   'streaming-iterables': 8.0.1
   'svgo': 4.0.2
-  'tar': 7.5.20
+  'tar': 7.5.22
   'trash': 10.1.1
-  'type-coverage': 2.29.7
+  'type-coverage': 2.30.1
   'typescript-eslint': 8.65.0
   'update-browserslist-db': 1.2.3
   'validate-npm-package-name': 6.0.2
@@ -93,9 +93,9 @@ catalog:
   '@babel/parser': 7.29.7
   '@babel/traverse': 7.29.7
   '@babel/types': 7.29.7
-  '@biomejs/biome': 2.5.4
+  '@biomejs/biome': 2.5.5
   '@biomejs/js-api': 3.0.0
-  '@biomejs/wasm-nodejs': 2.5.4
+  '@biomejs/wasm-nodejs': 2.5.5
   '@eslint/compat': 1.4.1
   '@eslint/js': 9.39.5
   '@inquirer/checkbox': 4.3.2
@@ -158,7 +158,7 @@ catalog:
   'comptime': 0.1.0
   'html5parser': 3.0.0
   'magic-string': 1.1.0
-  'markdownlint-cli2': 0.23.1
+  'markdownlint-cli2': 0.23.2
   'mdast-util-from-markdown': 2.0.3
   'micromark': 4.0.2
   # nock 14.0.15 — HTTP mocking for tests (disableNetConnect() + stubs). The