chore: sweep dependabot updates and align Node 25 (#329)

* chore: sweep dependabot updates

* fix: narrow optional browser Buffer typing

* chore: align repo node pins to v25

.github/workflows/harness-drift-report.yml

@@ -9,7 +9,7 @@ permissions:
   contents: read
 
 env:
-  NODE_VERSION: 22
+  NODE_VERSION: 25
 
 jobs:
   drift-report:
@@ -37,7 +37,7 @@ jobs:
         run: cat tmp/repo-drift-report.md >> "$GITHUB_STEP_SUMMARY"
 
       - name: Upload report artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: repo-drift-report
           path: tmp/repo-drift-report.md