chore(deps): roll up Dependabot updates (#994)

## Summary

Roll up the remaining net changes from the open Dependabot updates:

- release-drafter/release-drafter 7.7.0 (#990)
- github/codeql-action 4.37.4 (#987, #988, #989)
- zizmorcore/zizmor-action 0.6.1 (#986)
- @actions/cache 6.2.0 (#975)
- @biomejs/biome 2.5.4 (#974)
- undici 8.7.0 (#973)

The Jest 30.4.2 (#905) and @renovatebot/pep440 5.0.0 (#907) updates are
already present on main and require no additional changes.

This also updates the Biome schema, applies the formatter changes from
Biome 2.5.4, and regenerates the published bundles.

## Testing

- `npm run all`
- `actionlint`
- `git diff --check`

Refs: pi-session 019ff01b-f917-73c1-950e-2966956f263c

__tests__/utils/inputs.test.ts

@@ -100,24 +100,23 @@ describe("loadInputs", () => {
     expect(inputs.resolutionStrategy).toBe("highest");
   });
 
-  it.each([
-    "pull_request_target",
-    "workflow_run",
-    "release",
-  ])("disables automatic caching for the %s event", (eventName) => {
-    mockInputs["working-directory"] = "/workspace";
-    mockInputs["enable-cache"] = "auto";
-    process.env.RUNNER_ENVIRONMENT = "github-hosted";
-    process.env.RUNNER_TEMP = "/runner-temp";
-    process.env.GITHUB_EVENT_NAME = eventName;
+  it.each(["pull_request_target", "workflow_run", "release"])(
+    "disables automatic caching for the %s event",
+    (eventName) => {
+      mockInputs["working-directory"] = "/workspace";
+      mockInputs["enable-cache"] = "auto";
+      process.env.RUNNER_ENVIRONMENT = "github-hosted";
+      process.env.RUNNER_TEMP = "/runner-temp";
+      process.env.GITHUB_EVENT_NAME = eventName;
 
-    const inputs = loadInputs();
+      const inputs = loadInputs();
 
-    expect(inputs.enableCache).toBe(false);
-    expect(mockInfo).toHaveBeenCalledWith(
-      `Caching is disabled for the ${eventName} event`,
-    );
-  });
+      expect(inputs.enableCache).toBe(false);
+      expect(mockInfo).toHaveBeenCalledWith(
+        `Caching is disabled for the ${eventName} event`,
+      );
+    },
+  );
 
   it("disables automatic caching for tag pushes", () => {
     mockInputs["working-directory"] = "/workspace";