Bump nodemailer, vitest and two transitive packages within their majors (#388)

nodemailer 9.0.1 to 9.1.1, vitest and @vitest/coverage-v8 4.1.9 to 4.1.11 (which moves
vite and rolldown along), hono 4.13.0 to 4.13.7 and js-yaml 4.3.1 to 4.3.2 under the
shadcn CLI. npm audit reports nothing after this; no major version changes.

package.json

@@ -59,7 +59,7 @@
     "next-intl": "^4.14.2",
     "next-themes": "^0.4.6",
     "next-ws": "^2.2.14",
-    "nodemailer": "^9.0.1",
+    "nodemailer": "^9.1.1",
     "openai": "^6.27.0",
     "papaparse": "^5.7.0",
     "pdf-lib": "^1.17.1",
@@ -104,7 +104,7 @@
     "@types/react-dom": "^19",
     "@types/smtp-server": "^3.5.13",
     "@types/ws": "^8.18.1",
-    "@vitest/coverage-v8": "^4.1.9",
+    "@vitest/coverage-v8": "^4.1.11",
     "jsdom": "^30.0.1",
     "mailparser": "^3.9.23",
     "shadcn": "^4.16.2",
@@ -114,7 +114,7 @@
     "tw-animate-css": "^1.4.0",
     "typescript": "^5",
     "unpdf": "^1.8.1",
-    "vitest": "^4.1.9"
+    "vitest": "^4.1.11"
   },
   "overrides": {
     "fast-xml-parser": ">=5.3.6",