chore(docs): bump Blume to 1.4.2

.github/workflows/ci.yml

@@ -251,10 +251,11 @@ jobs:
         uses: ./.github/actions/setup
 
       - name: bun audit (block on high/critical)
+        # Blume's image-size has no patched release yet — ignore those GHSAs until one ships.
         run: |
           set +e
           # bun emits ANSI color even when piped — strip it or the severity grep misses it.
-          NO_COLOR=1 bun audit 2>&1 | sed -E 's/\x1b\[[0-9;]*m//g' > /tmp/bun-audit.log
+          NO_COLOR=1 bun audit --ignore=GHSA-w3rx-r6r6-pgpr --ignore=GHSA-5p2g-fcmc-qvqq 2>&1 | sed -E 's/\x1b\[[0-9;]*m//g' > /tmp/bun-audit.log
           cat /tmp/bun-audit.log
           if grep -E '(^|[[:space:]])(high|critical):[[:space:]]' /tmp/bun-audit.log; then
             echo "::error::high or critical vulnerabilities found — blocking"

apps/docs/package.json

@@ -11,6 +11,6 @@
     "validate": "bun scripts/validate.ts"
   },
   "dependencies": {
-    "blume": "1.3.1"
+    "blume": "1.4.2"
   }
 }