Bump @types/bun, transformers, marked and two CI actions to patch releases (#4202)

@types/bun 1.4.3 -> 1.4.4, @huggingface/transformers 4.3.1 -> 4.3.2 and
marked 18.1.1 -> 18.1.3 (package.json and bun.lock), docker/login-action
4.6.0 -> 4.7.0 and github/codeql-action/upload-sarif 4.39.0 -> 4.39.1,
each pinned to the full SHA of its upstream tag. Rebuilt on current main
from Dependabot's #3488, #3489 and #3890.

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

package.json

@@ -70,13 +70,13 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.78.0",
-    "@huggingface/transformers": "^4.3.1",
+    "@huggingface/transformers": "^4.3.2",
     "@ngrok/ngrok": "^1.7.0",
     "cross-spawn": "^7.0.6",
     "diff": "^9.0.0",
     "html-to-docx": "1.8.0",
     "html-to-vdom": "0.7.0",
-    "marked": "^18.1.1",
+    "marked": "^18.1.3",
     "playwright": "^1.65.0",
     "sharp": "^0.35.4",
     "socks": "^2.8.10",
@@ -98,7 +98,7 @@
   ],
   "devDependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.2.141",
-    "@types/bun": "1.4.3",
+    "@types/bun": "1.4.4",
     "prettier": "3.9.10",
     "typescript": "7.0.2"
   },