chore: pin all dependencies to exact versions

Remove ^ ranges from all dependencies, optionalDependencies, and
devDependencies. Lockfile ensures reproducible installs.

package.json

@@ -45,31 +45,31 @@
     "url": "https://github.com/tobi/qmd/issues"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.25.1",
-    "better-sqlite3": "^12.4.5",
-    "fast-glob": "^3.3.0",
-    "node-llama-cpp": "^3.17.1",
-    "picomatch": "^4.0.0",
-    "sqlite-vec": "^0.1.7-alpha.2",
+    "@modelcontextprotocol/sdk": "1.29.0",
+    "better-sqlite3": "12.8.0",
+    "fast-glob": "3.3.3",
+    "node-llama-cpp": "3.18.1",
+    "picomatch": "4.0.4",
+    "sqlite-vec": "0.1.9",
     "web-tree-sitter": "0.26.7",
-    "yaml": "^2.8.2",
+    "yaml": "2.8.3",
     "zod": "4.2.1"
   },
   "optionalDependencies": {
-    "sqlite-vec-darwin-arm64": "^0.1.7-alpha.2",
-    "sqlite-vec-darwin-x64": "^0.1.7-alpha.2",
-    "sqlite-vec-linux-arm64": "^0.1.7-alpha.2",
-    "sqlite-vec-linux-x64": "^0.1.7-alpha.2",
-    "sqlite-vec-windows-x64": "^0.1.7-alpha.2",
+    "sqlite-vec-darwin-arm64": "0.1.9",
+    "sqlite-vec-darwin-x64": "0.1.9",
+    "sqlite-vec-linux-arm64": "0.1.9",
+    "sqlite-vec-linux-x64": "0.1.9",
+    "sqlite-vec-windows-x64": "0.1.9",
     "tree-sitter-go": "0.23.4",
     "tree-sitter-python": "0.23.4",
     "tree-sitter-rust": "0.24.0",
     "tree-sitter-typescript": "0.23.2"
   },
   "devDependencies": {
-    "@types/better-sqlite3": "^7.6.0",
-    "tsx": "^4.0.0",
-    "vitest": "^3.2.4"
+    "@types/better-sqlite3": "7.6.13",
+    "tsx": "4.21.0",
+    "vitest": "3.2.4"
   },
   "pnpm": {
     "onlyBuiltDependencies": [

pnpm-lock.yaml

@@ -9,22 +9,22 @@ importers:
   .:
     dependencies:
       '@modelcontextprotocol/sdk':
-        specifier: ^1.25.1
+        specifier: 1.29.0
         version: 1.29.0(zod@4.2.1)
       better-sqlite3:
-        specifier: ^12.4.5
+        specifier: 12.8.0
         version: 12.8.0
       fast-glob:
-        specifier: ^3.3.0
+        specifier: 3.3.3
         version: 3.3.3
       node-llama-cpp:
-        specifier: ^3.17.1
+        specifier: 3.18.1
         version: 3.18.1(typescript@5.9.3)
       picomatch:
-        specifier: ^4.0.0
+        specifier: 4.0.4
         version: 4.0.4
       sqlite-vec:
-        specifier: ^0.1.7-alpha.2
+        specifier: 0.1.9
         version: 0.1.9
       typescript:
         specifier: ^5.9.3
@@ -33,36 +33,36 @@ importers:
         specifier: 0.26.7
         version: 0.26.7
       yaml:
-        specifier: ^2.8.2
+        specifier: 2.8.3
         version: 2.8.3
       zod:
         specifier: 4.2.1
         version: 4.2.1
     devDependencies:
       '@types/better-sqlite3':
-        specifier: ^7.6.0
+        specifier: 7.6.13
         version: 7.6.13
       tsx:
-        specifier: ^4.0.0
+        specifier: 4.21.0
         version: 4.21.0
       vitest:
-        specifier: ^3.2.4
+        specifier: 3.2.4
         version: 3.2.4(@types/node@25.5.2)(tsx@4.21.0)(yaml@2.8.3)
     optionalDependencies:
       sqlite-vec-darwin-arm64:
-        specifier: ^0.1.7-alpha.2
+        specifier: 0.1.9
         version: 0.1.9
       sqlite-vec-darwin-x64:
-        specifier: ^0.1.7-alpha.2
+        specifier: 0.1.9
         version: 0.1.9
       sqlite-vec-linux-arm64:
-        specifier: ^0.1.7-alpha.2
+        specifier: 0.1.9
         version: 0.1.9
       sqlite-vec-linux-x64:
-        specifier: ^0.1.7-alpha.2
+        specifier: 0.1.9
         version: 0.1.9
       sqlite-vec-windows-x64:
-        specifier: ^0.1.7-alpha.2
+        specifier: 0.1.9
         version: 0.1.9
       tree-sitter-go:
         specifier: 0.23.4