Merge remote-tracking branch 'origin/master' into feat/multi-unofficial-runs

Resolves conflict in packages/db/src/etl/normalizers.ts: master's #294
simplified hwToGpuKey to split('-')[0], which subsumes the explicit
-cw suffix strip from this branch's 5117bff. Took master's version;
the -cw test case is preserved in normalizers.test.ts.

Co-authored-by: Bryan Shan <Oseltamivir@users.noreply.github.com>

Author: github-actions[bot]

.github/dependabot.yml

@@ -7,7 +7,7 @@ updates:
       day: 'monday'
     open-pull-requests-limit: 2
     labels:
-      - 'dependencies'
+      - 'type/dependencies'
     commit-message:
       prefix: 'chore'
     groups:
@@ -30,7 +30,7 @@ updates:
       day: 'monday'
     open-pull-requests-limit: 2
     labels:
-      - 'dependencies'
+      - 'type/dependencies'
     commit-message:
       prefix: 'chore'
     groups:

.github/workflows/cache-refresh.yml

@@ -11,8 +11,8 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: pnpm/action-setup@078e9d416474b29c0c387560859308974f7e9c53 # v6.0.1
-      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+      - uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: '24'
           cache: pnpm