chore(deps): combined dependency bumps (#8297, #8242, #8299) (#8304)

Combines three open dependency-bump PRs into one branch, plus the one
code fix the bumps require.

## Included

| Source PR | Change |
|-----------|--------|
| #8297 | shell-quote 1.8.3 → 1.8.4 (transitive) |
| #8242 | fast-uri 3.1.0 → 3.1.2 (transitive) |
| #8299 | @netlify/build → 35.15.0, @netlify/zip-it-and-ship-it → 14.7.1
|

## Required follow-on fix

- **`netlify-function.ts`**: removed a now-obsolete `@ts-expect-error`.
The @netlify/build bump ships the updated `@netlify/config` type, so the
previously-suppressed error no longer occurs (TS2578).

## Scope notes

- **#7701** (`@vitest/eslint-plugin` 1.3.20) was split out into its own
PR (#8305) and is **no longer part of this branch**.
- **#8288** (vitest 4) is intentionally excluded — it's blocked by an
`@opentelemetry/api` peer conflict that fails install without
`legacy-peer-deps`, and needs a separate decision.

## Verification

Local (Node 24): `format:check`, `lint`, `typecheck` pass; **373/373
unit tests pass**. Integration/e2e not run locally (need auth token /
network / Git LFS).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: jaredm563 <jared.mumaw@netlify.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: 5 people

package-lock.json

@@ -59,7 +59,7 @@
     "@netlify/ai": "^0.4.1",
     "@netlify/api": "^14.0.19",
     "@netlify/blobs": "^10.7.9",
-    "@netlify/build": "^35.13.9",
+    "@netlify/build": "^35.15.0",
     "@netlify/build-info": "^10.5.1",
     "@netlify/config": "^24.6.0",
     "@netlify/dev": "^4.18.7",
@@ -71,7 +71,7 @@
     "@netlify/images": "^1.3.10",
     "@netlify/local-functions-proxy": "^2.0.3",
     "@netlify/redirect-parser": "^15.0.4",
-    "@netlify/zip-it-and-ship-it": "^14.7.0",
+    "@netlify/zip-it-and-ship-it": "^14.7.1",
     "@octokit/rest": "^22.0.0",
     "@opentelemetry/api": "^1.8.0",
     "@pnpm/tabtab": "^0.5.4",

package.json

@@ -75,7 +75,6 @@ export default class NetlifyFunction<BuildResult extends BaseBuildResult> {
       return true
     }
 
-    // @ts-expect-error TODO; Update the type and cut a new version of `@netlify/config`.
     if (this.config.functions?.[this.name]?.background === true) {
       return true
     }