build(deps): bump @xhmikosr/decompress and hugo-bin in /tests/integration/__fixtures__/hugo-site

[dependabot]

Bumps @xhmikosr/decompress to 10.2.1 and updates ancestor dependency hugo-bin. These dependencies need to be updated together.

Updates @xhmikosr/decompress from 8.0.0 to 10.2.1

Release notes

Sourced from @​xhmikosr/decompress's releases.

v10.2.1

Backport the v11.1.3 security fixes to v10.x:

• Validate symlink and hardlink targets against the output directory
• Replace the prefix-based containment check with path.relative, fixing a sibling-directory bypass
• Strip setuid, setgid, and sticky bits from extracted files

Advisory: GHSA-mp2f-45pm-3cg9 (CVE-2026-53486)

Full Changelog: XhmikosR/decompress@v10.2.0...v10.2.1

v10.2.0

What's Changed

• Replace make-dir with fs.mkdir by @​XhmikosR in XhmikosR/decompress#2

Full Changelog: XhmikosR/decompress@v10.1.0...v10.2.0

Commits

• 742ab1a 10.2.1
• 9b6e12e npm audit fix
• 9fcda4b Backport security fixes from 11.1.3
• d698f4d 10.2.0
• 0bf55ee Replace make-dir with fs.mkdir (#2)
• 0cdca57 Add readme.md npm badge
• dc7dbe4 10.1.0
• 4a424fe Update safe dependencies
• 69ec973 10.0.1
• 4b7e8ce Update decompress packages
• Additional commits viewable in compare view

Updates hugo-bin from 0.108.0 to 0.149.2

Release notes

Sourced from hugo-bin's releases.

v0.149.2

No release notes provided.

v0.123.0

What's Changed

• Update dependencies and drop Node.js < 18 support by @​XhmikosR in fenneclab/hugo-bin#148
• Update Hugo to v0.126.0

Note that if you still want to keep using Node.js 16 for the time being, you can stick to the previous version and instead set the hugoVersion to the new one, see https://github.com/fenneclab/hugo-bin#options.

With this release we are now down to 98 packages (at the time of the release). When this journey started after v0.30.0, we were at 345 packages, so this is a 71.5% reduction in packages!

Full Changelog: fenneclab/hugo-bin@v0.122.8...v0.123.0

v0.122.7

• Update Hugo to the latest patch version 0.125.6
• Add npm provenance

Full Changelog: fenneclab/hugo-bin@v0.122.5...v0.122.7

v0.122.0

What's Changed

• Allow setting hugo version via env by @​XhmikosR in fenneclab/hugo-bin#149
• Update Hugo to v0.125.0

Full Changelog: fenneclab/hugo-bin@v0.121.1...v0.122.0

v0.121.1

No release notes provided.

v0.118.0

What's Changed

• Update dependencies and drop Node.js < 16 support by @​XhmikosR in fenneclab/hugo-bin#145

Full Changelog: fenneclab/hugo-bin@v0.117.1...v0.118.0

v0.117.1

No release notes provided.

v0.113.0

Update Hugo to v0.117.0

v0.112.0

Update Hugo to v0.116.0

v0.111.0

• Update dependencies

... (truncated)

Commits

• 3570fe4 0.149.2
• 51a307f Update Hugo to v0.152.2
• 6748acf 0.149.1
• 35bc172 Update Hugo to v0.152.1
• 408f8aa 0.149.0
• 0549e0f Update Hugo to v0.152.0
• ec85848 0.148.2
• ef51fde Update Hugo to v0.151.2
• 0ab5d18 0.148.1
• 5524d94 Update Hugo to v0.151.1
• Additional commits viewable in compare view

[github-actions]

📊 Benchmark results

Comparing with 2537474

• Dependency count: 1,127 (no change)
• Package size: 379 MB ⬇️ 0.00% decrease vs. 2537474
• Number of ts-expect-error directives: 359 (no change)