Review and merge dependabot npm dependency bump PR
Takeaway: Next time I'd tell it upfront that auto-merge isn't enabled on this repo and branch protection requires an up-to-date branch, so it could go straight to triggering a dependabot rebase instead of hitting three failed merge attempts first.