Pinned versions: upstream bumps available

[github-actions]

Run python3 scripts/check-vendor-versions.py locally to reproduce. Vendored lib: re-download into vendor/, update scripts/vendor-versions.json. Dev tool (jscpd/radon): just update its version in scripts/vendor-versions.json. The service-worker cache version is content-derived on serve, so never edit the CACHE_VERSION literal in sw.js.

leaflet                     1.9.4  ->  1.9.4
leaflet-gpx                 2.2.0  ->  2.2.0
@raruto/leaflet-elevation   2.6.0  ->  2.6.0
leaflet.tilelayer.nogap     0.3.0  ->  0.3.0
supercluster                8.0.1  ->  9.0.0 <- bump
d3                          7.9.0  ->  7.9.0
jscpd                      5.0.12  ->  5.0.15 <- bump
radon                       6.0.1  ->  6.0.1

Drift detected for 2 package(s):
  - supercluster: 8.0.1 -> 9.0.0
  - jscpd: 5.0.12 -> 5.0.15

Last run: 2026-08-17T09:34:01Z