build: update all non-major dependencies (#2760)

Closes #2749 as a pr takeover

PR Close #2760

Author: angular-robot

.github/workflows/codeql.yml

@@ -27,10 +27,10 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/init@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
         with:
           languages: ${{ matrix.language }}
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/analyze@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
         with:
           category: '/language:${{matrix.language}}'

WORKSPACE

@@ -55,9 +55,9 @@ nodejs_register_toolchains(
 
 http_archive(
     name = "aspect_rules_js",
-    sha256 = "373e912bd986c38e54da82f15174984563866d14b60c5392e5b39e82b3bdf576",
-    strip_prefix = "rules_js-2.3.4",
-    url = "https://github.com/aspect-build/rules_js/releases/download/v2.3.4/rules_js-v2.3.4.tar.gz",
+    sha256 = "83e5af4d17385d1c3268c31ae217dbfc8525aa7bcf52508dc6864baffc8b9501",
+    strip_prefix = "rules_js-2.3.7",
+    url = "https://github.com/aspect-build/rules_js/releases/download/v2.3.7/rules_js-v2.3.7.tar.gz",
 )
 
 load("@aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")
@@ -126,15 +126,15 @@ register_toolchains(
 
 http_archive(
     name = "aspect_rules_ts",
-    sha256 = "fa5659a511f236b1ae6112258bff602fa20a40324b282734c841bc1e857797f3",
-    strip_prefix = "rules_ts-3.5.2",
-    url = "https://github.com/aspect-build/rules_ts/releases/download/v3.5.2/rules_ts-v3.5.2.tar.gz",
+    sha256 = "56858e1e4380948e2d5aca5ab2e96fc5ed788652a4a3b7036e8e4b6f019e63bd",
+    strip_prefix = "rules_ts-3.5.3",
+    url = "https://github.com/aspect-build/rules_ts/releases/download/v3.5.3/rules_ts-v3.5.3.tar.gz",
 )
 
 load("@aspect_rules_ts//ts:repositories.bzl", "rules_ts_dependencies")
 
 rules_ts_dependencies(
-    ts_integrity = "sha512-aJn6wq13/afZp/jT9QZmwEjDqqvSGp1VT5GVg+f/t6/oVyrgXM6BY1h9BRh/O5p3PlUPAe+WuiEZOmb/49RqoQ==",
+    ts_integrity = "sha512-p1diW6TqL9L07nNxvRMM7hMMw4c5XOo/1ibL4aAIGmSAt9slTE1Xgw5KWuof2uTOvCg9BY7ZRi+GaF+7sfgPeQ==",
     ts_version_from = "//bazel:package.json",
 )
 
@@ -150,9 +150,9 @@ setup_dependencies_2()
 # go/ng:sharing-infra-code.
 http_archive(
     name = "aspect_rules_esbuild",
-    sha256 = "550e33ddeb86a564b22b2c5d3f84748c6639b1b2b71fae66bf362c33392cbed8",
-    strip_prefix = "rules_esbuild-0.21.0",
-    url = "https://github.com/aspect-build/rules_esbuild/releases/download/v0.21.0/rules_esbuild-v0.21.0.tar.gz",
+    sha256 = "530adfeae30bbbd097e8af845a44a04b641b680c5703b3bf885cbd384ffec779",
+    strip_prefix = "rules_esbuild-0.22.1",
+    url = "https://github.com/aspect-build/rules_esbuild/releases/download/v0.22.1/rules_esbuild-v0.22.1.tar.gz",
 )
 
 load("@aspect_rules_esbuild//esbuild:dependencies.bzl", "rules_esbuild_dependencies")

bazel/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@devinfra/bazel",
   "dependencies": {
-    "@microsoft/api-extractor": "7.52.3",
+    "@microsoft/api-extractor": "7.52.7",
     "@types/browser-sync": "2.29.0",
-    "@types/node": "22.14.0",
+    "@types/node": "22.15.3",
     "@types/selenium-webdriver": "^4.1.28",
     "@types/send": "0.17.4",
     "@types/wait-on": "^5.3.4",
@@ -13,7 +13,7 @@
     "selenium-webdriver": "^4.31.0",
     "send": "1.2.0",
     "true-case-path": "2.2.1",
-    "typescript": "5.8.2",
+    "typescript": "5.8.3",
     "wait-on": "^8.0.3",
     "yargs": "17.7.2"
   },

bazel/pnpm-lock.yaml

@@ -46,7 +46,7 @@ runs:
         persist-credentials: false
         ref: ${{ inputs.ref }}
 
-    - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
+    - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: ${{ inputs.node-version-file-path }}
         node-version: ${{ inputs.node-version }}

github-actions/npm/checkout-and-setup-node/action.yml

@@ -91,7 +91,7 @@ runs:
         entryPoint: '${{inputs.firebase-config-dir}}'
         channelId: pr-${{github.repository}}-${{steps.artifact-info.outputs.unsafe-pull-number}}-${{inputs.workflow-artifact-name}}
 
-    - uses: marocchino/sticky-pull-request-comment@52423e01640425a022ef5fd42c6fb5f633a02728 # v2.9.1
+    - uses: marocchino/sticky-pull-request-comment@67d0dec7b07ed060a405f9b2a64b8ab319fdd7db # v2.9.2
       with:
         header: ${{inputs.workflow-artifact-name}}
         message: |

github-actions/previews/upload-artifacts-to-firebase/action.yml

@@ -15,7 +15,7 @@
     }
   },
   "dependencies": {
-    "@google-cloud/spanner": "7.19.1",
+    "@google-cloud/spanner": "7.21.0",
     "@octokit/rest": "21.1.1",
     "@types/semver": "^7.3.6",
     "@types/supports-color": "^10.0.0",