build: update all non-major dependencies

Author: angular-robot

.github/workflows/codeql.yml

@@ -27,10 +27,10 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
         with:
           languages: ${{ matrix.language }}
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
         with:
           category: '/language:${{matrix.language}}'

WORKSPACE

@@ -55,9 +55,9 @@ nodejs_register_toolchains(
 
 http_archive(
     name = "aspect_rules_js",
-    sha256 = "373e912bd986c38e54da82f15174984563866d14b60c5392e5b39e82b3bdf576",
-    strip_prefix = "rules_js-2.3.4",
-    url = "https://github.com/aspect-build/rules_js/releases/download/v2.3.4/rules_js-v2.3.4.tar.gz",
+    sha256 = "83e5af4d17385d1c3268c31ae217dbfc8525aa7bcf52508dc6864baffc8b9501",
+    strip_prefix = "rules_js-2.3.7",
+    url = "https://github.com/aspect-build/rules_js/releases/download/v2.3.7/rules_js-v2.3.7.tar.gz",
 )
 
 load("@aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")
@@ -126,9 +126,9 @@ register_toolchains(
 
 http_archive(
     name = "aspect_rules_ts",
-    sha256 = "fa5659a511f236b1ae6112258bff602fa20a40324b282734c841bc1e857797f3",
-    strip_prefix = "rules_ts-3.5.2",
-    url = "https://github.com/aspect-build/rules_ts/releases/download/v3.5.2/rules_ts-v3.5.2.tar.gz",
+    sha256 = "56858e1e4380948e2d5aca5ab2e96fc5ed788652a4a3b7036e8e4b6f019e63bd",
+    strip_prefix = "rules_ts-3.5.3",
+    url = "https://github.com/aspect-build/rules_ts/releases/download/v3.5.3/rules_ts-v3.5.3.tar.gz",
 )
 
 load("@aspect_rules_ts//ts:repositories.bzl", "rules_ts_dependencies")
@@ -150,9 +150,9 @@ setup_dependencies_2()
 # go/ng:sharing-infra-code.
 http_archive(
     name = "aspect_rules_esbuild",
-    sha256 = "550e33ddeb86a564b22b2c5d3f84748c6639b1b2b71fae66bf362c33392cbed8",
-    strip_prefix = "rules_esbuild-0.21.0",
-    url = "https://github.com/aspect-build/rules_esbuild/releases/download/v0.21.0/rules_esbuild-v0.21.0.tar.gz",
+    sha256 = "530adfeae30bbbd097e8af845a44a04b641b680c5703b3bf885cbd384ffec779",
+    strip_prefix = "rules_esbuild-0.22.1",
+    url = "https://github.com/aspect-build/rules_esbuild/releases/download/v0.22.1/rules_esbuild-v0.22.1.tar.gz",
 )
 
 load("@aspect_rules_esbuild//esbuild:dependencies.bzl", "rules_esbuild_dependencies")

bazel/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@devinfra/bazel",
   "dependencies": {
-    "@microsoft/api-extractor": "7.52.3",
+    "@microsoft/api-extractor": "7.52.5",
     "@types/browser-sync": "2.29.0",
-    "@types/node": "22.14.0",
+    "@types/node": "22.15.3",
     "@types/selenium-webdriver": "^4.1.28",
     "@types/send": "0.17.4",
     "@types/wait-on": "^5.3.4",
@@ -13,7 +13,7 @@
     "selenium-webdriver": "^4.31.0",
     "send": "1.2.0",
     "true-case-path": "2.2.1",
-    "typescript": "5.8.2",
+    "typescript": "5.8.3",
     "wait-on": "^8.0.3",
     "yargs": "17.7.2"
   },

bazel/pnpm-lock.yaml

@@ -46,7 +46,7 @@ runs:
         persist-credentials: false
         ref: ${{ inputs.ref }}
 
-    - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
+    - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: ${{ inputs.node-version-file-path }}
         node-version: ${{ inputs.node-version }}

github-actions/npm/checkout-and-setup-node/action.yml

@@ -91,7 +91,7 @@ runs:
         entryPoint: '${{inputs.firebase-config-dir}}'
         channelId: pr-${{github.repository}}-${{steps.artifact-info.outputs.unsafe-pull-number}}-${{inputs.workflow-artifact-name}}
 
-    - uses: marocchino/sticky-pull-request-comment@52423e01640425a022ef5fd42c6fb5f633a02728 # v2.9.1
+    - uses: marocchino/sticky-pull-request-comment@67d0dec7b07ed060a405f9b2a64b8ab319fdd7db # v2.9.2
       with:
         header: ${{inputs.workflow-artifact-name}}
         message: |

github-actions/previews/upload-artifacts-to-firebase/action.yml

@@ -15,7 +15,7 @@
     }
   },
   "dependencies": {
-    "@google-cloud/spanner": "7.19.1",
+    "@google-cloud/spanner": "7.21.0",
     "@octokit/rest": "21.1.1",
     "@types/semver": "^7.3.6",
     "@types/supports-color": "^10.0.0",

ng-dev/package.json

@@ -28,7 +28,7 @@
     "@bazel/runfiles": "5.8.1",
     "@bazel/terser": "5.8.1",
     "@bazel/typescript": "5.8.1",
-    "@microsoft/api-extractor": "7.52.3",
+    "@microsoft/api-extractor": "7.52.5",
     "@types/browser-sync": "^2.26.3",
     "@types/minimatch": "^5.1.2",
     "@types/node": "^20.14.8",
@@ -46,7 +46,7 @@
     "tmp": "^0.2.1",
     "true-case-path": "^2.2.1",
     "tslib": "^2.5.2",
-    "typescript": "5.8.2",
+    "typescript": "5.8.3",
     "uuid": "^11.0.0",
     "yargs": "^17.0.0"
   },
@@ -71,7 +71,7 @@
     "@bazel/ibazel": "^0.23.0",
     "@bazel/jasmine": "patch:@bazel/jasmine@npm:5.8.1#.yarn/patches/@bazel-jasmine-npm.patch",
     "@google-cloud/firestore": "^7.0.0",
-    "@google-cloud/spanner": "7.19.1",
+    "@google-cloud/spanner": "7.21.0",
     "@google-cloud/storage": "^7.0.0",
     "@inquirer/prompts": "^7.0.0",
     "@inquirer/type": "^3.0.0",
@@ -115,17 +115,17 @@
     "diff": "^7.0.0",
     "ejs": "^3.1.6",
     "fast-glob": "^3.3.2",
-    "firebase": "11.6.0",
-    "firebase-admin": "13.2.0",
+    "firebase": "11.6.1",
+    "firebase-admin": "13.3.0",
     "firebase-functions": "^6.0.0",
     "firebase-tools": "^14.0.0",
     "folder-hash": "^4.0.2",
     "font-color-contrast": "^11.1.0",
     "gcip-cloud-functions": "0.2.0",
     "git-raw-commits": "^4.0.0",
     "husky": "^9.0.0",
-    "jasmine": "~5.6.0",
-    "jasmine-core": "~5.6.0",
+    "jasmine": "~5.7.0",
+    "jasmine-core": "~5.7.0",
     "jsdom": "^26.0.0",
     "jsonc-parser": "^3.2.0",
     "karma": "^6.3.15",
@@ -138,7 +138,7 @@
     "karma-sourcemap-loader": "^0.4.0",
     "minimatch": "^10.0.0",
     "multimatch": "^7.0.0",
-    "nock": "14.0.2",
+    "nock": "14.0.4",
     "opener": "^1.5.2",
     "requirejs": "^2.3.6",
     "rxjs": "^7.4.0",