build: update all non-major dependencies

Author: angular-robot

.github/ng-renovate/package.json

@@ -3,6 +3,6 @@
   "packageManager": "[email protected]",
   "type": "commonjs",
   "dependencies": {
-    "renovate": "39.233.3"
+    "renovate": "39.252.0"
   }
 }

.github/workflows/codeql.yml

@@ -27,10 +27,10 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
         with:
           languages: ${{ matrix.language }}
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
         with:
           category: '/language:${{matrix.language}}'

WORKSPACE

@@ -55,9 +55,9 @@ nodejs_register_toolchains(
 
 http_archive(
     name = "aspect_rules_js",
-    sha256 = "373e912bd986c38e54da82f15174984563866d14b60c5392e5b39e82b3bdf576",
-    strip_prefix = "rules_js-2.3.4",
-    url = "https://github.com/aspect-build/rules_js/releases/download/v2.3.4/rules_js-v2.3.4.tar.gz",
+    sha256 = "1be1a3ec3d3baec4a71bc09ce446eb59bb48ae31af63016481df1532a0d81aee",
+    strip_prefix = "rules_js-2.3.5",
+    url = "https://github.com/aspect-build/rules_js/releases/download/v2.3.5/rules_js-v2.3.5.tar.gz",
 )
 
 load("@aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")

bazel/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@devinfra/bazel",
   "dependencies": {
-    "@microsoft/api-extractor": "7.52.3",
+    "@microsoft/api-extractor": "7.52.4",
     "@types/browser-sync": "2.29.0",
-    "@types/node": "22.14.0",
+    "@types/node": "22.14.1",
     "@types/selenium-webdriver": "^4.1.28",
     "@types/send": "0.17.4",
     "@types/wait-on": "^5.3.4",
@@ -13,7 +13,7 @@
     "selenium-webdriver": "^4.31.0",
     "send": "1.2.0",
     "true-case-path": "2.2.1",
-    "typescript": "5.8.2",
+    "typescript": "5.8.3",
     "wait-on": "^8.0.3",
     "yargs": "17.7.2"
   },

bazel/pnpm-lock.yaml

@@ -46,7 +46,7 @@ runs:
         persist-credentials: false
         ref: ${{ inputs.ref }}
 
-    - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
+    - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: ${{ inputs.node-version-file-path }}
         node-version: ${{ inputs.node-version }}

github-actions/npm/checkout-and-setup-node/action.yml

@@ -91,7 +91,7 @@ runs:
         entryPoint: '${{inputs.firebase-config-dir}}'
         channelId: pr-${{github.repository}}-${{steps.artifact-info.outputs.unsafe-pull-number}}-${{inputs.workflow-artifact-name}}
 
-    - uses: marocchino/sticky-pull-request-comment@52423e01640425a022ef5fd42c6fb5f633a02728 # v2.9.1
+    - uses: marocchino/sticky-pull-request-comment@67d0dec7b07ed060a405f9b2a64b8ab319fdd7db # v2.9.2
       with:
         header: ${{inputs.workflow-artifact-name}}
         message: |

github-actions/previews/upload-artifacts-to-firebase/action.yml

@@ -15,7 +15,7 @@
     }
   },
   "dependencies": {
-    "@google-cloud/spanner": "7.19.1",
+    "@google-cloud/spanner": "7.21.0",
     "@octokit/rest": "21.1.1",
     "@types/semver": "^7.3.6",
     "@types/supports-color": "^10.0.0",

ng-dev/package.json

@@ -28,7 +28,7 @@
     "@bazel/runfiles": "5.8.1",
     "@bazel/terser": "5.8.1",
     "@bazel/typescript": "5.8.1",
-    "@microsoft/api-extractor": "7.52.3",
+    "@microsoft/api-extractor": "7.52.4",
     "@types/browser-sync": "^2.26.3",
     "@types/minimatch": "^5.1.2",
     "@types/node": "^20.14.8",
@@ -46,7 +46,7 @@
     "tmp": "^0.2.1",
     "true-case-path": "^2.2.1",
     "tslib": "^2.5.2",
-    "typescript": "5.8.2",
+    "typescript": "5.8.3",
     "uuid": "^11.0.0",
     "yargs": "^17.0.0"
   },
@@ -71,7 +71,7 @@
     "@bazel/ibazel": "^0.23.0",
     "@bazel/jasmine": "patch:@bazel/jasmine@npm:5.8.1#.yarn/patches/@bazel-jasmine-npm.patch",
     "@google-cloud/firestore": "^7.0.0",
-    "@google-cloud/spanner": "7.19.1",
+    "@google-cloud/spanner": "7.21.0",
     "@google-cloud/storage": "^7.0.0",
     "@inquirer/prompts": "^7.0.0",
     "@inquirer/type": "^3.0.0",
@@ -138,7 +138,7 @@
     "karma-sourcemap-loader": "^0.4.0",
     "minimatch": "^10.0.0",
     "multimatch": "^7.0.0",
-    "nock": "14.0.2",
+    "nock": "14.0.4",
     "opener": "^1.5.2",
     "requirejs": "^2.3.6",
     "rxjs": "^7.4.0",