diff --git a/.github/ng-renovate/package.json b/.github/ng-renovate/package.json
index 0e9528488..78f35d21a 100644
--- a/.github/ng-renovate/package.json
+++ b/.github/ng-renovate/package.json
@@ -3,6 +3,6 @@
   "packageManager": "yarn@4.7.0",
   "type": "commonjs",
   "dependencies": {
-    "renovate": "39.211.0"
+    "renovate": "39.213.1"
   }
 }
diff --git a/.github/ng-renovate/yarn.lock b/.github/ng-renovate/yarn.lock
index e726ffc31..bc89344d6 100644
--- a/.github/ng-renovate/yarn.lock
+++ b/.github/ng-renovate/yarn.lock
@@ -5892,12 +5892,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"nanoid@npm:3.3.9":
-  version: 3.3.9
-  resolution: "nanoid@npm:3.3.9"
+"nanoid@npm:3.3.10":
+  version: 3.3.10
+  resolution: "nanoid@npm:3.3.10"
   bin:
     nanoid: bin/nanoid.cjs
-  checksum: 10c0/4515abe53db7b150cf77074558efc20d8e916d6910d557b5ce72e8bbf6f8e7554d3d7a0d180bfa65e5d8e99aa51b207aa8a3bf5f3b56233897b146d592e30b24
+  checksum: 10c0/34eca53d4d95cb538b05a9fa07e4b2ab941906852202edb00824c8004d71d34592704e40b0ae608bf756b1ffd91ff9359d2ea59f8d92e1a7b769e0ca46368e84
   languageName: node
   linkType: hard
 
@@ -5949,7 +5949,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "ng-renovate@workspace:."
   dependencies:
-    renovate: "npm:39.211.0"
+    renovate: "npm:39.213.1"
   languageName: unknown
   linkType: soft
 
@@ -6701,9 +6701,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"renovate@npm:39.211.0":
-  version: 39.211.0
-  resolution: "renovate@npm:39.211.0"
+"renovate@npm:39.213.1":
+  version: 39.213.1
+  resolution: "renovate@npm:39.213.1"
   dependencies:
     "@aws-sdk/client-codecommit": "npm:3.738.0"
     "@aws-sdk/client-ec2": "npm:3.738.0"
@@ -6787,7 +6787,7 @@ __metadata:
     minimatch: "npm:10.0.1"
     moo: "npm:0.5.2"
     ms: "npm:2.1.3"
-    nanoid: "npm:3.3.9"
+    nanoid: "npm:3.3.10"
     neotraverse: "npm:0.6.18"
     node-html-parser: "npm:7.0.1"
     openpgp: "npm:6.1.0"
@@ -6830,7 +6830,7 @@ __metadata:
   bin:
     renovate: dist/renovate.js
     renovate-config-validator: dist/config-validator.js
-  checksum: 10c0/c94a440d5dae5340249318ff38a6ae26dc096356f2ea4c6ca50da8c87f5b599172c80703e5a4c5b0396f2539a258411c38e76d9840a721c1418dd08bbc64a49f
+  checksum: 10c0/f08e0c68ab13c6e87512461f8c870bef334931f38fec44bc66fa78e0dd419539a688edd3a07c387bef24c38bd18a8e9b50b98ad442cdd8ff21789e3d66298e8b
   languageName: node
   linkType: hard
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 7d18c049c..6a4d5776e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -27,10 +27,10 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
+        uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
         with:
           languages: ${{ matrix.language }}
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
+        uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
         with:
           category: '/language:${{matrix.language}}'
diff --git a/WORKSPACE b/WORKSPACE
index f3955c7b4..021e8b6be 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -55,9 +55,9 @@ nodejs_register_toolchains(
 
 http_archive(
     name = "aspect_rules_js",
-    sha256 = "bea8e9a120b14ff2cdf2410c5872cfc896b29dc361ac8c554d0c9f800154a0b7",
-    strip_prefix = "rules_js-2.3.0",
-    url = "https://github.com/aspect-build/rules_js/releases/download/v2.3.0/rules_js-v2.3.0.tar.gz",
+    sha256 = "7ee67690ed4d6b5c8cbf6d47bb68b639192a29397a9fe3d513981fecc25a5653",
+    strip_prefix = "rules_js-2.3.2",
+    url = "https://github.com/aspect-build/rules_js/releases/download/v2.3.2/rules_js-v2.3.2.tar.gz",
 )
 
 load("@aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")
diff --git a/bazel/package.json b/bazel/package.json
index 6f737f1cf..e26d0e6ab 100644
--- a/bazel/package.json
+++ b/bazel/package.json
@@ -3,7 +3,7 @@
   "dependencies": {
     "@microsoft/api-extractor": "7.52.1",
     "typescript": "5.8.2",
-    "@types/node": "22.13.11",
+    "@types/node": "22.13.13",
     "esbuild": "0.25.1"
   },
   "pnpm": {
diff --git a/yarn.lock b/yarn.lock
index f6f16de80..8fc6f907a 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4682,9 +4682,9 @@ __metadata:
   linkType: hard
 
 "@types/diff@npm:^7.0.0":
-  version: 7.0.1
-  resolution: "@types/diff@npm:7.0.1"
-  checksum: 10c0/5aaa77b8ab07dc0bd9d668e150a574536ed367553121ad4ae37e09ee7f23d110b2339c2b1f0f54e32c65d6acb46773e1b0d43d9d6ec75619384baeb3fec3ca3d
+  version: 7.0.2
+  resolution: "@types/diff@npm:7.0.2"
+  checksum: 10c0/ac4de3f982242292e006ace98a9d41363ebc244145939466139828ffa6c476acc15eea2bad39bd7e0868003c497614f6d7e734d4999c4f09d95dfd173d24d723
   languageName: node
   linkType: hard
 
@@ -13420,14 +13420,14 @@ __metadata:
   linkType: hard
 
 "selenium-webdriver@npm:^4.18.1":
-  version: 4.29.0
-  resolution: "selenium-webdriver@npm:4.29.0"
+  version: 4.30.0
+  resolution: "selenium-webdriver@npm:4.30.0"
   dependencies:
     "@bazel/runfiles": "npm:^6.3.1"
     jszip: "npm:^3.10.1"
     tmp: "npm:^0.2.3"
     ws: "npm:^8.18.0"
-  checksum: 10c0/e2997328d95c5eefaeaa09512e8e7612021b45eba80aad9c09e68275c38b25c7de8dbbebc149b3ec0ff631f15b0362f5c30b5b66c9238d0bfd29548d575658c1
+  checksum: 10c0/4426d0b8d217b6d684bf8dd3f5c7896082b7694304f5a53faadda251e8d51e3e98c3e4b138d4e2178a826fe7ea6fb2044b365e729f63dc6f5a47829d1d93722c
   languageName: node
   linkType: hard