build: update all non-major dependencies

.bazelrc

@@ -9,6 +9,8 @@ test --sandbox_default_allow_network=false
 # Required by `rules_ts`.
 common --@aspect_rules_ts//ts:skipLibCheck=always
 common --@aspect_rules_ts//ts:default_to_tsc_transpiler
+# TODO(josephperrott): remove this flag once we get to bazel version >7.
+common --incompatible_merge_fixed_and_default_shell_env
 
 # Turn off legacy external runfiles
 build --nolegacy_external_runfiles

.github/ng-renovate/package.json

@@ -3,6 +3,6 @@
   "packageManager": "[email protected]",
   "type": "commonjs",
   "dependencies": {
-    "renovate": "39.226.0"
+    "renovate": "39.232.3"
   }
 }

WORKSPACE

@@ -126,9 +126,9 @@ register_toolchains(
 
 http_archive(
     name = "aspect_rules_ts",
-    sha256 = "d584e4bc80674d046938563678117d17df962fe105395f6b1efe2e8a248b8100",
-    strip_prefix = "rules_ts-3.5.1",
-    url = "https://github.com/aspect-build/rules_ts/releases/download/v3.5.1/rules_ts-v3.5.1.tar.gz",
+    sha256 = "fa5659a511f236b1ae6112258bff602fa20a40324b282734c841bc1e857797f3",
+    strip_prefix = "rules_ts-3.5.2",
+    url = "https://github.com/aspect-build/rules_ts/releases/download/v3.5.2/rules_ts-v3.5.2.tar.gz",
 )
 
 load("@aspect_rules_ts//ts:repositories.bzl", "rules_ts_dependencies")

bazel/package.json

@@ -3,7 +3,7 @@
   "dependencies": {
     "@microsoft/api-extractor": "7.52.2",
     "typescript": "5.8.2",
-    "@types/node": "22.13.14"
+    "@types/node": "22.14.0"
   },
   "pnpm": {
     "onlyBuiltDependencies": []

github-actions/linting/licenses/action.yml

@@ -11,7 +11,7 @@ runs:
   using: composite
   steps:
     - name: Check Package Licenses
-      uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0
+      uses: actions/dependency-review-action@ce3cf9537a52e8119d91fd484ab5b8a807627bf8 # v4.6.0
       env:
         # The action ref here allows us to import the config file from the same sha we rely on in the downstream usage
         ACTION_REF: ${{ github.action_ref }}

package.json

@@ -35,7 +35,7 @@
     "@types/selenium-webdriver": "^4.1.21",
     "@types/send": "^0.17.1",
     "@types/tmp": "^0.2.1",
-    "@types/ws": "8.18.0",
+    "@types/ws": "8.18.1",
     "@types/yargs": "^17.0.0",
     "browser-sync": "^3.0.0",
     "prettier": "3.5.3",
@@ -115,7 +115,7 @@
     "diff": "^7.0.0",
     "ejs": "^3.1.6",
     "fast-glob": "^3.3.2",
-    "firebase": "11.5.0",
+    "firebase": "11.6.0",
     "firebase-admin": "13.2.0",
     "firebase-functions": "^6.0.0",
     "firebase-tools": "^14.0.0",