build: update all non-major dependencies

.github/ng-renovate/package.json

@@ -3,6 +3,6 @@
   "packageManager": "[email protected]",
   "type": "commonjs",
   "dependencies": {
-    "renovate": "40.1.1"
+    "renovate": "40.3.4"
   }
 }

.github/ng-renovate/yarn.lock

@@ -5209,12 +5209,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"markdown-table@npm:2.0.0":
-  version: 2.0.0
-  resolution: "markdown-table@npm:2.0.0"
-  dependencies:
-    repeat-string: "npm:^1.0.0"
-  checksum: 10c0/f257e0781ea50eb946919df84bdee4ba61f983971b277a369ca7276f89740fd0e2749b9b187163a42df4c48682b71962d4007215ce3523480028f06c11ddc2e6
+"markdown-table@npm:3.0.4":
+  version: 3.0.4
+  resolution: "markdown-table@npm:3.0.4"
+  checksum: 10c0/1257b31827629a54c24a5030a3dac952256c559174c95ce3ef89bebd6bff0cb1444b1fd667b1a1bb53307f83278111505b3e26f0c4e7b731e0060d435d2d930b
   languageName: node
   linkType: hard
 
@@ -5689,7 +5687,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "ng-renovate@workspace:."
   dependencies:
-    renovate: "npm:40.1.1"
+    renovate: "npm:40.3.4"
   languageName: unknown
   linkType: soft
 
@@ -6448,9 +6446,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"renovate@npm:40.1.1":
-  version: 40.1.1
-  resolution: "renovate@npm:40.1.1"
+"renovate@npm:40.3.4":
+  version: 40.3.4
+  resolution: "renovate@npm:40.3.4"
   dependencies:
     "@aws-sdk/client-codecommit": "npm:3.799.0"
     "@aws-sdk/client-ec2": "npm:3.800.0"
@@ -6534,7 +6532,7 @@ __metadata:
     klona: "npm:2.0.6"
     luxon: "npm:3.6.1"
     markdown-it: "npm:14.1.0"
-    markdown-table: "npm:2.0.0"
+    markdown-table: "npm:3.0.4"
     minimatch: "npm:10.0.1"
     moo: "npm:0.5.2"
     ms: "npm:2.1.3"
@@ -6565,7 +6563,7 @@ __metadata:
     toml-eslint-parser: "npm:0.10.0"
     tslib: "npm:2.8.1"
     upath: "npm:2.0.1"
-    url-join: "npm:4.0.1"
+    url-join: "npm:5.0.0"
     validate-npm-package-name: "npm:6.0.0"
     vuln-vects: "npm:1.1.0"
     xmldoc: "npm:1.3.0"
@@ -6581,7 +6579,7 @@ __metadata:
   bin:
     renovate: dist/renovate.js
     renovate-config-validator: dist/config-validator.js
-  checksum: 10c0/b8ce98a3fe3abf840fa912b96ecdccb3f56e566cac35d4c0807b2e8bb0b9383b9402cea370735bbd5e9607d2f11c3e5294bb25ce8dae0b57bea27b924d58cbc0
+  checksum: 10c0/34bbb7397f42f8c57b7512ae2f344155add7673bfd549cc06d79ffc43c34215e1f7cc6a56b64edbf88387a2f9a2f9d576891f711c780923b63f133f78062ff6a
   languageName: node
   linkType: hard
 
@@ -7577,10 +7575,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"url-join@npm:4.0.1":
-  version: 4.0.1
-  resolution: "url-join@npm:4.0.1"
-  checksum: 10c0/ac65e2c7c562d7b49b68edddcf55385d3e922bc1dd5d90419ea40b53b6de1607d1e45ceb71efb9d60da02c681d13c6cb3a1aa8b13fc0c989dfc219df97ee992d
+"url-join@npm:5.0.0":
+  version: 5.0.0
+  resolution: "url-join@npm:5.0.0"
+  checksum: 10c0/ed2b166b4b5a98adcf6828a48b6bd6df1dac4c8a464a73cf4d8e2457ed410dd8da6be0d24855b86026cd7f5c5a3657c1b7b2c7a7c5b8870af17635a41387b04c
   languageName: node
   linkType: hard
 

.github/workflows/codeql.yml

@@ -27,10 +27,10 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/init@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
         with:
           languages: ${{ matrix.language }}
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/analyze@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
         with:
           category: '/language:${{matrix.language}}'

WORKSPACE

@@ -55,9 +55,9 @@ nodejs_register_toolchains(
 
 http_archive(
     name = "aspect_rules_js",
-    sha256 = "373e912bd986c38e54da82f15174984563866d14b60c5392e5b39e82b3bdf576",
-    strip_prefix = "rules_js-2.3.4",
-    url = "https://github.com/aspect-build/rules_js/releases/download/v2.3.4/rules_js-v2.3.4.tar.gz",
+    sha256 = "83e5af4d17385d1c3268c31ae217dbfc8525aa7bcf52508dc6864baffc8b9501",
+    strip_prefix = "rules_js-2.3.7",
+    url = "https://github.com/aspect-build/rules_js/releases/download/v2.3.7/rules_js-v2.3.7.tar.gz",
 )
 
 load("@aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")
@@ -126,9 +126,9 @@ register_toolchains(
 
 http_archive(
     name = "aspect_rules_ts",
-    sha256 = "fa5659a511f236b1ae6112258bff602fa20a40324b282734c841bc1e857797f3",
-    strip_prefix = "rules_ts-3.5.2",
-    url = "https://github.com/aspect-build/rules_ts/releases/download/v3.5.2/rules_ts-v3.5.2.tar.gz",
+    sha256 = "56858e1e4380948e2d5aca5ab2e96fc5ed788652a4a3b7036e8e4b6f019e63bd",
+    strip_prefix = "rules_ts-3.5.3",
+    url = "https://github.com/aspect-build/rules_ts/releases/download/v3.5.3/rules_ts-v3.5.3.tar.gz",
 )
 
 load("@aspect_rules_ts//ts:repositories.bzl", "rules_ts_dependencies")
@@ -150,9 +150,9 @@ setup_dependencies_2()
 # go/ng:sharing-infra-code.
 http_archive(
     name = "aspect_rules_esbuild",
-    sha256 = "550e33ddeb86a564b22b2c5d3f84748c6639b1b2b71fae66bf362c33392cbed8",
-    strip_prefix = "rules_esbuild-0.21.0",
-    url = "https://github.com/aspect-build/rules_esbuild/releases/download/v0.21.0/rules_esbuild-v0.21.0.tar.gz",
+    sha256 = "530adfeae30bbbd097e8af845a44a04b641b680c5703b3bf885cbd384ffec779",
+    strip_prefix = "rules_esbuild-0.22.1",
+    url = "https://github.com/aspect-build/rules_esbuild/releases/download/v0.22.1/rules_esbuild-v0.22.1.tar.gz",
 )
 
 load("@aspect_rules_esbuild//esbuild:dependencies.bzl", "rules_esbuild_dependencies")

bazel/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@devinfra/bazel",
   "dependencies": {
-    "@microsoft/api-extractor": "7.52.3",
+    "@microsoft/api-extractor": "7.52.7",
     "@types/browser-sync": "2.29.0",
-    "@types/node": "22.14.0",
+    "@types/node": "22.15.3",
     "@types/selenium-webdriver": "^4.1.28",
     "@types/send": "0.17.4",
     "@types/wait-on": "^5.3.4",
@@ -13,7 +13,7 @@
     "selenium-webdriver": "^4.31.0",
     "send": "1.2.0",
     "true-case-path": "2.2.1",
-    "typescript": "5.8.2",
+    "typescript": "5.8.3",
     "wait-on": "^8.0.3",
     "yargs": "17.7.2"
   },