chore(deps): update all non-major dependencies

.github/workflows/buddy-bot.yml

@@ -132,7 +132,7 @@ jobs:
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.35.3
         with:
           php-version: '8.4'
           tools: composer
@@ -254,7 +254,7 @@ jobs:
 
       - name: Setup PHP and Composer (if needed)
         if: ${{ hashFiles('composer.json') != '' }}
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@2.35.3
         with:
           php-version: '8.4'
           tools: composer

.github/workflows/launchpad-install.yml

@@ -34,7 +34,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@v2.0.2
         with:
           bun-version: latest
 

.github/workflows/precompile-php.yml

@@ -153,7 +153,7 @@ jobs:
         uses: oven-sh/setup-bun@v2
 
       - name: Use cached node_modules
-        uses: actions/cache@v4
+        uses: actions/cache@v4.2.4
         with:
           path: node_modules
           key: node-modules-${{ hashFiles('**/bun.lock') }}
@@ -988,7 +988,7 @@ jobs:
           ls -lh ${{ env.BINARY_NAME }}.tar.gz
 
       - name: Upload binary artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v4.6.2
         with:
           name: ${{ env.BINARY_NAME }}
           path: ${{ env.OUTPUT_DIR }}/${{ env.BINARY_NAME }}.tar.gz

deps.yaml

@@ -1,2 +1,2 @@
 dependencies:
-  bun.sh: 1.2.20
+  bun.sh: 1.2.19

package.json

@@ -33,8 +33,8 @@
     "@stacksjs/eslint-config": "^4.14.0-beta.3",
     "@stacksjs/launchpad": "workspace:*",
     "@types/bun": "^1.2.20",
-    "buddy-bot": "^0.7.8",
-    "bumpp": "^10.2.2",
+    "buddy-bot": "^0.7.9",
+    "bumpp": "^10.2.3",
     "bun-plugin-dtsx": "0.9.5",
     "changelogen": "^0.6.2",
     "lint-staged": "^15.5.2",

packages/action/package.json

@@ -38,6 +38,6 @@
   },
   "devDependencies": {
     "bun-plugin-dtsx": "^0.9.5",
-    "typescript": "^5.8.3"
+    "typescript": "^5.9.2"
   }
 }

packages/launchpad/package.json

@@ -63,12 +63,12 @@
     "typecheck": "bun --bun tsc --noEmit --skipLibCheck"
   },
   "dependencies": {
-    "bunfig": "^0.11.1",
+    "bunfig": "^0.14.1",
     "cac": "^6.7.14",
-    "ts-pkgx": "^0.4.30"
+    "ts-pkgx": "^0.4.33"
   },
   "devDependencies": {
-    "bun-plugin-dtsx": "^0.9.5"
+    "bun-plugin-dtsx": "^0.21.12"
   },
   "lint-staged": {
     "*.{js,ts}": "bunx --bun eslint . --fix"

packages/launchpad/test-envs/complex-deps/dependencies.yaml

@@ -9,4 +9,4 @@ dependencies:
   gnu.org/wget: ^1.25.0
 
   # Build tools
-  cmake.org: ^3.28.0
+  cmake.org: ^3.31.8

packages/launchpad/test-envs/deeply-nested/level1/level2/level3/level4/level5/level6/level7/level8/level9/level10/final-project/dependencies.yaml

@@ -1,7 +1,7 @@
 dependencies:
   # Test packages for deeply nested environment
-  zlib.net: 1.2
-  curl.se: ^8.5.0
+  zlib.net: 1.2.11
+  curl.se: ^8.15.0
 
   # This should create a unique environment hash
   # even with a very long directory path

packages/launchpad/test-envs/individual-global-flags/dependencies.yaml

@@ -5,11 +5,11 @@ dependencies:
     global: true # Install globally
 
   [email protected]:
-    version: 3.12.1
+    version: 22.1.0
     global: true # Install globally
 
   [email protected]:
-    version: 5.0.4
+    version: 22.1.0
     global: false # Install locally
 
   # String format defaults to local

packages/launchpad/test-envs/laravel/deps.yaml

@@ -1,8 +1,8 @@
 dependencies:
-  bun: ^1.2.18
-  php: ^8.4.0
-  node: ^24.0.0
-  redis: ^8.0.0
+  bun: ^1.2.19
+  php: ^8.4.11
+  node: ^24.5.0
+  redis: ^8.2.0
   postgres: ^17.0.0
   composer: ^2.8.10
   # meilisearch: ^1.15.0 doesnt exist yet

packages/launchpad/test-envs/minimal/pkgx.yaml

@@ -1,3 +1,3 @@
 dependencies:
   # Simple wget installation
-  gnu.org/wget: ^1.21
+  gnu.org/wget: ^1.25.0

packages/launchpad/test-envs/override-scenarios/dependencies.yaml

@@ -6,12 +6,12 @@ dependencies:
 
   # Explicit global: true (same as top-level)
   [email protected]:
-    version: 2.42.0
+    version: 8.50.0
     global: true
 
   # Override to local despite top-level global: true
   [email protected]:
-    version: 5.0.4
+    version: 8.50.0
     global: false
 
   [email protected]:
@@ -20,8 +20,7 @@ dependencies:
 
   # Mixed object and string formats
   [email protected]:
-    version: 1.2.3
-    # No global specified, uses top-level global: true
+    version: 8.50.0
 
   # String format with top-level global: true
   [email protected]: 29.7.0

packages/launchpad/test-envs/python-focused/deps.yml

@@ -1,7 +1,7 @@
 dependencies:
   # Python with correct version format
-  python.org: ~3.12
+  python.org: ~3.12.11
 
   # Database tools with correct names
-  postgresql.org: ~16.1
-  redis.io: ~7.2
+  postgresql.org: ~16.1.0
+  redis.io: ~7.2.10

packages/launchpad/test-envs/rails/deps.yaml

@@ -1,8 +1,8 @@
 dependencies:
-  ruby: ^3.3.0
+  ruby: ^3.4.5
   node: ^24.0.0
   redis: ^8.0.0
   postgres: ^17.0.0
-  rubygems.org: ^3.6.0 # Provides bundler, gem commands
+  rubygems.org: ^3.7.1 # Provides bundler, gem commands
   # sqlite: ^3.40.0  # Alternative to postgres for development
   # yarn: ^1.22.0    # Alternative to npm

packages/launchpad/test-envs/stacks-config/dependencies.yaml

@@ -10,12 +10,12 @@
 
 dependencies:
   aws/cli: ^2.22.26
-  bun: ^1.2.13
-  gh: ^2.69.0
-  zip: ^3.0
-  unzip: ^6.0
+  bun: ^1.2.19
+  gh: ^2.76.2
+  zip: ^3.0.0
+  unzip: ^6.0.0
   sqlite3: ^3.47.2
-  node: ^22.12.0 # only temporarily needed until bun & vue-tsc issue is resolved
+  node: ^22.18.0 # only temporarily needed until bun & vue-tsc issue is resolved
   # mailpit: ^1.21.8
   # redis: ^7.4.1
   # rust: ^1.74.1

packages/launchpad/test-envs/team-standard/dependencies.yaml

@@ -1,27 +1,27 @@
 dependencies:
   # Global shared tools (available system-wide for team)
   node@22:
-    version: 22.1.0
+    version: 29.7.0
     global: true
   [email protected]:
-    version: 3.12.1
+    version: 29.7.0
     global: true
   docker@24:
-    version: 24.0.0
+    version: 29.7.0
     global: true
   [email protected]:
-    version: 2.42.0
+    version: 29.7.0
     global: true
 
   # Project-specific tools (isolated per project)
   [email protected]:
-    version: 5.0.4
+    version: 29.7.0
     global: false
   [email protected]:
     version: 29.7.0
     global: false
   [email protected]:
-    version: 8.50.0
+    version: 29.7.0
     global: false
 
   # String format defaults to local

packages/launchpad/test-envs/working-test/dependencies.yaml

@@ -1,6 +1,6 @@
 dependencies:
   # Packages that work well in pkgx
   python.org: ~3.12
-  curl.se: ^8.5
-  cmake.org: ^3.28
+  curl.se: ^8.15.0
+  cmake.org: ^3.31.8
   stedolan.github.io/jq: ^1.7