fix(deps): update all non-major dependencies

Author: renovate[bot]

.devcontainer/Dockerfile

@@ -27,12 +27,12 @@ COPY --from=ghcr.io/astral-sh/uv:0.12.0 /uv /uvx /usr/local/bin/
 # /root (mode 700) and the vscode user could not follow the bin/ symlink.
 # Renovate's regex manager tracks RUFF_VERSION via the comment above the ARG.
 # renovate: datasource=pypi depName=ruff
-ARG RUFF_VERSION=0.16.0
+ARG RUFF_VERSION=0.16.1
 # ty: static type checker. Same `uv tool install` pattern as ruff so the
 # binary lands on PATH for CI, pre-commit, and the `astral-sh.ty` editor
 # extension. UV_TOOL_{BIN_DIR,DIR} are shared across all uv tool installs.
 # renovate: datasource=pypi depName=ty
-ARG TY_VERSION=0.0.65
+ARG TY_VERSION=0.0.66
 # pre-commit: the hook runner. Installed via `uv tool install` (not pip) so
 # we have a single Python package manager in the devcontainer; the binary
 # lands at /usr/local/bin/pre-commit, so post-create.sh and any contributor

.devcontainer/post-create.sh

@@ -36,7 +36,7 @@ go install "golang.org/x/tools/gopls@${GOPLS_VERSION}"
 
 # Install delve (Go debugger) — wires up the VS Code "Run & Debug" pane.
 # renovate: datasource=go depName=github.com/go-delve/delve
-DLV_VERSION=v1.27.0
+DLV_VERSION=v1.27.1
 go install "github.com/go-delve/delve/cmd/dlv@${DLV_VERSION}"
 
 # Install gotests — generates table-driven test scaffolds from a function.

.github/workflows/ci.yml

@@ -131,7 +131,7 @@ jobs:
       - uses: astral-sh/ruff-action@278981a28ce3188b1e39527901f38254bf3aac89 # v4.1.0
         with:
           # renovate: datasource=pypi depName=ruff
-          version: "0.16.0"
+          version: "0.16.1"
           args: format --check
       - run: ruff check
 
@@ -182,7 +182,7 @@ jobs:
       - name: ty check
         env:
           # renovate: datasource=pypi depName=ty
-          TY_VERSION: "0.0.65"
+          TY_VERSION: "0.0.66"
         run: uvx "ty@${TY_VERSION}" check
 
   # Build and test runs once per supported target platform, on a runner whose host matches

.github/workflows/devcontainer.yml

@@ -182,7 +182,7 @@ jobs:
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           # renovate: datasource=node-version depName=node
-          node-version: "24.18.1"
+          node-version: "24.19.0"
 
       - name: Check the feature lock is in sync
         env:

.github/workflows/renovate-derived-files.yml

@@ -249,7 +249,7 @@ jobs:
         if: steps.changed.outputs.devcontainer == 'true' && steps.ratify.outputs.conflicts == ''
         with:
           # renovate: datasource=node-version depName=node
-          node-version: "24.18.1"
+          node-version: "24.19.0"
 
       # `--ignore-scripts` because nothing here needs them: the package publishes no install
       # script (`hasInstallScript` is absent on the registry entry), so this is free hardening on

.github/workflows/security.yml

@@ -170,7 +170,7 @@ jobs:
           format: sarif
           output: trivy.sarif
 
-      - uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+      - uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
         if: always()
         with:
           sarif_file: trivy.sarif

requirements_lock.txt

@@ -38,9 +38,9 @@ idna==3.18 \
     --hash=sha256:7f952cbe720b688055e3f87de14f5c3e5fdaa8bc3928985c4077ca689de849a2 \
     --hash=sha256:ffb385a7e039654cef1ab9ef32c6fafe283c0c0467bba1d9029738ce4a14a848
     # via requests
-packaging==26.2 \
-    --hash=sha256:5fc45236b9446107ff2415ce77c807cee2862cb6fac22b8a73826d0693b0980e \
-    --hash=sha256:ff452ff5a3e828ce110190feff1178bb1f2ea2281fa2075aadb987c2fb221661
+packaging==26.3 \
+    --hash=sha256:94edc256424af38762eb31306eed28beb9f0efc50a8837492c9d6fd6004aed79 \
+    --hash=sha256:d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c
     # via unnatural-designs-workspace
 requests==2.34.2 \
     --hash=sha256:2a0d60c172f83ac6ab31e4554906c0f3b3588d37b5cb939b1c061f4907e278e0 \

tools/network_infrastructure_maintenance/go.mod

@@ -2,7 +2,7 @@ module github.com/Syndic/unnatural_designs/tools/network_infrastructure_maintena
 
 go 1.26.1
 
-require github.com/vbauerster/mpb/v8 v8.14.0
+require github.com/vbauerster/mpb/v8 v8.15.1
 
 require (
 	github.com/VividCortex/ewma v1.2.0 // indirect

tools/network_infrastructure_maintenance/go.sum

@@ -10,5 +10,7 @@ github.com/vbauerster/cupwriter v0.0.4 h1:9sBPe0uXWLZuWQU5lqVbhyFlxX6c09asST/Yfa
 github.com/vbauerster/cupwriter v0.0.4/go.mod h1:IFyzS6Xis5dnBH/rdAhrnuzg3c+KkUqEN6yE8lhJlDw=
 github.com/vbauerster/mpb/v8 v8.14.0 h1:55SR80dptMfASxIG/oCEkBXgBhxeSu4GrVsjl16oKmA=
 github.com/vbauerster/mpb/v8 v8.14.0/go.mod h1:HgpQPKfcWe3kbuGGPmi+jatHreMase5C3Fp5dpdAy0Q=
+github.com/vbauerster/mpb/v8 v8.15.1 h1:lU/aOyrM/cGYhUTFGRkJM9zsVkc35abxlGSvA4lmg9M=
+github.com/vbauerster/mpb/v8 v8.15.1/go.mod h1:HgpQPKfcWe3kbuGGPmi+jatHreMase5C3Fp5dpdAy0Q=
 golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
 golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=