chore(deps): update all dependencies

.github/actions/setup-native/action.yaml

@@ -28,7 +28,7 @@ runs:
       if: "runner.os == 'Windows'"
       uses: "ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756" # v1.13.0
     - name: "Run mise install"
-      uses: "jdx/mise-action@1648a7812b9aeae629881980618f079932869151" # v4.0.1
+      uses: "jdx/mise-action@dba19683ed58901619b14f395a24841710cb4925" # v4.1.0
       with:
         version: "${{ inputs.mise-version }}"
         cache_key_prefix: "${{ inputs.cache-key }}-mise"

.github/workflows/regular.yaml

@@ -31,7 +31,7 @@ jobs:
       mise-version: "${{ steps.init-workflow.outputs.mise-version }}"
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
+        uses: "actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10" # v6.0.3
         with:
           ref: "${{ github.ref }}"
           fetch-depth: 1
@@ -55,7 +55,7 @@ jobs:
     runs-on: "${{ matrix.os }}"
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
+        uses: "actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10" # v6.0.3
         with:
           ref: "${{ github.ref }}"
           fetch-depth: 1
@@ -97,7 +97,7 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
+        uses: "actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10" # v6.0.3
         with:
           ref: "${{ github.ref }}"
           fetch-depth: 1
@@ -120,7 +120,7 @@ jobs:
         with:
           run: "mise run --force ci-build"
       - name: "Run benchmarks"
-        uses: "CodSpeedHQ/action@3194d9a39c4d46684cb44bf7207fc56626aad8fd" # v4.15.1
+        uses: "CodSpeedHQ/action@9d332c4d90b43981c3e55ae8e38e68709996240f" # v4.17.0
         with:
           mode: "simulation"
           run: "pnpm -C packages/node exec vitest bench --run"
@@ -133,7 +133,7 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
       - name: "Checkout repository"
-        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
+        uses: "actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10" # v6.0.3
         with:
           ref: "${{ github.ref }}"
           fetch-depth: 1
@@ -153,7 +153,7 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
       - name: "Checkout repository"
-        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
+        uses: "actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10" # v6.0.3
         with:
           ref: "${{ github.ref }}"
           fetch-depth: 1
@@ -168,6 +168,6 @@ jobs:
           output: "trivy-results.sarif"
           ignore-unfixed: true
       - name: "Upload Trivy scan results to GitHub Security tab"
-        uses: "github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa" # v4.36.0
+        uses: "github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e" # v4.36.2
         with:
           sarif_file: "trivy-results.sarif"

.github/workflows/release.yaml

@@ -23,7 +23,7 @@ jobs:
       mise-version: "${{ steps.init-workflow.outputs.mise-version }}"
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
+        uses: "actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10" # v6.0.3
         with:
           ref: "${{ github.ref }}"
           fetch-depth: 1
@@ -63,7 +63,7 @@ jobs:
     runs-on: "${{ matrix.os }}"
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
+        uses: "actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10" # v6.0.3
         with:
           ref: "${{ github.ref }}"
           fetch-depth: 1
@@ -140,7 +140,7 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
+        uses: "actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10" # v6.0.3
         with:
           ref: "${{ github.ref }}"
           fetch-depth: 1

.mise-version

@@ -1 +1 @@
-v2026.5.15
+v2026.6.0

Dockerfile

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1.24@sha256:87999aa3d42bdc6bea60565083ee17e86d1f3339802f543c0d03998580f9cb89
 # <https://quay.io/repository/pypa/manylinux_2_28?tab=tags>
-FROM quay.io/pypa/manylinux_2_28@sha256:65f13b3b5473749287dad47a1b8ca4ebc6abbc892956acd26a81cdc1d5b50928
+FROM quay.io/pypa/manylinux_2_28@sha256:8ee7337d129d3266d0570427d742354e15a4842f96908bec7e96e6270f8a3221
 
 ARG TARGETARCH
 ARG USERNAME=runner

mise.toml

@@ -53,32 +53,32 @@ CARGO_AUDITABLE_VERSION = "0.7.4"
 # fails to extract zips on Node 24.16.0+ and 26.1.0+ due to an unsettled
 # async handler. See electron/electron#51619 and max-mapper/extract-zip#154.
 # Bump again once the upstream fix lands and electron picks it up.
-node = "24.15.0"
+node = "24.16.0"
 # pnpm 11 dropped pre-built `darwin-x64` binaries from its GitHub
 # releases (only `darwin-arm64` ships now), so the default aqua backend
 # can't satisfy the macos-15-intel CI runner. The `npm:` backend uses
 # pnpm's npm package (pure JS) instead, which runs on any platform with
 # Node — at the cost of going through npmjs.org for the install.
-"npm:pnpm" = "11.2.2"
-rust.version = "nightly-2026-05-24"
+"npm:pnpm" = "11.5.2"
+rust.version = "nightly-2026-06-06"
 
 "aqua:jqlang/jq" = "1.8.1"
 "github:mikefarah/yq" = "4.53.2"
 "aqua:BurntSushi/ripgrep" = "15.1.0"
-"aqua:aquasecurity/trivy" = "0.70.0"
+"aqua:aquasecurity/trivy" = "0.71.0"
 "aqua:google/yamlfmt" = "0.21.0"
 "aqua:koalaman/shellcheck" = "0.11.0"
 "aqua:gitleaks/gitleaks" = "8.30.1"
 "aqua:rhysd/actionlint" = "1.7.12"
-"aqua:astral-sh/uv" = "0.11.16"
-"aqua:cli/cli" = "2.92.0"
+"aqua:astral-sh/uv" = "0.11.19"
+"aqua:cli/cli" = "2.93.0"
 "aqua:cargo-bins/cargo-binstall" = "1.19.1"
-"aqua:anchore/syft" = "1.44.0"
+"aqua:anchore/syft" = "1.45.1"
 
 # Tools with non-standard version prefix
 [tools."github:nextest-rs/nextest"]
 version_prefix = "cargo-nextest-"
-version = "0.9.136"
+version = "0.9.137"
 
 [tools."github:mstange/samply"]
 version_prefix = "samply-v"
@@ -90,11 +90,11 @@ version = "2.14.0"
 os = ["linux", "macos"]
 
 [tools."github:EmbarkStudios/cargo-deny"]
-version = "0.19.7"
+version = "0.19.8"
 os = ["linux", "macos"]
 
 [tools."aqua:crate-ci/typos"]
-version = "1.46.3"
+version = "1.47.2"
 os = ["linux", "macos"]
 
 [tools."github:taiki-e/cargo-llvm-cov"]

package.json

@@ -25,5 +25,5 @@
     "node": "^24.11.0",
     "pnpm": "^11.2.2"
   },
-  "packageManager": "pnpm@11.2.2+sha512.36e6621fad506178936455e70247b8808ef4ec25797a9f437a93281a020484e2607f6a469a22e982987c3dbb8866e3071514ab10a4a1749e06edcd1ec118436f"
+  "packageManager": "pnpm@11.5.2"
 }