chore(deps): consolidate dependency updates and scanning fixes

clients/agent-runtime/src/gateway/mod.rs

@@ -33,7 +33,6 @@ use axum::{
     routing::{get, post},
     Router,
 };
-use hmac::KeyInit;
 use parking_lot::Mutex;
 use regex::Regex;
 use std::collections::hash_map::DefaultHasher;
@@ -3126,7 +3125,7 @@ async fn handle_whatsapp_verify(
 /// Returns true if the signature is valid, false otherwise.
 /// See: <https://developers.facebook.com/docs/graph-api/webhooks/getting-started#verification-requests>
 pub fn verify_whatsapp_signature(app_secret: &str, body: &[u8], signature_header: &str) -> bool {
-    use hmac::{Hmac, Mac};
+    use hmac::{Hmac, KeyInit, Mac};
     use sha2::Sha256;
 
     // Signature format: "sha256=<hex_signature>"

clients/composeApp/buildscript-gradle.lockfile

@@ -115,8 +115,8 @@ org.glassfish.jaxb:jaxb-runtime:2.3.2=classpath
 org.glassfish.jaxb:txw2:2.3.2=classpath
 org.jdom:jdom2:2.0.6.1=classpath
 org.jetbrains.compose.hot-reload:hot-reload-gradle-plugin:1.0.0=classpath
-org.jetbrains.compose:compose-gradle-plugin:1.10.2=classpath
-org.jetbrains.compose:org.jetbrains.compose.gradle.plugin:1.10.2=classpath
+org.jetbrains.compose:compose-gradle-plugin:1.10.3=classpath
+org.jetbrains.compose:org.jetbrains.compose.gradle.plugin:1.10.3=classpath
 org.jetbrains.kotlin.plugin.compose:org.jetbrains.kotlin.plugin.compose.gradle.plugin:2.3.20=classpath
 org.jetbrains.kotlin:abi-tools-api:2.3.20=classpath
 org.jetbrains.kotlin:compose-compiler-gradle-plugin:2.3.20=classpath