chore(deps): lock file maintenance

[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[indent-zero]

PR Summary

Force-pushed Renovate lockFileMaintenance PR rebased again on a now-further-advanced main (PR #1651 noctalia changes are absorbed and not in this PR's diff). The new commit is a cleaner re-resolution than the previous push — the yaml 2.8.4→2.8.3 dedup did not happen this time and the previously-added nested zod@4.2.1 entries are gone — but the @noble/curves 1.9.7→1.9.1 dedup persists. Still purely auto-generated lockfile output with no package.json, flake.nix, or source-code changes; the repo is configured to auto-merge this class of PR.

• bun.lock top-level bumps: @homebridge/ciao 1.3.7→1.3.8, @tybys/wasm-util 0.10.1→0.10.2, fast-xml-builder 1.1.5→1.1.7, ipaddr.js 2.3.0→2.4.0, zod 4.4.2→4.4.3.
• bun.lock notable deduplication: top-level @noble/curves resolves down from 1.9.7 → 1.9.1 (matching ox/viem's exact pin); 1.9.1→1.9.7 changelog contains no security/critical fixes.
• bun.lock nested-entry shuffles: removed ox/viem @noble/curves and mcporter/openclaw/takt zod entries (now superseded by top-level); added a structural @opentui/core/web-tree-sitter@0.26.8 entry that reuses the existing integrity hash.
• flake.lock: same shape as the previous push with nixpkgs-nightly ticking one more increment newer; two newly-in-scope top-level bumps (foundry, nixos-hardware); the transitive ghostty source switch (cachix/ghostty#cachix-upstream → ghostty-org/ghostty) and nixpkgs_4 channel switch persist as downstream consequences of the devenv bump.

Issues

No issues found.

CI Checks

Waiting for CI checks...

[mesa-dot-dev]

You do not have enough credits to review this pull request. Please purchase more credits to continue.

[mesa-dot-dev]

Mesa Description

TL;DR

chore(deps): lock file maintenance

What changed?

All locks refreshed

^{Description generated by Mesa. Update settings}

[cubic-dev-ai]

No issues found across 2 files