chore(deps): lock file maintenance

[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[indent-zero]

PR Summary

Force-pushed Renovate lockFileMaintenance PR (5a6c06b → 76e8a73) re-runs against the newer main (which advanced by baadc86 — PR #1660 hermes change) and pulls in a few additional fast-moving upstream releases. Still strictly a lockfile refresh: only bun.lock and flake.lock change vs main, no source/manifest/CI files. All updates are minor/patch within the configured semver ranges, and renovate.json:25-32 explicitly enables and auto-merges this workflow. All lockfile invariants (parent ↔ optional-platform-binary lockstep, transitive constraint consistency, integrity hashes preserved across tree-shape changes, flake input graph topology) are verified.

• bun.lock direct-dep bumps: @anthropic-ai/claude-code (+8 binaries) 2.1.126 → 2.1.128, turbo (+6 @turbo/* binaries) 2.9.8 → 2.9.9, mcporter 0.10.0 → 0.10.1 (new in this commit).
• bun.lock transitives: @anthropic-ai/claude-agent-sdk (+8 binaries) 0.2.126 → 0.2.128, @ai-sdk/openai 3.0.59 → 3.0.60, @google/genai 1.51.0 → 1.52.0, @opencode-ai/sdk 1.14.33 → 1.14.34, @slack/types 2.20.1 → 2.21.0 + @slack/web-api 7.15.1 → 7.15.2, express-rate-limit 8.4.1 → 8.5.0, @solana/rpc-transport-http/undici-types 7.19.2 → 7.25.0, and @nanocollective/nanocoder/undici 8.1.0 → 8.2.0 (new in this commit).
• bun.lock tree dedup/normalization (no semantic change, identical version + SHA): */express/qs@6.15.1 re-nested under */express/body-parser/qs@6.15.1; */@types/node@25.6.0 aliased entries removed (resolved via top-level hoist); */readable-stream/string_decoder@1.3.0 aliases added; @kaitranntt/ccs bin key reorder.
• flake.lock: bumps flake-parts_4 (root), flake-parts_5 (converging to the same rev under neovim-nightly-overlay), neovim-nightly-overlay, neovim-src (new in this commit), nixpkgs-nightly, and nur. Input graph topology unchanged.

Issues

No issues found.

CI Checks

Waiting for CI checks...

[mesa-dot-dev]

You do not have enough credits to review this pull request. Please purchase more credits to continue.

[mesa-dot-dev]

Mesa Description

TL;DR

Updates lock files to use the latest dependency versions.

What changed?

• bun.lock: Updated to reflect changes in project dependencies, ensuring consistent dependency resolution.
• flake.lock: Updated, reflecting a refresh or change in the project's Nix Flake dependencies.

^{Description generated by Mesa. Update settings}

[cubic-dev-ai]

No issues found across 2 files