chore(deps): update all dependencies

.github/workflows/docker.yaml

@@ -79,7 +79,7 @@ jobs:
           trivyignores: .trivyignore.yaml
 
       - name: Upload Trivy SARIF
-        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4
+        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4
         if: always()
         with:
           sarif_file: trivy-results.sarif

.github/workflows/renovate.yaml

@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Renovate
-        uses: renovatebot/github-action@6d26fcf0275dc65624cbc3d51fe78bc773f98321 # v46.3.6
+        uses: renovatebot/github-action@230ce922b08968d0a4f6f70f295601daff09ef1d # v46.3.7
         env:
           RENOVATE_GIT_AUTHOR: "gw0-bot <gw0-bot@users.noreply.github.com>"
           RENOVATE_REPOSITORIES: ${{ github.repository }}

Dockerfile

@@ -7,14 +7,14 @@
 # Sections are ordered from least to most frequently changed to maximize layer reuse.
 #
 
-FROM docker.io/library/debian:trixie-slim@sha256:a99cfc517144bc59b1978475ec53b46ecabec7e43635402ee5b77cc54cd1b20a
+FROM docker.io/library/debian:trixie-slim@sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f
 
 ##
 # Base system
 ##
 # https://github.com/oven-sh/bun/releases
 # renovate: datasource=github-releases depName=oven-sh/bun extractVersion=^bun-v(?<version>.+)$
-ARG BUN_VERSION=1.4.2
+ARG BUN_VERSION=1.4.3
 
 ARG DEBIAN_FRONTEND=noninteractive
 ENV TZ=Etc/UTC
@@ -180,7 +180,7 @@ ARG SHELLCHECK_VERSION=0.11.0
 ARG YAMLFMT_VERSION=0.21.0
 # https://github.com/astral-sh/ruff/releases
 # renovate: datasource=github-releases depName=astral-sh/ruff
-ARG RUFF_VERSION=0.16.9
+ARG RUFF_VERSION=0.17.0
 # https://www.npmjs.com/package/markdownlint-cli2
 # renovate: datasource=npm depName=markdownlint-cli2
 ARG MARKDOWNLINT_VERSION=0.23.3
@@ -224,7 +224,7 @@ ARG CLAUDE_POWERLINE_VERSION=1.32.1
 ARG AGENTSHIELD_VERSION=1.6.0
 # https://github.com/dandavison/delta/releases
 # renovate: datasource=github-releases depName=dandavison/delta
-ARG GIT_DELTA_VERSION=0.19.2
+ARG GIT_DELTA_VERSION=0.20.1
 
 RUN --mount=type=cache,target=/usr/local/bun/install/cache \
     --mount=type=tmpfs,target=/tmp \
@@ -249,16 +249,16 @@ RUN --mount=type=cache,target=/usr/local/bun/install/cache \
 ARG CODEMAP_VERSION=1.3.1
 # https://github.com/rtk-ai/rtk/releases
 # renovate: datasource=github-releases depName=rtk-ai/rtk
-ARG RTK_VERSION=0.50.0
+ARG RTK_VERSION=0.51.0
 # https://github.com/SuperClaude-Org/SuperClaude_Framework/releases
 # renovate: datasource=github-releases depName=SuperClaude-Org/SuperClaude_Framework
 ARG SUPERCLAUDE_VERSION=4.3.0
 # https://github.com/Jeffallan/claude-skills/releases
 # renovate: datasource=github-releases depName=Jeffallan/claude-skills
-ARG CLAUDE_SKILLS_VERSION=0.4.16
+ARG CLAUDE_SKILLS_VERSION=0.4.18
 # https://github.com/sickn33/agentic-awesome-skills/releases
 # renovate: datasource=github-releases depName=sickn33/agentic-awesome-skills
-ARG AAS_VERSION=18.11.0
+ARG AAS_VERSION=19.3.0
 
 RUN --mount=type=bind,source=scripts/install-aas-bundles.py,target=/mnt/install-aas-bundles.py \
     --mount=type=cache,target=/root/.cache/pip \
@@ -325,7 +325,7 @@ RUN --mount=type=bind,source=scripts/install-aas-bundles.py,target=/mnt/install-
 ##
 # https://www.npmjs.com/package/@anthropic-ai/claude-code/v/latest
 # renovate: datasource=npm depName=@anthropic-ai/claude-code
-ARG CLAUDE_VERSION=2.1.286
+ARG CLAUDE_VERSION=2.1.296
 
 RUN --mount=type=cache,target=/usr/local/bun/install/cache \
     : \