build(deps): batch Renovate dashboard updates across all ecosystems

.bazelversion

@@ -1 +1 @@
-9.1.0
+9.1.1

.github/workflows/branch.yml

@@ -18,7 +18,7 @@ jobs:
       image: ghcr.io/muchq/moonbase/ci-base:latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Download google-java-format
         run: |
@@ -54,7 +54,7 @@ jobs:
       image: ghcr.io/muchq/moonbase/ci-base:latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0 # Fetch full history for bazel-diff
 
@@ -70,7 +70,7 @@ jobs:
           rm -rf "$AGENT_TOOLSDIRECTORY"
           df -h
 
-      - uses: bazel-contrib/setup-bazel@0.18.0
+      - uses: bazel-contrib/setup-bazel@0.19.0
         with:
           bazelisk-cache: true
           disk-cache: ${{ github.workflow }}
@@ -89,7 +89,7 @@ jobs:
   test-microgpt-metal:
     runs-on: macos-26
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -112,7 +112,7 @@ jobs:
   test-1d4-web:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v6
         with:
@@ -140,7 +140,7 @@ jobs:
   test-ios:
     runs-on: macos-26
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -159,7 +159,7 @@ jobs:
         working-directory: domains/games/apps/wordchains_ios
         run: swift test
 
-      - uses: bazel-contrib/setup-bazel@0.18.0
+      - uses: bazel-contrib/setup-bazel@0.19.0
         if: steps.filter.outputs.changed == 'true'
         with:
           bazelisk-cache: true

.github/workflows/build-ci-image.yml

@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4

.github/workflows/codeql.yml

@@ -54,7 +54,7 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/publish.yml

@@ -17,12 +17,12 @@ jobs:
         - /var/run/docker.sock:/var/run/docker.sock
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Configure git safe directory
         run: git config --global --add safe.directory /__w/MoonBase/MoonBase
 
-      - uses: bazel-contrib/setup-bazel@0.18.0
+      - uses: bazel-contrib/setup-bazel@0.19.0
         with:
           bazelisk-cache: true
           disk-cache: ${{ github.workflow }}

.github/workflows/release-rust-tool.yml

@@ -41,7 +41,7 @@ jobs:
       version: ${{ steps.version_check.outputs.current_version }}
       should_release: ${{ steps.version_check.outputs.changed }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.workflow_run_sha }}
           fetch-depth: 2
@@ -128,7 +128,7 @@ jobs:
             target: x86_64-unknown-linux-gnu
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ needs.prepare.outputs.ref }}
 
@@ -143,7 +143,7 @@ jobs:
           fi
           echo "Version verification passed: $VERSION"
 
-      - uses: bazel-contrib/setup-bazel@0.18.0
+      - uses: bazel-contrib/setup-bazel@0.19.0
         with:
           bazelisk-cache: true
           disk-cache: release-${{ inputs.tool_name }}-${{ matrix.target }}
@@ -180,7 +180,7 @@ jobs:
     if: always() && needs.build.result == 'success'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/download-artifact@v8
         with:

.github/workflows/release-wordchains-ios.yml

@@ -24,7 +24,7 @@ jobs:
       version: ${{ steps.version_check.outputs.current_version }}
       should_release: ${{ steps.version_check.outputs.changed }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.workflow_run.head_sha }}
           fetch-depth: 2
@@ -111,9 +111,9 @@ jobs:
   build:
     needs: [prepare]
     if: always() && needs.prepare.result == 'success'
-    runs-on: macos-15
+    runs-on: macos-26
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ needs.prepare.outputs.ref }}
 
@@ -137,7 +137,7 @@ jobs:
         working-directory: domains/games/apps/wordchains_ios
         run: swift test
 
-      - uses: bazel-contrib/setup-bazel@0.18.0
+      - uses: bazel-contrib/setup-bazel@0.19.0
         with:
           bazelisk-cache: true
           disk-cache: release-wordchains-ios
@@ -224,9 +224,9 @@ jobs:
   release:
     needs: [prepare, build]
     if: always() && needs.build.result == 'success'
-    runs-on: macos-15
+    runs-on: macos-26
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/download-artifact@v8
         with:

.github/workflows/semgrep.yml

@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checkout project source
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # Scan code using project's configuration on https://semgrep.dev/manage
       - uses: returntocorp/semgrep-action@713efdd345f3035192eaa63f56867b88e63e4e5d