fix(deps): update all non-major dependencies

.github/workflows/ci.yml

@@ -124,7 +124,7 @@ jobs:
           persist-credentials: false
 
       - name: Install just
-        uses: taiki-e/install-action@7f4eb899022d8fe70b20c4f3de697aa85c309026 # v2.85.11
+        uses: taiki-e/install-action@82cd3e7658a6f96c86c0234aeeda1748937cb0a1 # v2.85.13
         with:
           tool: just@1.48.0
 

.github/workflows/release.yml

@@ -306,14 +306,14 @@ jobs:
         run: scripts/release/github/verify-release-ref.sh "$TAG"
 
       - name: Install just
-        uses: taiki-e/install-action@7f4eb899022d8fe70b20c4f3de697aa85c309026 # v2.85.11
+        uses: taiki-e/install-action@82cd3e7658a6f96c86c0234aeeda1748937cb0a1 # v2.85.13
         with:
           tool: just@1.48.0
 
       - name: Install pinned Node
         uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
         with:
-          node-version: 24.10.0
+          node-version: 24.19.0
           package-manager-cache: false
 
       - name: Install pinned pnpm

.github/workflows/unsigned-desktop-build.yml

@@ -27,15 +27,15 @@ jobs:
 
       - name: Install just on Windows
         if: runner.os == 'Windows'
-        uses: taiki-e/install-action@7f4eb899022d8fe70b20c4f3de697aa85c309026 # v2.85.11
+        uses: taiki-e/install-action@82cd3e7658a6f96c86c0234aeeda1748937cb0a1 # v2.85.13
         with:
           tool: just@1.48.0
 
       - name: Install pinned Node on Windows
         if: runner.os == 'Windows'
         uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
         with:
-          node-version: 24.10.0
+          node-version: 24.19.0
 
       - name: Install pinned pnpm on Windows
         if: runner.os == 'Windows'
@@ -55,7 +55,7 @@ jobs:
 
       - name: Cache managed Goose Cargo target on Windows
         if: runner.os == 'Windows'
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           path: ${{ env.GOOSE_DEV_CARGO_TARGET_DIR }}
           key: goose-cargo-${{ runner.os }}-rust-1.94.1-${{ hashFiles('goose-backend.lock.json') }}

bb-cli/Cargo.toml

@@ -24,11 +24,11 @@ pbjson = "0.9"
 pbjson-types = "0.9"
 prost = "0.14"
 prost-types = "0.14"
-reqwest = { version = "0.12", default-features = false, features = ["blocking", "json", "multipart", "rustls-tls"] }
+reqwest = { version = "0.13", default-features = false, features = ["blocking", "json", "multipart", "rustls-tls"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 serde_yaml = "0.9"
-sha2 = "0.10"
+sha2 = "0.11"
 tiny_http = "0.12"
 tonic = { version = "0.14", features = ["transport"] }
 tonic-prost = "0.14"

bb-cli/docker/acceptance/Dockerfile

@@ -1,11 +1,11 @@
-FROM rust:1.91.1-bookworm AS build
+FROM rust:1.97.1-bookworm AS build
 
 WORKDIR /src
 COPY . .
 WORKDIR /src/bb-cli
 RUN cargo build --locked --release --bin bb
 
-FROM python:3.12-slim-bookworm
+FROM python:3.14-slim-bookworm
 
 RUN groupadd --gid 10001 acceptance && useradd --uid 10001 --gid acceptance --create-home --shell /usr/sbin/nologin acceptance
 COPY --from=build /src/bb-cli/target/release/bb /usr/local/bin/bb

bb-cli/rust-toolchain.toml

@@ -1,3 +1,3 @@
 [toolchain]
-channel = "1.91.1"
+channel = "1.97.1"
 components = ["clippy", "rustfmt"]

crates/builderbot-auth/Cargo.toml

@@ -12,11 +12,11 @@ blocking-client = ["dep:reqwest"]
 
 [dependencies]
 anyhow = "1"
-reqwest = { version = "0.12", optional = true, default-features = false, features = ["blocking", "json", "rustls-tls"] }
+reqwest = { version = "0.13", optional = true, default-features = false, features = ["blocking", "json", "rustls-tls"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 serde_yaml = "0.9"
-sha2 = "0.10"
+sha2 = "0.11"
 url = "2.5"
 
 [target.'cfg(target_os = "macos")'.dependencies]

docker/linux/Dockerfile

@@ -1,4 +1,4 @@
-# syntax=docker/dockerfile:1.7
+# syntax=docker/dockerfile:1.26
 FROM node:22-bookworm
 
 ENV DEBIAN_FRONTEND=noninteractive

package.json

@@ -3,7 +3,7 @@
   "private": true,
   "version": "0.6.0",
   "type": "module",
-  "packageManager": "pnpm@10.33.0",
+  "packageManager": "pnpm@10.34.5",
   "scripts": {
     "dev": "vite",
     "design-system:audit": "node ./scripts/design-system-audit.mjs",
@@ -48,7 +48,7 @@
   },
   "dependencies": {
     "@aaif/goose-sdk": "workspace:*",
-    "@agentclientprotocol/sdk": "^0.19.0",
+    "@agentclientprotocol/sdk": "^0.29.0",
     "@daypicker/react": "^10.0.1",
     "@mcp-ui/client": "7.1.1",
     "@radix-ui/react-accordion": "^1.2.20",
@@ -141,7 +141,7 @@
   },
   "devDependencies": {
     "@asamuzakjp/css-color": "3.2.0",
-    "@biomejs/biome": "2.4.9",
+    "@biomejs/biome": "2.5.8",
     "@playwright/test": "^1.62.1",
     "@tailwindcss/postcss": "^4.3.3",
     "@tauri-apps/cli": "^2.11.4",