build(deps): dependabot sweep 2 (rust, actions, react-email, pulumi, pi)

.github/workflows/android-release.yml

@@ -163,7 +163,7 @@ jobs:
           cat "$PROPS_FILE"
 
       - name: Setup Java
-        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
         with:
           distribution: 'temurin'
           java-version: '17'

.github/workflows/ios-release.yml

@@ -196,7 +196,7 @@ jobs:
           echo "✅ Metal Toolchain removed"
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # v1
+        uses: ruby/setup-ruby@8e41b362d2589a22a44c1cfa214b3c83052c195b # v1
         with:
           ruby-version: '3.0'
           bundler-cache: true

.github/workflows/thunder-deep-review.yml

@@ -196,7 +196,7 @@ jobs:
       # ─────────────────────────────────────────────────────────────────────
       - name: thunder-deep-review (step 1 — recall pass, candidate findings)
         id: review_model
-        uses: anthropics/claude-code-action@37b464ce72700f7b2c5ff8d2db7fa7b15df792f5 # v1
+        uses: anthropics/claude-code-action@12531344451323133b0493233c759991ac61da12 # v1
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           # Pass the workflow token so the action authenticates to GitHub WITH it
@@ -398,7 +398,7 @@ jobs:
         if: >-
           steps.persist_candidates.outputs.count != '' &&
           steps.persist_candidates.outputs.count != '0'
-        uses: anthropics/claude-code-action@37b464ce72700f7b2c5ff8d2db7fa7b15df792f5 # v1
+        uses: anthropics/claude-code-action@12531344451323133b0493233c759991ac61da12 # v1
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           github_token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/version-bump.yml

@@ -90,7 +90,7 @@ jobs:
 
       - name: Install git-cliff
         if: ${{ !inputs.nightly }}
-        uses: taiki-e/install-action@5ebac0d9522d786674368e47e92963ba13f2c376 # v2
+        uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2
         with:
           tool: git-cliff
 

backend/package.json

@@ -50,7 +50,7 @@
   "devDependencies": {
     "@electric-sql/pglite-socket": "^0.2.7",
     "@eslint/js": "^10.0.1",
-    "@react-email/ui": "6.6.8",
+    "@react-email/ui": "6.8.1",
     "@types/react": "^19.1.10",
     "@typescript-eslint/eslint-plugin": "^8.59.1",
     "@typescript-eslint/parser": "^8.59.1",

deploy/pulumi/package.json

@@ -7,7 +7,7 @@
     "@pulumi/aws": "^7.27.0",
     "@pulumi/awsx": "^3.5.0",
     "@pulumi/cloudflare": "^6.14.0",
-    "@pulumi/docker-build": "^0.0.17",
+    "@pulumi/docker-build": "^0.0.20",
     "@pulumi/eks": "^4.0.0",
     "@pulumi/keycloak": "^6.10.1",
     "@pulumi/kubernetes": "^4.0.0",

package.json

@@ -67,9 +67,9 @@
     "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/sortable": "^10.0.0",
     "@dnd-kit/utilities": "^3.2.2",
-    "@earendil-works/pi-agent-core": "0.80.3",
-    "@earendil-works/pi-ai": "0.80.3",
-    "@earendil-works/pi-coding-agent": "0.80.3",
+    "@earendil-works/pi-agent-core": "0.80.7",
+    "@earendil-works/pi-ai": "0.80.7",
+    "@earendil-works/pi-coding-agent": "0.80.7",
     "@fontsource-variable/mozilla-headline": "^5.2.2",
     "@hookform/resolvers": "^5.2.1",
     "@icons-pack/react-simple-icons": "^13.13.0",