chore: update dependencies

[reneleonhardt]

What does this PR do?

• Update cargo dependencies and GitHub Actions (use pinning to improve supply chain security)
• Let dependabot update bun, cargo, npm and github-actions (use cooldown to improve supply chain security)
• Bump opencode-ai 1.0.169 to 1.1.28 in publish (renovatebot could automate that)

How did you verify your code works?

There is no Justfile to build all packages, cargo build fails with

resource path `sidecars/opencode-cli-aarch64-apple-darwin` doesn't exist

the same as the many documentation commands with bun install && bun run --cwd packages/desktop tauri build and workflow jobs like nix build .#desktop -L 🤷

Running phase: installPhase
       > ERROR: installShellCompletion: installShellCompletion: installed shell completion file `/nix/store/z5bjjx0sf3ifbhj4g78d52z5ninr6lih-opencode-1.1.28-3d47dae/share/bash-completion/completions/opencode.bash' does not exist or has zero size

[github-actions]

Thanks for your contribution!

This PR doesn't have a linked issue. All PRs must reference an existing issue.

Please:

1. Open an issue describing the bug/feature (if one doesn't exist)
2. Add Fixes #<number> or Closes #<number> to this PR description

See CONTRIBUTING.md for details.

[github-actions]

The following comment was made by an LLM, it may be inaccurate:

No duplicate PRs found

[gigamonster256]

the same as the many documentation commands with bun install && bun run --cwd packages/desktop tauri build and workflow jobs like nix build .#desktop -L

building opencode with nix in the latest CI works - https://github.com/anomalyco/opencode/actions/runs/21219264879/job/61049274287#step:4:2607 are you using an up to date dev branch?

for the bun install && bun run --cwd packages/desktop tauri build command to work, you will need to have run the predev script first - looks like an oversight in not running it in the tauri script

[reneleonhardt]

As you can see I even rebased onto dev, but the error stays the same.
It's okay, thank you for replying, maybe I don't need to build locally if CI is better at this.

And the git hooks have not recovered from the bun chaos, at least for me 🙂

Error: Bun version 1.3.6 does not match expected version 1.3.5 from package.json

[gigamonster256]

Error: Bun version 1.3.6 does not match expected version 1.3.5 from package.json

hmm, looks like the husky git hook script was missed when relaxing the bun version requirement, however I'm assuming you're using the flake.nix devShell which should be providing 1.3.5 as of yesterday

[gigamonster256]

The only reason I can think of why the installShellCompletion would fail is if the env vars yargs checks to know which completions to generate are leaking into the nix build environment from somewhere that implies zsh, so yargs generates zsh completions twice instead of once for bash and once for zsh

[gigamonster256]

@reneleonhardt see #9938 (comment) for what seem to have been the issue - arm64 Darwin should be working now.

[reneleonhardt]

@reneleonhardt see #9938 (comment) for what seem to have been the issue - arm64 Darwin should be working now.

Wow, don't know how your flake magic works, but I was able to build much more for the first time, thank you! ❤️
Now only the merge errors from today failed, "language.ru" has been duplicated in de es fr ja ko zh.ts.
Are you sure that CI is building your many packages? 🤔

$ tsgo -b
@opencode-ai/app:typecheck: src/i18n/de.ts(287,3): error TS1117: An object literal cannot have multiple properties with the same name.