Update dependencies

.github/workflows/bigbonk.yml

@@ -39,7 +39,7 @@ jobs:
           mentions: '/bigbonk'
           variant: 'max'
           permissions: write
-          opencode_version: "1.4.6"
+          opencode_version: "1.14.28"
           # token_permissions defaults to WRITE (i.e. Bonk can push commits).
           # We intentionally leave it that way here because users may ask Bonk
           # to update their PR via /bigbonk.

.github/workflows/bonk.yml

@@ -38,7 +38,7 @@ jobs:
           model: 'cloudflare-ai-gateway/anthropic/claude-opus-4-6'
           mentions: '/bonk,@ask-bonk'
           permissions: write
-          opencode_version: "1.4.6"
+          opencode_version: "1.14.28"
           # token_permissions defaults to WRITE (i.e. Bonk can push commits).
           # We intentionally leave it that way here because users may ask Bonk
           # to update their PR via /bonk.

.github/workflows/new-pr-review.yml

@@ -44,7 +44,7 @@ jobs:
           model: 'cloudflare-ai-gateway/anthropic/claude-opus-4-6'
           forks: 'false'
           permissions: write
-          opencode_version: "1.4.6"
+          opencode_version: "1.14.28"
           # The auto-reviewer must never push to PR branches. Its prompt
           # (bonk_reviewer.md) already forbids git write ops, but NO_PUSH
           # enforces that at the token level so it holds even if the model

build/deps/gen/build_deps.MODULE.bazel

@@ -8,7 +8,7 @@ git_repository = use_repo_rule("@bazel_tools//tools/build_defs/repo:git.bzl", "g
 bazel_dep(name = "abseil-cpp", version = "20260107.1")
 
 # apple_support
-bazel_dep(name = "apple_support", version = "2.5.3")
+bazel_dep(name = "apple_support", version = "2.5.4")
 
 # aspect_rules_esbuild
 bazel_dep(name = "aspect_rules_esbuild", version = "0.25.1")
@@ -56,7 +56,7 @@ use_repo(http, "clang_tidy_linux_arm64")
 bazel_dep(name = "platforms", version = "1.0.0")
 
 # rules_cc
-bazel_dep(name = "rules_cc", version = "0.2.17")
+bazel_dep(name = "rules_cc", version = "0.2.18")
 
 # rules_multirun
 bazel_dep(name = "rules_multirun", version = "0.13.0")

build/deps/gen/deps.MODULE.bazel

@@ -27,10 +27,10 @@ bazel_dep(name = "brotli", version = "1.2.0.bcr.1")
 # capnp-cpp
 http.archive(
     name = "capnp-cpp",
-    sha256 = "1a9f2c7153a4a8e41ea69c4a912118d43d2e89105d5bd58b7edc97e8cf4bda89",
-    strip_prefix = "capnproto-capnproto-78bd96c/c++",
+    sha256 = "f471170924b07936b348e4e34b494563fc75f8d0e7ac651fcd1051ff9f119076",
+    strip_prefix = "capnproto-capnproto-0368024/c++",
     type = "tgz",
-    url = "https://github.com/capnproto/capnproto/tarball/78bd96cef23811ea899d8f60f3d43082152acb36",
+    url = "https://github.com/capnproto/capnproto/tarball/0368024276bb09fd6496d3d0e29b8c083f30df42",
 )
 use_repo(http, "capnp-cpp")
 
@@ -123,10 +123,10 @@ archive_override(
 http.archive(
     name = "simdutf",
     build_file = "//:build/BUILD.simdutf",
-    sha256 = "dce5756f20c03202ad48de43ff306629f7e0dd2bed204dfa2967ea13fcab296e",
+    sha256 = "c47c68cd51025ec66509bc36215b4c4f1f0f0a98129139ee55c541531b652526",
     strip_prefix = "",
     type = "zip",
-    url = "https://github.com/simdutf/simdutf/releases/download/v8.2.0/singleheader.zip",
+    url = "https://github.com/simdutf/simdutf/releases/download/v9.0.0/singleheader.zip",
 )
 use_repo(http, "simdutf")