Update dependencies

[workers-devprod]

This is an automated pull request for updating the dependencies of workerd.

[ask-bonk]

I've reviewed all the changes thoroughly. This is a straightforward automated dependency update PR. Let me summarize what I see:

1. GitHub workflows: opencode version bump 1.14.28 -> 1.14.33 (3 files)
2. build_deps.MODULE.bazel: Minor version bumps for aspect_rules_ts (3.8.8 -> 3.8.9), bazel_lib (3.2.2 -> 3.3.1), platforms (1.0.0 -> 1.1.0), rules_python (1.9.0 -> 2.0.0), wasm-tools (1.247.0 -> 1.248.0)
3. deps.MODULE.bazel: capnp-cpp commit update, ncrypto v1.1.3 -> v1.1.4, zlib commit update
4. Cargo.lock: Routine patch-level bumps for Rust crates (capnp-rpc, js-sys, siphasher, swc_ecma_parser, swc_ecma_transforms_react, tokio, wasm-bindgen)

All changes are:

• Autogenerated files (as noted by the header comment in the MODULE.bazel files)
• Version bumps with updated SHA256 hashes
• Lockfile updates

The rules_python 1.9.0 -> 2.0.0 is a major version bump, but this is a BCR (Bazel Central Registry) dependency and the CI will catch any breakage. The capnp-cpp and ncrypto are pinned to specific commits/tags with SHA256 verification. All hash values are properly updated alongside their corresponding URLs and versions.

No logic changes, no security concerns, no backward compatibility issues. CI is pending but will validate the dependency compatibility.

LGTM

github run