diff --git a/.github/ng-renovate/package.json b/.github/ng-renovate/package.json
index 95fe767b2..a38622a3e 100644
--- a/.github/ng-renovate/package.json
+++ b/.github/ng-renovate/package.json
@@ -3,6 +3,6 @@
   "packageManager": "yarn@4.9.1",
   "type": "commonjs",
   "dependencies": {
-    "renovate": "41.40.0"
+    "renovate": "41.43.6"
   }
 }
diff --git a/.github/ng-renovate/yarn.lock b/.github/ng-renovate/yarn.lock
index 63ece5b8e..4c1593c8c 100644
--- a/.github/ng-renovate/yarn.lock
+++ b/.github/ng-renovate/yarn.lock
@@ -5895,7 +5895,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "ng-renovate@workspace:."
   dependencies:
-    renovate: "npm:41.40.0"
+    renovate: "npm:41.43.6"
   languageName: unknown
   linkType: soft
 
@@ -6044,10 +6044,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"openpgp@npm:6.1.1":
-  version: 6.1.1
-  resolution: "openpgp@npm:6.1.1"
-  checksum: 10c0/dcd355e3aa826d631ad1f5eb39dd939be93ef8d2f3eb56c279662cfb08aaf28f9d5eff92b40c9de28adcbda454d43b0398bc175c0fe9131ccf003f5a20614101
+"openpgp@npm:6.2.0":
+  version: 6.2.0
+  resolution: "openpgp@npm:6.2.0"
+  checksum: 10c0/98275530f7fe22389ee21ba942db697921e3fa967c5096ec46a378b43a2ad7c50f2ed44ff2ebca4ea2c60f30090c4a050478d9a3057d28a7288422eb62ac6a44
   languageName: node
   linkType: hard
 
@@ -6618,9 +6618,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"renovate@npm:41.40.0":
-  version: 41.40.0
-  resolution: "renovate@npm:41.40.0"
+"renovate@npm:41.43.6":
+  version: 41.43.6
+  resolution: "renovate@npm:41.43.6"
   dependencies:
     "@aws-sdk/client-codecommit": "npm:3.840.0"
     "@aws-sdk/client-ec2": "npm:3.840.0"
@@ -6710,7 +6710,7 @@ __metadata:
     nanoid: "npm:5.1.5"
     neotraverse: "npm:0.6.18"
     node-html-parser: "npm:7.0.1"
-    openpgp: "npm:6.1.1"
+    openpgp: "npm:6.2.0"
     p-all: "npm:5.0.0"
     p-map: "npm:7.0.3"
     p-queue: "npm:8.1.0"
@@ -6752,7 +6752,7 @@ __metadata:
   bin:
     renovate: dist/renovate.js
     renovate-config-validator: dist/config-validator.js
-  checksum: 10c0/155e59c113c37ab8783955337cb6a19758c950f6c96ae4f24e2c7f2f07c18e9157912deb13b1db86dae16235e0ef2674c6046d80f3d42d1c5b3c9c3830f6f97f
+  checksum: 10c0/eadd94893bd8517727cc7318c299d79f8d5a1ad082192d98ea739e2267fe266891c7e96554afd9d90563a44a68e30b40fcd6130e3a4180a193258cff3d04f2af
   languageName: node
   linkType: hard
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 9d0d9a138..a7c970ea9 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -27,10 +27,10 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
+        uses: github/codeql-action/init@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
         with:
           languages: ${{ matrix.language }}
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
+        uses: github/codeql-action/analyze@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
         with:
           category: '/language:${{matrix.language}}'
diff --git a/bazel/package.json b/bazel/package.json
index ec5172391..6b32061be 100644
--- a/bazel/package.json
+++ b/bazel/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@devinfra/bazel",
   "dependencies": {
-    "@microsoft/api-extractor": "7.52.8",
+    "@microsoft/api-extractor": "7.52.9",
     "@types/browser-sync": "2.29.0",
     "@types/node": "22.16.5",
     "@types/selenium-webdriver": "^4.1.28",
diff --git a/bazel/pnpm-lock.yaml b/bazel/pnpm-lock.yaml
index af8a64b44..f49e62157 100644
--- a/bazel/pnpm-lock.yaml
+++ b/bazel/pnpm-lock.yaml
@@ -9,8 +9,8 @@ importers:
   .:
     dependencies:
       '@microsoft/api-extractor':
-        specifier: 7.52.8
-        version: 7.52.8(@types/node@22.16.5)
+        specifier: 7.52.9
+        version: 7.52.9(@types/node@22.16.5)
       '@types/browser-sync':
         specifier: 2.29.0
         version: 2.29.0
@@ -74,11 +74,11 @@ packages:
   '@hapi/topo@5.1.0':
     resolution: {integrity: sha512-foQZKJig7Ob0BMAYBfcJk8d77QtOe7Wo4ox7ff1lQYoNNAb6jwcY1ncdoy2e9wQZzvNy7ODZCYJkK8kzmcAnAg==}
 
-  '@microsoft/api-extractor-model@7.30.6':
-    resolution: {integrity: sha512-znmFn69wf/AIrwHya3fxX6uB5etSIn6vg4Q4RB/tb5VDDs1rqREc+AvMC/p19MUN13CZ7+V/8pkYPTj7q8tftg==}
+  '@microsoft/api-extractor-model@7.30.7':
+    resolution: {integrity: sha512-TBbmSI2/BHpfR9YhQA7nH0nqVmGgJ0xH0Ex4D99/qBDAUpnhA2oikGmdXanbw9AWWY/ExBYIpkmY8dBHdla3YQ==}
 
-  '@microsoft/api-extractor@7.52.8':
-    resolution: {integrity: sha512-cszYIcjiNscDoMB1CIKZ3My61+JOhpERGlGr54i6bocvGLrcL/wo9o+RNXMBrb7XgLtKaizZWUpqRduQuHQLdg==}
+  '@microsoft/api-extractor@7.52.9':
+    resolution: {integrity: sha512-313nyhc6DSSMVKD43jZK6Yp5XbliGw5vjN7QOw1FHzR1V6DQ67k4dzkd3BSxMtWcm+cEs1Ux8rmDqots6EABFA==}
     hasBin: true
 
   '@microsoft/tsdoc-config@0.17.1':
@@ -187,8 +187,8 @@ packages:
     resolution: {integrity: sha512-Sqih1YARrmMoHlXGgI9JrrgkzxcaaEso0AH+Y7j8NHonUs+xe4iDsgC3IBIDNdzEewbNpccNN6hip+b5vmyRLw==}
     engines: {node: '>= 10'}
 
-  '@rushstack/node-core-library@5.13.1':
-    resolution: {integrity: sha512-5yXhzPFGEkVc9Fu92wsNJ9jlvdwz4RNb2bMso+/+TH0nMm1jDDDsOIf4l8GAkPxGuwPw5DH24RliWVfSPhlW/Q==}
+  '@rushstack/node-core-library@5.14.0':
+    resolution: {integrity: sha512-eRong84/rwQUlATGFW3TMTYVyqL1vfW9Lf10PH+mVGfIb9HzU3h5AASNIw+axnBLjnD0n3rT5uQBwu9fvzATrg==}
     peerDependencies:
       '@types/node': '*'
     peerDependenciesMeta:
@@ -198,16 +198,16 @@ packages:
   '@rushstack/rig-package@0.5.3':
     resolution: {integrity: sha512-olzSSjYrvCNxUFZowevC3uz8gvKr3WTpHQ7BkpjtRpA3wK+T0ybep/SRUMfr195gBzJm5gaXw0ZMgjIyHqJUow==}
 
-  '@rushstack/terminal@0.15.3':
-    resolution: {integrity: sha512-DGJ0B2Vm69468kZCJkPj3AH5nN+nR9SPmC0rFHtzsS4lBQ7/dgOwtwVxYP7W9JPDMuRBkJ4KHmWKr036eJsj9g==}
+  '@rushstack/terminal@0.15.4':
+    resolution: {integrity: sha512-OQSThV0itlwVNHV6thoXiAYZlQh4Fgvie2CzxFABsbO2MWQsI4zOh3LRNigYSTrmS+ba2j0B3EObakPzf/x6Zg==}
     peerDependencies:
       '@types/node': '*'
     peerDependenciesMeta:
       '@types/node':
         optional: true
 
-  '@rushstack/ts-command-line@5.0.1':
-    resolution: {integrity: sha512-bsbUucn41UXrQK7wgM8CNM/jagBytEyJqXw/umtI8d68vFm1Jwxh1OtLrlW7uGZgjCWiiPH6ooUNa1aVsuVr3Q==}
+  '@rushstack/ts-command-line@5.0.2':
+    resolution: {integrity: sha512-+AkJDbu1GFMPIU8Sb7TLVXDv/Q7Mkvx+wAjEl8XiXVVq+p1FmWW6M3LYpJMmoHNckSofeMecgWg5lfMwNAAsEQ==}
 
   '@sideway/address@4.1.5':
     resolution: {integrity: sha512-IqO/DUQHUkPeixNQ8n0JA6102hT9CmaljNTPmQ1u8MEhBo/R4Q8eKLN/vGZxuebwOroDB4cbpjheD4+/sKFK4Q==}
@@ -1570,23 +1570,23 @@ snapshots:
     dependencies:
       '@hapi/hoek': 9.3.0
 
-  '@microsoft/api-extractor-model@7.30.6(@types/node@22.16.5)':
+  '@microsoft/api-extractor-model@7.30.7(@types/node@22.16.5)':
     dependencies:
       '@microsoft/tsdoc': 0.15.1
       '@microsoft/tsdoc-config': 0.17.1
-      '@rushstack/node-core-library': 5.13.1(@types/node@22.16.5)
+      '@rushstack/node-core-library': 5.14.0(@types/node@22.16.5)
     transitivePeerDependencies:
       - '@types/node'
 
-  '@microsoft/api-extractor@7.52.8(@types/node@22.16.5)':
+  '@microsoft/api-extractor@7.52.9(@types/node@22.16.5)':
     dependencies:
-      '@microsoft/api-extractor-model': 7.30.6(@types/node@22.16.5)
+      '@microsoft/api-extractor-model': 7.30.7(@types/node@22.16.5)
       '@microsoft/tsdoc': 0.15.1
       '@microsoft/tsdoc-config': 0.17.1
-      '@rushstack/node-core-library': 5.13.1(@types/node@22.16.5)
+      '@rushstack/node-core-library': 5.14.0(@types/node@22.16.5)
       '@rushstack/rig-package': 0.5.3
-      '@rushstack/terminal': 0.15.3(@types/node@22.16.5)
-      '@rushstack/ts-command-line': 5.0.1(@types/node@22.16.5)
+      '@rushstack/terminal': 0.15.4(@types/node@22.16.5)
+      '@rushstack/ts-command-line': 5.0.2(@types/node@22.16.5)
       lodash: 4.17.21
       minimatch: 3.0.8
       resolve: 1.22.10
@@ -1673,7 +1673,7 @@ snapshots:
       '@napi-rs/nice-win32-x64-msvc': 1.0.4
     optional: true
 
-  '@rushstack/node-core-library@5.13.1(@types/node@22.16.5)':
+  '@rushstack/node-core-library@5.14.0(@types/node@22.16.5)':
     dependencies:
       ajv: 8.13.0
       ajv-draft-04: 1.0.0(ajv@8.13.0)
@@ -1691,16 +1691,16 @@ snapshots:
       resolve: 1.22.10
       strip-json-comments: 3.1.1
 
-  '@rushstack/terminal@0.15.3(@types/node@22.16.5)':
+  '@rushstack/terminal@0.15.4(@types/node@22.16.5)':
     dependencies:
-      '@rushstack/node-core-library': 5.13.1(@types/node@22.16.5)
+      '@rushstack/node-core-library': 5.14.0(@types/node@22.16.5)
       supports-color: 8.1.1
     optionalDependencies:
       '@types/node': 22.16.5
 
-  '@rushstack/ts-command-line@5.0.1(@types/node@22.16.5)':
+  '@rushstack/ts-command-line@5.0.2(@types/node@22.16.5)':
     dependencies:
-      '@rushstack/terminal': 0.15.3(@types/node@22.16.5)
+      '@rushstack/terminal': 0.15.4(@types/node@22.16.5)
       '@types/argparse': 1.0.38
       argparse: 1.0.10
       string-argv: 0.3.2
diff --git a/github-actions/setup-wsl/action.yml b/github-actions/setup-wsl/action.yml
index c009191e4..411f6cf33 100644
--- a/github-actions/setup-wsl/action.yml
+++ b/github-actions/setup-wsl/action.yml
@@ -46,7 +46,7 @@ runs:
     # Note: `memory` by default is 50% of the Windows host machine. We want to try
     # a higher percentage to leverage more of the GitHub Windows machines.
     # They have 16GB by default. See: https://docs.github.com/en/actions/using-github-hosted-runners/using-github-hosted-runners/about-github-hosted-runners.
-    - uses: Vampire/setup-wsl@6a8db447be7ed35f2f499c02c6e60ff77ef11278
+    - uses: Vampire/setup-wsl@6819906081f7afebe0cfc34e838b6f8405045672
       with:
         wsl-conf: |
           [interop]
diff --git a/package.json b/package.json
index a7b5ad24c..6c3b710bb 100644
--- a/package.json
+++ b/package.json
@@ -28,7 +28,7 @@
     "@bazel/terser": "5.8.1",
     "@bazel/typescript": "5.8.1",
     "@google/genai": "^1.4.0",
-    "@microsoft/api-extractor": "7.52.8",
+    "@microsoft/api-extractor": "7.52.9",
     "@types/browser-sync": "^2.26.3",
     "@types/minimatch": "^5.1.2",
     "@types/node": "^20.14.8",
@@ -134,7 +134,7 @@
     "karma-sourcemap-loader": "^0.4.0",
     "minimatch": "^10.0.0",
     "multimatch": "^7.0.0",
-    "nock": "14.0.6",
+    "nock": "14.0.7",
     "opener": "^1.5.2",
     "requirejs": "^2.3.6",
     "rxjs": "^7.4.0",
diff --git a/yarn.lock b/yarn.lock
index d07ce07b9..b39b1fffb 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -251,7 +251,7 @@ __metadata:
     "@google/genai": "npm:^1.4.0"
     "@inquirer/prompts": "npm:^7.0.0"
     "@inquirer/type": "npm:^3.0.0"
-    "@microsoft/api-extractor": "npm:7.52.8"
+    "@microsoft/api-extractor": "npm:7.52.9"
     "@octokit/auth-app": "npm:8.0.2"
     "@octokit/core": "npm:7.0.3"
     "@octokit/graphql": "npm:9.0.1"
@@ -321,7 +321,7 @@ __metadata:
     karma-sourcemap-loader: "npm:^0.4.0"
     minimatch: "npm:^10.0.0"
     multimatch: "npm:^7.0.0"
-    nock: "npm:14.0.6"
+    nock: "npm:14.0.7"
     opener: "npm:^1.5.2"
     prettier: "npm:3.6.2"
     protractor: "npm:^7.0.0"
@@ -3269,7 +3269,41 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@microsoft/api-extractor@npm:7.52.8, @microsoft/api-extractor@npm:^7.24.2":
+"@microsoft/api-extractor-model@npm:7.30.7":
+  version: 7.30.7
+  resolution: "@microsoft/api-extractor-model@npm:7.30.7"
+  dependencies:
+    "@microsoft/tsdoc": "npm:~0.15.1"
+    "@microsoft/tsdoc-config": "npm:~0.17.1"
+    "@rushstack/node-core-library": "npm:5.14.0"
+  checksum: 10c0/e6e5d194f79efe0be47655a9f32e18f807ae6cffeddcd59795f442706d16d241e83b186a4943f252d9fa0f927dd431f270645e3f9fcdf978f85769a5314995ca
+  languageName: node
+  linkType: hard
+
+"@microsoft/api-extractor@npm:7.52.9":
+  version: 7.52.9
+  resolution: "@microsoft/api-extractor@npm:7.52.9"
+  dependencies:
+    "@microsoft/api-extractor-model": "npm:7.30.7"
+    "@microsoft/tsdoc": "npm:~0.15.1"
+    "@microsoft/tsdoc-config": "npm:~0.17.1"
+    "@rushstack/node-core-library": "npm:5.14.0"
+    "@rushstack/rig-package": "npm:0.5.3"
+    "@rushstack/terminal": "npm:0.15.4"
+    "@rushstack/ts-command-line": "npm:5.0.2"
+    lodash: "npm:~4.17.15"
+    minimatch: "npm:~3.0.3"
+    resolve: "npm:~1.22.1"
+    semver: "npm:~7.5.4"
+    source-map: "npm:~0.6.1"
+    typescript: "npm:5.8.2"
+  bin:
+    api-extractor: bin/api-extractor
+  checksum: 10c0/055c5febcf650aa3ce4e0a0f7acbaf9561027633484aef52fa7cd717e472b68d413d9ac2dd983704d3a1297c0c664f4eb6d0e371650f423186b611d2d70c9227
+  languageName: node
+  linkType: hard
+
+"@microsoft/api-extractor@npm:^7.24.2":
   version: 7.52.8
   resolution: "@microsoft/api-extractor@npm:7.52.8"
   dependencies:
@@ -4766,6 +4800,27 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@rushstack/node-core-library@npm:5.14.0":
+  version: 5.14.0
+  resolution: "@rushstack/node-core-library@npm:5.14.0"
+  dependencies:
+    ajv: "npm:~8.13.0"
+    ajv-draft-04: "npm:~1.0.0"
+    ajv-formats: "npm:~3.0.1"
+    fs-extra: "npm:~11.3.0"
+    import-lazy: "npm:~4.0.0"
+    jju: "npm:~1.4.0"
+    resolve: "npm:~1.22.1"
+    semver: "npm:~7.5.4"
+  peerDependencies:
+    "@types/node": "*"
+  peerDependenciesMeta:
+    "@types/node":
+      optional: true
+  checksum: 10c0/1312c4e04e7e3319d03a5959b9bb09d5fc4f9fc3484b39192a85eefc8f30635a5689c4c08c86d8fe4f5817a0445fa00c0faf444ca3f72df3496c5651a000ebd4
+  languageName: node
+  linkType: hard
+
 "@rushstack/rig-package@npm:0.5.3":
   version: 0.5.3
   resolution: "@rushstack/rig-package@npm:0.5.3"
@@ -4791,6 +4846,21 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@rushstack/terminal@npm:0.15.4":
+  version: 0.15.4
+  resolution: "@rushstack/terminal@npm:0.15.4"
+  dependencies:
+    "@rushstack/node-core-library": "npm:5.14.0"
+    supports-color: "npm:~8.1.1"
+  peerDependencies:
+    "@types/node": "*"
+  peerDependenciesMeta:
+    "@types/node":
+      optional: true
+  checksum: 10c0/058c92cc0e70b6038339d32a0ab15014a1f3cd267a3e3e3ef416f8f8698b470294eae9cf6d9c205bb3a3dd0598cceeb73f01d933e0b8346db56385290cbde90c
+  languageName: node
+  linkType: hard
+
 "@rushstack/ts-command-line@npm:5.0.1":
   version: 5.0.1
   resolution: "@rushstack/ts-command-line@npm:5.0.1"
@@ -4803,6 +4873,18 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@rushstack/ts-command-line@npm:5.0.2":
+  version: 5.0.2
+  resolution: "@rushstack/ts-command-line@npm:5.0.2"
+  dependencies:
+    "@rushstack/terminal": "npm:0.15.4"
+    "@types/argparse": "npm:1.0.38"
+    argparse: "npm:~1.0.9"
+    string-argv: "npm:~0.3.1"
+  checksum: 10c0/b6c08ec8309164c2fa5b85804d1a23a98ea8f6348499378e0561565f34bdff0ba0d605c8fc5c7ad704b7fc0f28fd3933b226fb6349362b4d8b7d944866c6d874
+  languageName: node
+  linkType: hard
+
 "@schematics/angular@npm:20.0.0":
   version: 20.0.0
   resolution: "@schematics/angular@npm:20.0.0"
@@ -12108,14 +12190,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"nock@npm:14.0.6":
-  version: 14.0.6
-  resolution: "nock@npm:14.0.6"
+"nock@npm:14.0.7":
+  version: 14.0.7
+  resolution: "nock@npm:14.0.7"
   dependencies:
     "@mswjs/interceptors": "npm:^0.39.3"
     json-stringify-safe: "npm:^5.0.1"
     propagate: "npm:^2.0.0"
-  checksum: 10c0/3a8cf3ebe4639c1f6d4bf5d7fbee1f32268931cad4f3f04cdab9a4521a6c2f9c4062c0e638a619b6870cbf8a06e42b9470d63371b157c53e1328702838971bdf
+  checksum: 10c0/e8566df7b376a9a2fe2a86edc6e8325ecc3da91304002d5ebf65c18ae2e942999a3d43e77d40b6e6071c2106bf4cd847f2ea653c025c81f844edcd334b895d96
   languageName: node
   linkType: hard