chore(deps): lock file maintenance

[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Summary by cubic

Refreshes bun.lock and flake.lock to current dependency resolutions. Minor version bumps and alias cleanup; no app code changes.

• Dependencies
  • bun.lock: updates @noble/curves to 1.9.7, bumps @typescript/native-preview (+ platform binaries) to 7.0.0-dev.20260514.1, updates bare-events to 2.8.3, pins tar to 7.5.13 and tar-stream to 3.1.7, and prunes several alias entries (with a couple added for @noble/curves consumers).
  • flake.lock: updates shazow/foundry.nix, NixOS/nixpkgs (nightly), and nix-community/NUR to latest revisions.

^{Written for commit f5ec5e2. Summary will update on new commits.}

[indent]

PR Summary

Automated Renovate "lock file maintenance" run that refreshes resolved transitive dependency versions in bun.lock and flake.lock. No package.json ranges or flake.nix inputs change, so no source code or declared dependency contracts are affected — only locked resolutions drift forward (with a couple of dedupe-driven adjustments).

• bun.lock: bumps @noble/curves 1.9.1 → 1.9.7, @typescript/native-preview (meta + all 7 platform packages) 20260513.1 → 20260514.1, bare-events 2.8.2 → 2.8.3.
• bun.lock: dedupes tar to a single top-level 7.5.13 and tar-stream to 3.1.7, removing the @vercel/sandbox/tar-stream and openclaw/tar parent overrides that are now redundant.
• bun.lock: drops a few now-unneeded parent overrides (@anthropic-ai/vertex-sdk/@anthropic-ai/sdk, @aws-sdk/client-bedrock/@aws-sdk/credential-provider-node, @pkieltyka/gitgenie/.../client-bedrock-runtime and its children).
• bun.lock: adds nested viem/@noble/curves and ox/@noble/curves overrides pinned to 1.9.1 to preserve those subtrees' existing exact pin while the rest of the tree moves to 1.9.7.
• flake.lock: bumps foundry, nixpkgs-nightly, and nur to newer revs from their tracked refs; original declarations untouched.

Issues

No issues found.

CI Checks

e2e-check failed because the upstream e2e-run (Ubuntu) job ran out of disk space on the GitHub Actions runner while building cursor-3.2.21 via Nix (error (ignored): write of 10891 bytes: No space left on device → patchelf exit 1 → cascade of dependent derivation failures up to home-manager-generation and make: *** [Makefile:453: nix-build] Error 1). This is a runner capacity issue unrelated to the lock-file changes in this PR; a re-run (or a runner with more free space / additional cleanup of preinstalled tooling) should resolve it.

e2e-check

• e2e-run (Ubuntu, ubuntu-latest) failed with No space left on device while Nix was building cursor-3.2.21 (patchelf step), which then cascaded into failures of code-syncer.service, home-manager-files, and home-manager-generation. The failure originates from the GitHub Actions runner's disk filling up during the Nix build, not from the lock-file changes in this PR.

[cubic-dev-ai]

No issues found across 2 files

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.