chore: update nx 23.1, bun 1.3.14, actions to latest, and all depende…

.github/workflows/ci.yml

@@ -22,26 +22,27 @@ jobs:
     env:
       NX_CLOUD_ACCESS_TOKEN: ${{ (github.event_name == 'push' && github.ref == 'refs/heads/main') && secrets.NX_CLOUD_ACCESS_TOKEN_RW || secrets.NX_CLOUD_ACCESS_TOKEN_RO }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
+          persist-credentials: false
           # For pull_request events, check out the PR head (not GitHub's auto-created
           # merge commit). This prevents 3-way merge from re-introducing deps that
           # the PR is supposed to remove. nrwl/nx-set-shas still computes the correct
           # affected range from git history. Falls back to github.sha for push events.
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
-          node-version: 24
-      - uses: oven-sh/setup-bun@v2
+          node-version: lts/*
+      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
         with:
-          bun-version: 1.2.9
+          bun-version: 1.3.14
       # This line enables distribution
       # The "--stop-agents-after" is optional, but allows idle agents to shut down once the "e2e-ci" targets have been requested
       # - run: npx nx-cloud start-ci-run --distribute-on="3 linux-medium-js" --stop-agents-after="e2e-ci"
       - run: bun install
 
-      - uses: nrwl/nx-set-shas@v4
+      - uses: nrwl/nx-set-shas@afb73a62d26e41464e9254689e1fd6122ee683c1 # v5
 
       - name: Test tool-call hook scripts
         run: bash .github/hooks/scripts/test-hooks.sh

.github/workflows/copilot-setup-steps.yml

@@ -19,10 +19,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install bun
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
+        with:
+          bun-version: 1.3.14
 
       - name: Install dependencies
         run: bun install

.github/workflows/docker.yml

@@ -18,23 +18,23 @@ jobs:
       packages: write # needed to push to GHCR
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.version || github.ref_name }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ghcr.io/${{ github.repository }}
           tags: |
@@ -44,7 +44,7 @@ jobs:
             type=raw,value=latest,enable=${{ inputs.version != '' || startsWith(github.ref, 'refs/tags/') }}
 
       - name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           push: true

.github/workflows/publish-gpr.yml

@@ -21,18 +21,20 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.version || github.ref_name }}
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
-          node-version: 24
+          node-version: lts/*
           registry-url: https://npm.pkg.github.com/
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
+        with:
+          bun-version: 1.3.14
 
       - name: Install dependencies
         run: bun install

.github/workflows/publish.yml

@@ -34,18 +34,20 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.version || github.ref_name }}
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
-          node-version: 24
+          node-version: lts/*
           registry-url: https://registry.npmjs.org/
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
+        with:
+          bun-version: 1.3.14
 
       - name: Install dependencies
         run: bun install

.github/workflows/release.yml

@@ -59,22 +59,22 @@ jobs:
       tag: ${{ steps.get_tag.outputs.tag }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: main
           token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
-          node-version: 24
+          node-version: lts/*
           registry-url: https://registry.npmjs.org/
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
         with:
-          bun-version: 1.2.9
+          bun-version: 1.3.14
 
       - name: Configure git
         run: |

.gitignore

@@ -161,3 +161,5 @@ website/node_modules/
 .nx/self-healing
 .claude/settings.local.json
 e2e/adt-sdk
+
+.nx/migrate-runs

Dockerfile

@@ -4,7 +4,7 @@
 FROM node:24-bookworm AS builder
 
 # Install bun (matches the version used in CI)
-RUN npm install -g bun@1.2.9
+RUN npm install -g bun@1.3.14
 
 WORKDIR /build
 

Dockerfile.adt-server

@@ -1,5 +1,5 @@
 # syntax=docker/dockerfile:1.7
-FROM oven/bun:1.3.11 AS bun
+FROM oven/bun:1.3.14 AS bun
 
 FROM node:24-bookworm AS builder
 ARG BUN_CONFIG_REGISTRY

Dockerfile.mcp

@@ -24,7 +24,7 @@ ARG BUN_CONFIG_REGISTRY
 ENV BUN_CONFIG_REGISTRY=${BUN_CONFIG_REGISTRY}
 
 # Install bun (matches the version used by CI).
-RUN npm install -g bun@1.2.9
+RUN npm install -g bun@1.3.14
 
 WORKDIR /build