chore: bump up all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
cross-platform-actions/action	action	minor	v1.4.0 → v1.5.0
oxfmt (source)	devDependencies	minor	^0.64.0 → ^0.66.0

---

Release Notes

cross-platform-actions/action (cross-platform-actions/action)

v1.5.0: Cross Platform Action 1.5.0

Compare Source

Changed

• NetBSD images download around 45% smaller -- 11.0 x86-64 goes from 497 MiB to
  268 MiB -- which is most of what a NetBSD job spends on setup
  (#​151)
• Every guest becomes usable sooner, by up to 8 seconds, because the action no
  longer waits on a readiness probe it sent before the guest was listening
• NetBSD guests are logged into without a credential, so no SSH key is generated
  and no resources disk is built to carry one. A custom image supplied through
  image_url still gets both, since it may expect them

Added

• Add support for Haiku R1/beta6
  (#​165)
• A variant input, selecting a named configuration of a platform. Defaults to
  default, which boots exactly as before, so no existing workflow changes.
  See Variants
• The microvm variant for NetBSD on x86-64, which reaches a usable guest in
  roughly half the time. It is opt-in because it changes the hardware the guest
  sees: the root disk becomes ld0 rather than sd0, there is no PCI bus to
  inspect, and uname -v reports a MICROVM kernel. Asking for it where it
  cannot be booted is an error, not a slow boot
• Log a breakdown of how long each phase of setting up the VM took, together
  with how long the VM took to become reachable over SSH

Fixed

• 5-level paging (LA57) is no longer exposed to the guests on x86-64
  (#​158).
  FreeBSD 13.0 enables 5-level paging whenever the CPU reports it and panics
  in the trampoline that switches to it, so every job that landed on an Intel
  runner from Ice Lake onwards failed to boot
• STIBP always-on mode is no longer exposed to the guests on x86-64
  (#​158). Some
  of the AMD runners report it without the STIBP and IBRS bits that normally
  come with it, which made DragonFly BSD write IA32_SPEC_CTRL and take a
  general protection fault while booting

Security

• The guest's SSH port is only forwarded to the runner's loopback address. It was
  previously bound to every interface, making the guest reachable from anything
  that could reach the runner

oxc-project/oxc (oxfmt)

v0.66.0

Compare Source

v0.65.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.