Bump deps (#1559)

- Bump stable rust to 1.84.0
- Bump rust deps
- Bump Go deps
- Regenerae LRE toolchains

Fixes CVE-2025-21613
Fixes CVE-2025-21614
Fixes CVE-2024-45338

.bazelrc

@@ -20,6 +20,9 @@ common --enable_platform_specific_config
 common --incompatible_enable_cc_toolchain_resolution
 common --incompatible_enable_proto_toolchain_resolution
 
+# Use '+' instead of the legacy '~' when resolving repo names.
+common --incompatible_use_plus_in_repo_names
+
 # Simulate rules_python's initialization with a script and use a statically
 # linked musl Python toolchain.
 # TODO(aaronmondal): This is a hack. It works for us because have just a few

.github/workflows/native-cargo.yaml

@@ -32,7 +32,7 @@ jobs:
           actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Set up Rust toolchain
-        run: rustup default ${{ matrix.toolchain }}
+        run: rustup update && rustup default ${{ matrix.toolchain }}
         shell: bash
 
       - name: Build on ${{ runner.os }}

.github/workflows/web.yaml

@@ -27,8 +27,11 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-24.04, macos-14 ]
-
+        os:
+          - ubuntu-24.04
+          # TODO(aaronmondal): Re-enable after:
+          #                    https://github.com/NixOS/nixpkgs/pull/371501
+          # - macos-14
     name: Web Platform Deployment / ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
     environment: production

BUILD.bazel

@@ -27,7 +27,7 @@ rust_binary(
         "@crates//:axum",
         "@crates//:clap",
         "@crates//:futures",
-        "@crates//:hyper-1.5.1",
+        "@crates//:hyper-1.5.2",
         "@crates//:hyper-util",
         "@crates//:mimalloc",
         "@crates//:opentelemetry",