Update dependencies (consolidate open Dependabot PRs)

[meteorcloudy]

Consolidates all open Dependabot PRs into a single update so they can be closed.

Go (go.mod/go.sum)

• go.opentelemetry.io/otel + otel/sdk (and related otel modules) 1.44.0 → 1.45.0 (Bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 #2869, Bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 #2577)
• Already at or above the target on master, so no change needed: golang.org/x/crypto (Bump golang.org/x/crypto from 0.46.0 to 0.52.0 #2715), golang.org/x/net (Bump golang.org/x/net from 0.48.0 to 0.55.0 #2708), github.com/go-jose/go-jose/v4 (Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 #2533)

dashboard/client

• next + @next/bundle-analyzer 15.5.24 → 16.3.x, postcss → 8.5.28 (Bump postcss and next in /dashboard/client #2762)
  • Next.js 16 removed serverRuntimeConfig / next/config, so pages/api/[...slug].js now reads process.env.SERVER_URL directly (same http://localhost:8080 default). tsconfig.json gets the jsx: react-jsx setting that Next 16 requires.
• query-string 7 → 9.5.1, decode-uri-component → 0.5.0 (Bump decode-uri-component and query-string in /dashboard/client #2833)
• lodash → 4.18.1 (Bump lodash from 4.17.21 to 4.18.1 in /dashboard/client #2527), http-proxy-middleware → 2.0.10 (Bump http-proxy-middleware from 2.0.9 to 2.0.10 in /dashboard/client #2690)
• Transitive: brace-expansion 2.1.7 (Bump brace-expansion from 2.0.1 to 2.1.7 in /dashboard/client #2905), browserslist 4.29.3 (Bump browserslist from 4.24.5 to 4.28.8 in /dashboard/client #2839), postcss-selector-parser 6.1.4 (Bump postcss-selector-parser from 6.1.2 to 6.1.4 in /dashboard/client #2837), nanoid 3.3.19 (Bump nanoid from 3.3.11 to 3.3.18 in /dashboard/client #2785), ws 7.5.13 (Bump ws from 7.5.10 to 7.5.11 in /dashboard/client #2687), follow-redirects 1.16.1 (Bump follow-redirects from 1.15.9 to 1.16.0 in /dashboard/client #2552), picomatch 2.3.2 (Bump picomatch from 2.3.1 to 2.3.2 in /dashboard/client #2512), yaml 1.10.3 / 2.9.1 (Bump yaml in /dashboard/client #2511), immutable 5.1.9 (Bump immutable from 5.1.2 to 5.1.5 in /dashboard/client #2494), minimatch 9.0.9 (Bump minimatch from 9.0.5 to 9.0.9 in /dashboard/client #2479), glob 10.5.0 (Bump glob from 10.4.5 to 10.5.0 in /dashboard/client #2406)
• micromatch is already at 4.0.8, and yarn.lock no longer exists (Bump micromatch from 4.0.2 to 4.0.8 in /dashboard/client #2028)

mintlify

• mint → 4.2.970 (Bump postcss and mint in /mintlify #2788, Bump js-yaml and mint in /mintlify #2782), which brings postcss 8.5.23 and js-yaml 4.3.1
• Transitive: ip-address 10.7.3 (Bump ip-address from 10.2.0 to 10.7.3 in /mintlify #2894), nanoid 3.3.19 (Bump nanoid from 3.3.12 to 3.3.18 in /mintlify #2787), brace-expansion 1.1.21 (Bump brace-expansion from 1.1.14 to 1.1.18 in /mintlify #2773), socket.io-parser 4.2.7 (Bump socket.io-parser from 4.2.6 to 4.2.7 in /mintlify #2760), body-parser 1.20.8 (Bump body-parser from 1.20.5 to 1.20.6 in /mintlify #2735)

actions

• bcr-pr-reviewer, release-helper: @actions/core → 1.11.1, which drops uuid (Bump uuid and @actions/core in /actions/bcr-pr-reviewer #2575, Bump uuid and @actions/core in /actions/release-helper #2574). For bcr-pr-reviewer, the checked-in node_modules is updated too: @actions/{core,exec,io} are refreshed and uuid is removed.
• cherry_picker, update-lockfile: requests 2.32.4 → 2.33.0 (Bump requests from 2.32.4 to 2.33.0 in /actions/cherry_picker #2516, Bump requests from 2.32.4 to 2.33.0 in /actions/update-lockfile #2515). buildkite/docker/ubuntu1604 no longer exists (Bump requests from 2.32.4 to 2.33.0 in /buildkite/docker/ubuntu1604 #2513).

agent

• bytes 1.4.0 → 1.11.1 in Cargo.lock (Bump bytes from 1.4.0 to 1.11.1 in /agent #2453)

Testing

• go build ./...
• next build for dashboard/client
• mint version for mintlify
• node --test for actions/bcr-pr-reviewer (21/21 pass)

Closes #2905, #2894, #2869, #2839, #2837, #2833, #2788, #2787, #2785, #2782, #2773, #2762, #2760, #2735, #2715, #2708, #2690, #2687, #2577, #2575, #2574, #2552, #2533, #2527, #2516, #2515, #2513, #2512, #2511, #2494, #2479, #2453, #2406, #2028