Update all non-major dependencies

WORKSPACE

@@ -22,14 +22,14 @@ http_archive(
     name = "aspect_rules_js",
     sha256 = "0b69e0967f8eb61de60801d6c8654843076bf7ef7512894a692a47f86e84a5c2",
     strip_prefix = "rules_js-1.27.1",
-    url = "https://github.com/aspect-build/rules_js/releases/download/v1.27.1/rules_js-v1.27.1.tar.gz",
+    url = "https://github.com/aspect-build/rules_js/releases/download/v1.28.0/rules_js-v1.27.1.tar.gz",
 )
 
 http_archive(
     name = "aspect_rules_ts",
     sha256 = "ace5b609603d9b5b875d56c9c07182357c4ee495030f40dcefb10d443ba8c208",
     strip_prefix = "rules_ts-1.4.0",
-    url = "https://github.com/aspect-build/rules_ts/releases/download/v1.4.0/rules_ts-v1.4.0.tar.gz",
+    url = "https://github.com/aspect-build/rules_ts/releases/download/v1.4.2/rules_ts-v1.4.0.tar.gz",
 )
 
 http_archive(
@@ -125,7 +125,7 @@ go_rules_dependencies()
 go_register_toolchains(
     nogo = "@//:chrome_ssh_agent_nogo",
     # Use semver-coerced to handle versions where patches are left off (e.g., 1.19).
-    version = "1.20.4",  # renovate: datasource=golang-version depName=golang versioning=semver-coerced
+    version = "1.20.5",  # renovate: datasource=golang-version depName=golang versioning=semver-coerced
 )
 
 # Gazelle dependency management support