[aaylward]

What

Consolidates the open Renovate PRs:

• rules_cc 0.2.25 → 0.2.26 (Update dependency rules_cc to v0.2.26 - autoclosed #221)
• boringssl 0.20260813.0 → 0.20260929.0 (Update dependency boringssl to v0.20261020.0 #239)
• zlib 1.3.2 → 1.3.2.bcr.2 (Update dependency zlib to v1.3.2.bcr.2 - autoclosed #240)
• Gradle 9.8.0 → 9.8.1 in CI (Update Gradle to v9.8.2 #241)
• spotless 8.10.3 → 8.10.4 (Update plugin com.diffplug.spotless to v8.10.4 - autoclosed #242)
• rules_jvm_external 7.1 → 7.2 (Update dependency rules_jvm_external to v7.2 - autoclosed #243)

Also regenerates both MODULE.bazel.locks, which the Renovate PRs left stale (the lockfiles job would reject them). Extension sections unchanged; only registry hashes moved.

Testing

• bazel test //...: 130/130 pass locally.
• Gradle build + spotless: green in CI (Maven Central 429s the sandbox).

Checklist

• Tests added/updated for the change — n/a, version bumps
• bazel test //... and (cd codegen && gradle build spotlessCheck) pass — Gradle via CI
• Formatting clean
• Architectural decisions recorded as an ADR — n/a