This is a straightforward automated dependency update PR. Let me verify the consistency of all the changes:

1. GitHub workflow files: opencode version bump from 1.4.3 to 1.14.19 -- consistent across all 3 workflow files.

2. Build deps: wasm-tools 1.246.2 -> 1.247.0 (minor bump, all platforms updated consistently), rules_shell 0.7.1 -> 0.8.0, capnp-cpp and workerd-cxx commit bumps, zlib commit bump.

3. Rust crate updates: All are patch/minor version bumps:

   • bitflags 2.11.0 -> 2.11.1
   • clap 4.6.0 -> 4.6.1 (+ clap_derive)
   • rand 0.8.5 -> 0.8.6
   • tokio 1.51.1 -> 1.52.1
   • typenum 1.19.0 -> 1.20.0
   • uuid 1.23.0 -> 1.23.1
   • wasip2 1.0.2 -> 1.0.3
   • wit-bindgen 0.51.0 -> 0.57.1

4. typenum 1.20.0: The new BUILD file dropped the cargo_build_script entirely. This is correct -- typenum 1.20.0 removed the build script upstream (it used to generate code via build.rs but now ships pre-generated source).

5. All Cargo.lock checksums, BUILD.bazel aliases, and defs.bzl references are internally consistent.

6. No behavioral changes to workerd code, no compat flag implications, no security concerns.

LGTM

github run