chore(deps): roll up open dependabot bumps

[HughParry]

What changed: Rolls the ten open Dependabot PRs (#3261–#3270) into one.

Included:

• @noble/curves 2
• cron 4
• i18next-http-backend 4
• i18next-chained-backend 5
• @polkadot/x-randomvalues 14
• smoldot 3
• @rollup/plugin-typescript 12
• the minor/patch group: rollup, cron-parser, cypress-real-events

Left out on purpose:

• @babel/preset-typescript 8 and @babel/plugin-transform-runtime 8: both need @babel/core 8, and we're on 7. With them, the webpack bundle can't read TypeScript at all. Upgrading Babel's core is its own job.

Code changes the bumps needed:

• web-bot-auth: @noble/curves 2 only allows @noble/curves/ed25519.js (with the .js), so the import is updated. The tests now call randomSecretKey(), the new name for randomPrivateKey().

Tests: No new tests. Locally, typecheck, build and build:cjs pass (152 tasks) and the webpack procaptcha bundle builds. These unit tests pass: web-bot-auth (17), locale (155), util-crypto (1208). Provider unit tests: all 1219 that could run pass, but 7 files didn't load locally because they need native binaries. CI covers those.

[github-actions]

No updates since 2026-09-16T09:59:25Z (over 1 days), so this PR has been converted to draft. That stops it holding CI runners.

Nothing is lost — gh pr ready 3281, or the "Ready for review" button, picks it straight back up. Add the keep-ready label to exempt it permanently.

Converting to draft disables auto-merge, so PRs with auto-merge enabled are excluded from this entirely.

[github-actions]

No updates since 2026-09-17T12:01:15Z (over 1 days), so this PR has been converted to draft. That stops it holding CI runners.

Nothing is lost — gh pr ready 3281, or the "Ready for review" button, picks it straight back up. Add the keep-ready label to exempt it permanently.

Converting to draft disables auto-merge, so PRs with auto-merge enabled are excluded from this entirely.

[github-actions]

No updates since 2026-09-19T06:01:11Z (over 1 days), so this PR has been converted to draft. That stops it holding CI runners.

Nothing is lost — gh pr ready 3281, or the "Ready for review" button, picks it straight back up. Add the keep-ready label to exempt it permanently.

Converting to draft disables auto-merge, so PRs with auto-merge enabled are excluded from this entirely.

[github-actions]

No updates since 2026-09-20T12:00:58Z (over 1 days), so this PR has been converted to draft. That stops it holding CI runners.

Nothing is lost — gh pr ready 3281, or the "Ready for review" button, picks it straight back up. Add the keep-ready label to exempt it permanently.

Converting to draft disables auto-merge, so PRs with auto-merge enabled are excluded from this entirely.

[github-actions]

No updates since 2026-09-21T18:01:28Z (over 1 days), so this PR has been converted to draft. That stops it holding CI runners.

Nothing is lost — gh pr ready 3281, or the "Ready for review" button, picks it straight back up. Add the keep-ready label to exempt it permanently.

Converting to draft disables auto-merge, so PRs with auto-merge enabled are excluded from this entirely.

[github-actions]

No updates since 2026-09-23T00:02:04Z (over 1 days), so this PR has been converted to draft. That stops it holding CI runners.

Nothing is lost — gh pr ready 3281, or the "Ready for review" button, picks it straight back up. Add the keep-ready label to exempt it permanently.

Converting to draft disables auto-merge, so PRs with auto-merge enabled are excluded from this entirely.