Cardano Updates

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.2.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [ws](https://github.com/websockets/ws) from 7.5.10 to 7.5.11.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/7.5.10...7.5.11)

---
updated-dependencies:
- dependency-name: ws
  dependency-version: 7.5.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

Flake lock file updates:

• Updated input 'advisory-db':
    'github:rustsec/advisory-db/09735e1' (2026-06-13)
  → 'github:rustsec/advisory-db/776615b' (2026-06-18)
• Updated input 'crane':
    'github:ipetkov/crane/59a82a1' (2026-06-04)
  → 'github:ipetkov/crane/469fd08' (2026-06-18)
• Updated input 'fenix':
    'github:nix-community/fenix/aad7d8b' (2026-06-13)
  → 'github:nix-community/fenix/ab90d06' (2026-06-20)
• Updated input 'fenix/rust-analyzer-src':
    'github:rust-lang/rust-analyzer/3f92cd1' (2026-06-12)
  → 'github:rust-lang/rust-analyzer/501826b' (2026-06-20)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/e820eb4' (2026-06-08)
  → 'github:nixos/nixpkgs/d6df351' (2026-06-15)

The lint job only checked src/core, so the new browserslist-compat guard
(and any other rule) would miss regressions in src/ui — exactly where the
unsupported `.at()` calls lived. Lint all of src; adds ~5s.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

The multisig group-profile e2e white-screened on CI's api-31 emulator: its
WebView is Chrome 91, but `Array/String.prototype.at` (ES2022) and
`Object.hasOwn` (ES2022) ship untranspiled (ts-loader, target es2022, no
core-js). On the group-profile-setup screen `connection.label.at(0)` threw
`TypeError` mid-render, React unmounted the tree with no boundary, and #root
went blank — the real cause behind the "setup-members-segment never displays"
timeout (keria had already resolved the member fine).

This violates the app's own .browserslistrc floor (Chrome >=79), which until
now nothing enforced for JS APIs.

- Replace all 11 `.at()` with bracket indexing and the 3 `Object.hasOwn`
  with `Object.prototype.hasOwnProperty.call` (identical semantics, ES2015-safe).
- Add eslint-plugin-es-x wired to fail lint on runtime builtins newer than the
  browserslist floor (at/hasOwn/replaceAll/promise.any/findLast/toSorted/...),
  scoped to shipped app source (tests run in modern jsdom). compat plugin was
  evaluated but misses prototype-method builtins, so es-x is used instead.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

Flake lock file updates:

• Updated input 'haskell-nix':
    'github:input-output-hk/haskell.nix/131f8cc' (2026-05-16)
  → 'github:input-output-hk/haskell.nix/04de970' (2026-06-20)
• Updated input 'haskell-nix/hackage':
    'github:input-output-hk/hackage.nix/a482aef' (2026-05-16)
  → 'github:input-output-hk/hackage.nix/9141d76' (2026-06-20)
• Updated input 'haskell-nix/hackage-for-stackage':
    'github:input-output-hk/hackage.nix/ab71329' (2026-05-16)
  → 'github:input-output-hk/hackage.nix/d509fdb' (2026-06-20)
• Updated input 'haskell-nix/iserv-proxy':
    'github:stable-haskell/iserv-proxy/3f7b281' (2026-04-08)
  → 'github:stable-haskell/iserv-proxy/8cdc446' (2026-05-10)
• Updated input 'haskell-nix/stackage':
    'github:input-output-hk/stackage.nix/c1f217f' (2026-05-16)
  → 'github:input-output-hk/stackage.nix/58b68ed' (2026-06-20)

Flake lock file updates:

• Updated input 'cabal':
    'github:stable-haskell/cabal/0a74ea1' (2025-07-28)
  → 'github:stable-haskell/cabal/01d053a' (2026-06-11)
• Updated input 'haskellNix':
    'github:input-output-hk/haskell.nix/cc939d0' (2026-02-23)
  → 'github:input-output-hk/haskell.nix/04de970' (2026-06-20)
• Removed input 'haskellNix/cabal-32'
• Updated input 'haskellNix/hackage':
    'github:input-output-hk/hackage.nix/06f38c7' (2026-02-23)
  → 'github:input-output-hk/hackage.nix/9141d76' (2026-06-20)
• Updated input 'haskellNix/hackage-for-stackage':
    'github:input-output-hk/hackage.nix/2d5bbb1' (2026-02-23)
  → 'github:input-output-hk/hackage.nix/d509fdb' (2026-06-20)
• Updated input 'haskellNix/iserv-proxy':
    'github:stable-haskell/iserv-proxy/91ef7ff' (2026-02-04)
  → 'github:stable-haskell/iserv-proxy/8cdc446' (2026-05-10)
• Updated input 'haskellNix/nixpkgs-2511':
    'github:NixOS/nixpkgs/b0924ea' (2025-12-01)
  → 'github:NixOS/nixpkgs/74b8795' (2026-04-09)
• Updated input 'haskellNix/nixpkgs-unstable':
    'github:NixOS/nixpkgs/c1cb7d0' (2025-12-01)
  → 'github:NixOS/nixpkgs/1304392' (2026-04-11)
• Updated input 'haskellNix/stackage':
    'github:input-output-hk/stackage.nix/862226e' (2026-02-23)
  → 'github:input-output-hk/stackage.nix/58b68ed' (2026-06-20)
• Updated input 'iohk-nix':
    'github:input-output-hk/iohk-nix/a704b93' (2025-11-12)
  → 'github:input-output-hk/iohk-nix/9de0011' (2026-05-05)
• Updated input 'iohk-nix/blst':
    'github:supranational/blst/8c7db7f' (2025-02-12)
  → 'github:supranational/blst/6d960cd' (2025-06-06)