chore(deps): batch common + sudo-rs updates

[castrojo]

Batching pending testing-branch dep updates into one PR to reduce queue churn.

Includes:

• common ref bump (from chore(deps): update common: v2026.06-432 -> v2026.06-433 #1111)
• sudo-rs bump (from chore(deps): update sudo-rs #1058)

Deferred:

• chore(deps): update actions/checkout action to v7 #1047 (actions/checkout v7)

Supersedes #1111 and #1058.

Summary by CodeRabbit

• Chores
  • Updated bundled source revisions for two components to newer versions.
  • Bumped a library dependency to a newer release and refreshed its checksum.
  • No user-facing behavior or configuration changes were introduced.

[coderabbitai]

📝 Walkthrough

Walkthrough

Updated Bluefin build source pins: common.bst moves to a newer upstream git revision, and sudo-rs.bst advances the sudo-rs source ref while also bumping the libc Cargo dependency version and checksum.

Changes

Bluefin source pin updates

Layer / File(s)	Summary
Common source revision elements/bluefin/common.bst	common.bst updates its git ref to a newer v2026.06-433... commit.
sudo-rs source and libc pins elements/bluefin/sudo-rs.bst	sudo-rs.bst advances the git ref to a newer v0.2.14-based revision, and updates the pinned libc version from 0.2.183 to 0.2.186 with a matching checksum change.

Sequence Diagram(s)

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 I hopped through pins and versions bright,
Two little ref bumps in the light.
A checksum here, a commit there,
My whiskers twitch with versioned care.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: batching dependency updates for common and sudo-rs.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/batch-deps-2026-06-27

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Thanks for the PR! A maintainer will review it.

While you wait, make sure these pass locally:

just validate        # element graph check
just build default   # build the image
just boot-test       # confirm the desktop boots (exits 0 = pass)
just lint            # bootc container lint

If this PR fixes a bug, add verify steps to the linked issue so users can confirm the fix on their hardware after the next nightly ships:

```verify
ujust <something>   # what users should run to confirm the fix
```

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@elements/bluefin/sudo-rs.bst`:
- Line 31: The inline version comment is stale and no longer matches the pinned
ref. Update the trailing version note next to the ref in sudo-rs.bst so it
reflects the current tag referenced by the updated checksum, keeping the comment
aligned with the ref for future pin updates.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: b5660538-1309-4b7a-b355-9ff14eaf90a4

📥 Commits

Reviewing files that changed from the base of the PR and between 043d964 and d6b1f62.

📒 Files selected for processing (2)

• elements/bluefin/common.bst
• elements/bluefin/sudo-rs.bst

[coderabbitai]

📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

Update the stale inline version comment.

The ref now points to v0.2.14, but the trailing comment still says v0.2.13. That mismatch will mislead the next pin update.

Suggested fix

-  ref: v0.2.14-0-gbc4be2fd85be3063e7cd789c6843a5512f09ceee # v0.2.13
+  ref: v0.2.14-0-gbc4be2fd85be3063e7cd789c6843a5512f09ceee # v0.2.14

📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

	ref: v0.2.14-0-gbc4be2fd85be3063e7cd789c6843a5512f09ceee # v0.2.13
	ref: v0.2.14-0-gbc4be2fd85be3063e7cd789c6843a5512f09ceee # v0.2.14

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@elements/bluefin/sudo-rs.bst` at line 31, The inline version comment is stale
and no longer matches the pinned ref. Update the trailing version note next to
the ref in sudo-rs.bst so it reflects the current tag referenced by the updated
checksum, keeping the comment aligned with the ref for future pin updates.