Skip to content

build(deps): update all non-major dependencies - #452

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

build(deps): update all non-major dependencies#452
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Oct 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
01mf02/jaq patch 3.1.1 → 3.1.2 age confidence
@​opencode-ai/plugin devDependencies minor 1.18.34 → 1.19.4 age confidence
@​opencode-ai/sdk devDependencies minor 1.18.34 → 1.19.4 age confidence
@types/bun (source) devDependencies patch 1.4.2 → 1.4.4 age confidence
Canop/dysk minor 3.7.1 → 3.8.1 age confidence
aqua:docker/buildx tools patch 0.38.0 → 0.38.1 age confidence
atuin tools patch 18.24.0 → 18.24.2 age confidence
base64 dependencies minor 0.22 → 0.23 age confidence
bun tools patch 1.4.3 → 1.4.4 age confidence
chezmoi tools patch 2.73.1 → 2.73.3 age confidence
docker-cli tools patch 29.9.1 → 29.9.2 age confidence
ducaale/xh patch 0.26.2 → 0.26.3 age confidence
find-msvc-tools dependencies patch 0.1.14 → 0.1.15 age confidence
gh tools minor 2.102.0 → 2.103.0 2.103.2 (+1) age confidence
github:Canop/dysk tools minor 3.7.1 → v3.8.1 age confidence
jaq tools patch 3.1.1 → 3.1.2 age confidence
jdx/mise patch 2026.10.11 → 2026.10.17 2026.10.19 (+1) age confidence
jdx/mise uses-with patch v2026.10.11 → v2026.10.17 v2026.10.19 (+1) age confidence
jsonschema dependencies minor =0.58.6 → =0.60.0 0.60.1 age confidence
powershell tools patch 7.6.7 → 7.6.8 7.6.9 age confidence
pulldown-cmark dependencies patch 0.13.4 → 0.13.5 age confidence
python tools patch 3.14.8 → 3.14.9 3.14.10 age confidence
ruff tools patch 0.17.1 → 0.17.2 age confidence
schemars (source) dependencies patch 1.2.2 → 1.2.3 age confidence
starship tools minor 1.26.0 → 1.27.0 age confidence
uv tools patch 0.13.1 → 0.13.5 age confidence
vale tools minor 3.24.0 → 3.25.1 age confidence
vt100 dependencies minor 0.16.2 → 0.18.0 age confidence
xh tools patch 0.26.2 → 0.26.3 age confidence

Release Notes

01mf02/jaq

v3.1.2: 3.1.2

Compare Source

This release corrects bugs, increases compatibility with jq, and polishes the HTML manual.

Corrected bugs:

  • The REPL works again, and as bonus, now exposes inputs and input_filename #​473
  • Comments not followed by a newline do not crash jaq anymore #​479
  • jaq can now actually be used on no_std systems, thanks to @​flyingmutant #​464

Compatibility:

  • The scan filter now automatically applies the g flag and specially treats regexes with capture groups, like jq #​474

HTML manual:

  • Syntax highlighting for jq and JSON snippets #​468
  • Printing the manual now hides the TOC #​483
New Contributors

Full Changelog: 01mf02/jaq@v3.1.1...v3.1.2

Canop/dysk

v3.8.1

Compare Source

  • fix free_percent filter, eg -f 'free_percent>20%'
  • -s use_percent and -s free_percent sort by default in the same direction as -s use and -s free, and the inodes use columns sort fullest first, like -s use
  • 3.8.0's source archive reported version 3.7.1 - Fix #​124

v3.8.0

Compare Source

  • read inodes on Mac/iokit (not very interesting for APFS) - Fix #​107
  • no panic on --help when stdout is closed - Fix #​123
  • new use_bar and inodes_bar columns: bars without percentage - Fix #​116
  • -c all still gives all information but no longer includes all columns, redundant ones being stripped
docker/buildx (aqua:docker/buildx)

v0.38.1

Compare Source

buildx 0.38.1

Welcome to the v0.38.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Security

This release has been built with updated Go runtime 1.26.10 to address CVE-2026-111943 by rejecting certificate chains that include eight revoked eMudhra intermediate certificates.
Image pulls and pushes fail TLS certificate verification if a registry's certificate chain relies on one of the affected TLS intermediates.
Affected registries need a replacement certificate chain that does not use these intermediates.

The blocked intermediates are:

  • Domain-validated TLS: EM DV TLS CA - G3B and EM DV TLS CA - G3C
  • Organization-validated TLS: EM OV TLS CA - G3B and EM OV TLS CA - G3C
  • Extended-validation TLS: EM EV TLS CA - G3B and EM EV TLS CA - G3C
  • Code signing: EM OV CS CA - G3B and EM OV CS CA - G3C

The G3B intermediates belong to eMudhra BV, and the G3C intermediates belong to eMudhra Inc.
The keys for these intermediates were compromised.

Read more about the eMudhra Intermediate CA Compromise

There are no functional changes in Buildx itself compared to the previous release.

Previous release can be found at v0.38.0

atuinsh/atuin (atuin)

v18.24.2

Compare Source

Bug Fixes
  • (ai) Import IntoStaticStr from strum_macros, not strum (#​4480)
  • (ai) Improve detection of git repositories (#​4450)
  • (client) Resolve relative config paths beside config.toml, not the cwd (#​4479)
  • (config) Don't print errors twice (#​4501)
  • (daemon) Fetch the server's capabilities until a fetch succeeds
  • (daemon) Spare a stale pidfile's PID when evicting (#​4512)
  • (daemon) Handle daemons not spawned by atuin (#​4516)
  • (output) Keep quoted words together in output search (#​4502)
  • (packfile) Load only the records inside a manifest's range
  • (pty-proxy) Standalone init with atuin pty-proxy init (#​4449)
  • (pty-proxy) Wait for input on a non-blocking inherited stdin (#​4486)
  • (pty-proxy) Don't re-exec shells running commands from a string or file (#​4414)
  • (search) Don't panic when copying with no results (#​4426)
  • (server) Let ATUIN_* environment variables override server.toml (#​4456)
  • (update) Accept ATUIN_GITHUB_TOKEN (#​4262)
  • Remove duplicated word in the no-history stats message (#​4451)
  • Error printing in ? handler (#​4448)
  • Normalize relative gitdir paths in worktree resolution (#​4506)
  • Upgrade regressions found in release QA (#​4519)
Documentation
  • Fix ctrl_n_shortcuts default value (#​4458)
  • List all history list --format variables (#​4460)
  • Fix the --reverse default for history list (#​4472)
  • Mention December default in wrapped --year help (#​4476)
Features
  • (common) AbsPath and AbsPathBuf, Path and PathBuf checked to be absolute (#​4481)
  • (common) Find a process's cgroup under cgroup v1 and v2 (#​4513)
  • (daemon) Run the daemon as a launchd agent on macOS (#​4517)
  • (pty-proxy) Window title follows child process (#​4447)
  • (secrets) Keep HashiCorp tokens out of history (#​4445)
Miscellaneous Tasks
  • Give mono its own nixfmt step and scope atuin's to atuin/
  • Say a /merge's landed commit gets CI on main
  • Rebuild the apt .deb cache for Ubuntu 24.04 (#​4504)
  • Remove the benchmarks (#​4511)
Performance
  • (common) Compile the vendor regexes once (#​4485)
  • (common) Drop the tree watcher's file-id cache (#​4492)
  • (common) Release a line reader's buffer at the end of the file (#​4494)
  • (common) Keep no tree watcher entry for a rejected file (#​4493)
  • (daemon) Warm up only a resumed session's unanswered calls (#​4490)
  • (packfile) Compress packs in one shot (#​4484)
Refactor
  • (daemon) Managed daemon service with multiple backends (#​4488)
  • (daemon) Move daemon startup into the service module (#​4503)
  • (daemon) Keep where the daemon listens behind service::address (#​4514)
  • (daemon) Take up the daemon's socket in SocketHolder, not Backend (#​4515)
  • (deps) Bump clap_complete_nushell from 4.6.0 to 4.6.2 (#​4473)
  • (deps) Bump clap_complete from 4.6.9 to 4.6.11 (#​4396)
  • (deps) Bump ratatui from 0.30.0 to 0.30.2 (#​4474)
  • (deps) Bump certifi from 2025.11.12 to 2026.10.19 in /docs in the uv group across 1 directory (#​4500)
  • (pty-proxy) Run on tokio with the parser on its own runtime (#​4482)
  • (pty-proxy) Forward captures to the daemon on the proxy's runtime (#​4487)
  • (pty-proxy) Rename the screen's parser to Emulator (#​4510)
  • (pty-proxy) Migrate output parsing to vte (#​4518)
Testing
  • (daemon) Run the output index tests under rstest (#​4496)

v18.24.1

Compare Source

Bug Fixes
  • (daemon) Verify daemon version in HTTP headers (#​4431)
Features
  • (ai-session) Support omp threads and keep reply providers for resume (#​4441)
  • (config) Insert new keys where they're documented (#​4432)
marshallpierce/rust-base64 (base64)

v0.23.1

Compare Source

  • Make the tests build again on non-SIMD architectures

v0.23.0

Compare Source

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best
    instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar
    GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime
    detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
oven-sh/bun (bun)

v1.4.4: Bun v1.4.4

Compare Source

To install Bun v1.4.4

curl -fsSL https://bun.com/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.com/install.ps1|iex"

To upgrade to Bun v1.4.4:

bun upgrade
Read Bun v1.4.4's release notes on Bun's blog
Thanks to 39 contributors!
twpayne/chezmoi (chezmoi)

v2.73.3

Compare Source

Changelog

Fixes
  • b6c7df6 fix: Build with Go 1.27.3 with important security fix

v2.73.2

Compare Source

Changelog

Fixes
  • 40dcf24 fix: Fix keepassxcAttachment template func in cache password mode
  • b703d46 fix: Ignore entries in tar archives that resolve to the current dir
  • e2ca6e3 fix: Fix re-add command when adding individual files in an exact_ dir
  • 26e99d5 fix: Don't read .chezmoidata files in external_ dirs
docker/cli (docker-cli)

v29.9.2

Compare Source

ducaale/xh

v0.26.3

Compare Source

Security fixes
  • Upgrade rustls-webpki to v0.103.16 and webpki-root-certs to v1.0.10
Features
rust-lang/cc-rs (find-msvc-tools)

v0.1.15

Compare Source

Other
  • Regenerate windows sys bindings (#​2019)
cli/cli (gh)

v2.103.0: GitHub CLI 2.103.0

Compare Source

Expiring, auto-refreshing OAuth tokens (preview)

gh can now sign in with expiring OAuth credentials that it refreshes automatically. When you opt in, gh stores a short-lived access token alongside a rotating refresh token and refreshes the access token whenever it is needed, so you stay signed in without having to authenticate again.

To opt in for a single sign-in, run:

gh auth login --expiring

To prefer expiring credentials for every sign-in, run:

gh config set expiring_credentials enabled

gh auth status shows whether a credential is refreshable and when the current access token expires. Both gh auth status and gh auth token automatically refresh the access token when needed. Expiring tokens are available on github.com and GHE.com; on hosts that do not issue them, gh falls back to a regular non-expiring token.

If you use HTTPS as your git protocol, we advise using git 2.46 or newer and letting gh act as your git credential helper by running gh auth setup-git. This way gh serves and refreshes the expiring credential for git, and git does not cache it past its lifetime.

[!IMPORTANT]
Expiring access tokens should not be cached. Scripts and extensions that store the output of gh auth token will eventually hold an expired token, so run gh auth token again each time a token is needed. Tokens supplied through GH_TOKEN or GITHUB_TOKEN are never refreshed.

For more information, see Authenticating with GitHub CLI.

Manage issue artifacts with gh issue artifact (private preview)

gh issue artifact brings issue artifacts to the command line. Users and organizations enrolled in the private preview can use the list, view, create, edit, download, and delete commands to manage issue artifacts.

# Create a Markdown document with an attached image
gh issue artifact create 142 signin-plan.md --attach ./signin-flow.png

# Create an HTML document
gh issue artifact create 142 menu-prototype.html

# List or view artifacts
gh issue artifact list 142
gh issue artifact view 142 2

# Update a document or restore an earlier version
gh issue artifact edit 142 2 --body-file signin-plan-v2.md
gh issue artifact edit 142 2 --restore-version 5

Artifacts can also be addressed by their GitHub URLs, and Markdown documents support image and video attachments with --attach.

[!IMPORTANT]
Issue artifacts are in private preview. These commands only work for repositories enrolled in the preview. See the Issue Artifacts private preview announcement and feedback discussion for access instructions and to share feedback.

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: cli/cli@v2.102.1...v2.103.0

v2.102.1: GitHub CLI 2.102.1

Compare Source

What's Changed

:dependabot: Dependencies

chore(deps): bump Go toolchain from 1.27.1 to 1.27.3 and golang.org/x/net from 0.58.0 to 0.60.0

Full Changelog: cli/cli@v2.102.0...v2.102.1

jdx/mise

v2026.10.17

Compare Source

🚀 Features
  • (bootstrap) accept a shell name in bootstrap.user.login_shell by @​jdx in #​14770
  • (doctor) render templates in check run, description and hint by @​jdx in #​14771
  • (vfox) add RUNTIME.cacheDirPath for plugins by @​jdx in #​14776
🐛 Bug Fixes
  • (aqua) handle unterminated string literals in template lexer by @​Huge in #​14752
  • (env) keep pre-activation PATH entries when the shell deduplicates PATH by @​jdx in #​14772
  • (pipx) don't pick a case-insensitive Python match as the interpreter on macOS by @​jdx in #​14769
  • (release) sign Windows binaries in a separate workflow run by @​jdx in #​14766
  • (task) rehash same-size source edits that restore mtime in content-hash mode by @​jdx in #​14778
📚 Documentation
  • (dotfiles) clarify permissions-only group entries and pruning by @​jdx in #​14768
📦️ Dependency Updates
New Contributors

v2026.10.15

Compare Source

🚀 Features
🐛 Bug Fixes
  • (aqua) find binaries in macOS universal archives by @​jdx in #​14665
  • (aqua) date github_tag versions so minimum_release_age applies by @​jdx in #​14691
  • (backend) warn when minimum_release_age cannot check a version's date by @​jdx in #​14694
  • (conda) report release dates so minimum_release_age applies by @​jdx in #​14693
  • (core) date dotnet, deno and erlang versions for minimum_release_age by @​jdx in #​14692
  • (core) date more ruby, python and rust versions so minimum_release_age applies by @​jdx in #​14697
  • (dotfiles) report copies instead of symlinks for symlink-each on Windows by @​jdx in #​14654
  • (fmt) keep multiline inline tables intact by @​jdx in #​14670
  • (http) retry the install rename on Windows when antivirus holds the files by @​jdx in #​14703
  • (install) extract 7z archives when the data dir contains .. by @​jdx in #​14657
  • (npm) run allow_builds scripts despite ignore-scripts in .npmrc by @​jdx in #​14661
  • (npm) pin aube-lock.yaml so a user's lockfile settings don't break mise lock by @​jdx in #​14659
  • (rust) list channels when GitHub is unreachable behind a mirror by @​jdx in #​14662
  • (shim) keep the version tag in the Windows release mise-shim.exe by @​jdx in #​14656
  • (task) keep task commands working when one task's dir template is broken by @​jdx in #​14680
🚜 Refactor
  • (schema) generate the [deps] and [secrets] schema from their types by @​jdx in #​14658
  • (schema) generate the [daemons] and [daemon_providers] schema from types by @​jdx in #​14663
  • (schema) generate the [hooks] schema from declaration types by @​jdx in #​14666
  • (schema) generate the [bootstrap] raw-value schema from declaration types by @​jdx in #​14668
  • (schema) generate the [tools] option schemas from declaration types by @​jdx in #​14669
  • (schema) generate the [env] and [vars] schema from declaration types by @​jdx in #​14671
  • (schema) generate the multi-shape task field schemas from declaration types by @​jdx in #​14672
📚 Documentation
  • (config) add an interactive mise.toml editor and playground by @​jdx in #​14673
  • (config) hover over keys in every mise.toml example by @​jdx in #​14686
  • (config) turn the mise.toml reference into a key explorer by @​jdx in #​14687
  • (config) show a real example for every mise.toml reference key by @​jdx in #​14690
  • (dotnet) explain how private feeds authenticate by @​jdx in #​14679
  • (schema) describe the remaining bootstrap keys by @​jdx in #​14688
  • (secrets) add setup, CI and migration guidance to the fnox page by @​jdx in #​14675
  • record the landing-page showreel against current mise so its cache fills by @​jdx in #​14685
📦️ Dependency Updates
📦 Registry
  • add release dates to dart, flutter, nim, julia and other http tools by @​jdx in #​14698
Ci
  • (release) publish releases staged before install.ps1 existed by @​jdx in #​14684

v2026.10.14

Compare Source

🚀 Features
  • (backend) reject tool options a backend does not read by @​jdx in #​14629
  • (config) let env_file take several filenames by @​jdx in #​14606
  • (config) add config.override.toml so global config can override project config by @​jdx in #​14610
  • (config) let paranoid take a list of categories by [@​

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

  • Branch creation
    • "before 9am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot enabled auto-merge (squash) October 25, 2026 22:08
@coderabbitai

coderabbitai Bot commented Oct 25, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one): 1
  • review:critical

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: P4suta/dotfiles
  • Branch: main
  • File: .coderabbit.yaml
  • Commit: 31a311c
  • Layers: Repository YAML; Enforced overrides: Organization
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 29295148-4d5e-41a1-b577-b437a4937311

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 533746a to 4629fcf Compare October 26, 2026 02:34
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 4629fcf to a458470 Compare October 26, 2026 05:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants