chore(deps): bump pulseengine/rivet from 0.6.0 to 0.16.0

[dependabot]

Bumps pulseengine/rivet from 0.6.0 to 0.16.0.

Release notes

Sourced from pulseengine/rivet's releases.

Rivet v0.16.0

What's Changed

• fix(matrix): hint the correct --direction on an all-empty matrix (REQ-152) by @​avrabe in pulseengine/rivet#401
• fix(impact): load --since baseline via the canonical loader (REQ-153, #403) by @​avrabe in pulseengine/rivet#404
• fix(list,stats): loudly report sources skipped by parse errors (REQ-154, #353) by @​avrabe in pulseengine/rivet#405
• fix(validate): suppress prose-mention warning when no link type can connect the types (REQ-155, #353) by @​avrabe in pulseengine/rivet#407
• feat(validate): add coverage-rule-consistency schema check (REQ-148, #350) by @​avrabe in pulseengine/rivet#409
• refactor(validate): single chokepoint for schema-level consistency checks (REQ-156, #410) by @​avrabe in pulseengine/rivet#411
• fix(validate): emit the per-file parse-error skip WARN once, not twice (REQ-157, #406) by @​avrabe in pulseengine/rivet#412
• feat(validate,add): near-duplicate-intent detection (REQ-158, #397) by @​avrabe in pulseengine/rivet#413
• fix(add): deterministic near-duplicate note + correct REQ-158 self-count (#397) by @​avrabe in pulseengine/rivet#414
• feat(store): deterministic iter_sorted() + document iter() nondeterminism (REQ-159, #415) by @​avrabe in pulseengine/rivet#416
• fix(query,export,migrate): deterministic order over the HashMap-backed store (REQ-160, #415) by @​avrabe in pulseengine/rivet#417
• feat(validate): --structural gates on integrity only, via Diagnostic::is_structural() (REQ-161, #408) by @​avrabe in pulseengine/rivet#418
• ci(compliance): forward version-switcher + back-link inputs to the report action (REQ-163, #420) by @​avrabe in pulseengine/rivet#421
• chore(git): union-merge driver for CHANGELOG to cut parallel-PR conflicts (REQ-164, #422) by @​avrabe in pulseengine/rivet#423
• feat(schema): declare canonical status lifecycle in common.yaml (REQ-162, #352, #355) by @​avrabe in pulseengine/rivet#419
• fix(aspice): verification gates accept forward target status (REQ-165, #355 Finding 2) by @​avrabe in pulseengine/rivet#424
• feat(matrix): infer direction + link when --direction omitted (REQ-166, #402) by @​avrabe in pulseengine/rivet#425
• feat(cli): add rivet trace <id> + deterministic explain ordering (REQ-167, #426) by @​avrabe in pulseengine/rivet#427
• feat(bundle): --incoming follows backlinks so sinks bundle their realizers (REQ-168, #428) by @​avrabe in pulseengine/rivet#429
• feat(externals): rivet sync refuses to clobber uncommitted git-external edits (REQ-169) by @​avrabe in pulseengine/rivet#432
• feat(externals): surface un-synced externals so cycle/backlink checks aren't silently incomplete (REQ-170) by @​avrabe in pulseengine/rivet#434
• fix(playwright): bound graph E2E node count so dataset growth doesn't trip render budget (REQ-171) by @​avrabe in pulseengine/rivet#435
• fix(serve): preserve active variant scope when filtering/searching (REQ-172, #430) by @​avrabe in pulseengine/rivet#437
• fix(externals): ignore only .rivet/repos/ cache, not the whole .rivet/ dir (REQ-173, #433) by @​avrabe in pulseengine/rivet#439
• test(serve): /graph tests retry on status==0 to stop flapping on unrelated PRs (REQ-175) by @​avrabe in pulseengine/rivet#441
• ci(hooks): pre-commit also runs cargo fmt --check on staged Rust (REQ-174, #438) by @​avrabe in pulseengine/rivet#440
• feat(schema): rivet schema info reports on-disk vs embedded source (REQ-176, #431) by @​avrabe in pulseengine/rivet#442
• feat(schema): add rivet schema sources — on-disk vs embedded resolution (REQ-177, #431) by @​avrabe in pulseengine/rivet#443
• docs(artifacts): file REQ-178 — coverage-gap diagnostics should name the intermediate chain (#350) by @​avrabe in pulseengine/rivet#444
• feat(validate): --explain names which backlink source types can attach directly (REQ-178, #350) by @​avrabe in pulseengine/rivet#445
• docs(artifacts): realize shipped dogfood REQs with feature artifacts (coverage 27.9%→31.8%) by @​avrabe in pulseengine/rivet#446
• feat(cli): rivet next-id accepts a positional type/prefix shorthand (REQ-179, #447) by @​avrabe in pulseengine/rivet#448
• docs(agents): surface rivet next-id in generated agent guidance (REQ-180, #447) by @​avrabe in pulseengine/rivet#449
• fix(export): escape backslashes in zola TOML front matter + gate it (REQ-181, #392) by @​avrabe in pulseengine/rivet#450
• fix(export): actionable error when a single-file format gets a directory --output (REQ-182) by @​avrabe in pulseengine/rivet#451
• fix(reqif): title-less artifacts stay re-importable via id LONG-NAME fallback (REQ-183) by @​avrabe in pulseengine/rivet#452
• feat(cli): add import as a visible alias for import-results (REQ-184, #453) by @​avrabe in pulseengine/rivet#454
• fix(lsp): resolve cross-repo external links so VSIX doesn't flag them broken (REQ-185) by @​avrabe in pulseengine/rivet#455
• plan: REQ-186 — CLI minimal-build feature (validate without serve+MCP+LSP) by @​avrabe in pulseengine/rivet#457
• feat(cli): rivet query accepts s-expression as a positional shorthand (REQ-187) by @​avrabe in pulseengine/rivet#458
• feat(cli): positional link/unlink target + accurate init/modify help (REQ-188) by @​avrabe in pulseengine/rivet#459
• feat(cli): query --format json carries command envelope + ships query-output schema (REQ-189) by @​avrabe in pulseengine/rivet#460
• fix(query): execute_sexpr returns deterministic (id-sorted) matches (REQ-190, #415) by @​avrabe in pulseengine/rivet#461
• fix(links): orphans() returns id-sorted output for deterministic stats/validate (REQ-191, #415) by @​avrabe in pulseengine/rivet#462
• feat(cli): commits --format json carries the command envelope field (REQ-192) by @​avrabe in pulseengine/rivet#463
• fix(embed): {{query:...}} embed renders rows id-sorted for reproducible docs (REQ-193, #415) by @​avrabe in pulseengine/rivet#464
• feat(cli): snapshot diff accepts the baseline path positionally (REQ-194) by @​avrabe in pulseengine/rivet#465
• feat(cli): variant subcommands accept a bare --variant (REQ-195, #466) by @​avrabe in pulseengine/rivet#467

... (truncated)

Changelog

Sourced from pulseengine/rivet's changelog.

[0.16.0] - 2026-06-09

Added

• REQ-213 / #510 — rivet schema presets. Lists every built-in schema preset you can declare in rivet.yaml's schemas: (name, version, artifact-type count, description), so the enableable standard set — DO-178C / ISO 26262 / IEC 61508 / EN 50128 and the rest — is discoverable instead of undocumented. Needs no project; works in a bare directory.

• REQ-211 / #506, #511 — rivet list --format json --full. Emits each artifact's description, tags, and fields in bulk, so a machine-readable query for a custom field value (e.g. release/baseline) no longer needs one rivet get per artifact or a raw YAML parse.

• REQ-212 / REQ-051, #436 — CI traceability gate. A traceability job in ci.yml runs rivet validate (fail on errors) + rivet commits (orphan / broken-trailer gate on PRs): the traceability tool now gates its own PRs. The in-CI mechanism of REQ-051 (marking it a required check remains an operator step, #436).

• Release planning via the baseline field (#512). Documented in AGENTS.md that baseline is rivet's release field (vX.Y.Z-track while in progress → vX.Y.Z when shipped); readiness is the query rivet list --filter '(= baseline "vX.Y.Z-track")'. v0.16.0 is the first release scoped this way.

• REQ-162 / #352, #355 — canonical status lifecycle is now enforced. The shared schemas/common.yaml status base-field declares [draft, proposed, approved, implemented, verified, released, deprecated, rejected], so a typo'd / off-vocabulary status now fails rivet validate with a status-allowed-values ERROR + remediation instead of passing silently, and the set is discoverable. Absent status is unaffected. The rivet repo's own 7 drifting artifacts (accepted/active/partial) were migrated to fit. Downstream note: projects sharing common.yaml must use a status in this set or extend it. (#355 Finding 2 — the approved-hardcoded ASPICE promotion gates — is a separate follow-up needing a status-at-least predicate.)

• REQ-161 / #408 — rivet validate --structural. Gates only on structural-integrity diagnostics (broken links, duplicate ids, parse errors, bad link targets, cardinality, schema-rule inconsistencies), hiding coverage/lint findings (missing/extra/typo'd fields, orphans, prose-mention, near-duplicates). This gives bulk-edit and status-promotion workflows a meaningful "did I break the graph?" check independent of coverage noise — what spar/sigil hand-rolled as a 0 broken cross-refs gate. Backed by a new Diagnostic::is_structural() classification (explicit allowlist; a unit test enumerates every built-in rule). The rivet repo validate --structural PASSes with 0 shown.

Fixed

• REQ-168 / #428 — rivet bundle --incoming. bundle built the closure

... (truncated)

Commits

• 23b2495 release(v0.16.0): bump version + finalize CHANGELOG [0.16.0] (#519)
• 839ead1 ci(traceability): gate PRs on rivet validate + commits (REQ-212, part of REQ-...
• c79879a chore(release-plan): scope v0.16.0 via baseline field + document the conventi...
• 23cd687 feat(schema): rivet schema presets lists declarable built-in schemas (REQ-2...
• 2871c97 feat(list): --full emits description/tags/fields in JSON for bulk queries (RE...
• ecb073a fix(init): pre-commit hook runs cargo fmt --check on staged Rust (REQ-210, #4...
• 2750e9f ci: move rivet-core mutation matrix to nightly so it stops saturating runners...
• 6b0ff34 docs(cli): clarify --project/--schemas must precede the subcommand (#500) (#503)
• e94ac95 fix(cli): revert --project/--schemas global — clap debug-asserts with positio...
• c6b57d6 fix(cli): make --project/--schemas global so they work in any position (REQ-2...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)