mirror of
https://github.com/max-sixty/worktrunk.git
synced 2026-09-14 20:00:38 +08:00
worktree-path-not-found-error
387 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
 dependabot[bot]
|
9478fc6675 |
chore: bump taiki-e/install-action from 2.82.6 to 2.82.7 (#3342)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.82.6 to 2.82.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.82.7</h2> <ul> <li> <p>Update <code>tombi@latest</code> to 1.1.6.</p> </li> <li> <p>Update <code>kingfisher@latest</code> to 1.105.0.</p> </li> <li> <p>Update <code>gungraun-runner@latest</code> to 0.19.3.</p> </li> <li> <p>Update <code>editorconfig-checker@latest</code> to 3.8.0.</p> </li> <li> <p>Update <code>dprint@latest</code> to 0.55.1.</p> </li> <li> <p>Update <code>cargo-tarpaulin@latest</code> to 0.36.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.82.7] - 2026-06-30</h2> <ul> <li> <p>Update <code>tombi@latest</code> to 1.1.6.</p> </li> <li> <p>Update <code>kingfisher@latest</code> to 1.105.0.</p> </li> <li> <p>Update <code>gungraun-runner@latest</code> to 0.19.3.</p> </li> <li> <p>Update <code>editorconfig-checker@latest</code> to 3.8.0.</p> </li> <li> <p>Update <code>dprint@latest</code> to 0.55.1.</p> </li> <li> <p>Update <code>cargo-tarpaulin@latest</code> to 0.36.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/16b05812d776ae1dfaabc8277e421fb6d2506419"><code>16b0581</code></a> Release 2.82.7</li> <li><a href="https://github.com/taiki-e/install-action/commit/68c845308d9b56d38e797c62e48eddfe1b4ba94f"><code>68c8453</code></a> Update uv manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/8532697fda4ee37ccd65901e90d87a785c45d7bd"><code>8532697</code></a> Update trivy manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/2959f9e73b89d18f2d72d0aa55ed797e70062732"><code>2959f9e</code></a> Update <code>tombi@latest</code> to 1.1.6</li> <li><a href="https://github.com/taiki-e/install-action/commit/9bfa119f6c347b458726d629758b16dd861727a4"><code>9bfa119</code></a> Update <code>kingfisher@latest</code> to 1.105.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/f198b91ffb69aa6008cb3b0ea9cf6eb6b0af01f4"><code>f198b91</code></a> Update just manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/20feedd5827d6d189bca20753dbd5582948e7478"><code>20feedd</code></a> Update <code>gungraun-runner@latest</code> to 0.19.3</li> <li><a href="https://github.com/taiki-e/install-action/commit/314197aa953241335b4a4c41c2d6e8066d6150da"><code>314197a</code></a> Update <code>editorconfig-checker@latest</code> to 3.8.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/f8632ebbd28b43dce012ff3db91c959c7751db33"><code>f8632eb</code></a> Update <code>dprint@latest</code> to 0.55.1</li> <li><a href="https://github.com/taiki-e/install-action/commit/4234dc0f7acb7e7774a1716b103fcaf2d9ed9b4d"><code>4234dc0</code></a> Update <code>cargo-tarpaulin@latest</code> to 0.36.0</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/install-action/compare/v2.82.6...v2.82.7">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Worktrunk Bot
|
d422b1b9be | chore: update tend workflows (0.1.7 → 0.1.9) (#3339) | ||
|
Maximilian Roos
|
820666741f |
ci: run benchmarks on their own daily schedule, split from nightly (#3337)
The criterion suite ran as a job inside `nightly.yaml`: ~80 min, checking performance rather than correctness, yet feeding nightly's failure aggregator and dominating its wall-clock. This moves it into a standalone `benchmarks.yaml` on its own daily schedule, decoupled from nightly's correctness checks. `benchmarks.yaml` runs on its own cron (3:47 UTC, offset from nightly's 5:37 so the two long runs don't contend) plus `workflow_dispatch`. The env block is carried over so the shared `test` cache key still matches (per `.github/CLAUDE.md`); the gist time-series append stays gated to `schedule` events; and a dedicated `create-issue-on-benchmark-failure` job keeps a broken bench harness visible, since benchmarks no longer ride nightly's aggregator. One behavior change: benchmarks no longer run on PRs at all. Previously the job ran on a PR carrying the `nightly` label or touching `Cargo.*`. `workflow_dispatch` against a branch covers on-demand bench runs. `nightly.yaml` loses the `benchmarks` job, its header line, and its `needs` entry in the failure aggregator. Docs updated: the `CLAUDE.md` benchmarks note (benchmarks no longer gate merges since they're off PRs) and the `running-tend` skill's `setup-nu` call-site list. This branch also merges current `main`, which includes #3324 (drop `cache-apt-pkgs-action` for plain `apt-get`); `benchmarks.yaml` installs zsh/fish the same way rather than reintroducing the dropped action. > _This was written by Claude Code on behalf of max_ Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|
Maximilian Roos
|
fb20a315a1 |
ci: split fast checks from the full suite; add nightly full-tests safety net (#3332)
Prep work toward making the advisory `cargo-affected` legs the PR test path, without flipping any merge gate yet. ## What changed - **`ci.yaml`** — the `test (linux/macos/windows)` job bundled five gates through one `wt hook pre-merge` call. Split the platform-independent ones — `Cargo.lock` freshness, doctests, and the rustdoc `-Dwarnings` build — into a new Linux-only `fast-checks` job. `test` now runs *only* the full nextest suite (`insta`), so it's a clean drop-in shape for the affected legs later. `fast-checks` stays required and unchanged across the eventual flip. - **`nightly.yaml`** — added a `full-tests` matrix job (linux/macos/windows, the full suite). This is the safety net for what cargo-affected can't cover: tests it under-selects, plus non-Rust/build inputs it can't trace (`include_str!`, templates, `build.rs`, toolchain, proc-macros). It also hosts the Linux `--unreferenced reject` orphan check. It runs on nightly cron, the `nightly` label, dispatch, and dep-pushes — deliberately **not** on the main-gating path, so a cargo-affected miss surfaces in nightly (non-blocking, Tend-fixable) rather than reddening main. Nothing is gated by the affected legs yet; `test (*)` stays the required PR gate during calibration. The flip (make affected required, delete the PR `test` job) is a later, separate change — documented in the `ci.yaml` comment block. ## ⚠️ Branch-protection follow-up Splitting `lockfile`/`doctest`/`doc` out of the required `test` job means **`fast-checks` must be added to the required status checks** (the "Merge access" ruleset). Until it is, those three gates don't block PRs. This is an admin action that should accompany the merge. ## Testing CI-config only; validated with `actionlint` and pre-commit (yaml/eof/whitespace/typos). The workflow behavior itself validates on this PR's run. > _This was written by Claude Code on behalf of max_ Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|
Maximilian Roos
|
16027a6a58 |
fix(ci): install zsh/fish via apt-get, drop cache-apt-pkgs-action (#3324)
## What this does Removes the third-party `awalsh128/cache-apt-pkgs-action` from CI entirely, installing zsh + fish with a plain `sudo apt-get update && sudo apt-get install -y zsh fish` at all four call sites: - `ci.yaml` — `code-coverage` - `nightly.yaml` — `feature-powerset` and `benchmarks` - `.github/actions/test-setup/action.yaml` — composite action used by the required `test` matrix It also drops the Dependabot `ignore` entry for the action (no longer needed once the action is gone). ## Why (and why this supersedes #3321) `awalsh128/cache-apt-pkgs-action@v1.6.2` (dependabot bump #3311) empties its own `packages: zsh fish` argument in the "Normalizing package list" step and aborts with `Packages argument is empty`, in ~20s, before any compilation — killing `code-coverage` on every PR, which in turn stopped `codecov/patch` from posting anywhere. Root cause is upstream PR #177 quoting `${packages}`, tracked at [awalsh128/cache-apt-pkgs-action#210](https://github.com/awalsh128/cache-apt-pkgs-action/issues/210). #3321 already fixed main by pinning back to `v1.6.1`. This PR takes the sturdier route — dropping the dependency — based on the upstream's health: - Issue #210 is open with **no maintainer engagement**; affected users call the action "basically non-functional," with a fresh repro confirmed on 2026-06-29. - **No open PR** reverts #177 or fixes the regression; v1.6.2 (broken) is still tagged `Latest`, and contributor PRs sit unmerged for months. - The action's mutable `v1`/`latest` tags are actively being retargeted upstream (open PR #211), which is how a `@v1.6.1` ref can resolve to drifted code — so even the pin isn't a stable anchor. `zsh` and `fish` are in the standard Ubuntu repos (no PPA), so the action only *cached* an install of two tiny packages — a negligible speed-up for a third-party dependency that is under-maintained, broke CI repo-wide, and can't be stably pinned. Dropping it removes the whole failure class and matches the existing `musl-tools` install already in `nightly.yaml`. Verified: the identical `apt-get` step already runs green in the required `test (linux)` job (installs zsh 5.9 + fish 3.7.0), and a full `code-coverage` run on this branch completed green end-to-end with `codecov/patch` posting again. ## Guard against recurrence #3311 merged while its own `code-coverage` was red because `code-coverage`/`codecov/patch` aren't *required* status checks (only `test (linux/macos/windows)` are), and `codecov/patch` was absent rather than red (the job died before uploading), so the mechanical-bump merge saw nothing blocking. Recommended guard: make the `code-coverage` job a required status check — it fails only on genuine breakage (the codecov upload already soft-fails on fork PRs), so it blocks this class without re-introducing the flake that keeps `codecov/patch` itself advisory. > _This was written by Claude Code on behalf of max_ Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|
Maximilian Roos
|
225b232b51 |
ci: gate rust caches to main and share one per OS to fit the 10 GB cap (#3323)
## What The Actions cache sat at **11.1 GB across 57 caches** against GitHub's hard **10 GB per-repo cap**, so every run was evicting older caches LRU-style — constant churn. ~57% of that was single-PR caches (`refs/pull/N/merge`) that no other PR can ever restore, depositing budget that evicted the reusable `main` caches. ## Changes - **`save-if` gated to `main` on every rust-cache call.** PRs restore `main`'s cache via the restore-key fallback and never deposit their own. This alone drops the footprint under the cap. - **One shared cache per OS for the test family.** `test-setup` now sets `shared-key`, with `test` as the sole saver (new `save-cache` input, default `true`); `affected-tests` / `collect-affected` / `release-target` pass `save-cache: "false"`. The PR-only `affected-tests` job needed this most — it never runs on `main`, so a per-job key had no baseline and cold-built every PR; it now rides `test`'s `main` cache. - **Nightly/release jobs stop saving.** Stable ones (`feature-powerset`, `benchmarks`, `crate-build`) restore the shared cache read-only; the nightly-toolchain ones (`check-unused`, `minimal-versions`) and the cross-target `release-target` just don't save — near-zero reuse against the cap. - **`cache-bin: false` applied to the v0 jobs too** (`lint`, `feature-check`, `msrv`, `code-coverage`), closing the latent rustup-proxy bug that `test-setup` already guarded against. ## Deliberate non-changes - `lint` / `feature-check` / `code-coverage` keep their own `main`-gated caches rather than joining the shared one. They build divergent artifacts (clippy-check, `--no-default-features`, coverage-instrumented), and we're no longer space-constrained after the above — a right-sized own cache beats a 1.3 GB restore for partial reuse. - Did **not** add PRQL's `Cargo.lock`-hash-in-prefix-key: rust-cache already keys on the lockfile, and `save-if: main` already prevents the PR-junk accumulation that trick fights (one mechanism per guarantee). - The `awalsh128/cache-apt-pkgs-action` stays pinned at `v1.6.1` (per #3321, merged into this branch) — not replaced. Only `Swatinem/rust-cache` config changes here. Projected active cache: **~3–5 GB**, all `main`-scoped. No `wt` behavior change, so no changelog entry. > _This was written by Claude Code on behalf of max_ --------- Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|
Worktrunk Bot
|
7daa0763d7 |
fix(ci): pin cache-apt-pkgs-action back to v1.6.1 (#3321)
## Problem CI on `main` fails in the required `code-coverage` job ([failed run](https://github.com/max-sixty/worktrunk/actions/runs/28358354325)). The `Install shells (zsh, fish)` step aborts: ``` PACKAGES: zsh fish Normalizing package list... Validating action arguments (version='1', packages='')... exit status 100Packages argument is empty. ##[error]Process completed with exit code 3. ``` This is a deterministic regression in `awalsh128/cache-apt-pkgs-action@v1.6.2`, introduced by the bump in #3311. v1.6.2's new "Normalize package list" step turns the input `zsh fish` into an empty string before validation. Upstream root cause: PR #177 added quotes around `${packages}` in `get_normalized_package_list`, so `apt_query` treats the entire space-separated list as one package name and the normalization yields nothing — tracked at [awalsh128/cache-apt-pkgs-action#210](https://github.com/awalsh128/cache-apt-pkgs-action/issues/210). v1.6.2 is still the latest release with no fix. #3311 bumped three of the four call sites (`ci.yaml` `code-coverage`, two in `nightly.yaml`); `.github/actions/test-setup/action.yaml` was never bumped and stayed on v1.6.1 — which is why test-setup-based jobs passed while `code-coverage` failed. ## Solution Revert the three v1.6.2 references to v1.6.1, the known-good version the test-setup action already uses, so all four sites are consistent again. Also add a Dependabot `ignore` for v1.6.2 of this action so the daily github-actions update doesn't immediately re-create the same broken bump; the entry is scoped to that one version, so Dependabot can bump forward once a fixed release ships. This is the right level: the failure is entirely upstream, the fix matches the existing precedent (#2583 pinned this action), and pinning back is a clean revert rather than a workaround layered on a broken release. ## Testing The fix is a CI-config change; correctness is verified by CI itself re-running the `code-coverage` job with v1.6.1. The v1.6.1 path is already exercised by every existing run via `test-setup`, which never failed on this step. Note: the advisory (non-required) `collect affected coverage (windows)` leg in the failed run also failed, on an unrelated PTY flake (`test_switch_picker_create_validates_templates_before_worktree`) — a separate known-flaky Windows shell-integration test, not caused by this commit and not addressed here. --- Automated fix for [failed run](https://github.com/max-sixty/worktrunk/actions/runs/28358354325) Co-authored-by: worktrunk-bot <254187624+worktrunk-bot@users.noreply.github.com> Co-authored-by: Claude <noreply@anthropic.com> |
||
|
dependabot[bot]
|
b7cf4f0cf0 |
chore: bump taiki-e/install-action from 2.82.4 to 2.82.6 (#3312)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.82.4 to 2.82.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.82.6</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.7.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.25.</p> </li> <li> <p>Update <code>syft@latest</code> to 1.46.0.</p> </li> <li> <p>Update <code>dprint@latest</code> to 0.55.0.</p> </li> <li> <p>Update <code>cargo-auditable@latest</code> to 0.7.5.</p> </li> </ul> <h2>2.82.5</h2> <ul> <li> <p>Update <code>wasmtime@latest</code> to 46.0.1.</p> </li> <li> <p>Update <code>wasm-bindgen@latest</code> to 0.2.126.</p> </li> <li> <p>Update <code>vacuum@latest</code> to 0.29.6.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.14.</p> </li> <li> <p>Update <code>cargo-rdme@latest</code> to 2.1.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.82.6] - 2026-06-29</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.7.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.25.</p> </li> <li> <p>Update <code>syft@latest</code> to 1.46.0.</p> </li> <li> <p>Update <code>dprint@latest</code> to 0.55.0.</p> </li> <li> <p>Update <code>cargo-auditable@latest</code> to 0.7.5.</p> </li> </ul> <h2>[2.82.5] - 2026-06-26</h2> <ul> <li> <p>Update <code>wasmtime@latest</code> to 46.0.1.</p> </li> <li> <p>Update <code>wasm-bindgen@latest</code> to 0.2.126.</p> </li> <li> <p>Update <code>vacuum@latest</code> to 0.29.6.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.14.</p> </li> <li> <p>Update <code>cargo-rdme@latest</code> to 2.1.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/9bcaee1dcae34154180f412e2fa69355a7cda9f6"><code>9bcaee1</code></a> Release 2.82.6</li> <li><a href="https://github.com/taiki-e/install-action/commit/e43cd7ce2e2c5a6d08d652405a0ead8cda7bf2db"><code>e43cd7c</code></a> Update <code>vacuum@latest</code> to 0.29.7</li> <li><a href="https://github.com/taiki-e/install-action/commit/3761407ad0b5e4e5b42ccb62e48ffa2712e94703"><code>3761407</code></a> Update <code>uv@latest</code> to 0.11.25</li> <li><a href="https://github.com/taiki-e/install-action/commit/cb6ad0dba1ff078e589e75ae88bb03120688feef"><code>cb6ad0d</code></a> Update tombi manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/6022671c93f20efad71663e3adc06d63e7f1ec8a"><code>6022671</code></a> Update <code>syft@latest</code> to 1.46.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/ab5aae8354703341b0939f4e6c1bb66372b446db"><code>ab5aae8</code></a> Update gungraun-runner manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/867613b49949fba1c8fe194d323c7c51b77b24d2"><code>867613b</code></a> Update editorconfig-checker manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/c5837ef63439ac9ebc0ecce97e23cca6a4a5aac4"><code>c5837ef</code></a> Update <code>dprint@latest</code> to 0.55.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/7d41d74582778d0345db89bc1054e86f3802b6d2"><code>7d41d74</code></a> Update <code>cargo-auditable@latest</code> to 0.7.5</li> <li><a href="https://github.com/taiki-e/install-action/commit/bffeee26d4db9be238a4ea78d8826604ebcb594d"><code>bffeee2</code></a> Release 2.82.5</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/install-action/compare/v2.82.4...v2.82.6">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
1c31672a62 |
chore: bump awalsh128/cache-apt-pkgs-action from 1.6.1 to 1.6.2 (#3311)
Bumps [awalsh128/cache-apt-pkgs-action](https://github.com/awalsh128/cache-apt-pkgs-action) from 1.6.1 to 1.6.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/awalsh128/cache-apt-pkgs-action/releases">awalsh128/cache-apt-pkgs-action's releases</a>.</em></p> <blockquote> <h2>v1.6.2</h2> <h2>What's Changed</h2> <ul> <li>Apply PR <a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/issues/193">#193</a> dependency pinning to <code>action.yml</code> (overwrite current action refs) by <a href="https://github.com/awalsh128"><code>@awalsh128</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/pull/201">awalsh128/cache-apt-pkgs-action#201</a></li> <li>install_and_cache_pkgs.sh: Fix two issues saving preinst and postinst scripts. by <a href="https://github.com/gtjoseph"><code>@gtjoseph</code></a> in <a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/pull/195">awalsh128/cache-apt-pkgs-action#195</a></li> <li>[WIP] Fix test workflows for actions by <a href="https://github.com/awalsh128"><code>@awalsh128</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/pull/184">awalsh128/cache-apt-pkgs-action#184</a></li> <li>Fix apt-cache package lookup failure in nektos/act environments by <a href="https://github.com/awalsh128"><code>@awalsh128</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/pull/172">awalsh128/cache-apt-pkgs-action#172</a></li> <li>add shellcheck linting by <a href="https://github.com/mac-anysphere"><code>@mac-anysphere</code></a> in <a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/pull/177">awalsh128/cache-apt-pkgs-action#177</a></li> <li>Harden <code>apt_query</code> virtual package resolution against <code>apt-cache showpkg</code> warnings by <a href="https://github.com/awalsh128"><code>@awalsh128</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/pull/202">awalsh128/cache-apt-pkgs-action#202</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/gtjoseph"><code>@gtjoseph</code></a> made their first contribution in <a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/pull/195">awalsh128/cache-apt-pkgs-action#195</a></li> <li><a href="https://github.com/mac-anysphere"><code>@mac-anysphere</code></a> made their first contribution in <a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/pull/177">awalsh128/cache-apt-pkgs-action#177</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/awalsh128/cache-apt-pkgs-action/compare/v1.6.1...v1.6.2">https://github.com/awalsh128/cache-apt-pkgs-action/compare/v1.6.1...v1.6.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/awalsh128/cache-apt-pkgs-action/commit/5513791f75b039e2a79653b1a92238d3fb8d99b4"><code>5513791</code></a> fix: handle apt showpkg warnings</li> <li><a href="https://github.com/awalsh128/cache-apt-pkgs-action/commit/fe5b289324486feb07d9025df8e9238a624f28d8"><code>fe5b289</code></a> test: add apt warning regression coverage</li> <li><a href="https://github.com/awalsh128/cache-apt-pkgs-action/commit/e58a49f1deb2c70b97469d56a30a7a344b7cdf25"><code>e58a49f</code></a> add shellcheck linting</li> <li><a href="https://github.com/awalsh128/cache-apt-pkgs-action/commit/599df6ec23f0ff55f24e458f4092a0264e02a1c9"><code>599df6e</code></a> Fix apt-cache package lookup failure in nektos/act environments (<a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/issues/172">#172</a>)</li> <li><a href="https://github.com/awalsh128/cache-apt-pkgs-action/commit/cd5ee21d96e6e91cfd14e1b6437aa31ae6b1026d"><code>cd5ee21</code></a> [WIP] Fix test workflows for actions (<a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/issues/184">#184</a>)</li> <li><a href="https://github.com/awalsh128/cache-apt-pkgs-action/commit/c0e0741be64938eb55bb4e1831c6eaab079ca3b6"><code>c0e0741</code></a> install_and_cache_pkgs.sh: Fix two issues saving preinst and postinst scripts...</li> <li><a href="https://github.com/awalsh128/cache-apt-pkgs-action/commit/497648d2e1b97f712a3941670092a4a578235fe2"><code>497648d</code></a> Apply PR <a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/issues/193">#193</a> dependency pinning to <code>action.yml</code> (overwrite current action re...</li> <li>See full diff in <a href="https://github.com/awalsh128/cache-apt-pkgs-action/compare/v1.6.1...v1.6.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Worktrunk Bot
|
93325018af | chore(ci): weekly renovation 2026-06-28 (#3284) | ||
|
dependabot[bot]
|
0b0f10497d |
chore: bump taiki-e/install-action from 2.82.3 to 2.82.4 (#3255)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.82.3 to 2.82.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.82.4</h2> <ul> <li> <p>Update <code>uv@latest</code> to 0.11.24.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.13.</p> </li> <li> <p>Update <code>just@latest</code> to 1.54.0.</p> </li> <li> <p>Update <code>biome@latest</code> to 2.5.1.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.82.4] - 2026-06-25</h2> <ul> <li> <p>Update <code>uv@latest</code> to 0.11.24.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.13.</p> </li> <li> <p>Update <code>just@latest</code> to 1.54.0.</p> </li> <li> <p>Update <code>biome@latest</code> to 2.5.1.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/682e7d9e49c5e653d371fc6adbda67653461378a"><code>682e7d9</code></a> Release 2.82.4</li> <li><a href="https://github.com/taiki-e/install-action/commit/88e83503037db61d4f066a4d9cb32e6fc06b70c2"><code>88e8350</code></a> Update wasmtime manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/cf0e00b44cf05faddafcc8082c6c2366e2a02380"><code>cf0e00b</code></a> Update wasm-bindgen manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/a130ea674166df9065f363cbb53f1f2bc4a6298c"><code>a130ea6</code></a> Update vacuum manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/0bdcc65dc21d0ae46842dc5ad063d69ce8991365"><code>0bdcc65</code></a> Update <code>uv@latest</code> to 0.11.24</li> <li><a href="https://github.com/taiki-e/install-action/commit/3f52215559b820ee57b68e3fa9b38f6cd205e9c8"><code>3f52215</code></a> Update <code>mise@latest</code> to 2026.6.13</li> <li><a href="https://github.com/taiki-e/install-action/commit/294a073b0ebe66401c699c21b98e9ecb5a6da735"><code>294a073</code></a> Update <code>just@latest</code> to 1.54.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/f9bf24932b3cbfe7ae26b5addcd257989e14ec4d"><code>f9bf249</code></a> Update cargo-rdme manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/98288d38cbfc5fa065ff61c6971d50dc3ba7d408"><code>98288d3</code></a> Update <code>biome@latest</code> to 2.5.1</li> <li>See full diff in <a href="https://github.com/taiki-e/install-action/compare/v2.82.3...v2.82.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
0cbb4f643c | chore: bump max-sixty/tend from 0.1.7 to 0.1.8 (#3254) | ||
|
Worktrunk Bot
|
37c212dbfc |
chore: update tend workflows (0.1.6 → 0.1.7) (#3200)
Automated nightly regeneration of tend's workflow files. **tend version:** 0.1.6 → 0.1.7 **Notable changes:** - **Fork-PR review checkout fixed properly** (max-sixty/tend#725) — `tend-review` now uses `actions/checkout@v7` with `allow-unsafe-pr-checkout: true`, the upstream-intended way to re-enable fork-PR ref checkout that v7 blocks by default. This supersedes the manual `actions/checkout@v6` stopgap pinned in #3176: the generator now carries the fix, so the regen restores v7 with the explicit opt-in rather than the downgrade. - **CI-poll loops trimmed to fit the Bash tool's 10-min cap** (max-sixty/tend#695) — `running-in-ci` CI-monitoring loops are sized so they don't auto-background and drop a gated follow-up. - **Scope blockers surfaced instead of routed around** (max-sixty/tend#717) — when a scope rule blocks the correct action, the bot now reports the blocker on the thread rather than silently substituting a workaround. - **Nightly regen worktree bases on the open PR, not the branch ref** (max-sixty/tend#721) — keeps the regen diff incremental and the PR body accurate. - **Shared step scripts; actions named by harness** (max-sixty/tend#712) — explains the regenerated comment in `tend-notifications.yaml` ("the harness action's post-step"). Compare: https://github.com/max-sixty/tend/compare/0.1.6...0.1.7 Co-authored-by: worktrunk-bot <worktrunk-bot@users.noreply.github.com> |
||
|
dependabot[bot]
|
daf432666c |
chore: bump taiki-e/install-action from 2.82.2 to 2.82.3 (#3190)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.82.2 to 2.82.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.82.3</h2> <ul> <li> <p>Update <code>zizmor@latest</code> to 1.26.1.</p> </li> <li> <p>Update <code>wasmtime@latest</code> to 46.0.0.</p> </li> <li> <p>Update <code>tombi@latest</code> to 1.1.5.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.12.</p> </li> <li> <p>Update <code>kingfisher@latest</code> to 1.104.0.</p> </li> <li> <p>Update <code>cargo-tarpaulin@latest</code> to 0.35.5.</p> </li> <li> <p>Update <code>cargo-nextest@latest</code> to 0.9.138.</p> </li> <li> <p>Update <code>cargo-crap@latest</code> to 0.3.0.</p> </li> <li> <p>Update <code>cargo-binstall@latest</code> to 1.20.1.</p> </li> <li> <p>Update <code>cargo-rdme@latest</code> to 2.0.1.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.82.3] - 2026-06-24</h2> <ul> <li> <p>Update <code>zizmor@latest</code> to 1.26.1.</p> </li> <li> <p>Update <code>wasmtime@latest</code> to 46.0.0.</p> </li> <li> <p>Update <code>tombi@latest</code> to 1.1.5.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.12.</p> </li> <li> <p>Update <code>kingfisher@latest</code> to 1.104.0.</p> </li> <li> <p>Update <code>cargo-tarpaulin@latest</code> to 0.35.5.</p> </li> <li> <p>Update <code>cargo-nextest@latest</code> to 0.9.138.</p> </li> <li> <p>Update <code>cargo-crap@latest</code> to 0.3.0.</p> </li> <li> <p>Update <code>cargo-binstall@latest</code> to 1.20.1.</p> </li> <li> <p>Update <code>cargo-rdme@latest</code> to 2.0.1.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/ace6ebe54a6a0c86dfb5f7764b17f793b6925bc3"><code>ace6ebe</code></a> Release 2.82.3</li> <li><a href="https://github.com/taiki-e/install-action/commit/9593d26a566b2dea5528756ce1b593cda56ddf7f"><code>9593d26</code></a> Update <code>zizmor@latest</code> to 1.26.1</li> <li><a href="https://github.com/taiki-e/install-action/commit/0569c0141a12a1553b9c9a83491ff772d114a6e5"><code>0569c01</code></a> Update <code>wasmtime@latest</code> to 46.0.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/5ea9fc8c273a1ac2a9f4c160d34b2e37dd1cb9e7"><code>5ea9fc8</code></a> Update uv manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/d9b6e0d11a25ad9f54aabdb65b4b4fe88d20f710"><code>d9b6e0d</code></a> Update <code>tombi@latest</code> to 1.1.5</li> <li><a href="https://github.com/taiki-e/install-action/commit/d22450fe07f49b408f280b0c4e4ec6c581dd7154"><code>d22450f</code></a> Update <code>mise@latest</code> to 2026.6.12</li> <li><a href="https://github.com/taiki-e/install-action/commit/586c055e27e0fa5c61e72baabffb3c90a6ec9cda"><code>586c055</code></a> Update <code>kingfisher@latest</code> to 1.104.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/5e27d3091b1094b517876d28ce9933e444be309a"><code>5e27d30</code></a> Update just manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/eda88a4fdb0862974fa83c21b8ebec7d1ec53972"><code>eda88a4</code></a> Update <code>cargo-tarpaulin@latest</code> to 0.35.5</li> <li><a href="https://github.com/taiki-e/install-action/commit/30ff9da4b104d9918bd41562f2981303f48d3402"><code>30ff9da</code></a> Update <code>cargo-nextest@latest</code> to 0.9.138</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/install-action/compare/v2.82.2...v2.82.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
e3664c6343 |
chore: bump actions/cache from 5 to 6 (#3191)
Bumps [actions/cache](https://github.com/actions/cache) from 5 to 6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/releases">actions/cache's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update packages, migrate to ESM by <a href="https://github.com/Samirat"><code>@Samirat</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1760">actions/cache#1760</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v6.0.0">https://github.com/actions/cache/compare/v5...v6.0.0</a></p> <h2>v5.0.5</h2> <h2>What's Changed</h2> <ul> <li>Update ts-http-runtime dependency by <a href="https://github.com/yacaovsnc"><code>@yacaovsnc</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1747">actions/cache#1747</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v5.0.5">https://github.com/actions/cache/compare/v5...v5.0.5</a></p> <h2>v5.0.4</h2> <h2>What's Changed</h2> <ul> <li>Add release instructions and update maintainer docs by <a href="https://github.com/Link"><code>@Link</code></a>- in <a href="https://redirect.github.com/actions/cache/pull/1696">actions/cache#1696</a></li> <li>Potential fix for code scanning alert no. 52: Workflow does not contain permissions by <a href="https://github.com/Link"><code>@Link</code></a>- in <a href="https://redirect.github.com/actions/cache/pull/1697">actions/cache#1697</a></li> <li>Fix workflow permissions and cleanup workflow names / formatting by <a href="https://github.com/Link"><code>@Link</code></a>- in <a href="https://redirect.github.com/actions/cache/pull/1699">actions/cache#1699</a></li> <li>docs: Update examples to use the latest version by <a href="https://github.com/XZTDean"><code>@XZTDean</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1690">actions/cache#1690</a></li> <li>Fix proxy integration tests by <a href="https://github.com/Link"><code>@Link</code></a>- in <a href="https://redirect.github.com/actions/cache/pull/1701">actions/cache#1701</a></li> <li>Fix cache key in examples.md for bun.lock by <a href="https://github.com/RyPeck"><code>@RyPeck</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1722">actions/cache#1722</a></li> <li>Update dependencies & patch security vulnerabilities by <a href="https://github.com/Link"><code>@Link</code></a>- in <a href="https://redirect.github.com/actions/cache/pull/1738">actions/cache#1738</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/XZTDean"><code>@XZTDean</code></a> made their first contribution in <a href="https://redirect.github.com/actions/cache/pull/1690">actions/cache#1690</a></li> <li><a href="https://github.com/RyPeck"><code>@RyPeck</code></a> made their first contribution in <a href="https://redirect.github.com/actions/cache/pull/1722">actions/cache#1722</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v5.0.4">https://github.com/actions/cache/compare/v5...v5.0.4</a></p> <h2>v5.0.3</h2> <h2>What's Changed</h2> <ul> <li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a href="https://github.com/actions/cache/security/dependabot/33">https://github.com/actions/cache/security/dependabot/33</a>)</li> <li>Bump <code>@actions/core</code> to v2.0.3</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v5.0.3">https://github.com/actions/cache/compare/v5...v5.0.3</a></p> <h2>v.5.0.2</h2> <h1>v5.0.2</h1> <h2>What's Changed</h2> <p>When creating cache entries, 429s returned from the cache service will not be retried.</p> <h2>v5.0.1</h2> <blockquote> <p>[!IMPORTANT] <strong><code>actions/cache@v5</code> runs on the Node.js 24 runtime and requires a minimum Actions Runner version of <code>2.327.1</code>.</strong></p> </blockquote> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's changelog</a>.</em></p> <blockquote> <h1>Releases</h1> <h2>How to prepare a release</h2> <blockquote> <p>[!NOTE] Relevant for maintainers with write access only.</p> </blockquote> <ol> <li>Switch to a new branch from <code>main</code>.</li> <li>Run <code>npm test</code> to ensure all tests are passing.</li> <li>Update the version in <a href="https://github.com/actions/cache/blob/main/package.json"><code>https://github.com/actions/cache/blob/main/package.json</code></a>.</li> <li>Run <code>npm run build</code> to update the compiled files.</li> <li>Update this <a href="https://github.com/actions/cache/blob/main/RELEASES.md"><code>https://github.com/actions/cache/blob/main/RELEASES.md</code></a> with the new version and changes in the <code>## Changelog</code> section.</li> <li>Run <code>licensed cache</code> to update the license report.</li> <li>Run <code>licensed status</code> and resolve any warnings by updating the <a href="https://github.com/actions/cache/blob/main/.licensed.yml"><code>https://github.com/actions/cache/blob/main/.licensed.yml</code></a> file with the exceptions.</li> <li>Commit your changes and push your branch upstream.</li> <li>Open a pull request against <code>main</code> and get it reviewed and merged.</li> <li>Draft a new release <a href="https://github.com/actions/cache/releases">https://github.com/actions/cache/releases</a> use the same version number used in <code>package.json</code> <ol> <li>Create a new tag with the version number.</li> <li>Auto generate release notes and update them to match the changes you made in <code>RELEASES.md</code>.</li> <li>Toggle the set as the latest release option.</li> <li>Publish the release.</li> </ol> </li> <li>Navigate to <a href="https://github.com/actions/cache/actions/workflows/release-new-action-version.yml">https://github.com/actions/cache/actions/workflows/release-new-action-version.yml</a> <ol> <li>There should be a workflow run queued with the same version number.</li> <li>Approve the run to publish the new version and update the major tags for this action.</li> </ol> </li> </ol> <h2>Changelog</h2> <h3>6.1.0</h3> <ul> <li>Bump <code>@actions/cache</code> to v6.1.0 to pick up <a href="https://redirect.github.com/actions/toolkit/pull/2435">actions/toolkit#2435 Handle cache write error due to read-only token</a></li> <li>Switch redundant "Cache save failed" warning to debug log in save-only</li> </ul> <h3>6.0.0</h3> <ul> <li>Updated <code>@actions/cache</code> to ^6.0.1, <code>@actions/core</code> to ^3.0.1, <code>@actions/exec</code> to ^3.0.0, <code>@actions/io</code> to ^3.0.2</li> <li>Migrated to ESM module system</li> <li>Upgraded Jest to v30 and test infrastructure to be ESM compatible</li> </ul> <h3>5.0.4</h3> <ul> <li>Bump <code>minimatch</code> to v3.1.5 (fixes ReDoS via globstar patterns)</li> <li>Bump <code>undici</code> to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)</li> <li>Bump <code>fast-xml-parser</code> to v5.5.6</li> </ul> <h3>5.0.3</h3> <ul> <li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a href="https://github.com/actions/cache/security/dependabot/33">https://github.com/actions/cache/security/dependabot/33</a>)</li> <li>Bump <code>@actions/core</code> to v2.0.3</li> </ul> <h3>5.0.2</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/cache/commit/2c8a9bd7457de244a408f35966fab2fb45fda9c8"><code>2c8a9bd</code></a> Merge pull request <a href="https://redirect.github.com/actions/cache/issues/1760">#1760</a> from actions/samirat/esm_migration_and_package_update</li> <li><a href="https://github.com/actions/cache/commit/e9b91fdc3fea7d79165fceb79042ef45c2d51023"><code>e9b91fd</code></a> Prettier fixes</li> <li><a href="https://github.com/actions/cache/commit/e4884b8ff7f92ef6b52c79eda480bbc86e685adb"><code>e4884b8</code></a> Rebuild dist</li> <li><a href="https://github.com/actions/cache/commit/10baf0191a3c426ea0fa4a3253a5c04233b6e18f"><code>10baf01</code></a> Fixed licenses</li> <li><a href="https://github.com/actions/cache/commit/e39b386c9004d72a15d864ade8c0b3a702d47a37"><code>e39b386</code></a> Fix test mock return order</li> <li><a href="https://github.com/actions/cache/commit/b6928203372a8571ff984c0c883ef3a1adfb0c06"><code>b692820</code></a> PR feedback</li> <li><a href="https://github.com/actions/cache/commit/60749128a44d25d3c520a489e576380cf00ff3f1"><code>6074912</code></a> Rebuild dist bundles as ESM to match type:module</li> <li><a href="https://github.com/actions/cache/commit/5a912e8b4af820fa082a0e75cfd2c782f8fbfe0e"><code>5a912e8</code></a> Fix lint and jest issues</li> <li><a href="https://github.com/actions/cache/commit/b9bf592b98b6a5d0cad9929c76247de1cac78abe"><code>b9bf592</code></a> Update documentation for v6 release</li> <li><a href="https://github.com/actions/cache/commit/80f777761d0990932f64ed2740522d7226a49062"><code>80f7777</code></a> Update packages, migrate to ESM</li> <li>See full diff in <a href="https://github.com/actions/cache/compare/v5...v6">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
c52eb9ccfe |
chore: bump clechasseur/rs-cargo from 5.0.5 to 5.0.6 (#3192)
Bumps [clechasseur/rs-cargo](https://github.com/clechasseur/rs-cargo) from 5.0.5 to 5.0.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/clechasseur/rs-cargo/releases">clechasseur/rs-cargo's releases</a>.</em></p> <blockquote> <h2>v5.0.6</h2> <p>Patch release with updated dependencies, including a few security fixes.</p> <h2>What's Changed</h2> <ul> <li>fix: update <code>@clechasseur/rs-actions-core</code> to 8.0.2, run <code>npm update</code> by <a href="https://github.com/clechasseur"><code>@clechasseur</code></a> in <a href="https://redirect.github.com/clechasseur/rs-cargo/pull/417">clechasseur/rs-cargo#417</a></li> <li>fix: bump version to 5.0.6 by <a href="https://github.com/clechasseur"><code>@clechasseur</code></a> in <a href="https://redirect.github.com/clechasseur/rs-cargo/pull/418">clechasseur/rs-cargo#418</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/clechasseur/rs-cargo/compare/v5.0.5...v5.0.6">https://github.com/clechasseur/rs-cargo/compare/v5.0.5...v5.0.6</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/clechasseur/rs-cargo/commit/b897b7d2f083c6274295825fdbd5a39b825c3f82"><code>b897b7d</code></a> fix: bump version to 5.0.6 (<a href="https://redirect.github.com/clechasseur/rs-cargo/issues/418">#418</a>)</li> <li><a href="https://github.com/clechasseur/rs-cargo/commit/e86930b100f497dd376b47d1267dbbaf5cc807b4"><code>e86930b</code></a> fix: update <code>@clechasseur/rs-actions-core</code> to 8.0.2, run <code>npm update</code> (<a href="https://redirect.github.com/clechasseur/rs-cargo/issues/417">#417</a>)</li> <li><a href="https://github.com/clechasseur/rs-cargo/commit/f4d1ac0b2f7c2e3834f0d254f76d7778a5d6cfa5"><code>f4d1ac0</code></a> chore(deps): update dependency rollup to ^4.62.2 (<a href="https://redirect.github.com/clechasseur/rs-cargo/issues/409">#409</a>)</li> <li><a href="https://github.com/clechasseur/rs-cargo/commit/9b9848a1304beb540d9468b2e1d522a5243e691a"><code>9b9848a</code></a> chore(deps): update oxlint monorepo (<a href="https://redirect.github.com/clechasseur/rs-cargo/issues/410">#410</a>)</li> <li><a href="https://github.com/clechasseur/rs-cargo/commit/e23aa2ec9d64e703063acfb0687bc2a51b28d887"><code>e23aa2e</code></a> chore(deps): update dependency ts-jest to ^29.4.11 (<a href="https://redirect.github.com/clechasseur/rs-cargo/issues/412">#412</a>)</li> <li><a href="https://github.com/clechasseur/rs-cargo/commit/1e4bdf4931de37757e889e0d620e8d7d0614b296"><code>1e4bdf4</code></a> chore(deps): update dependency <code>@rollup/plugin-commonjs</code> to ^29.0.3 (<a href="https://redirect.github.com/clechasseur/rs-cargo/issues/413">#413</a>)</li> <li><a href="https://github.com/clechasseur/rs-cargo/commit/36d36cbd5327a8f82946af1a04cd85f430fa8c34"><code>36d36cb</code></a> chore(deps): update dependency prettier to ^3.8.4 (<a href="https://redirect.github.com/clechasseur/rs-cargo/issues/415">#415</a>)</li> <li><a href="https://github.com/clechasseur/rs-cargo/commit/e88bc84dc238a66cb5aebcae2bf428fefe42573e"><code>e88bc84</code></a> chore(deps): update actions/checkout action to v7 (<a href="https://redirect.github.com/clechasseur/rs-cargo/issues/416">#416</a>)</li> <li><a href="https://github.com/clechasseur/rs-cargo/commit/08a7041e8a8d48e1543a4a87d9ab1b3d7bd3f2d8"><code>08a7041</code></a> chore(deps): update dependency oxlint to ^1.64.0 (<a href="https://redirect.github.com/clechasseur/rs-cargo/issues/408">#408</a>)</li> <li><a href="https://github.com/clechasseur/rs-cargo/commit/e9f9767c0d76a9666af4dc1d204d1c565444ae27"><code>e9f9767</code></a> chore(deps): update dependency jest to ^30.4.2 (<a href="https://redirect.github.com/clechasseur/rs-cargo/issues/406">#406</a>)</li> <li>Additional commits viewable in <a href="https://github.com/clechasseur/rs-cargo/compare/v5.0.5...v5.0.6">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
46d446b0de |
chore: bump actions/checkout from 6 to 7 (#3193)
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <ul> <li>block checking out fork pr for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li> <li>Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li> <li>getting ready for checkout v7 release by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2464">actions/checkout#2464</a></li> <li>update error wording by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2467">actions/checkout#2467</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0">https://github.com/actions/checkout/compare/v6.0.3...v7.0.0</a></p> <h2>v6.0.3</h2> <h2>What's Changed</h2> <ul> <li>Update changelog by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2357">actions/checkout#2357</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>Update changelog for v6.0.3 by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2446">actions/checkout#2446</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/yaananth"><code>@yaananth</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.3">https://github.com/actions/checkout/compare/v6...v6.0.3</a></p> <h2>v6.0.2</h2> <h2>What's Changed</h2> <ul> <li>Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by <a href="https://github.com/TingluoHuang"><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2355">actions/checkout#2355</a></li> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.1...v6.0.2">https://github.com/actions/checkout/compare/v6.0.1...v6.0.2</a></p> <h2>v6.0.1</h2> <h2>What's Changed</h2> <ul> <li>Update all references from v5 and v4 to v6 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2314">actions/checkout#2314</a></li> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> <li>Clarify v6 README by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2328">actions/checkout#2328</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.1">https://github.com/actions/checkout/compare/v6...v6.0.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>v7.0.0</h2> <ul> <li>Block checking out fork PR for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li> <li>Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li> </ul> <h2>v6.0.3</h2> <ul> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <h2>v6.0.2</h2> <ul> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <h2>v6.0.1</h2> <ul> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> </ul> <h2>v6.0.0</h2> <ul> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> </ul> <h2>v5.0.1</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <h2>v5.0.0</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li> </ul> <h2>v4.3.1</h2> <ul> <li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li> </ul> <h2>v4.3.0</h2> <ul> <li>docs: update README.md by <a href="https://github.com/motss"><code>@motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li> <li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail"><code>@mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li> <li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells"><code>@benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li> <li>Adjust positioning of user email note and permissions heading by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li> <li>Update CODEOWNERS for actions by <a href="https://github.com/TingluoHuang"><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li> <li>Update package dependencies by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li> </ul> <h2>v4.2.2</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li> </ul> <h2>v4.2.1</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0"><code>9c091bb</code></a> update error wording (<a href="https://redirect.github.com/actions/checkout/issues/2467">#2467</a>)</li> <li><a href="https://github.com/actions/checkout/commit/1044a6dea927916f2c38ba5aeffbc0a847b1221a"><code>1044a6d</code></a> getting ready for checkout v7 release (<a href="https://redirect.github.com/actions/checkout/issues/2464">#2464</a>)</li> <li><a href="https://github.com/actions/checkout/commit/f0282184c7ce73ab54c7e4ab5a617122602e575f"><code>f028218</code></a> Bump the minor-npm-dependencies group across 1 directory with 3 updates (<a href="https://redirect.github.com/actions/checkout/issues/2462">#2462</a>)</li> <li><a href="https://github.com/actions/checkout/commit/d914b262ffc244530a203ab40decab34c3abf34d"><code>d914b26</code></a> upgrade module to esm and update dependencies (<a href="https://redirect.github.com/actions/checkout/issues/2463">#2463</a>)</li> <li><a href="https://github.com/actions/checkout/commit/537c7ef99cef6e5ddb5e7ff5d16d14510503801d"><code>537c7ef</code></a> Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid (<a href="https://redirect.github.com/actions/checkout/issues/2459">#2459</a>)</li> <li><a href="https://github.com/actions/checkout/commit/130a169078a413d3a5246a393625e8e742f387f6"><code>130a169</code></a> Bump js-yaml from 4.1.0 to 4.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2461">#2461</a>)</li> <li><a href="https://github.com/actions/checkout/commit/7d09575332117a40b46e5e020664df234cd416f3"><code>7d09575</code></a> Bump flatted from 3.3.1 to 3.4.2 (<a href="https://redirect.github.com/actions/checkout/issues/2460">#2460</a>)</li> <li><a href="https://github.com/actions/checkout/commit/0f9f3aa320cb53abeb534aeb54048075d9697a0e"><code>0f9f3aa</code></a> Bump actions/publish-immutable-action (<a href="https://redirect.github.com/actions/checkout/issues/2458">#2458</a>)</li> <li><a href="https://github.com/actions/checkout/commit/f9e715a95fcd1f9253f77dd28f11e88d2d6460c7"><code>f9e715a</code></a> block checking out fork pr for pull_request_target and workflow_run (<a href="https://redirect.github.com/actions/checkout/issues/2454">#2454</a>)</li> <li>See full diff in <a href="https://github.com/actions/checkout/compare/v6...v7">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
1c2f869ba3 |
chore: bump max-sixty/tend from 0.1.6 to 0.1.7 (#3194)
Bumps [max-sixty/tend](https://github.com/max-sixty/tend) from 0.1.6 to 0.1.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/max-sixty/tend/releases">max-sixty/tend's releases</a>.</em></p> <blockquote> <h2>0.1.7</h2> <h3>Improved</h3> <ul> <li><strong>Generated workflows pin <code>actions/checkout</code> to v7.</strong> All generated workflows (and tend's own) move from checkout v6 to v7. The review workflow opts into v7's fork-PR checkout guard (<code>allow-unsafe-pr-checkout: true</code>), which otherwise refuses to check out a fork's <code>refs/pull/N/{merge,head}</code> under <code>pull_request_target</code> (the "pwn request" guard), so fork-PR reviews keep running. (<a href="https://redirect.github.com/max-sixty/tend/pull/725">#725</a>)</li> <li><strong>Both Claude harnesses update to claude-code 2.1.185.</strong> (<a href="https://redirect.github.com/max-sixty/tend/pull/719">#719</a>)</li> <li><strong>The bot surfaces a blocking scope rule instead of silently routing around it.</strong> When a <code>running-in-ci</code> scope restriction blocks the right action — e.g. engaging an existing upstream thread in another repo — the bot now surfaces the blocker on the triggering thread and offers either to take the upstream action on approval or to relax the rule via the consuming repo's <code>running-tend</code> overlay, rather than substituting a second-best local workaround without signaling it hit a wall. (<a href="https://redirect.github.com/max-sixty/tend/pull/717">#717</a>)</li> </ul> <h3>Fixed</h3> <ul> <li><strong>CI-poll loops fit the Bash tool's 10-minute cap.</strong> The bundled <code>running-in-ci</code> poll recipes cap their <code>sleep</code> loops at 9 iterations and call the Bash step with <code>timeout: 600000</code>, so the harness no longer auto-backgrounds a longer loop and strands the gated follow-up (dismissing a stale approval, posting failure analysis). (<a href="https://redirect.github.com/max-sixty/tend/pull/695">#695</a>)</li> <li><strong>Nightly workflow-regen bases its worktree on an open PR, not branch-ref existence.</strong> The <code>nightly</code> skill's regen step now bases on the <code>tend/update-workflows</code> branch only when an open PR rides it, and otherwise bases on <code>HEAD</code> and drops any leftover remote branch. A PR previously closed without merge no longer leaves a stale branch that inflates the diff, produces an inaccurate PR body, or defeats the no-value skip. (<a href="https://redirect.github.com/max-sixty/tend/pull/721">#721</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>The codex <code>effort</code> value list in the README and the install-tend skill is corrected to <code>low | medium | high | xhigh</code>. (<a href="https://redirect.github.com/max-sixty/tend/pull/710">#710</a>)</li> </ul> <h3>Internal</h3> <ul> <li>Composite-action step bodies are de-duplicated into scripts under <code>shared/steps/</code>, and each harness action lives under a harness-named path. Generated workflows now invoke <code>max-sixty/tend/claude@X.Y.Z</code> (and <code>claude-interactive</code>) rather than the bare-root default; existing pinned refs keep resolving and the nightly regen stamps the new path automatically. (<a href="https://redirect.github.com/max-sixty/tend/pull/712">#712</a>)</li> <li><code>review-reviewers</code> documents the <code>pull_request_review</code> self-trigger as expected (non-)behavior, and the <code>worker-deploy</code> comment corrects the live-stream count to two. (<a href="https://redirect.github.com/max-sixty/tend/pull/707">#707</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/711">#711</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/max-sixty/tend/blob/main/CHANGELOG.md">max-sixty/tend's changelog</a>.</em></p> <blockquote> <h2>0.1.7</h2> <h3>Improved</h3> <ul> <li><strong>Generated workflows pin <code>actions/checkout</code> to v7.</strong> All generated workflows (and tend's own) move from checkout v6 to v7. The review workflow opts into v7's fork-PR checkout guard (<code>allow-unsafe-pr-checkout: true</code>), which otherwise refuses to check out a fork's <code>refs/pull/N/{merge,head}</code> under <code>pull_request_target</code> (the "pwn request" guard), so fork-PR reviews keep running. (<a href="https://redirect.github.com/max-sixty/tend/pull/725">#725</a>)</li> <li><strong>Both Claude harnesses update to claude-code 2.1.185.</strong> (<a href="https://redirect.github.com/max-sixty/tend/pull/719">#719</a>)</li> <li><strong>The bot surfaces a blocking scope rule instead of silently routing around it.</strong> When a <code>running-in-ci</code> scope restriction blocks the right action — e.g. engaging an existing upstream thread in another repo — the bot now surfaces the blocker on the triggering thread and offers either to take the upstream action on approval or to relax the rule via the consuming repo's <code>running-tend</code> overlay, rather than substituting a second-best local workaround without signaling it hit a wall. (<a href="https://redirect.github.com/max-sixty/tend/pull/717">#717</a>)</li> </ul> <h3>Fixed</h3> <ul> <li><strong>CI-poll loops fit the Bash tool's 10-minute cap.</strong> The bundled <code>running-in-ci</code> poll recipes cap their <code>sleep</code> loops at 9 iterations and call the Bash step with <code>timeout: 600000</code>, so the harness no longer auto-backgrounds a longer loop and strands the gated follow-up (dismissing a stale approval, posting failure analysis). (<a href="https://redirect.github.com/max-sixty/tend/pull/695">#695</a>)</li> <li><strong>Nightly workflow-regen bases its worktree on an open PR, not branch-ref existence.</strong> The <code>nightly</code> skill's regen step now bases on the <code>tend/update-workflows</code> branch only when an open PR rides it, and otherwise bases on <code>HEAD</code> and drops any leftover remote branch. A PR previously closed without merge no longer leaves a stale branch that inflates the diff, produces an inaccurate PR body, or defeats the no-value skip. (<a href="https://redirect.github.com/max-sixty/tend/pull/721">#721</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>The codex <code>effort</code> value list in the README and the install-tend skill is corrected to <code>low | medium | high | xhigh</code>. (<a href="https://redirect.github.com/max-sixty/tend/pull/710">#710</a>)</li> </ul> <h3>Internal</h3> <ul> <li>Composite-action step bodies are de-duplicated into scripts under <code>shared/steps/</code>, and each harness action lives under a harness-named path. Generated workflows now invoke <code>max-sixty/tend/claude@X.Y.Z</code> (and <code>claude-interactive</code>) rather than the bare-root default; existing pinned refs keep resolving and the nightly regen stamps the new path automatically. (<a href="https://redirect.github.com/max-sixty/tend/pull/712">#712</a>)</li> <li><code>review-reviewers</code> documents the <code>pull_request_review</code> self-trigger as expected (non-)behavior, and the <code>worker-deploy</code> comment corrects the live-stream count to two. (<a href="https://redirect.github.com/max-sixty/tend/pull/707">#707</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/711">#711</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/max-sixty/tend/commit/c7a7b565178ac325b9f2be42b11361a78346e46b"><code>c7a7b56</code></a> chore: release 0.1.7 (<a href="https://redirect.github.com/max-sixty/tend/issues/726">#726</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/67da54b81b2b9aea2eced4cdfbe69c0775877c18"><code>67da54b</code></a> fix(nightly): base workflow-regen worktree on open PR, not branch ref (<a href="https://redirect.github.com/max-sixty/tend/issues/721">#721</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/0b22561d884eb29beee94d24c75ff2e8bca92cee"><code>0b22561</code></a> fix(review): opt into v7 fork-PR checkout so fork reviews run (<a href="https://redirect.github.com/max-sixty/tend/issues/725">#725</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/2de9bbaf0550aa85feb5892f77d79d30f4bf4477"><code>2de9bba</code></a> fix(running-in-ci): surface scope blockers instead of silently routing around...</li> <li><a href="https://github.com/max-sixty/tend/commit/9d31da3ee69ccc8f9dc475f94a60a48b9de37d62"><code>9d31da3</code></a> chore: bump claude_version to 2.1.185 (<a href="https://redirect.github.com/max-sixty/tend/issues/719">#719</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/6b03677b05779c437196120e23eba9170ed94579"><code>6b03677</code></a> fix(running-in-ci): trim CI-poll loops to fit Bash tool's 10-min cap (<a href="https://redirect.github.com/max-sixty/tend/issues/695">#695</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/4b7baf773787adb278b0f8883f2478a36da5ac6a"><code>4b7baf7</code></a> refactor(actions): share step scripts; name actions by harness (<a href="https://redirect.github.com/max-sixty/tend/issues/712">#712</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/579b646795c50e8ca4c5ca01f575a350d8740a31"><code>579b646</code></a> skills(review-reviewers): name pull_request_review self-trigger variant (<a href="https://redirect.github.com/max-sixty/tend/issues/707">#707</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/0e9a5a2337830e8deeba2284fe3fca0e3ebc81e3"><code>0e9a5a2</code></a> docs: correct codex effort value list (<a href="https://redirect.github.com/max-sixty/tend/issues/710">#710</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/2178194a7b15cac1fac9d7e3401073bbcda69a7b"><code>2178194</code></a> docs: correct worker-deploy stream count comment (<a href="https://redirect.github.com/max-sixty/tend/issues/711">#711</a>)</li> <li>Additional commits viewable in <a href="https://github.com/max-sixty/tend/compare/0.1.6...0.1.7">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: worktrunk-bot <worktrunk-bot@users.noreply.github.com> Co-authored-by: Claude <noreply@anthropic.com> |
||
|
Worktrunk Bot
|
d3f4b89ce7 | ci(tend-review): pin actions/checkout back to v6 for fork-PR review (#3176) | ||
|
dependabot[bot]
|
9e8d4612c8 |
chore: bump actions/checkout from 6 to 7 (#3131)
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <ul> <li>block checking out fork pr for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li> <li>Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li> <li>getting ready for checkout v7 release by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2464">actions/checkout#2464</a></li> <li>update error wording by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2467">actions/checkout#2467</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0">https://github.com/actions/checkout/compare/v6.0.3...v7.0.0</a></p> <h2>v6.0.3</h2> <h2>What's Changed</h2> <ul> <li>Update changelog by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2357">actions/checkout#2357</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>Update changelog for v6.0.3 by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2446">actions/checkout#2446</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/yaananth"><code>@yaananth</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.3">https://github.com/actions/checkout/compare/v6...v6.0.3</a></p> <h2>v6.0.2</h2> <h2>What's Changed</h2> <ul> <li>Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by <a href="https://github.com/TingluoHuang"><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2355">actions/checkout#2355</a></li> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.1...v6.0.2">https://github.com/actions/checkout/compare/v6.0.1...v6.0.2</a></p> <h2>v6.0.1</h2> <h2>What's Changed</h2> <ul> <li>Update all references from v5 and v4 to v6 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2314">actions/checkout#2314</a></li> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> <li>Clarify v6 README by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2328">actions/checkout#2328</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.1">https://github.com/actions/checkout/compare/v6...v6.0.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>v7.0.0</h2> <ul> <li>Block checking out fork PR for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li> <li>Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li> </ul> <h2>v6.0.3</h2> <ul> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <h2>v6.0.2</h2> <ul> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <h2>v6.0.1</h2> <ul> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> </ul> <h2>v6.0.0</h2> <ul> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> </ul> <h2>v5.0.1</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <h2>v5.0.0</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li> </ul> <h2>v4.3.1</h2> <ul> <li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li> </ul> <h2>v4.3.0</h2> <ul> <li>docs: update README.md by <a href="https://github.com/motss"><code>@motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li> <li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail"><code>@mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li> <li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells"><code>@benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li> <li>Adjust positioning of user email note and permissions heading by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li> <li>Update CODEOWNERS for actions by <a href="https://github.com/TingluoHuang"><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li> <li>Update package dependencies by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li> </ul> <h2>v4.2.2</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li> </ul> <h2>v4.2.1</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0"><code>9c091bb</code></a> update error wording (<a href="https://redirect.github.com/actions/checkout/issues/2467">#2467</a>)</li> <li><a href="https://github.com/actions/checkout/commit/1044a6dea927916f2c38ba5aeffbc0a847b1221a"><code>1044a6d</code></a> getting ready for checkout v7 release (<a href="https://redirect.github.com/actions/checkout/issues/2464">#2464</a>)</li> <li><a href="https://github.com/actions/checkout/commit/f0282184c7ce73ab54c7e4ab5a617122602e575f"><code>f028218</code></a> Bump the minor-npm-dependencies group across 1 directory with 3 updates (<a href="https://redirect.github.com/actions/checkout/issues/2462">#2462</a>)</li> <li><a href="https://github.com/actions/checkout/commit/d914b262ffc244530a203ab40decab34c3abf34d"><code>d914b26</code></a> upgrade module to esm and update dependencies (<a href="https://redirect.github.com/actions/checkout/issues/2463">#2463</a>)</li> <li><a href="https://github.com/actions/checkout/commit/537c7ef99cef6e5ddb5e7ff5d16d14510503801d"><code>537c7ef</code></a> Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid (<a href="https://redirect.github.com/actions/checkout/issues/2459">#2459</a>)</li> <li><a href="https://github.com/actions/checkout/commit/130a169078a413d3a5246a393625e8e742f387f6"><code>130a169</code></a> Bump js-yaml from 4.1.0 to 4.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2461">#2461</a>)</li> <li><a href="https://github.com/actions/checkout/commit/7d09575332117a40b46e5e020664df234cd416f3"><code>7d09575</code></a> Bump flatted from 3.3.1 to 3.4.2 (<a href="https://redirect.github.com/actions/checkout/issues/2460">#2460</a>)</li> <li><a href="https://github.com/actions/checkout/commit/0f9f3aa320cb53abeb534aeb54048075d9697a0e"><code>0f9f3aa</code></a> Bump actions/publish-immutable-action (<a href="https://redirect.github.com/actions/checkout/issues/2458">#2458</a>)</li> <li><a href="https://github.com/actions/checkout/commit/f9e715a95fcd1f9253f77dd28f11e88d2d6460c7"><code>f9e715a</code></a> block checking out fork pr for pull_request_target and workflow_run (<a href="https://redirect.github.com/actions/checkout/issues/2454">#2454</a>)</li> <li>See full diff in <a href="https://github.com/actions/checkout/compare/v6...v7">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Worktrunk Bot
|
e0cfd884e9 |
chore(ci): weekly renovation 2026-06-21 (#3147)
## Summary
Weekly CI renovation check. One pinned-version drift found and bumped:
- `worktrunk`: `=0.58.0` → `=0.60.0` (MSRV 1.95, compatible with our
pinned 1.95.0 toolchain) — `ci.yaml` `test` job. Flagged by a workflow
annotation on the latest green `main` run ("New version for worktrunk
available: 0.60.0").
## Already up to date
- **Rust stable**: latest is 1.96.0, so latest−1 = 1.95 —
`rust-toolchain.toml` (1.95.0) and both `rust-version` pins (1.95)
already match. No MSRV/toolchain bump.
- **cargo-install pins**: cargo-insta 1.48.0, cargo-nextest 0.9.137,
lychee 0.24.2, cargo-msrv 0.19.3, cargo-llvm-cov 0.8.7, cargo-udeps
0.1.61 — all current against crates.io.
- **setup-nu**: 0.113.1 (latest nushell release).
- **zola**: 0.22.1 (latest getzola release).
- **Runner images**: ubuntu-24.04, macos-15, windows-2022 (windows-2022
stays pinned — actions/runner-images#12677).
## Notes
- worktrunk 0.59.0 and 0.60.0 both declare `rust-version = "1.95"`;
verified via crates.io API against the pinned toolchain.
- Only the `test` job pins a specific worktrunk version; the
`cargo-affected` install follows the default branch and is intentionally
unpinned.
---
🤖 Automated weekly renovation
Co-authored-by: worktrunk-bot <worktrunk-bot@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
||
|
dependabot[bot]
|
56cc99c780 |
chore: bump taiki-e/install-action from 2.82.0 to 2.82.2 (#3155)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.82.0 to 2.82.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.82.2</h2> <ul> <li> <p>Update <code>xh@latest</code> to 0.26.1.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.23.</p> </li> <li> <p>Update <code>trivy@latest</code> to 0.71.2.</p> </li> <li> <p>Update <code>sccache@latest</code> to 0.16.0.</p> </li> </ul> <h2>2.82.1</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.4.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.22.</p> </li> <li> <p>Update <code>osv-scanner@latest</code> to 2.4.0.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.11.</p> </li> <li> <p>Update <code>martin@latest</code> to 1.11.0.</p> </li> <li> <p>Update <code>just@latest</code> to 1.53.0.</p> </li> <li> <p>Update <code>cargo-zigbuild@latest</code> to 0.23.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.82.2] - 2026-06-21</h2> <ul> <li> <p>Update <code>xh@latest</code> to 0.26.1.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.23.</p> </li> <li> <p>Update <code>trivy@latest</code> to 0.71.2.</p> </li> <li> <p>Update <code>sccache@latest</code> to 0.16.0.</p> </li> </ul> <h2>[2.82.1] - 2026-06-20</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.4.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.22.</p> </li> <li> <p>Update <code>osv-scanner@latest</code> to 2.4.0.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.11.</p> </li> <li> <p>Update <code>martin@latest</code> to 1.11.0.</p> </li> <li> <p>Update <code>just@latest</code> to 1.53.0.</p> </li> <li> <p>Update <code>cargo-zigbuild@latest</code> to 0.23.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/9e1e5806d4a4822de933115878265be9aaa786d9"><code>9e1e580</code></a> Release 2.82.2</li> <li><a href="https://github.com/taiki-e/install-action/commit/788896b6163ee187bf02f51161e573dbc028dba0"><code>788896b</code></a> Update zizmor manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/7631577b669c94d73e58cb9f217d0f56abd33a48"><code>7631577</code></a> Update <code>xh@latest</code> to 0.26.1</li> <li><a href="https://github.com/taiki-e/install-action/commit/e0f1a05cc9f43f4fd57d15fe7ee20ca5b78f65fc"><code>e0f1a05</code></a> Update <code>uv@latest</code> to 0.11.23</li> <li><a href="https://github.com/taiki-e/install-action/commit/3cda1e20d17fde3f9958653d219495e0591233ec"><code>3cda1e2</code></a> Update <code>trivy@latest</code> to 0.71.2</li> <li><a href="https://github.com/taiki-e/install-action/commit/11ac3210af3c20497864c3d27d4499b6a7108098"><code>11ac321</code></a> Update tombi manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/b5f9e335d3eaba5117342d9d9fda485aea29c524"><code>b5f9e33</code></a> Update <code>sccache@latest</code> to 0.16.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/4e48cd5f5170589da6cad450be3e62ca61534cc1"><code>4e48cd5</code></a> Update cargo-tarpaulin manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/e0a923573389b28b6cefdbe8309332b471f55583"><code>e0a9235</code></a> Update cargo-rdme manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/8b3c737da4b541bf0fb5a3e0488ff20535badac9"><code>8b3c737</code></a> Release 2.82.1</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/install-action/compare/v2.82.0...v2.82.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Maximilian Roos
|
958b9c188a |
refactor(picker): migrate to skim 4.8 (ratatui), drop vendored skim-tuikit (#3137)
Migrates the `wt switch` picker from skim 0.20.5 (tuikit backend) to
skim 4.8.0 (ratatui/crossterm), removes the `vendor/skim-tuikit/` patch
tree we carried against the old line, and makes the full test suite
green under the new backend.
## Why the vendor tree goes away
We vendored skim-tuikit for two patches: `alt-<digit>` key parsing and
an `Output::flush` `write_all` fix for dropped bytes under PTY pressure.
Both are moot in 4.8. Key parsing is native — `binds.rs` routes every
single character (digits included) through `KeyCode::Char` rather than a
hardcoded `alt-a..alt-z` arm list. The flush fix is subsumed by stdlib
`BufWriter::flush` in the ratatui backend, which loops over partial
writes correctly. So the migration carries zero vendor patches against
skim, and the build machinery that kept the vendored source alive
(Taskfile `vendor-diff`, flake `vendorSrc`/`extraDummyScript`) is
deleted too.
## The picker rewrite
skim 4.x is a different API. `WorktreeSkimItem::display()` now returns
`ratatui::text::Line` instead of an `AnsiString`. alt-r removal rides
skim's `reload(remove {})` token (the selected row's `output()`,
expanded into the reload command) instead of the old
`as_any().downcast_ref` path (which never worked across compilation
units) plus a signal file. Preview-tab switching and the progressive
list redraw are driven by `Skim::event_sender()` +
`Event::Render`/`Event::RunPreview`.
## The regression that motivated the bulk of this
skim 4.x renders on demand. There is no 100ms tuikit heartbeat
re-rendering the frame, so the progressive `wt switch` list rendered
blank while collection ran in the background — the original report. The
fix pokes `Event::Render` from the list-collect callbacks (throttled to
16ms). The same on-demand model surfaced four more regressions, all
fixed here and verified head-to-head against the 0.20 picker in a
terminal: preview-tab lag, current-row highlight, Shift-Tab back-cycle
(crossterm reports Shift-Tab under three distinct `KeyEvent` shapes, so
all three are bound), and alt-r removal (4.x `execute-silent` is
fire-and-forget and raced its reader).
## Help text and the test harness
Two things the integration suite caught that the unit tests did not (the
prior pass ran `--lib --bins` only):
- **Styled help.** skim 0.20 transitively pulled in
`clap/unstable-markdown`, which renders worktrunk's `///` doc-comments
as styled help. skim 4 with `default-features = false` drops it, so help
reverted to raw text (`[experimental]` → `\[experimental\]`). Restored
by depending on `unstable-markdown` explicitly, keeping help output
identical and the `test_help` / `test_step_alias` /
`test_docs_are_in_sync` snapshots passing unchanged.
- **PTY harness.** skim 4.x queries cursor position (`ESC[6n`) at
startup in partial-height mode and blocks in `select()` for the reply;
`portable_pty` is a bare PTY and never answered, so every
`switch_picker` test failed init with "Cursor position detection timed
out." The Unix harness now answers the query, mirroring the existing
ConPTY responder. skim 4.x also draws the list/preview separator one
column left, so the snapshot panel-split columns shifted to match. The
regenerated picker snapshots show two cosmetic changes: the match
counter no longer overlaps the preview tab header, and the HEAD column
shows the full short-SHA instead of a truncated one.
## Minimal-versions CI
The skim 4.8 dep tree pins tighter floors than our manifests declared,
so the nightly `minimal-versions` job needed updating. It now runs `-Z
direct-minimal-versions` — minimize only our own direct deps and let
transitive crates resolve normally — and the manifests raise each
under-specified floor to the minimum the workspace builds against
(largely mirroring skim 4.8's own requirements). Full `-Z
minimal-versions` would instead drag in skim's transitive TUI/image
stack (ansi-to-tui, ratatui's `instability` macro, color-eyre,
ratatui-image → image/avif), whose crates under-declare their floors and
don't compile at the picked versions; direct minimization confines the
check to floors we own, so no transitive pins are needed. Normal
resolution (the committed `Cargo.lock`) is unchanged. Full floor list
and the `signal-hook` libc-pin detail are in the `ci(min-versions)`
commit message.
## Reviewing
Start at `src/commands/picker/mod.rs` (the `run_skim` entry point, the
action keybinds, and `parse_reload_remove_token`), then
`progressive_handler.rs` (the render pokes) and `items.rs` (the
`Line`-based `display()`). Test-harness changes are in
`tests/common/pty.rs` (the `ESC[6n` responder) and
`tests/integration_tests/switch_picker.rs` (the panel-split columns).
The rest is the dependency swap, the vendor and build-machinery
deletions, and regenerated snapshots.
All 3980 tests pass (`cargo run -- hook pre-merge --yes`), including the
`shell-integration-tests` PTY suite that exercises the picker end-to-end
across the list, previews, scroll, create/remove, and accept flows. No
automated test drives a real terminal; the interactive surface was also
checked by hand against the 0.20 picker.
> _This was written by Claude Code on behalf of max_
---------
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
||
|
Worktrunk Bot
|
cb72ddde15 |
chore: update tend workflows (0.1.4 → 0.1.6) (#3122)
Automated nightly regeneration of tend's workflow files. **tend version:** 0.1.4 → 0.1.6 The committed workflow bodies were stamped `0.1.4` (action ref already at `0.1.5`); this regen brings both the stamp and the `max-sixty/tend@` action pin to `0.1.6`. The workflow bodies are otherwise unchanged — the deltas are the version stamp and action-ref bumps. **Notable changes** (consumer-relevant): - Nightly sweep now skips stamp-only workflow regen PRs and scopes its "Notable changes" list to consumer-relevant entries (max-sixty/tend#689, max-sixty/tend#690). - CI monitoring: a pushed fix now waits for and owns its CI (max-sixty/tend#700). - Triage/skills: issue-comment templates reframed as examples; over-stringent guidance softened into examples and open frames (max-sixty/tend#692, max-sixty/tend#693). - `running-tend`: added a weekly task to bump `claude_version` to latest (max-sixty/tend#696). - Skills: replaced duplicated guidance with `running-in-ci` references (max-sixty/tend#703). Compare: https://github.com/max-sixty/tend/compare/0.1.4...0.1.6 Co-authored-by: worktrunk-bot <254187624+worktrunk-bot@users.noreply.github.com> |
||
|
Worktrunk Bot
|
aa1a5cd98b |
fix(version): tolerate missing VERGEN_GIT_DESCRIBE on crates.io builds (#3124)
## Problem
`cargo install worktrunk` fails to build from crates.io:
```
error: environment variable `VERGEN_GIT_DESCRIBE` not defined at compile time
--> src/cli/mod.rs:168:27
|
168 | let git_version = env!("VERGEN_GIT_DESCRIBE");
```
`version_str()` reads the git-describe version with the `env!` macro,
which **requires** the variable to exist at compile time. The
`vergen_gitcl` build script can only set `VERGEN_GIT_DESCRIBE` when
building inside a git worktree. The crates.io package archive has no
`.git`, so the build script emits `Unable to set VERGEN_GIT_DESCRIBE`
and never defines the variable — and `env!` then fails to compile.
## Solution
Switch `env!` → `option_env!`, which yields `None` when the variable is
unset instead of failing to compile, and fall back to the cargo package
version. That fallback is exactly what the existing `IDEMPOTENT` branch
already does, so the behavior is unchanged for normal builds. The choice
is extracted into a pure `resolve_version(Option<&str>, &str)` helper
with unit tests.
## Testing
Reproduced the failure the same way crates.io builds the package —
`cargo package` produces the source archive, which I extracted to a
non-git directory and built:
- **Before:** build fails with `environment variable VERGEN_GIT_DESCRIBE
not defined at compile time`.
- **After:** build succeeds (the harmless `Unable to set
VERGEN_GIT_DESCRIBE` warning remains), and `wt --version` reports
`0.59.0` (the cargo version fallback).
New unit tests cover the three `resolve_version` cases: git-describe
available, vergen `IDEMPOTENT` placeholder, and absent (`None` — the
crates.io case).
---
Closes #3123 — automated triage
---------
Co-authored-by: worktrunk-bot <254187624+worktrunk-bot@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
|
||
|
dependabot[bot]
|
e25a7a9bd7 |
chore: bump taiki-e/install-action from 2.81.11 to 2.82.0 (#3114)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.81.11 to 2.82.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.82.0</h2> <ul> <li> <p>Support <code>cargo-vet</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1908">#1908</a>, thanks <a href="https://github.com/jakewimmer"><code>@jakewimmer</code></a>)</p> </li> <li> <p>Support <code>cargo-crap</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1905">#1905</a>, thanks <a href="https://github.com/BartoszCiesla"><code>@BartoszCiesla</code></a>)</p> </li> <li> <p>Support <code>cargo-leptos</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1903">#1903</a>, thanks <a href="https://github.com/404Simon"><code>@404Simon</code></a>)</p> </li> <li> <p>Update <code>kingfisher@latest</code> to 1.103.0.</p> </li> <li> <p>Update <code>cargo-xwin@latest</code> to 0.23.0.</p> </li> <li> <p>Update <code>wasmtime@latest</code> to 45.0.2.</p> </li> <li> <p>Update <code>cargo-deny@latest</code> to 0.19.9.</p> </li> <li> <p>Update <code>prek@latest</code> to 0.4.5.</p> </li> <li> <p>Update <code>trivy@latest</code> to 0.71.1.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.10.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.82.0] - 2026-06-17</h2> <ul> <li> <p>Support <code>cargo-vet</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1908">#1908</a>, thanks <a href="https://github.com/jakewimmer"><code>@jakewimmer</code></a>)</p> </li> <li> <p>Support <code>cargo-crap</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1905">#1905</a>, thanks <a href="https://github.com/BartoszCiesla"><code>@BartoszCiesla</code></a>)</p> </li> <li> <p>Support <code>cargo-leptos</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1903">#1903</a>, thanks <a href="https://github.com/404Simon"><code>@404Simon</code></a>)</p> </li> <li> <p>Update <code>kingfisher@latest</code> to 1.103.0.</p> </li> <li> <p>Update <code>cargo-xwin@latest</code> to 0.23.0.</p> </li> <li> <p>Update <code>wasmtime@latest</code> to 45.0.2.</p> </li> <li> <p>Update <code>cargo-deny@latest</code> to 0.19.9.</p> </li> <li> <p>Update <code>prek@latest</code> to 0.4.5.</p> </li> <li> <p>Update <code>trivy@latest</code> to 0.71.1.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.10.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/b8cecb83565409bcc297b2df6e77f030b2a468d5"><code>b8cecb8</code></a> Release 2.82.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/981171473775d521e3ae1e0b14c569b51c48651e"><code>9811714</code></a> Update changelog</li> <li><a href="https://github.com/taiki-e/install-action/commit/e7005464717d3cca03b48509ba65ebbde552e10c"><code>e700546</code></a> Update wasmtime manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/fdfb4a4a7c8af40d72ebb849dac38e8718ea669c"><code>fdfb4a4</code></a> Update mise manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/ef03904287f8419ca540ee664cc9227c6d501867"><code>ef03904</code></a> Update martin manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/b6d098313f0ccec3f73270982ba4474205dbd7fd"><code>b6d0983</code></a> Update <code>kingfisher@latest</code> to 1.103.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/ebeb9b1a53c2307773f018dca9868b795675e6c5"><code>ebeb9b1</code></a> Update just manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/119edcf29d9a2c67fad2ed58e04242daceb433e5"><code>119edcf</code></a> Update <code>cargo-xwin@latest</code> to 0.23.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/cd319da91ecc8685df284d89c5435723973a5668"><code>cd319da</code></a> Update <code>wasmtime@latest</code> to 45.0.2</li> <li><a href="https://github.com/taiki-e/install-action/commit/4942894b57b5ad6fdcb38216eb1f7df561374b20"><code>4942894</code></a> Update cargo-xwin manifest</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/install-action/compare/v2.81.11...v2.82.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
4e155b2783 |
chore: bump max-sixty/tend from 0.1.4 to 0.1.5 (#3113)
Bumps [max-sixty/tend](https://github.com/max-sixty/tend) from 0.1.4 to 0.1.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/max-sixty/tend/releases">max-sixty/tend's releases</a>.</em></p> <blockquote> <h2>0.1.5</h2> <h3>Improved</h3> <ul> <li><strong>Interactive harness isolates both credentials behind the proxy.</strong> Phase 2 extends the credential-injecting proxy to the Anthropic model credential, so the sandboxed agent holds only dummies for both the GitHub PAT and the model token while the runner-owned proxy injects the real values per host. The agent toolchain now installs directly as the non-sudo sandbox user (dropping a ~200 MB per-run copy), and the proxy also injects the PAT for <code>raw.githubusercontent.com</code>. (<a href="https://redirect.github.com/max-sixty/tend/pull/686">#686</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/683">#683</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/684">#684</a>)</li> <li><strong>install-tend isolates each bot's auth in a per-bot <code>GH_CONFIG_DIR</code>.</strong> Bot credentials live in a dedicated <code>~/.config/gh-bots/<bot-name></code> dir selected per command and stored outside the OS keychain, removing the <code>gh auth switch</code> choreography that could strand a bot as the active account and 403 a maintainer's pushes. (<a href="https://redirect.github.com/max-sixty/tend/pull/688">#688</a>)</li> <li><strong>Interactive harness updated to claude-code 2.1.179.</strong> The pinned <code>claude</code> binary resolves <code>--model opus</code> to Opus 4.8. (<a href="https://redirect.github.com/max-sixty/tend/pull/697">#697</a>)</li> </ul> <h3>Internal</h3> <ul> <li>Bundled skill refinements: nightly skips stamp-only workflow-regen PRs and scopes "Notable changes" to adopter-relevant entries, review-reviewers keeps an audit trail on empty-window cycles, and over-prescriptive guidance is reframed as examples and open frames. (<a href="https://redirect.github.com/max-sixty/tend/pull/693">#693</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/692">#692</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/689">#689</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/690">#690</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/675">#675</a>)</li> <li>tend-repo maintenance: a weekly task keeps the pinned agent binaries current, integration-fixture secrets reseed outside the sandbox, and the secret env-gating rejection analysis is recorded alongside a CLAUDE.md restructure. (<a href="https://redirect.github.com/max-sixty/tend/pull/696">#696</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/685">#685</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/687">#687</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/max-sixty/tend/blob/main/CHANGELOG.md">max-sixty/tend's changelog</a>.</em></p> <blockquote> <h2>0.1.5</h2> <h3>Improved</h3> <ul> <li><strong>Interactive harness isolates both credentials behind the proxy.</strong> Phase 2 extends the credential-injecting proxy to the Anthropic model credential, so the sandboxed agent holds only dummies for both the GitHub PAT and the model token while the runner-owned proxy injects the real values per host. The agent toolchain now installs directly as the non-sudo sandbox user (dropping a ~200 MB per-run copy), and the proxy also injects the PAT for <code>raw.githubusercontent.com</code>. (<a href="https://redirect.github.com/max-sixty/tend/pull/686">#686</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/683">#683</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/684">#684</a>)</li> <li><strong>install-tend isolates each bot's auth in a per-bot <code>GH_CONFIG_DIR</code>.</strong> Bot credentials live in a dedicated <code>~/.config/gh-bots/<bot-name></code> dir selected per command and stored outside the OS keychain, removing the <code>gh auth switch</code> choreography that could strand a bot as the active account and 403 a maintainer's pushes. (<a href="https://redirect.github.com/max-sixty/tend/pull/688">#688</a>)</li> <li><strong>Interactive harness updated to claude-code 2.1.179.</strong> The pinned <code>claude</code> binary resolves <code>--model opus</code> to Opus 4.8. (<a href="https://redirect.github.com/max-sixty/tend/pull/697">#697</a>)</li> </ul> <h3>Internal</h3> <ul> <li>Bundled skill refinements: nightly skips stamp-only workflow-regen PRs and scopes "Notable changes" to adopter-relevant entries, review-reviewers keeps an audit trail on empty-window cycles, and over-prescriptive guidance is reframed as examples and open frames. (<a href="https://redirect.github.com/max-sixty/tend/pull/693">#693</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/692">#692</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/689">#689</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/690">#690</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/675">#675</a>)</li> <li>tend-repo maintenance: a weekly task keeps the pinned agent binaries current, integration-fixture secrets reseed outside the sandbox, and the secret env-gating rejection analysis is recorded alongside a CLAUDE.md restructure. (<a href="https://redirect.github.com/max-sixty/tend/pull/696">#696</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/685">#685</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/687">#687</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/max-sixty/tend/commit/9bf2c29572341640aacdad04d1ff4ca9652eea0b"><code>9bf2c29</code></a> chore: release 0.1.5 (<a href="https://redirect.github.com/max-sixty/tend/issues/699">#699</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/eabebc762892fa617c0c9b2c1b85162e53a0a796"><code>eabebc7</code></a> chore: roll back to the default claude harness; demote claude-interactive (<a href="https://redirect.github.com/max-sixty/tend/issues/698">#698</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/b1fb1db3565cf73032476b8c6c8a782ae94f8c19"><code>b1fb1db</code></a> skills: a pushed fix waits for and owns its CI (<a href="https://redirect.github.com/max-sixty/tend/issues/700">#700</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/838b10fe610583717db8591ff7aad081c5df9c8b"><code>838b10f</code></a> interactive: bump pinned claude_version to 2.1.179 (<a href="https://redirect.github.com/max-sixty/tend/issues/697">#697</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/18bc8415e299d11f5506ffb36677881fde8f7fa7"><code>18bc841</code></a> skills(running-tend): add weekly task to bump claude_version to latest (<a href="https://redirect.github.com/max-sixty/tend/issues/696">#696</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/7d737d221bfdebf0536f0bc01a5a563d1506869f"><code>7d737d2</code></a> skills: soften over-stringent guidance into examples and open frames (<a href="https://redirect.github.com/max-sixty/tend/issues/693">#693</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/937830c3681c0bb78b907c1ca32e7f0f909e3a09"><code>937830c</code></a> skills(triage): reframe issue-comment templates as examples (<a href="https://redirect.github.com/max-sixty/tend/issues/692">#692</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/87c9c990ae88728269b739bff2b3d1cbd867bca9"><code>87c9c99</code></a> skills(nightly): skip stamp-only workflow regen PRs (<a href="https://redirect.github.com/max-sixty/tend/issues/689">#689</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/c2dd45e8110a65d3f2d0c8f34656ad6c0cf3ba29"><code>c2dd45e</code></a> skills(nightly): scope Notable changes to consumer-relevant entries (<a href="https://redirect.github.com/max-sixty/tend/issues/690">#690</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/377a4e419ef4595dda2eb0cce6a8a809faf16f37"><code>377a4e4</code></a> install-tend: isolate bot auth in per-bot GH_CONFIG_DIR (<a href="https://redirect.github.com/max-sixty/tend/issues/688">#688</a>)</li> <li>Additional commits viewable in <a href="https://github.com/max-sixty/tend/compare/0.1.4...0.1.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Maximilian Roos
|
58a24304c6 |
chore: roll back to the default claude harness (#3107)
Anthropic [paused](https://support.claude.com/en/articles/15036540-use-the-claude-agent-sdk-with-your-claude-plan) the 2026-06-15 Agent SDK credit metering (the `-p` billing change), so subscription `claude-code-action` runs again draw from the plan's usage limits. That removes the reason this repo was on the `claude-interactive` harness. - `.config/tend.yaml`: drop `harness: claude-interactive` (the default is `claude`). - Regenerate `tend-*.yaml` via `uvx tend@latest init`: the action ref goes from `max-sixty/tend/interactive@0.1.4` to `max-sixty/tend@0.1.4` across all eight workflows. Auth is unchanged: both harnesses use the same secrets. > _This was written by Claude Code on behalf of max_ Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|
dependabot[bot]
|
08b0fc8a0d |
chore: bump taiki-e/install-action from 2.81.10 to 2.81.11 (#3088)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.81.10 to 2.81.11. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.81.11</h2> <ul> <li> <p>Update <code>wasm-tools@latest</code> to 1.252.0.</p> </li> <li> <p>Update <code>wasm-bindgen@latest</code> to 0.2.125.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.21.</p> </li> <li> <p>Update <code>protoc@latest</code> to 3.35.1.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.9.</p> </li> <li> <p>Update <code>jaq@latest</code> to 3.1.0.</p> </li> <li> <p>Update <code>cargo-insta@latest</code> to 1.48.0.</p> </li> <li> <p>Update <code>biome@latest</code> to 2.5.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.81.11] - 2026-06-15</h2> <ul> <li> <p>Update <code>wasm-tools@latest</code> to 1.252.0.</p> </li> <li> <p>Update <code>wasm-bindgen@latest</code> to 0.2.125.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.21.</p> </li> <li> <p>Update <code>protoc@latest</code> to 3.35.1.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.9.</p> </li> <li> <p>Update <code>jaq@latest</code> to 3.1.0.</p> </li> <li> <p>Update <code>cargo-insta@latest</code> to 1.48.0.</p> </li> <li> <p>Update <code>biome@latest</code> to 2.5.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/15449e3094499af05d8d964a1c884208e4b8b595"><code>15449e3</code></a> Release 2.81.11</li> <li><a href="https://github.com/taiki-e/install-action/commit/dd3bb882c6c552e1478f55a048fb291cdc1f0ef1"><code>dd3bb88</code></a> Update cargo-deny manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/89ed2466baa251f4217203b0084736e4ba24365d"><code>89ed246</code></a> Update <code>wasm-tools@latest</code> to 1.252.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/3d2614471d361398dc4a241305a41a22246608cd"><code>3d26144</code></a> Update <code>wasm-bindgen@latest</code> to 0.2.125</li> <li><a href="https://github.com/taiki-e/install-action/commit/02039d84ff2195b312ef1612583b62012fcc7737"><code>02039d8</code></a> Update <code>uv@latest</code> to 0.11.21</li> <li><a href="https://github.com/taiki-e/install-action/commit/f70d988b18b30949b65c310be1e9e1fd34b1bd80"><code>f70d988</code></a> Update trivy manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/1f7b61373609cdc389de6178ea51d2a069d306ed"><code>1f7b613</code></a> Update <code>protoc@latest</code> to 3.35.1</li> <li><a href="https://github.com/taiki-e/install-action/commit/ace4a195674b1e2219e629001c708779d52f0872"><code>ace4a19</code></a> Update prek manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/3fbf11909e319a495b93f6c640f257d1979a9cef"><code>3fbf119</code></a> Update <code>mise@latest</code> to 2026.6.9</li> <li><a href="https://github.com/taiki-e/install-action/commit/e62deab512318d610ad0b017fe426bc6cdb75e0f"><code>e62deab</code></a> Update <code>jaq@latest</code> to 3.1.0</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/install-action/compare/v2.81.10...v2.81.11">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
2602a413f7 |
chore: bump awalsh128/cache-apt-pkgs-action from 1.6.0 to 1.6.1 (#3080)
Bumps [awalsh128/cache-apt-pkgs-action](https://github.com/awalsh128/cache-apt-pkgs-action) from 1.6.0 to 1.6.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/awalsh128/cache-apt-pkgs-action/releases">awalsh128/cache-apt-pkgs-action's releases</a>.</em></p> <blockquote> <h2>v1.6.1</h2> <h2>What's Changed</h2> <ul> <li>fix: upgrade actions/cache v4→v5 and upload-artifact v4→v7 (Node 24) by <a href="https://github.com/pftg"><code>@pftg</code></a> in <a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/pull/198">awalsh128/cache-apt-pkgs-action#198</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/pftg"><code>@pftg</code></a> made their first contribution in <a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/pull/198">awalsh128/cache-apt-pkgs-action#198</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/awalsh128/cache-apt-pkgs-action/compare/v1.5.4...v1.6.1">https://github.com/awalsh128/cache-apt-pkgs-action/compare/v1.5.4...v1.6.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/awalsh128/cache-apt-pkgs-action/commit/681749ae568c81c2037cb9185e38b709b261bd2f"><code>681749a</code></a> fix: upgrade actions/cache v4→v5 and upload-artifact v4→v7 (Node 24) (<a href="https://redirect.github.com/awalsh128/cache-apt-pkgs-action/issues/198">#198</a>)</li> <li>See full diff in <a href="https://github.com/awalsh128/cache-apt-pkgs-action/compare/v1.6.0...v1.6.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: worktrunk-bot <254187624+worktrunk-bot@users.noreply.github.com> Co-authored-by: Claude <noreply@anthropic.com> |
||
|
Maximilian Roos
|
885618184d |
Switch tend harness to claude-interactive (#3072)
Anthropic is changing how `claude -p` (the headless Agent SDK path) is handled, so this moves tend off it. The `claude-interactive` harness runs the official `claude` binary under a PTY supervisor instead of going through the Agent SDK; everything upstream of the action ref stays the same. Sets `harness: claude-interactive` in `.config/tend.yaml` and regenerates the `tend-*.yaml` workflows. The only change in the generated files is the action ref: `max-sixty/tend@0.1.4` → `max-sixty/tend/interactive@0.1.4`. Both are Claude-family harnesses reading the same `CLAUDE_CODE_OAUTH_TOKEN` / `ANTHROPIC_API_KEY`, so secrets and bot config are unchanged. > _This was written by Claude Code on behalf of max_ Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|
Worktrunk Bot
|
08539dc75a |
chore(ci): weekly renovation 2026-06-14 (#3071)
## Summary Weekly CI renovation check found the following pin updates: - `cargo-insta`: 1.47.2 → 1.48.0 (MSRV 1.66, compatible with our 1.95.0) — in `claude-setup` and `test-setup` actions - `worktrunk`: 0.55.0 → 0.58.0 (MSRV 1.95, compatible with our 1.95.0) — in `ci.yaml` ### cargo-insta 1.48.0 notes No breaking changes and no MSRV bump. Behavior changes worth noting, none of which affect our `--check`-based snapshot flow: - When `CI=true`, explicit handling options like `--accept` now take precedence over the automatic `--check`. - `--profile` now translates to `--cargo-profile` for nextest; a new `--nextest-profile` selects the runner profile. - New `strip_ansi_escape_codes` filter setting and opt-in YAML literal blocks (`INSTA_YAML_BLOCK_STYLE=1`). ## Already up to date - Rust stable: 1.96.0 → MSRV/toolchain stay at 1.95 (latest stable − 1, no change) - Runner images: ubuntu-24.04, macos-15, windows-2022 - `cargo-nextest`: 0.9.137, `lychee`: 0.24.2, `cargo-msrv`: 0.19.3, `cargo-llvm-cov`: 0.8.7, `cargo-udeps`: 0.1.61 - `hustcer/setup-nu`: 0.113.1 (latest nushell release) - `zola`: 0.22.1 - LLM model pins: Claude Haiku 4.5 and Codex `gpt-5.4-mini` are both current - README month blockquote: "June 2026" matches current month ## Notes - windows-2022 remains pinned (actions/runner-images#12677 — windows-2025 lacks the D: drive) --- 🤖 Automated weekly renovation Co-authored-by: worktrunk-bot <254187624+worktrunk-bot@users.noreply.github.com> Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com> |
||
|
Maximilian Roos
|
465b8fd022 |
ci: run the full test suite across the feature powerset, not just lib (#3068)
Follow-up to #3059, which added a per-combination test sweep to nightly but bounded it to `--lib` (plus a separate `--doc` pass). The integration suite snapshots highlighted `wt` output, so it only passes with `syntax-highlighting` on — `--lib` was a blunt way to keep it out of the combinations that can't satisfy that. This runs the unfiltered `cargo hack test --feature-powerset` — lib, integration, and doctests per combination — and moves the scoping to where it's semantically correct, in `Cargo.toml`: - The `integration` test target declares `required-features = ["cli", "syntax-highlighting"]`. It execs the `wt` binary (needs `cli`) and snapshots its highlighted output (needs `syntax-highlighting`), so cargo runs it only on combinations that satisfy both and skips it elsewhere instead of failing. - The `git-wt` binary gets `test = false`. `git_wt.rs` is `include!("main.rs")`, so its unit tests are byte-identical duplicates of the `wt` binary's; insta derives snapshot filenames from the crate name, so the duplicates look for `git_wt__*.snap` files that don't exist (only `wt__*`). The `check` powerset still compiles the binary, so compile coverage is unchanged. Dropping the target filter also lets cargo-hack (which runs workspace-style `cargo test --manifest-path`) build the mock-stub helper bin via default-members and run doctests on its own, so the explicit `cargo build -p mock-stub` and `--doc` steps are gone. zsh/fish/nushell are installed to match the test matrix (`.github/actions/test-setup`), since the full suite now runs PTY tests on the `shell-integration-tests` combinations. Verified locally: the full 20-combination sweep is green, with integration running only on the `cli + syntax-highlighting` combinations and skipped on the rest. CI runs this job on the PR (it touches `nightly.yaml`), so the powerset exercises itself here. > _This was written by Claude Code on behalf of max_ Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|
Maximilian Roos
|
2fb96c1d03 |
ci: run lib tests across the feature powerset in nightly (#3059)
The nightly `feature-powerset` job only ran `cargo hack check --no-dev-deps`, which never compiles `#[cfg(test)]` code, so test-gating breaks were invisible. Two existed on main: `cargo test --lib --no-default-features` didn't compile (two styling tests call `format_bash_with_gutter_at_width`, which is imported only under `syntax-highlighting`), and once compiling, six tests failed because their assertions/snapshots bake in syntax-highlighted output. This adds `cargo hack test --feature-powerset --lib` as a second step on the job and gates the affected tests on `syntax-highlighting`. It also gates `test_no_bold_dim_conflict`, which has only negative `!contains` assertions and so passed vacuously without the feature. The fix to the two compile-broken styling tests is line-identical to the one on `progress-owns-counters`, so the branches merge cleanly in either order. A follow-up commit builds the `mock-stub` helper bin before the sweep: `--lib` is a target filter, which skips the default-members helper-bin build, so one lib test panicked on the fresh CI runner (it passed locally only because the binary already existed in `target/`). The test step is bounded to `--lib`: the integration suite snapshots `wt` output, which bakes in highlighted command rendering (verified: 11 snapshot failures in the first 51 tests without the feature), and ci.yaml's `test` matrix already runs it with full features on every PR. Verified locally: all 20 powerset combos pass, and the full pre-merge gate is green (3926 tests). > _This was written by Claude Code on behalf of max_ --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com> |
||
|
Worktrunk Bot
|
330fa6ee4e |
chore(ci): weekly renovation 2026-05-31 (#2948)
## Summary Weekly CI renovation. MSRV/toolchain bump plus pin bumps where upstream has moved. - **MSRV: 1.94 → 1.95** (Rust 1.96.0 went stable 2026-05-28; policy is latest stable − 1) - **toolchain channel: 1.94.0 → 1.95.0** - `cargo-nextest`: 0.9.136 → 0.9.137 (MSRV 1.91, compatible with 1.95.0) - `worktrunk`: 0.53.0 → 0.55.0 (MSRV 1.94, compatible with 1.95.0) - `hustcer/setup-nu` nushell: 0.113.0 → 0.113.1 - `flake.lock`: `rust-overlay` bumped to `4a408e1` (ships `1.95.0.nix` and `1.96.0.nix`); refreshed in the follow-up commit after @max-sixty asked whether the agent could install Nix — it can, via the Determinate Systems installer. A separate skill PR will codify the Nix install step into the weekly workflow so future runs do this automatically. ## Already up to date - `cargo-insta`: 1.47.2, `cargo-llvm-cov`: 0.8.7, `cargo-msrv`: 0.19.3, `cargo-udeps`: 0.1.61, `lychee`: 0.24.2 - `taiki-e/install-action` tool: zola@0.22.1 - `taiki-e/install-action` action ref tracked by Dependabot (open in #2935: 2.79.11 → 2.79.13; latest is 2.80.0 — Dependabot will catch up next cycle) - Runner images: ubuntu-24.04, macos-15, windows-2022 ## Notes - windows-2022 remains pinned (actions/runner-images#12677 — windows-2025 lacks D: drive) --------- Co-authored-by: worktrunk-bot <254187624+worktrunk-bot@users.noreply.github.com> |
||
|
dependabot[bot]
|
44b289477e |
chore: bump max-sixty/tend from 0.1.3 to 0.1.4 (#3050)
Bumps [max-sixty/tend](https://github.com/max-sixty/tend) from 0.1.3 to 0.1.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/max-sixty/tend/releases">max-sixty/tend's releases</a>.</em></p> <blockquote> <h2>0.1.4</h2> <h3>Improved</h3> <ul> <li><strong>Claude harnesses run with <code>bypassPermissions</code>.</strong> The previous <code>dontAsk</code> mode hard-denies writes to Claude Code's protected paths (<code>.github/</code>, dotfiles), blocking autonomous fixes that touch those files. Everything the bot writes still lands through a reviewed PR. (<a href="https://redirect.github.com/max-sixty/tend/pull/677">#677</a>)</li> <li><strong>GitHub Releases publish on tag push.</strong> The release workflow extracts the version's section from <code>CHANGELOG.md</code> and creates the release; 0.1.1–0.1.3 are backfilled. Nightly workflow-update PRs now summarize notable upstream changes instead of pasting a file list. (<a href="https://redirect.github.com/max-sixty/tend/pull/678">#678</a>)</li> <li><strong>install-tend triages an existing bot PAT before minting a new one.</strong> The bot-token step runs the scope audit and routes to reuse, scope refresh, or first-time login. (<a href="https://redirect.github.com/max-sixty/tend/pull/680">#680</a>)</li> <li>The review skill checks the PR's check rollup before approving, so visible CI failures aren't rubber-stamped. (<a href="https://redirect.github.com/max-sixty/tend/pull/667">#667</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The interactive harness passes GitHub Actions context env vars (<code>GITHUB_RUN_ID</code>, <code>GITHUB_REPOSITORY</code>, …) into the sandbox; skill recipes for run self-reference and URL construction depend on them. (<a href="https://redirect.github.com/max-sixty/tend/pull/664">#664</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>README clarifies that the weekly workflow approves dependency PRs rather than auto-merging them. (<a href="https://redirect.github.com/max-sixty/tend/pull/673">#673</a>)</li> </ul> <h3>Internal</h3> <ul> <li>Skill refinements across running-in-ci, triage, and ci-fix: end the turn only when work is shipped, defer test suites to PR CI, split CI monitoring into gated/ungated cases, label transient-tracker issues <code>tend-outage</code>, and carve out bot-authored machine-report issues. (<a href="https://redirect.github.com/max-sixty/tend/pull/661">#661</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/671">#671</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/669">#669</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/670">#670</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/666">#666</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/max-sixty/tend/blob/main/CHANGELOG.md">max-sixty/tend's changelog</a>.</em></p> <blockquote> <h2>0.1.4</h2> <h3>Improved</h3> <ul> <li><strong>Claude harnesses run with <code>bypassPermissions</code>.</strong> The previous <code>dontAsk</code> mode hard-denies writes to Claude Code's protected paths (<code>.github/</code>, dotfiles), blocking autonomous fixes that touch those files. Everything the bot writes still lands through a reviewed PR. (<a href="https://redirect.github.com/max-sixty/tend/pull/677">#677</a>)</li> <li><strong>GitHub Releases publish on tag push.</strong> The release workflow extracts the version's section from <code>CHANGELOG.md</code> and creates the release; 0.1.1–0.1.3 are backfilled. Nightly workflow-update PRs now summarize notable upstream changes instead of pasting a file list. (<a href="https://redirect.github.com/max-sixty/tend/pull/678">#678</a>)</li> <li><strong>install-tend triages an existing bot PAT before minting a new one.</strong> The bot-token step runs the scope audit and routes to reuse, scope refresh, or first-time login. (<a href="https://redirect.github.com/max-sixty/tend/pull/680">#680</a>)</li> <li>The review skill checks the PR's check rollup before approving, so visible CI failures aren't rubber-stamped. (<a href="https://redirect.github.com/max-sixty/tend/pull/667">#667</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The interactive harness passes GitHub Actions context env vars (<code>GITHUB_RUN_ID</code>, <code>GITHUB_REPOSITORY</code>, …) into the sandbox; skill recipes for run self-reference and URL construction depend on them. (<a href="https://redirect.github.com/max-sixty/tend/pull/664">#664</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>README clarifies that the weekly workflow approves dependency PRs rather than auto-merging them. (<a href="https://redirect.github.com/max-sixty/tend/pull/673">#673</a>)</li> </ul> <h3>Internal</h3> <ul> <li>Skill refinements across running-in-ci, triage, and ci-fix: end the turn only when work is shipped, defer test suites to PR CI, split CI monitoring into gated/ungated cases, label transient-tracker issues <code>tend-outage</code>, and carve out bot-authored machine-report issues. (<a href="https://redirect.github.com/max-sixty/tend/pull/661">#661</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/671">#671</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/669">#669</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/670">#670</a>, <a href="https://redirect.github.com/max-sixty/tend/pull/666">#666</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/max-sixty/tend/commit/e1cdd48f22a4c5706f86c4a046647c376735151f"><code>e1cdd48</code></a> chore: release 0.1.4 (<a href="https://redirect.github.com/max-sixty/tend/issues/681">#681</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/79a3fd3b7836657a25eebd28ea26df02e0952498"><code>79a3fd3</code></a> skills(install-tend): restructure bot-token step around scope-audit remediati...</li> <li><a href="https://github.com/max-sixty/tend/commit/330a3baa2e5669d99e76ff4f9d962b49da1d78bf"><code>330a3ba</code></a> actions: switch Claude harnesses to bypassPermissions (<a href="https://redirect.github.com/max-sixty/tend/issues/677">#677</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/b80cf75f99edcf80c6c011f54ea9ba09b2bc4ea3"><code>b80cf75</code></a> feat: publish GitHub Releases from CHANGELOG.md on tag push (<a href="https://redirect.github.com/max-sixty/tend/issues/678">#678</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/31a6def298c1d7b692589c8b8db2d8de9be2d15d"><code>31a6def</code></a> docs(README): weekly approves dep PRs, doesn't auto-merge (<a href="https://redirect.github.com/max-sixty/tend/issues/673">#673</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/e77bda81fe811cca72d1d92e596f33932dda7af9"><code>e77bda8</code></a> skills(triage): drop "run full suite" — defer to PR CI per "ship before end_t...</li> <li><a href="https://github.com/max-sixty/tend/commit/131183e7e58c5403b4db020d6c7d98afac39abf3"><code>131183e</code></a> skills(ci-fix): label transient-tracker issues tend-outage to suppress no-op ...</li> <li><a href="https://github.com/max-sixty/tend/commit/e745750522bfb80964beacae4093d92e112ca472"><code>e745750</code></a> skills(running-in-ci): split CI Monitoring into gated/ungated cases (<a href="https://redirect.github.com/max-sixty/tend/issues/669">#669</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/6a90890d256d4bf8b1f191fae0c4a2c2ad24e90c"><code>6a90890</code></a> skills(review): peek check rollup before APPROVE so visible FAILUREs aren't r...</li> <li><a href="https://github.com/max-sixty/tend/commit/0326c174391bc9fec004174b36a58f2bddb6c2a4"><code>0326c17</code></a> interactive: pass GitHub Actions context env vars to sandbox (<a href="https://redirect.github.com/max-sixty/tend/issues/664">#664</a>)</li> <li>Additional commits viewable in <a href="https://github.com/max-sixty/tend/compare/0.1.3...0.1.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
ea883bd6d6 |
chore: bump taiki-e/install-action from 2.81.8 to 2.81.10 (#3031)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.81.8 to 2.81.10. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.81.10</h2> <ul> <li> <p>Update <code>tombi@latest</code> to 1.1.3.</p> </li> <li> <p>Update <code>release-plz@latest</code> to 0.3.159.</p> </li> <li> <p>Update <code>cosign@latest</code> to 3.1.1.</p> </li> </ul> <h2>2.81.9</h2> <ul> <li> <p>Update <code>wasm-bindgen@latest</code> to 0.2.123.</p> </li> <li> <p>Update <code>tombi@latest</code> to 1.1.2.</p> </li> <li> <p>Update <code>parse-changelog@latest</code> to 0.6.17.</p> </li> <li> <p>Update <code>just@latest</code> to 1.52.0.</p> </li> <li> <p>Update <code>gungraun-runner@latest</code> to 0.19.2.</p> </li> <li> <p>Update <code>cargo-binstall@latest</code> to 1.20.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.81.10] - 2026-06-11</h2> <ul> <li> <p>Update <code>tombi@latest</code> to 1.1.3.</p> </li> <li> <p>Update <code>release-plz@latest</code> to 0.3.159.</p> </li> <li> <p>Update <code>cosign@latest</code> to 3.1.1.</p> </li> </ul> <h2>[2.81.9] - 2026-06-10</h2> <ul> <li> <p>Update <code>wasm-bindgen@latest</code> to 0.2.123.</p> </li> <li> <p>Update <code>tombi@latest</code> to 1.1.2.</p> </li> <li> <p>Update <code>parse-changelog@latest</code> to 0.6.17.</p> </li> <li> <p>Update <code>just@latest</code> to 1.52.0.</p> </li> <li> <p>Update <code>gungraun-runner@latest</code> to 0.19.2.</p> </li> <li> <p>Update <code>cargo-binstall@latest</code> to 1.20.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/7a79fe8c3a13344501c80d99cae481c1c9085912"><code>7a79fe8</code></a> Release 2.81.10</li> <li><a href="https://github.com/taiki-e/install-action/commit/13599f4dab5fc9777c7a29b255a9106d1107ee1d"><code>13599f4</code></a> Update uv manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/ee40c2ad7099d51081c7f37b4d3d914a008b8403"><code>ee40c2a</code></a> Update <code>tombi@latest</code> to 1.1.3</li> <li><a href="https://github.com/taiki-e/install-action/commit/c2336861b9e97b4c0e1b19bc5d8968501d4d3b3f"><code>c233686</code></a> Update <code>release-plz@latest</code> to 0.3.159</li> <li><a href="https://github.com/taiki-e/install-action/commit/7f72f38ad02c28b2456e65ab89c50a362bb98aaa"><code>7f72f38</code></a> Update mise manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/f8c685240840f35b073b629510ed9b7a853227f7"><code>f8c6852</code></a> Update <code>cosign@latest</code> to 3.1.1</li> <li><a href="https://github.com/taiki-e/install-action/commit/fd2f5e3d644b484055ebf4268f474c565f148f25"><code>fd2f5e3</code></a> Release 2.81.9</li> <li><a href="https://github.com/taiki-e/install-action/commit/537f98ea83c367b35b9810b787d0b2ded00efc1a"><code>537f98e</code></a> Update <code>wasm-bindgen@latest</code> to 0.2.123</li> <li><a href="https://github.com/taiki-e/install-action/commit/6bf6dde29b365c072c8c9b09b160ba21042e6b1e"><code>6bf6dde</code></a> Update <code>tombi@latest</code> to 1.1.2</li> <li><a href="https://github.com/taiki-e/install-action/commit/c1e16527666111091c11f4145f629c642a3c5aef"><code>c1e1652</code></a> Update release-plz manifest</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/install-action/compare/v2.81.8...v2.81.10">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
2823171c7e |
chore: bump taiki-e/install-action from 2.79.11 to 2.81.8 (#3011)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.79.11 to 2.81.8. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.81.8</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.2.</p> </li> <li> <p>Update <code>parse-dockerfile@latest</code> to 0.1.7.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.1.</p> </li> <li> <p>Update <code>cargo-shear@latest</code> to 1.13.1.</p> </li> </ul> <h2>2.81.7</h2> <ul> <li> <p>Update <code>wasmtime@latest</code> to 45.0.1.</p> </li> <li> <p>Update <code>vacuum@latest</code> to 0.29.1.</p> </li> <li> <p>Update <code>syft@latest</code> to 1.45.1.</p> </li> <li> <p>Update <code>rclone@latest</code> to 1.74.3.</p> </li> <li> <p>Update <code>cargo-audit@latest</code> to 0.22.2.</p> </li> </ul> <h2>2.81.6</h2> <ul> <li> <p>Update <code>prek@latest</code> to 0.4.4.</p> </li> <li> <p>Update <code>cargo-shear@latest</code> to 1.13.0.</p> </li> </ul> <h2>2.81.5</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.0.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.19.</p> </li> <li> <p>Update <code>typos@latest</code> to 1.47.2.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.0.</p> </li> </ul> <h2>2.81.4</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.28.4.</p> </li> <li> <p>Update <code>typos@latest</code> to 1.47.1.</p> </li> <li> <p>Update <code>syft@latest</code> to 1.45.0.</p> </li> <li> <p>Update <code>cargo-neat@latest</code> to 0.4.0.</p> </li> <li> <p>Update <code>cargo-mutants@latest</code> to 27.1.0.</p> </li> </ul> <h2>2.81.3</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.28.3.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.18.</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.81.8] - 2026-06-08</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.2.</p> </li> <li> <p>Update <code>parse-dockerfile@latest</code> to 0.1.7.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.1.</p> </li> <li> <p>Update <code>cargo-shear@latest</code> to 1.13.1.</p> </li> </ul> <h2>[2.81.7] - 2026-06-06</h2> <ul> <li> <p>Update <code>wasmtime@latest</code> to 45.0.1.</p> </li> <li> <p>Update <code>vacuum@latest</code> to 0.29.1.</p> </li> <li> <p>Update <code>syft@latest</code> to 1.45.1.</p> </li> <li> <p>Update <code>rclone@latest</code> to 1.74.3.</p> </li> <li> <p>Update <code>cargo-audit@latest</code> to 0.22.2.</p> </li> </ul> <h2>[2.81.6] - 2026-06-05</h2> <ul> <li> <p>Update <code>prek@latest</code> to 0.4.4.</p> </li> <li> <p>Update <code>cargo-shear@latest</code> to 1.13.0.</p> </li> </ul> <h2>[2.81.5] - 2026-06-05</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.0.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.19.</p> </li> <li> <p>Update <code>typos@latest</code> to 1.47.2.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.0.</p> </li> </ul> <h2>[2.81.4] - 2026-06-04</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.28.4.</p> </li> <li> <p>Update <code>typos@latest</code> to 1.47.1.</p> </li> <li> <p>Update <code>syft@latest</code> to 1.45.0.</p> </li> <li> <p>Update <code>cargo-neat@latest</code> to 0.4.0.</p> </li> <li> <p>Update <code>cargo-mutants@latest</code> to 27.1.0.</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/0631aa6515c7d545823c67cfae7ef4fc7f490154"><code>0631aa6</code></a> Release 2.81.8</li> <li><a href="https://github.com/taiki-e/install-action/commit/fd382b34adcf901479b928617bf0f0612ca769b3"><code>fd382b3</code></a> Update <code>vacuum@latest</code> to 0.29.2</li> <li><a href="https://github.com/taiki-e/install-action/commit/b1597b4e7dcbcedac8dd1054da307b671f17027d"><code>b1597b4</code></a> Update tombi manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/3869357b4e3cd3a5267685bf8ef038dbef829247"><code>3869357</code></a> Update <code>parse-dockerfile@latest</code> to 0.1.7</li> <li><a href="https://github.com/taiki-e/install-action/commit/734742c1440e1b5aa3d391559c975c507bb14842"><code>734742c</code></a> Update parse-changelog manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/6a4fb002de1a038994686e6d75688b72283a0b34"><code>6a4fb00</code></a> Update <code>mise@latest</code> to 2026.6.1</li> <li><a href="https://github.com/taiki-e/install-action/commit/ee92d4569affa054448769293cd8fbe22df3fd6c"><code>ee92d45</code></a> Update <code>cargo-shear@latest</code> to 1.13.1</li> <li><a href="https://github.com/taiki-e/install-action/commit/56545b37b57562edd73171cb6c62cc509db4c34e"><code>56545b3</code></a> Release 2.81.7</li> <li><a href="https://github.com/taiki-e/install-action/commit/c8d55710f301270b50680d218c3c8b1c2ed35fa7"><code>c8d5571</code></a> Update <code>wasmtime@latest</code> to 45.0.1</li> <li><a href="https://github.com/taiki-e/install-action/commit/982454fe8df95d1ccbd65fec021e1608efa219eb"><code>982454f</code></a> Update <code>vacuum@latest</code> to 0.29.1</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/install-action/compare/v2.79.11...v2.81.8">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Worktrunk Bot
|
9f01f597e8 | ci: revert codecov use_pypi workaround now that v7.0.0 fixes the GPG key (#3016) | ||
|
dependabot[bot]
|
35a4b6292a | chore: bump codecov/codecov-action from 6.0.1 to 7.0.0 (#3012) | ||
|
Worktrunk Bot
|
0fbcdb3b37 | chore: update tend workflows (0.1.2 → 0.1.3) (#3008) | ||
|
Worktrunk Bot
|
ecf1fa6469 |
ci: install codecov CLI from PyPI to dodge broken Keybase GPG import (#2997)
## Problem The non-required `code-coverage` job failed on `main` (run [27075953927](https://github.com/max-sixty/worktrunk/actions/runs/27075953927)). All tests passed (1942 / 1238 / 703, 0 failed); the failure was in the `codecov/codecov-action@v6.0.1` upload step: ``` ==> Finishing downloading linux:latest Version: v11.2.8 gpg: no valid OpenPGP data found. gpg: Total number processed: 0 ==> Verifying GPG signature integrity gpg: Signature made Tue Apr 21 19:28:03 2026 UTC gpg: using RSA key 27034E7FDB850E0BBC2C62FF806BB28AED779869 gpg: Can't check signature: No public key ==> Could not verify signature. Please contact Codecov if problem continues Exiting... ##[error]Process completed with exit code 1. ``` **Root cause (confirmed upstream).** The action downloads the Codecov CLI from `cli.codecov.io` and verifies its GPG signature against a public key fetched from `https://keybase.io/codecovsecurity/pgp_keys.asc`. That URL is currently returning `404 SELF-SIGNED PUBLIC KEY NOT FOUND`, so the key import produces "no valid OpenPGP data found", the keyring stays empty, and the signature check aborts with "No public key" — before any upload happens. Tracked in [codecov/codecov-action#1955](https://github.com/codecov/codecov-action/issues/1955) (opened the same day) and the related [#1876](https://github.com/codecov/codecov-action/issues/1876). **Why a fix and not a rerun.** This exact failure shape fired three times in ~24h — [#2993](https://github.com/max-sixty/worktrunk/issues/2993), [#2996](https://github.com/max-sixty/worktrunk/issues/2996), and this run. #2996's diagnosis explicitly flagged that a third occurrence should escalate to a durable mitigation, crossing the `running-tend` repeat-occurrence threshold from transient to durable. `v6.0.1` is already the latest action release, so bumping the pin doesn't help. ## Solution Set `use_pypi: true` on both `codecov-action` steps in `ci.yaml` (the test-results upload in the `test` matrix and the coverage upload in `code-coverage`). This is the workaround documented in #1955: it installs the Codecov CLI from PyPI instead of `cli.codecov.io`, bypassing the binary download and its broken Keybase GPG-key import entirely. Both call sites are subject to the same failure mode, so both are patched. `use_pypi` is a documented input on `codecov-action@v6.0.1` (`action.yml` line 155: *"Use the pypi version of the CLI instead of from cli.codecov.io"*). ## Testing YAML validated with `yaml.safe_load`. Behavioral verification is the `code-coverage` job passing on this PR — it exercises the patched upload path. The maintainer can revert `use_pypi: true` once Codecov restores the Keybase key (the `# (codecov/codecov-action#1955)` comments mark both sites). --- Automated fix for [failed run](https://github.com/max-sixty/worktrunk/actions/runs/27075953927) Co-authored-by: worktrunk-bot <254187624+worktrunk-bot@users.noreply.github.com> Co-authored-by: Claude <noreply@anthropic.com> |
||
|
Maximilian Roos
|
8b58ac7652 |
ci: add lockfile pre-merge hook to catch a stale Cargo.lock (#2933)
Adds a lockfile pre-merge hook (cargo update --workspace --locked) that runs first, so a stale Cargo.lock fails CI fast with a clear message instead of being silently regenerated by a later unlocked cargo command. |
||
|
Worktrunk Bot
|
d150224fc2 | chore: update tend workflows (0.1.1 → 0.1.2) (#2929) | ||
|
dependabot[bot]
|
41dad8d7be |
chore: bump taiki-e/install-action from 2.79.9 to 2.79.11 (#2928)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.79.9 to 2.79.11. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.79.11</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.26.8.</p> </li> <li> <p>Update <code>cargo-nextest@latest</code> to 0.9.137.</p> </li> </ul> <h2>2.79.10</h2> <ul> <li> <p>Update <code>tombi@latest</code> to 1.1.0.</p> </li> <li> <p>Update <code>prek@latest</code> to 0.4.2.</p> </li> <li> <p>Update <code>editorconfig-checker@latest</code> to 3.7.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.79.11] - 2026-05-28</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.26.8.</p> </li> <li> <p>Update <code>cargo-nextest@latest</code> to 0.9.137.</p> </li> </ul> <h2>[2.79.10] - 2026-05-27</h2> <ul> <li> <p>Update <code>tombi@latest</code> to 1.1.0.</p> </li> <li> <p>Update <code>prek@latest</code> to 0.4.2.</p> </li> <li> <p>Update <code>editorconfig-checker@latest</code> to 3.7.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/13608cbb45b01feb47ef444ab1a42dc41ad56f1a"><code>13608cb</code></a> Release 2.79.11</li> <li><a href="https://github.com/taiki-e/install-action/commit/cfb00c7135433b8497ca0c5f0b0b22c15b7634ce"><code>cfb00c7</code></a> Update <code>vacuum@latest</code> to 0.26.8</li> <li><a href="https://github.com/taiki-e/install-action/commit/1421678089e13872003c2279dc9cb3ea885da9d4"><code>1421678</code></a> Update <code>cargo-nextest@latest</code> to 0.9.137</li> <li><a href="https://github.com/taiki-e/install-action/commit/60ae4ce63c7aeb6e96d7f572c1ec7fafbb17ca80"><code>60ae4ce</code></a> Release 2.79.10</li> <li><a href="https://github.com/taiki-e/install-action/commit/9ab4a661ec8c2700944cd767a28e0d9221321fcf"><code>9ab4a66</code></a> Update biome manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/f88f6cfa22c08b2b641106147f850573ef292b3b"><code>f88f6cf</code></a> Update <code>tombi@latest</code> to 1.1.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/22ea1d2817ee5eab8003e96f0f56b84818b90411"><code>22ea1d2</code></a> Update <code>prek@latest</code> to 0.4.2</li> <li><a href="https://github.com/taiki-e/install-action/commit/96a339da4a84036b8b0e7e191bee37923ec9f22a"><code>96a339d</code></a> Update <code>editorconfig-checker@latest</code> to 3.7.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/796dfb752b8dac958edf2fa327c83465628ffe84"><code>796dfb7</code></a> Update cargo-nextest manifest</li> <li>See full diff in <a href="https://github.com/taiki-e/install-action/compare/v2.79.9...v2.79.11">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
f993d4694a |
chore: bump max-sixty/tend from 0.1.1 to 0.1.2 (#2927)
Bumps [max-sixty/tend](https://github.com/max-sixty/tend) from 0.1.1 to 0.1.2. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/max-sixty/tend/commit/2cfdef1fe67a14ea3ac95250c20b7cc492a44397"><code>2cfdef1</code></a> chore: release 0.1.2 (<a href="https://redirect.github.com/max-sixty/tend/issues/618">#618</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/6b05cf5913ad55a6250bec8fc25ccabbbcf7d8c4"><code>6b05cf5</code></a> interactive harness: fix double-iterator in token-usage jq parser (<a href="https://redirect.github.com/max-sixty/tend/issues/616">#616</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/02b27027502e79b9104d6c01a4eab035366ab9e7"><code>02b2702</code></a> interactive harness: set CLAUDE_CODE_REMOTE=1 to skip remaining prompts (<a href="https://redirect.github.com/max-sixty/tend/issues/615">#615</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/c711bc193e35fe3f50c503d9ce4d23c98778e0e5"><code>c711bc1</code></a> interactive harness: drop -newer filter on session JSONL parser (<a href="https://redirect.github.com/max-sixty/tend/issues/614">#614</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/324226e6c6e0ce6ae0f23926051b9090f6933b2b"><code>324226e</code></a> generator: per-workflow harness override (<a href="https://redirect.github.com/max-sixty/tend/issues/612">#612</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/d6c854ce9857f5b914193b395e1451396b843d3e"><code>d6c854c</code></a> interactive harness: switch off bypassPermissions to skip its disclaimer (<a href="https://redirect.github.com/max-sixty/tend/issues/613">#613</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/6463eaad6819e826e29139f5aeb81af33af09ee0"><code>6463eaa</code></a> interactive harness: fix onboarding block, restore RCE-vector config on PRs (...</li> <li><a href="https://github.com/max-sixty/tend/commit/e79095d6b6a9ca1183a5ac41d347639de7049811"><code>e79095d</code></a> interactive harness: PTY-supervised claude as Agent-SDK alternative (<a href="https://redirect.github.com/max-sixty/tend/issues/609">#609</a>)</li> <li><a href="https://github.com/max-sixty/tend/commit/0fa16af30c043f6513e21521fc68c2f06133bbdd"><code>0fa16af</code></a> skills(nightly): trigger upstream-bot rebases instead of manual resolution (#...</li> <li><a href="https://github.com/max-sixty/tend/commit/e60f5ae0af8f0a0b13a2e53c380f233be8222454"><code>e60f5ae</code></a> skills(running-in-ci): raise the bar for repo-overlay PRs (<a href="https://redirect.github.com/max-sixty/tend/issues/604">#604</a>)</li> <li>Additional commits viewable in <a href="https://github.com/max-sixty/tend/compare/0.1.1...0.1.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
61b5ad3886 |
chore: bump taiki-e/install-action from 2.79.8 to 2.79.9 (#2923)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.79.8 to 2.79.9. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.79.9</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.26.7.</p> </li> <li> <p>Update <code>tombi@latest</code> to 1.0.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.79.9] - 2026-05-26</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.26.7.</p> </li> <li> <p>Update <code>tombi@latest</code> to 1.0.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/8f531eaecd1898bc3da7d104ad91bee98d1b97bd"><code>8f531ea</code></a> Release 2.79.9</li> <li><a href="https://github.com/taiki-e/install-action/commit/8205558b9c72eb3c9d16ab95c5cd7e9d24e0d081"><code>8205558</code></a> Update <code>vacuum@latest</code> to 0.26.7</li> <li><a href="https://github.com/taiki-e/install-action/commit/eb38d1ae87caedea6e16bd17c068aeda33a7c125"><code>eb38d1a</code></a> Update <code>tombi@latest</code> to 1.0.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/8a5a6fd7149807a0b9ec5c13119e4e4415afdb97"><code>8a5a6fd</code></a> Update prek manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/a6f0b5b0acbe5ac25aaa6da713d5a88b126015cb"><code>a6f0b5b</code></a> ci: Avoid build from source on macos-15-intel test</li> <li>See full diff in <a href="https://github.com/taiki-e/install-action/compare/v2.79.8...v2.79.9">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
ac11c8830c |
chore: bump taiki-e/install-action from 2.79.7 to 2.79.8 (#2909)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.79.7 to 2.79.8. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.79.8</h2> <ul> <li> <p>Update <code>parse-dockerfile@latest</code> to 0.1.6.</p> </li> <li> <p>Update <code>knope@latest</code> to 0.23.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.79.8] - 2026-05-26</h2> <ul> <li> <p>Update <code>parse-dockerfile@latest</code> to 0.1.6.</p> </li> <li> <p>Update <code>knope@latest</code> to 0.23.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/920ab1831fbf4fb3ef75c8ead83556c918bb7290"><code>920ab18</code></a> Release 2.79.8</li> <li><a href="https://github.com/taiki-e/install-action/commit/6ca6ee06b574c3e586cb4a980823c29fd5f609c3"><code>6ca6ee0</code></a> Update vacuum manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/50b919ba909a44a3ab66cedd0c4190d3bc1406f2"><code>50b919b</code></a> Update tombi manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/ee4561664118b18be4cb70f89f0cc310ef4cacc3"><code>ee45616</code></a> Update <code>parse-dockerfile@latest</code> to 0.1.6</li> <li><a href="https://github.com/taiki-e/install-action/commit/63a7dfdb6d26e371a634c743b53a64c4609dfde9"><code>63a7dfd</code></a> Update <code>knope@latest</code> to 0.23.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/3fb80a0867cc8b23d9d4d74dfd37e930a5b8047d"><code>3fb80a0</code></a> Update editorconfig-checker manifest</li> <li>See full diff in <a href="https://github.com/taiki-e/install-action/compare/v2.79.7...v2.79.8">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
6f2396c7a1 |
chore: bump taiki-e/install-action from 2.79.2 to 2.79.7 (#2893)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.79.2 to 2.79.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.79.7</h2> <ul> <li> <p>Update <code>typos@latest</code> to 1.46.3.</p> </li> <li> <p>Update <code>rclone@latest</code> to 1.74.2.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.5.15.</p> </li> <li> <p>Update <code>tombi@latest</code> to 0.11.7.</p> </li> </ul> <h2>2.79.6</h2> <ul> <li> <p>Update <code>wasm-bindgen@latest</code> to 0.2.122.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.5.14.</p> </li> <li> <p>Update <code>cargo-deny@latest</code> to 0.19.7.</p> </li> <li> <p>Update <code>vacuum@latest</code> to 0.26.6.</p> </li> </ul> <h2>2.79.5</h2> <ul> <li> <p>Update <code>jaq@latest</code> to 3.0.0. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1861">#1861</a>, thanks <a href="https://github.com/MusicalNinjaDad"><code>@MusicalNinjaDad</code></a>)</p> </li> <li> <p>Update <code>wasmtime@latest</code> to 45.0.0.</p> </li> <li> <p>Update <code>wasm-tools@latest</code> to 1.250.0.</p> </li> <li> <p>Update <code>tombi@latest</code> to 0.11.6.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.5.13.</p> </li> </ul> <h2>2.79.4</h2> <ul> <li> <p>Update <code>martin@latest</code> to 1.10.1.</p> </li> <li> <p>Update <code>prek@latest</code> to 0.4.1.</p> </li> <li> <p>Update <code>protoc@latest</code> to 3.35.0.</p> </li> <li> <p>Update <code>mdbook@latest</code> to 0.5.3.</p> </li> </ul> <h2>2.79.3</h2> <ul> <li> <p>Update <code>mise@latest</code> to 2026.5.12.</p> </li> <li> <p>Update <code>martin@latest</code> to 1.10.0.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.15.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.79.7] - 2026-05-24</h2> <ul> <li> <p>Update <code>typos@latest</code> to 1.46.3.</p> </li> <li> <p>Update <code>rclone@latest</code> to 1.74.2.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.5.15.</p> </li> <li> <p>Update <code>tombi@latest</code> to 0.11.7.</p> </li> </ul> <h2>[2.79.6] - 2026-05-23</h2> <ul> <li> <p>Update <code>wasm-bindgen@latest</code> to 0.2.122.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.5.14.</p> </li> <li> <p>Update <code>cargo-deny@latest</code> to 0.19.7.</p> </li> <li> <p>Update <code>vacuum@latest</code> to 0.26.6.</p> </li> </ul> <h2>[2.79.5] - 2026-05-22</h2> <ul> <li> <p>Update <code>jaq@latest</code> to 3.0.0. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1861">#1861</a>, thanks <a href="https://github.com/MusicalNinjaDad"><code>@MusicalNinjaDad</code></a>)</p> </li> <li> <p>Update <code>wasmtime@latest</code> to 45.0.0.</p> </li> <li> <p>Update <code>wasm-tools@latest</code> to 1.250.0.</p> </li> <li> <p>Update <code>tombi@latest</code> to 0.11.6.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.5.13.</p> </li> </ul> <h2>[2.79.4] - 2026-05-22</h2> <ul> <li> <p>Update <code>martin@latest</code> to 1.10.1.</p> </li> <li> <p>Update <code>prek@latest</code> to 0.4.1.</p> </li> <li> <p>Update <code>protoc@latest</code> to 3.35.0.</p> </li> <li> <p>Update <code>mdbook@latest</code> to 0.5.3.</p> </li> </ul> <h2>[2.79.3] - 2026-05-20</h2> <ul> <li> <p>Update <code>mise@latest</code> to 2026.5.12.</p> </li> <li> <p>Update <code>martin@latest</code> to 1.10.0.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.15.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/d9be7d8cda89035c9c843f78bd44d4f72d8403d4"><code>d9be7d8</code></a> Release 2.79.7</li> <li><a href="https://github.com/taiki-e/install-action/commit/7728147b45f9a2629f83441ea4c596dd78dd42bb"><code>7728147</code></a> Update <code>typos@latest</code> to 1.46.3</li> <li><a href="https://github.com/taiki-e/install-action/commit/6df4f178805216b15bb33bc4bc2559da31008ba3"><code>6df4f17</code></a> Update parse-dockerfile manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/be60431cdce1a8b76552819b4552e38faa629226"><code>be60431</code></a> Update knope manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/24db57b4143014bff99e6a6a95e0949eccfbb699"><code>24db57b</code></a> ci,tools: Update config and script</li> <li><a href="https://github.com/taiki-e/install-action/commit/56d048e4beac934a8322e8b4304f5918298ee994"><code>56d048e</code></a> Update <code>rclone@latest</code> to 1.74.2</li> <li><a href="https://github.com/taiki-e/install-action/commit/88886e83d3f1f02ee7c8ef6bc19353ebe4c5e2b7"><code>88886e8</code></a> Update <code>mise@latest</code> to 2026.5.15</li> <li><a href="https://github.com/taiki-e/install-action/commit/1a101afe879f28ef068448b2700a61687bc53fe8"><code>1a101af</code></a> Update <code>tombi@latest</code> to 0.11.7</li> <li><a href="https://github.com/taiki-e/install-action/commit/f48d2f8ba2b452934c948b7be1a768079c3632ff"><code>f48d2f8</code></a> Release 2.79.6</li> <li><a href="https://github.com/taiki-e/install-action/commit/64c43fd29c96b85324f393bc82ca0a5396148dd5"><code>64c43fd</code></a> Update <code>wasm-bindgen@latest</code> to 0.2.122</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/install-action/compare/v2.79.2...v2.79.7">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Worktrunk Bot
|
b073284391 | chore(ci): weekly renovation 2026-05-24 (#2889) |