Skip to content

chore(deps): update all non-major dependencies - #55

Open
tagoro9-renovatebot[bot] wants to merge 1 commit into
mainfrom
c/renovate_all-minor-patch
Open

chore(deps): update all non-major dependencies#55
tagoro9-renovatebot[bot] wants to merge 1 commit into
mainfrom
c/renovate_all-minor-patch

Conversation

@tagoro9-renovatebot

@tagoro9-renovatebot tagoro9-renovatebot Bot commented Aug 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
antidote minor 2.1.0 → 2.3.0
ast-grep patch 0.45.0 → 0.45.1
atuin minor 18.18.1 → 18.19.0
bun tools minor 1.3.14 → 1.4.0
chezmoi minor 2.70.5 → 2.72.0
doppler patch 3.76.1 → 3.76.5
fzf patch 0.74.2 → 0.74.3
gcc minor 16.1.0 → 16.2.0
gh minor 2.97.0 → 2.98.0
go tools minor 1.26.5 → 1.27.0
go-mockery minor 3.5.5 → 3.7.2
golangci-lint minor 2.12.2 → 2.13.1
htop patch 3.5.2 → 3.5.3
kubernetes-helm patch 4.2.3 → 4.2.4
kubeseal minor 0.36.0 → 0.38.4
lazygit minor 0.63.1 → 0.64.1
mise minor 2026.7.17 → 2026.8.6
mysql84 patch 8.4.10 → 8.4.11
open-turo/renovate-config patch v1.21.1 → v1.21.2
opencode patch 1.18.11 → 1.18.21
openspec minor 1.7.0 → 1.10.0
pi-coding-agent minor 0.83.0 → 0.84.2
postgresql minor 18.4 → 18.6
terraform tools minor 1.15.8 → 1.16.0
terraform-ls minor 0.38.7 → 0.39.0
uv patch 0.12.1 → 0.12.5
yazi minor 26.5.6 → 26.8.15
zellij minor 0.44.3 → 0.45.0

❗ Important

Release Notes retrieval for this PR were skipped because no github.com credentials were available.
If you are self-hosted, please see this instruction.

Release Notes

atuinsh/atuin (atuin)

v18.19.0

Bug Fixes
  • (client) Avoid panic decoding an empty encryption key (#​3803)
  • (client) Keep sqlx-postgres out of the client crate (#​2884) (#​3823)
  • (config) Preserve comments in atuin config set (#​3766)
  • (search) Correct fuzzy result ranking (#​3603) (#​3624)
  • Fix atuin-search-bench/benches/search.rs (#​3788)
  • Close OSC133 C when launching Atuin AI to prevent content erasure (#​3794)
  • Authenticate beta release push as atuin-bot (#​3809)
  • Copy vendored axoasset into docker builder stage (#​3816)
Documentation
  • Clarify update check network, provide build command (#​3767)
  • Remove old i18n docs (#​3787)
  • Use shell-agnostic install command in quickstart pages (#​3820)
  • Document named stats periods (today/week/month/year) (#​3821)
  • State minimum supported Rust version in install guide (#​3822)
  • Document iTerm2 tmux popup incompatibility (#​3826)
  • Clarify key binding snippets belong in shell startup file (#​3837)
  • Mention RustRover in IDE integration guidance (#​3834)
Features
  • (client) Show intent in inspector (#​3804)
  • (client) Enable pty-proxy via config (#​3828)
  • (config) Validate new settings in atuin config set before writing them to disk (#​3769)
  • (lab) Experimental atuin lab share
  • (search) Remove the "skim" engine (#​3825)
  • Remove word with ALT-Backspace ALT-D (#​2457)
  • Add scheduled beta release workflow (#​3805)
  • Migrate TLS backend from rustls to native-tls (#​3807)
  • Make update a real subcommand (#​3813)
  • Capability negotiation protocol (client + server) (#​3797)
Miscellaneous Tasks
  • (ci) Fix package step (#​3770)
  • Remove Store trait (#​3779)
  • Daemon search benchmark (divan + CodSpeed) (#​3763)
  • Run CodSpeed benchmarks on macro runners in walltime mode (#​3786)
  • Add OrFilter as a replacement for Vecs as filter lists (#​3768)
  • Add atuin-domain crate for shared domain types (#​3790)
  • Run CodSpeed walltime benchmarks on depot-macos-26 (#​3791)
  • Fix deny.toml and get it to run in CI (#​3808)
  • Remove codspeed workflow (#​3812)
  • Richer logging for atuin-server (#​2564)
  • Hide --active sharing (#​3846)
Refactor
  • (deps) Bump thiserror from 2.0.18 to 2.0.19 (#​3839)
  • (deps) Bump strum_macros from 0.27.2 to 0.28.0 (#​3841)
  • (deps) Bump tonic-types from 0.14.5 to 0.14.6 (#​3842)
  • (deps) Bump pulldown-cmark from 0.13.3 to 0.13.4 (#​3840)
  • (deps) Bump itertools from 0.14.0 to 0.15.0 (#​3838)
  • Adopt enum_dispatch for enum trait delegation (#​3806)
Testing
  • Adopt rstest across the workspace test suite (#​3785)
Daemon
  • Replace nucleo with frizbee, rank by match quality with frecency tiebreak (#​3782)
oven-sh/bun (bun)

v1.4.0: Bun v1.4

Compare Source

To install Bun v1.4

curl -fsSL https://bun.com/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.com/install.ps1|iex"

To upgrade to Bun v1.4.0:

bun upgrade

Read the blog post: image (1)

Thank you

Bun is free, open source, and MIT-licensed. We receive a lot of contributions from the community, and we'd like to thank everyone who fixed a bug or contributed since Bun v1.3.

junegunn/fzf (fzf)

v0.74.3

  • Performance optimizations for non-ASCII input
    • ASCII queries are up to 16x faster
    • Non-ASCII queries are up to 12x faster
    • Reading accented Latin input is up to 37% faster
    • Reading CJK input reduces memory use by up to 29%
    • ASCII input is unaffected
  • Fixed an image from a preview command being torn apart when its rows are separated by IND instead of newlines, as chafa does under tmux (#​4885)
  • Fixed replace-query corrupting the item text when the query is edited afterwards
  • fzf no longer turns bracketed paste mode off on exit when the terminal already had it on, which broke pasting in shells that run fzf from a line editor widget (#​4887)
  • Fixed startup blocking on terminals that never answer escape sequences, such as FreeBSD virtual terminals. fzf waited for a reply until a key was pressed, then dropped that keystroke (#​2860, #​976)
golang/go (go)

v1.27.0

Compare Source

v1.26.7

Compare Source

v1.26.6

Compare Source

vektra/mockery (go-mockery)

v3.7.2

What's Changed

New Contributors

Full Changelog: vektra/mockery@v3.7.1...v3.7.2

helm/helm (kubernetes-helm)

v4.2.4: Helm v4.2.4

Helm v4.2.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

Installation and Upgrading

Download Helm v4.2.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • Minimal fix to build failure from #​31211. 3900f43 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158 (#​32521) f7c6e8f (Terry Howe)
  • chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 035a2c3 (dependabot[bot])
  • fix: pass registry client to downloader.Manager in upgrade f76a5f4 (Gates Wang)
  • Apply suggestions 5a7c6c7 (Will Noble)
  • Properly format the extra field in gzipped packages 2281848 (Will Noble)
  • Fix missing conflict retry with server-side apply (#​32088) 2c979a1 (Jakub Jaruszewski)
  • Potential fix for pull request finding 2bd2c66 (kimsungmin1)
  • fix(registry): resolve golangci-lint issues in token-auth tests 183a540 (kimsm28)
  • chore: go mod tidy after rebase on main 08d8da1 (kimsm28)
  • fix(registry): use plain-http registry in token-auth scope test 9655b5a (kimsm28)
  • Update pkg/registry/client.go 430dfac (Terry Howe)
  • test: improve client_scope_test.go to avoid data races and brittle assertions 9569605 (kimsm28)
  • fix typos in withScopeHint function comment 63f2b68 (kimsm28)
  • fix registry test failures by adjusting DockerRegistryHost and auth server listener management f7488c0 (kimsm28)
  • fix variable naming requestUrl -> requestURL 8fe78fb (kimsm28)
  • fix typo, remove unnecessary code, fix to avoid to use the assertion in http hanlder d0670d2 (kimsm28)
  • change suite.Nil, suite.NotNill to more proper function(suite.NoError, suite.Error) 804256e (kimsungmin1)
  • change client_scope_test.go to use httptest d79bceb (kimsungmin1)
  • fix typo d34fcd9 (kimsungmin1)
  • remove freeport dependency 9fbd190 (kimsungmin1)
  • add newline in license header 9275661 (kimsungmin1)
  • fix scope when helm push to a registry that use token auth fef91f3 (kimsungmin1)
  • fix panic on repeated IsReachable calls e89ce68 (Mohammad Abdolirad)
  • fix(provenance): check error return in Digest ff1ac83 (Sebastien Tardif)
  • fix: address review feedback 4b4dedb (Sebastien Tardif)
  • fix: fetch logs from all containers in test pods 7c80103 (Sebastien Tardif)
  • chore: rename savedErr to clear its specific purpose ecc9cd2 (Jeaeun Kim)
  • chore: fix lint f6211ba (Jeaeun Kim)
  • chore: store err separately for clarity 3507ea5 (Jeaeun Kim)
  • chore: Improve error reporting for helm template --debug with --show-only 211ffae (Jeaeun Kim)
  • Address review comments 51a9837 (Matheus Pimenta)
  • Fix vanishing empty lines 83a8b70 (Matheus Pimenta)

Full Changelog: helm/helm@v4.2.3...v4.2.4

bitnami/sealed-secrets (kubeseal)

v0.38.4

  • Incomplete release for credentials problems
jesseduffield/lazygit (lazygit)

v0.64.1

What's Changed

This fixes a few regressions that were introduced in the last release, and some long-standing bugs that I didn't see any reason to hold back until the next big one.

Fixes 🔧
Maintenance ⚙️

Full Changelog: jesseduffield/lazygit@v0.64.0...v0.64.1

v0.64.0

What's Changed

This release has massive changes, but most of them should hopefully not be visible: I completely overhauled lazygit's concurrency model, which was, let's say, less than robust; there were lots of data races, and we were just lucky that this didn't result in crashes or misbehavior more often. We now have a robust concurrency model with no known data races, and in fact we run our integration test suite on CI with the -race flag to prove that. The user visible part of this is that some operations run a little more smoothly now; for example, there used to be an ugly spinner freeze at the end of checking out a branch, which is now gone.

However, since the changes were so massive there's a higher-than-usual chance of regressions, so please report any that you find.

Apart from that, we also have a few useful enhancements; the most notable one is probably that we now show the Github checks status of pull requests in the branches panel.

Enhancements 🔥
Fixes 🔧
Maintenance ⚙️
Docs 📖
I18n 🌎
Performance Improvements 📊

New Contributors

Full Changelog: jesseduffield/lazygit@v0.63.1...v0.64.0

open-turo/renovate-config (open-turo/renovate-config)

v1.21.2

Compare Source

Bug Fixes
  • stop npm customManager from matching github action refs (8839651)
anomalyco/opencode (opencode)

v1.18.21

Core

Bugfixes
  • Continue responses when a model reports an unknown finish reason instead of stopping early
  • Route Vertex AI eu and us multi-region Gemini requests through REP endpoints

Desktop

Bugfixes
  • Keep file search results visible while the next search is loading
  • Register the archive session command in both desktop layouts (@​NathanTCode)

Thank you to 1 community contributor:

v1.18.18

Core

Bugfixes
  • Select the Kimi system prompt correctly for official Moonshot and Kimi providers
  • Fix xhigh reasoning effort for xai models

v1.18.16

Core

Bugfixes
  • Ignore unknown top-level config fields instead of failing config parsing
  • Register projects opened from Home so they are available to the rest of the app

Desktop

Improvements
  • Open the project menu with a right-click in Home
Bugfixes
  • Fall back to listing and matching local directories when the project picker server does not support search
  • Use 词元 instead of 令牌 for token-related labels in Simplified Chinese (@​Speechlessmanbilibili)
  • Keep the macOS app running after the last window closes and reopen a window when the app is activated

Thank you to 1 community contributor:

v1.18.13

TUI

Bugfixes
  • GitHub pull request reviews now include the pull request number and URL in context.

Desktop

Bugfixes
  • Fixed several right-to-left layout issues across tabs, drawers, resizing, and titlebar interactions.
  • Fixed shared right-to-left UI behavior such as directional icons and drawer placement.
  • Sessions without titles now fall back to generated names instead of appearing blank.
  • Moved markdown parsing off the main thread to keep the app more responsive while rendering messages.
Improvements
  • Localized more desktop UI copy, including native menus, update dialogs, and help content.
  • Added early right-to-left layout support across the app and session views.
  • Added locale-aware plural rules so translated counts and summaries read correctly.
  • Expanded translation coverage and added more supported desktop languages.

Thank you to 1 community contributor:

Fission-AI/OpenSpec (openspec)

v1.10.0

Minor Changes
  • #​1685 c747ed1 Thanks @​clay-good! - Add openspec init --language <language> to configure the language used for artifacts in new projects.
Patch Changes

  • #​1704 7276c6c Thanks @​clay-good! - Drop the npm postinstall script. Its only job was printing a one-line tip about opt-in shell completions, but shipping any install script made npm install -g @fission-ai/openspec emit an allow-scripts warning that reads as a packaging fault (and npm approve-scripts then fails with ENOMATCH on a global install, since it looks in the local project). The tip now prints from the CLI on its first run — to stderr, in an interactive terminal, once, and not at all if you already have completions installed — and the published package declares no preinstall/install/postinstall script, so a registry install runs no OpenSpec code. Suppress the tip with OPENSPEC_NO_COMPLETIONS=1.

  • #​1656 a72a74d Thanks @​clay-good! - ### Bug Fixes

    • openspec update now suggests restarting an IDE only when it updates an IDE-resident tool. CLI tools such as Claude Code, Codex, and Gemini CLI no longer show an unnecessary restart hint.

  • #​1703 9643888 Thanks @​clay-good! - Point the spec-driven specs instruction's main-spec read and edit at the store-aware root. It named openspec/specs/<capability-path>/spec.md, a path relative to the current directory, for both step 1 of the MODIFIED workflow ("locate the existing requirement") and the edit that fixes a leftover TBD Purpose. When the change lives in a store — whether selected with --store, a project store: pointer, or a global default store — the main spec is under the store root, so that read missed it, or silently returned a different capability when a local one happened to share the name, and the MODIFIED block was then copied from the wrong requirement. Both operations now use <planningHome.root>/openspec/specs/..., the root already returned by openspec instructions ... --json and the same convention the sync and archive workflows use. Fixes #​1702.

  • #​1699 18688c8 Thanks @​clay-good! - archive: tell the author how to retire a capability when the emptied spec also holds content the merge cannot account for. That combination printed only "Spec must have at least one requirement" and no guidance at all; the abort now names the blocking lines and reports a retire_capabilities marker that is present but cannot be honored. Authored content quoted in those messages - the blocking lines, and the marker's own reason, which openspec validate prints too - is stripped of control characters and bounded in length before it reaches the terminal.

  • #​1660 7da3f34 Thanks @​clay-good! - Require generated tasks to state how their completion can be verified.

v1.8.0

Minor Changes

  • #​1303 1aa0f2a Thanks @​solanab! - Add the vendor-neutral agents target: openspec init --tools agents installs the workflow skills to .agents/skills/openspec-*/SKILL.md, the shared location AGENTS.md-compatible assistants read. It is skills-only, so no slash commands are generated. Because agents is now a real target, --tools all includes it and creates .agents/skills/ where it previously did not.

  • #​1274 7a4a745 Thanks @​NicoAvanzDev! - Generate GitHub Copilot coding agent setup and custom agent files during openspec init and keep them synchronized during openspec update.

  • #​1214 161f945 Thanks @​showms! - Add MiniMax Code as a global skills-only tool target.

  • #​1518 568e56c Thanks @​clay-good! - ### New Features

    • Atlassian Rovo Dev CLI — openspec init --tools rovodev installs the OpenSpec workflow skills for Atlassian's Rovo Dev CLI. It is skills-only (no slash commands), written to .rovodev.
Bug Fixes

  • Codex skills now live in the shared .agents directory — openspec init and openspec update install Codex skills under .agents/skills/ (the canonical location assistants read) and migrate an existing .codex skills directory in place. Files you customized are preserved, not overwritten.

  • openspec status separates planning from implementation — status now reports isPlanningComplete (every non-skipped planning artifact exists; skipped artifacts count as satisfied without being written) distinctly from overall progress, and its messages no longer imply a change is finished before it has been implemented. isComplete is kept as a compatibility alias, so existing scripts keep working.

  • #​1517 73207a6 Thanks @​clay-good! - Make GitHub Copilot cloud coding-agent files opt-in. Selecting the github-copilot tool no longer silently writes a GitHub Actions workflow into .github/; openspec init now asks first (default No) and remembers the choice in openspec/config.yaml (githubCopilot.cloudAgent). Use --copilot-cloud / --no-copilot-cloud to decide non-interactively.

    • openspec update never prompts — it only refreshes cloud files for projects that opted in (or that already have generated cloud files, so existing setups keep working).
    • Opting out (--no-copilot-cloud or cloudAgent: false) removes OpenSpec-managed cloud files; a user-customized file is always preserved, never overwritten or deleted.
    • init and update now report whether cloud files were written, skipped, or left untouched — and if you already have your own copilot-setup-steps.yml, they say it was preserved and that you need to add the OpenSpec install step by hand.

  • #​1484 521ee33 Thanks @​clay-good! - Retire a capability when a change removes its last requirement. A change that declares retire_capabilities: true in its .openspec.yaml (alongside the schema: that file requires) may now be archived even when its REMOVED entries take a capability's last requirement: openspec archive deletes that capability's main spec instead of aborting with "Spec must have at least one requirement". Without the marker nothing changes — the archive aborts exactly as before, except the message now names the marker as the way out. Retirement happens only when the emptied spec could not have been written at all, every one is named in the archive output, a pasteable git checkout is included when the spec lived in the caller's checkout, and --no-validate never retires. Archive now also rejects a main spec with duplicate canonical requirement names instead of letting delta reconciliation collapse one of the duplicate blocks. One thing to know before retiring: a capability's spec is the base another change's MODIFIED block is checked against, so an in-flight change that modifies the capability you just retired will keep validating clean and then refuse to archive ("target spec does not exist; only ADDED requirements are allowed for new specs") — close or rework that change alongside the retirement.

Patch Changes

  • #​1502 ece8660 Thanks @​clay-good! - openspec validate now treats the English SHALL/MUST convention as guidance in normal mode, so requirements written in other languages can validate. Strict mode continues to enforce the convention.

  • #​1483 [2b3d368]

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@tagoro9-renovatebot

tagoro9-renovatebot Bot commented Aug 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: config/private_dot_local/share/devbox/global/default/devbox.lock
Command failed: devbox update antidote --no-install
Info: Resolved antidote@2.3.0 to antidote@2.3.0 github:NixOS/nixpkgs/8be7bd0c83f12e2e3bbba07c9044d6fed9e66f7f#antidote
Info: Running "nix flake update"
Error: nix: command error: nix --extra-experimental-features ca-derivations --option experimental-features 'nix-command flakes fetch-closure' path-info 'github:NixOS/nixpkgs/0d534853a55b5d02a4ababa1d71921ce8f0aee4c#pinentry_mac' --json --impure: Package ‘pinentry-mac-1.1.1.1’ in /tmp/containerbase/cache/nix/store/3sk1pyp2afk6cfx4fa00zcyjmn5dkxai-source/pkgs/tools/security/pinentry/mac.nix:93 is not available on the requested hostPlatform:: exit code 1

Error: There was an internal error. Run with DEVBOX_DEBUG=1 for a detailed error message, and consider reporting it at https://github.com/jetify-com/devbox/issues

@github-actions

github-actions Bot commented Aug 12, 2026 •
edited
Loading

Copy link
Copy Markdown

Release notes preview

Below is a preview of the release notes if your PR gets merged.

2.80.0 (2026-08-27)

Miscellaneous

  • deps: update all non-major dependencies (8fbddf6)

Features

@tagoro9-renovatebot
tagoro9-renovatebot Bot force-pushed the c/renovate_all-minor-patch branch 4 times, most recently from 9e1059d to 9ebc091 Compare August 20, 2026 00:29
@tagoro9-renovatebot
tagoro9-renovatebot Bot force-pushed the c/renovate_all-minor-patch branch from 9ebc091 to 6c6d76a Compare August 21, 2026 00:32
@tagoro9-renovatebot
tagoro9-renovatebot Bot force-pushed the c/renovate_all-minor-patch branch from 6c6d76a to 8fbddf6 Compare August 27, 2026 05:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependency-minor dependency-patch

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants