Build(deps): bump ortho_config from v0.3.0 to v0.8.0

[dependabot]

Bumps ortho_config from v0.3.0 to v0.8.0.

Changelog

Sourced from ortho_config's changelog.

Changelog

All notable changes to this project will be documented in this file.

Unreleased

Added

• Support dependency aliasing via #[ortho_config(crate = "...")] attribute on OrthoConfig and SelectedSubcommandMerge derive macros (closes #291).
• Re-export figment, uncased, xdg, and optional format parsers to simplify dependency graphs for consumers.
• Forward json5, yaml, and toml feature flags to ortho_config_macros, so macros compile with matching support.
• Introduce the #[ortho_config(discovery(...))] attribute to customize config discovery (filenames, environment overrides, and the generated CLI flag) and expose the new flag in the hello_world example.
• Add the OrthoConfigSubcommandDocs trait and derive so subcommand enums can emit per-variant documentation metadata.
• Populate recursive DocMetadata.subcommands values from OrthoConfig structs that hold a #[command(subcommand)] field.
• Add behavioural fixtures and step definitions covering nested subcommand trees (ortho_config/tests/features/docs_ir_nested.feature).
• Add renderer compatibility tests and insta golden snapshots for populated nested-subcommand DocMetadata (cargo-orthohelp/tests/golden/nested_subcommand_snapshots.rs).
• Add SkillManifest, SkillCommandRef, and the AgentContext.skill_manifests field for declaring downstream skill manifests in agent context (roadmap item 6.3.1).
• Add the public LocalizedParse blanket trait so any clap::Parser can parse arguments with localized command metadata and parse errors.
• Add the public parse_localized_command helper for applications that need to parse an already-localized clap::Command with a custom message-id base.

Changed

• Clarify that OrthoError::MissingRequiredValues is proposed future work, not part of the current public error surface, and keep the implementation tracked in the phase 7 roadmap.
• Report missing extends targets with a clear not-found error that names the resolved absolute path and the referencing file (closes #110).
• Clarify ConfigDiscovery::load_first semantics: the helper now returns Err when every candidate fails and any discovery errors were recorded, and Ok(None) only when no candidates exist without errors. Update error handling in consumers accordingly.
• Replace the legacy serde_yaml integration with a feature-gated SaphyrYaml provider backed by serde-saphyr, enabling YAML 1.2 semantics (strict boolean parsing keeps unquoted yes as a string and duplicate mapping keys raise errors) and removing the transitive figment/yaml

... (truncated)

Commits

• 4aa6035 Clap mangen to cargo-orthohelp migration guide (#303)
• af4d7b5 Rename test helper crate for crates.io
• e1ca1a4 Publish test_helpers before ortho_config
• 19aac86 Make test_helpers publishable
• 65adeea Revert "Vendor ortho_config test helpers for publish"
• 3f45e6e Vendor ortho_config test helpers for publish
• 5f24c28 Remove macro dev-dependency cycle
• 8c1af24 Prepare v0.8.0 release updates (#296)
• 3a83f32 chore(rust): update Rust version to 1.89 and clean up code formatting (#297)
• bc610d7 Bump quote from 1.0.40 to 1.0.41 (#181)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sourcery-ai]

Sorry @dependabot[bot], you have reached your weekly rate limit of 500000 diff characters.

Please try again later or upgrade to continue using Sourcery

[codescene-access]

No application code in the PR — skipped Code Health checks.

See analysis details in CodeScene

Quality Gate Profile: Pay Down Tech Debt
Install CodeScene MCP: safeguard and uplift AI-generated code. Catch issues early with our IDE extension and CLI tool.