Skip to content

chore(deps): update ⬆️ mise-packages - #1043

Merged
renovate[bot] merged 2 commits into
mainfrom
renovate/mise-packages
Aug 31, 2026
Merged

chore(deps): update ⬆️ mise-packages#1043
renovate[bot] merged 2 commits into
mainfrom
renovate/mise-packages

Conversation

@renovate

@renovate renovate Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending Age Adoption Passing Confidence
aqua:atuinsh/atuin tools patch 18.20.018.20.1 age adoption passing confidence
aqua:dagger/dagger tools patch 0.21.80.21.9 age adoption passing confidence
aqua:openai/codex tools minor rust-v0.149.1rust-v0.150.1 rust-v0.151.0 age adoption passing confidence
aqua:snyk/cli tools minor 1.1306.41.1307.0 age adoption passing confidence
aqua:vercel-labs/agent-browser tools patch 0.35.00.35.1 0.35.2 age adoption passing confidence
droid (source) minor 0.205.10.206.0 0.208.2 (+2) age adoption passing confidence
github:anthropics/claude-code tools patch v2.1.246v2.1.247 v2.1.251 (+2) age adoption passing confidence
github:janosmiko/lfk tools patch v0.18.2v0.18.3 v0.18.5 (+1) age adoption passing confidence
github:max-sixty/worktrunk tools minor v0.74.0v0.75.0 age adoption passing confidence
npm:socket tools patch 1.1.1601.1.162 age adoption passing confidence
pipx:semgrep (changelog) tools minor 1.174.01.175.0 age adoption passing confidence

Release notes are maintained in a PR comment by the renovate-release-notes-comment workflow.


Configuration

📅 Schedule: (in timezone America/Los_Angeles)

  • Branch creation
    • Between 03:00 AM and 05:59 AM (* 3-5 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from scottames as a code owner August 31, 2026 11:10
@renovate
renovate Bot enabled auto-merge (squash) August 31, 2026 11:10
@scottames-github-bot

scottames-github-bot Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

Renovate Release Notes

Generated from Renovate's update table by the renovate-release-notes-comment workflow.

Packages that cannot be summarized from GitHub releases are listed explicitly below.

atuinsh/atuin (aqua:atuinsh/atuin)

v18.20.1: 18.20.1

Compare Source

Release Notes

Bug Fixes

  • (client) Bound WAL growth with journal_size_limit + a periodic compactor (#3994)
  • (docs) Correct sync_frequency default (#3984)
  • (nu) Use unique keybinding names (#3975)
  • Correct documented local_timeout default (#3983)
  • Drop nonexistent session_path and correct path defaults (#3985)
  • Auto-generate encryption key if it doesn't exist (#3998)

Features

  • Switch terminal emulation to atuin-vt100 (#3995)

Miscellaneous Tasks

  • (release) Include all crates in publish order

Refactor

  • (deps) Bump uuid from 1.23.2 to 1.25.0 (#3886)
  • Remove atuin-lab-share crate (#3993)

atuin-server 18.20.1

Install atuin-server 18.20.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/atuinsh/atuin/releases/download/v18.20.1/atuin-server-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/atuinsh/atuin/releases/download/v18.20.1/atuin-server-installer.ps1 | iex"

Download atuin-server 18.20.1

File Platform Checksum
atuin-server-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
atuin-server-x86_64-apple-darwin.tar.gz Intel macOS checksum
atuin-server-x86_64-pc-windows-msvc.zip x64 Windows checksum
atuin-server-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
atuin-server-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
atuin-server-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
atuin-server-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo atuinsh/atuin

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

atuin 18.20.1

Install atuin 18.20.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/atuinsh/atuin/releases/download/v18.20.1/atuin-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/atuinsh/atuin/releases/download/v18.20.1/atuin-installer.ps1 | iex"

Download atuin 18.20.1

File Platform Checksum
atuin-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
atuin-x86_64-apple-darwin.tar.gz Intel macOS checksum
atuin-x86_64-pc-windows-msvc.zip x64 Windows checksum
atuin-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
atuin-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
atuin-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
atuin-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo atuinsh/atuin

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
dagger/dagger (aqua:dagger/dagger)

v0.21.9: v0.21.9

Compare Source

v0.21.9 - 2026-08-25

Added

Fixed

What to do next?

openai/codex (aqua:openai/codex)

rust-v0.150.1: 0.150.1

Compare Source

Bug Fixes

  • Remote compaction now counts retained images toward its token budget by default, trimming older images as needed. (#41003)

Changelog

Full Changelog: openai/codex@rust-v0.150.0...rust-v0.150.1

  • #41003 Backport retained-image compaction budgeting to 0.150 @​rhan-oai
snyk/cli (aqua:snyk/cli)

v1.1307.0: v1.1307.0

Compare Source

1.1307.0 (2026-08-26)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Features

  • agent: New experimental snyk agent command — a scanning surface built for AI coding agents, with token-optimized output and ergonomics. snyk agent test runs Snyk Open Source, Code, and Secrets together. (b98420c)
  • secrets: snyk secrets test now supports exclusions — add files or paths to the exclude section of your .snyk file to skip them during secrets scanning. (917bbc5)
  • container: Container scans now surface image provenance attestations by default, so signed-image provenance metadata appears in results without any extra flag. (0c444b0)
  • test: Improves .NET/NuGet scanning — snyk test can now analyze already-restored projects fully offline and no longer requires .NET 6 to be installed. (46cf92c)
  • mcp: The full MCP profile now includes Snyk Secrets. (1d2848e)
  • code, secrets: SARIF suppressions now include reviewedOn and reviewedBy metadata. (5585ea6)
  • aibom: snyk aibom test --severity-threshold now filters the displayed and JSON results by severity, not only the exit code. (a429c2e)

Bug Fixes

vercel-labs/agent-browser (aqua:vercel-labs/agent-browser)

v0.35.1: v0.35.1

Compare Source

Bug Fixes

  • Fixed Windows ARM64 launcher selection to prefer a native ARM64 executable when present and fall back to the published x64 executable through Windows emulation when it is not (#1725)
  • Fixed stream URL tracking to emit active main-frame URL updates for full-document, History API, and fragment navigation, while rebinding correctly after active-tab changes and ignoring child-frame or background-tab navigation (#1682)
  • Fixed snapshot diff element references by resetting ref numbering for each diff, invalidating refs across URL navigations, and preserving the previous refs when a diff fails (#1719)

Improvements

  • Updated Rust dependencies to rustls-webpki 0.103.13 and quinn-proto 0.11.17 (#1723, #1720)

Contributors

  • @​ctate
  • @​Railly
  • @​Angelmmiguel
  • @​anupamme
  • @​nexxusbruno-ship-it
anthropics/claude-code (github:anthropics/claude-code)

v2.1.247: v2.1.247

Compare Source

What's changed

  • Added the SendFeedback tool: when something goes wrong in a session, Claude can draft a feedback report for you to review and send from /feedback (turn off with the feedbackDrafts setting)
  • Added {id, text, cooldownSessions, priority} entries, tipsFile, and label to spinnerTipsOverride, so organizations can rotate their own tips alongside the built-in ones
  • Added a tip on Bash permission prompts pointing to auto mode, with a one-keystroke "Yes, and switch to auto mode" option
  • Added /claude-api cost-optimize to profile an existing project's Claude API spend and work through cost levers (caching, token hygiene, batch, effort, model choice) one measured change at a time
  • Updated the /claude-api skill with Admin API coverage (organization members, invites, workspaces, API keys, rate limit reports, workload identity federation, CMEK)
  • Fixed fast arrow-key + Enter sequences acting on the row above the one you navigated to in history search, /config, /mcp, /skills, background tasks, and /model
  • Fixed sub-agents dying on a first-call model 404: they now use the session's fallback model chain, and the error returned to the parent includes the error type, status, request id, and model
  • Fixed a hook or background agent that printed megabytes of error output being able to overflow the conversation and wedge the session on "Prompt is too long"
  • Fixed Ctrl keyboard shortcuts not firing under non-Latin (e.g. Cyrillic) keyboard layouts in kitty-protocol terminals
  • Fixed text like <35;150;7M being inserted into the prompt when a mouse report arrived split across reads right after the escape prefix
  • Fixed the Bash sandbox's after-command cleanup deleting a dotfile-managed ~/.claude/settings.json symlink (nix/home-manager, stow) when it is repointed outside the sandbox's writable area
  • Fixed /terminal-setup overwriting your entire Zed keymap.json instead of merging in its keybinding
  • Fixed /rename silently confirming when the session registry could not be updated; it now says other sessions may still show the old name
  • Fixed /compact and "Summarize from here" in sessions started with --agent summarizing under the default system prompt instead of the conversation's own
  • Fixed a background session showing "opening…" forever in claude agents after its terminal host process died; the row now fails within seconds with the reason, and Enter restarts it
  • Fixed unbounded memory growth when a hook's or background task's output file could not be written; the file now notes where output was lost
  • Fixed /install-github-app over SSH: the copy shortcut now says how the sign-in URL was copied instead of always claiming success, and the URL appears immediately when no browser can open
  • Fixed shell commands carried over from the foreground logging an internal error or showing a misleading [exited with code -1] line when they finish in background sessions
  • Fixed a version-less marketplace plugin's live cache directory being deleted and recreated on a second-scope install, which could disrupt a running session using it
  • Fixed Remote Control sessions started with /remote-control not reporting the working-tree diff to connected clients
  • Fixed self-hosted runner sessions reporting running before Claude Code had started, which could trigger a premature "Claude is waiting for your input" notification from the Claude desktop app
  • Fixed first-run setup exiting with "Unable to connect to Anthropic services" when managed settings configure Claude apps gateway sign-in and Anthropic endpoints are unreachable
  • Fixed cloud sessions (Claude Code on the web, desktop and mobile apps) sometimes showing the previous permission mode when you switch modes right after sending a message
  • Fixed cloud sessions going silent when the session's container restarts between turns while a background agent, shell, or monitor is still running — the resumed session now reports the lost work
  • Improved plugin marketplace hardening: names containing control or invisible characters are rejected, and marketplace-supplied text in /plugin and claude plugin output is escape-safe
  • Improved Bedrock, Vertex, and Foundry sessions (and any with telemetry disabled): Claude is now told when a configured MCP server failed to connect, instead of concluding its tools don't exist
  • Changed Sonnet 5's default auto-compact window to its full 1M context, so sessions on the 1M window now auto-compact at about 967K tokens instead of about 934K
  • Changed cross-session peer messages to collapse by default to a one-line Message from @&#8203;<sender>: <first line> preview; Ctrl+O expands the full body
  • Changed terminal hyperlinks in rendered markdown: link targets that point at a network or automounter path, contain a control character, or lead with an invisible character now render as plain text
  • Changed the prompt-footer PR badge to skip its GitHub re-check on terminal refocus when the last check is under a minute old
  • Changed analytics to stay off from startup, not only after login, when managed settings force gateway login or a custom OAuth deployment is configured
  • Changed Claude apps gateway sign-in requests to identify Claude Code (a surface=claude_code device-authorization parameter and a claude-code/<version> User-Agent)
  • Changed organization sign-in enforcement to exit at start when the administrator's managed settings cannot be read, even if host-supplied or per-user Windows registry settings exist
janosmiko/lfk (github:janosmiko/lfk)

v0.18.3: v0.18.3

Compare Source

0.18.3 (2026-08-26)

Features

  • show cpu and memory history as sparklines in the resource columns (#698) (610e341)

Bug Fixes

  • scope multi-select keys by kind (#697) (db1192f)
  • show the cluster dashboard as one frame, and load it faster (#695) (bbf7c68)
  • survive a proxy that resets long-lived watch connections (#701) (62ab9fe)
  • use interactive bash when available (#700) (59ed623)
max-sixty/worktrunk (github:max-sixty/worktrunk)

v0.75.0: 0.75.0

Compare Source

Release Notes

Improved

  • The wt switch picker opens on one unified diff: local rows combine committed, staged, unstaged, and untracked changes. Tab skips empty subsidiary views, while Alt-1 through Alt-8 retain direct access. Docs (#3865)

  • Git 2.43 is now the minimum supported version: older Git exits with an upgrade message before Git-dependent commands run; wt config shell remains available so shell startup continues. (Breaking.) (#3895)

Fixed

  • wt list no longer grows .git/objects during advisory conflict checks: untracked content stays visible but is excluded from synthetic trees, and all probe-only objects use temporary storage. (#3906, fixes #3883, thanks @​srobroek for reporting and the original fix)

  • HEAD± counts untracked files without inflating moves: wt list, the picker, and statusline include untracked lines. Tracked deletions paired with untracked destinations count as renames, so pure moves are line-neutral and edited moves show only their edits. HEAD± now always detects renames, regardless of diff.renames. (#3925)

  • Timed child processes no longer abort wt in restricted sandboxes: wt switch --create, picker pagers, and other bounded commands survive denied signal-handler wakes. TERM→KILL cleanup also returns promptly once the process group is gone. (#3857, #3887, fixes #3856, thanks @​tomascamargo for reporting)

  • JSON list output ignores display-column gates: [list] columns no longer makes wt list --format json contact a forge or generate summaries. CI requires --full; summaries also require [list] summary = true and a configured generator. (Breaking: schema 1 loses config-driven ci and summary fields.) (#3812, thanks @​emeren for the request)

  • Long Windows paths compare consistently: paths beyond 260 characters could retain a \\?\ prefix and appear to be on another drive. copy-ignored then refused them, while switch, remove, merge, and relocate landed at the worktree root instead of the original subdirectory. (#3899, fixes #3898, thanks @​Persedes for reporting and verifying the fix)

  • Shell configuration rechecks before it writes: overlapping installs lock and reread rc files; Fish completion installs preserve files created after preview; uninstall applies only previewed rc removals and rejects changed Worktrunk-owned files. (#3853, #3924)

  • -vv profiles exclude their own collector commands: command counts and cache summaries no longer include duplicate-looking work performed only to assemble the diagnostic report; raw traces still retain it. (#3900)

  • Fenced HTML comments survive picker Markdown rendering: PR descriptions and comments now preserve fenced <!-- … --> lines; fenced <!-- wt list … --> markers also no longer affect the following block. (#3908)

Documentation

  • Agent CLIs without a plugin can publish activity markers: the integration guide now specifies the session-start, turn-end, and session-end calls, working-directory requirement, error guard, and cleanup contract. Docs (#3848, thanks @​AsafMah for requesting generic-agent guidance and @​ortonomy for the related Pi use case)

  • Agent guidance explains worktree selection: commands that name a branch already select its worktree; -C changes repository context and is needed only for commands without a worktree selector or callers outside the repository. (#3890)

  • The wt up recipe safely updates dirty worktrees: it fetches all remotes, fast-forwards dirty branches without autostash, rebases clean branches, and continues past an ordinary refusal or a failed remote. Docs (#3882)

  • The docs site has a new responsive design: rebuilt on Astro and Starlight while preserving public routes, anchors, and crawler URLs; generated reference pages remain synchronized. (#3866)

Internal

  • Library API rework (Breaking library API): BranchDiffSpec gained working_base, while remote-URL, shell-path, branch-push, approval, temporary-index, and repository helpers were removed. (#3833, #3853, #3865, #3866, #3875)

  • Codex loads repository maintainer skills: .agents/skills now exposes the canonical .claude/skills tree; checkouts without symlink support keep the existing limitation. (#3903)

Install worktrunk 0.75.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/max-sixty/worktrunk/releases/download/v0.75.0/worktrunk-installer.sh | sh && wt config shell install

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/max-sixty/worktrunk/releases/download/v0.75.0/worktrunk-installer.ps1 | iex"; git-wt config shell install

Install prebuilt binaries via Homebrew

brew install worktrunk && wt config shell install

Download worktrunk 0.75.0

File Platform Checksum
worktrunk-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
worktrunk-x86_64-apple-darwin.tar.xz Intel macOS checksum
worktrunk-x86_64-pc-windows-msvc.zip x64 Windows checksum
worktrunk-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum
worktrunk-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

Install via Cargo

cargo install worktrunk && wt config shell install

Install via Winget (Windows)

winget install max-sixty.worktrunk && git-wt config shell install

Install via AUR (Arch Linux)

paru worktrunk-bin && wt config shell install
SocketDev/socket-cli (npm:socket)

v1.1.162: v1.1.162

Compare Source

What's Changed

Full Changelog: SocketDev/socket-cli@v1.1.161...v1.1.162

v1.1.161: v1.1.161

Compare Source

What's Changed

Full Changelog: SocketDev/socket-cli@v1.1.160...v1.1.161

semgrep/semgrep (pipx:semgrep)

v1.175.0: Release v1.175.0

Compare Source

1.175.0 - 2026-08-26

### Changed

  • Semgrep is now built with OCaml 5.4 instead of OCaml 5.3. End users should notice no change. (ocaml-5.4)

Skipped Packages

GitHub Release Notes Unavailable

  • droid: No GitHub release was found for 0.206.0

@renovate
renovate Bot force-pushed the renovate/mise-packages branch from 7ffb4a1 to f408072 Compare August 31, 2026 15:22
@renovate
renovate Bot merged commit 7dd3241 into main Aug 31, 2026
6 checks passed
@renovate
renovate Bot deleted the renovate/mise-packages branch August 31, 2026 15:27
scottames pushed a commit that referenced this pull request Sep 3, 2026
🤖 I have created a release *beep* *boop*
---


## [0.52.0](v0.51.0...v0.52.0)
(2026-09-03)


### Updates & Misc Chores

* **deps:** update ⬆️ agent extensions to v0.18.2
([#1036](#1036))
([7b44360](7b44360))
* **deps:** update ⬆️ aqua-packages to v4.554.0
([#1034](#1034))
([47f9b9b](47f9b9b))
* **deps:** update ⬆️ aqua-packages to v4.555.0
([#1041](#1041))
([2030de0](2030de0))
* **deps:** update ⬆️ github-actions to v2
([#1038](#1038))
([39534fa](39534fa))
* **deps:** update ⬆️ github-actions to v4.2.5
([#1037](#1037))
([670907c](670907c))
* **deps:** update ⬆️ mise-packages
([#1033](#1033))
([456f480](456f480))
* **deps:** update ⬆️ mise-packages
([#1039](#1039))
([ee5783a](ee5783a))
* **deps:** update ⬆️ mise-packages
([#1040](#1040))
([f3f078c](f3f078c))
* **deps:** update ⬆️ mise-packages
([#1042](#1042))
([28f7af1](28f7af1))
* **deps:** update ⬆️ mise-packages
([#1043](#1043))
([7dd3241](7dd3241))
* **deps:** update ⬆️ mise-packages
([#1045](#1045))
([d855e64](d855e64))
* **deps:** update ⬆️ mise-packages
([#1047](#1047))
([c3e8abe](c3e8abe))
* **deps:** update ⬆️ mise-packages to v9
([#1044](#1044))
([60b7a06](60b7a06))
* **herdr:** explicitly define shell
([320a6ec](320a6ec))
* **mise:** add syft bin
([0a2cb19](0a2cb19))
* **nono:** add ~/.local/share/gh read
([25e2712](25e2712))
* **nono:** add yamllint config path
([9a71d9e](9a71d9e))
* **nono:** allow mise state to run/update mise config
([99cd7be](99cd7be))
* upgrade trunk ([#1035](#1035))
([0eab6da](0eab6da))
* **voxtype:** add duck media config for 1.0 release
([3d6ff83](3d6ff83))


### Features

* **agents:** add ctx7 CLI skill
([ea76e81](ea76e81))
* **droid:** track ~/.factory/settings.json
([fc230b5](fc230b5))
* **git:** add Field Office workstation profile
([#1046](#1046))
([7ec8062](7ec8062))
* **mise:** add `ctx7` CLI
([130fe18](130fe18))
* **mise:** add checksum-verified Droid
([1f7907c](1f7907c))
* **nono:** add droid-local profile
([67ead60](67ead60))
* **themes:** runtime theme switcher with aura and catppuccin-mocha
([00007ed](00007ed))


### Bug Fixes

* **nono:** grant AGENTS.md symlink target in local profiles
([4559c6a](4559c6a))
* **pi:** configure Starship footer
([85587bc](85587bc))


### Code Refactoring

* **mise:** move npm package_manager from bun to aube
([5fa82f3](5fa82f3))
* **opencode:** rm context7 mcp in favor of cli/skill
([9ff06fb](9ff06fb))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: scottames-github-bot[bot] <162828115+scottames-github-bot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants