Skip to content

chore(deps): update ⬆️ mise-packages - #1028

Merged
renovate[bot] merged 2 commits into
mainfrom
renovate/mise-packages
Aug 23, 2026
Merged

chore(deps): update ⬆️ mise-packages#1028
renovate[bot] merged 2 commits into
mainfrom
renovate/mise-packages

Conversation

@renovate

@renovate renovate Bot commented Aug 23, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
aqua:dprint/dprint tools minor 0.55.2 → 0.56.0 0.56.1
aqua:mikefarah/yq tools patch 4.53.3 → 4.53.4 4.53.6 (+1)
aqua:openai/codex tools minor rust-v0.147.0 → rust-v0.148.0 rust-v0.149.0
aqua:siderolabs/talos tools patch 1.13.8 → 1.13.9
github:agavra/tuicr tools minor v0.22.0 → v0.23.0 v0.23.1
github:anthropics/claude-code tools patch v2.1.234 → v2.1.235 v2.1.241 (+5)
github:janosmiko/lfk tools patch v0.17.3 → v0.17.4 v0.18.1 (+2)

Release notes are maintained in a PR comment by the renovate-release-notes-comment workflow.

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

  • Branch creation
    • Between 03:00 AM and 05:59 AM (* 3-5 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from scottames as a code owner August 23, 2026 10:14
@renovate
renovate Bot enabled auto-merge (squash) August 23, 2026 10:14
@scottames-github-bot

scottames-github-bot Bot commented Aug 23, 2026

Copy link
Copy Markdown
Contributor

Renovate Release Notes

Generated from Renovate's update table by the renovate-release-notes-comment workflow.

Packages that cannot be summarized from GitHub releases are listed explicitly below.

dprint/dprint (aqua:dprint/dprint)

0.56.0: 0.56.0

Compare Source

Changes

  • feat: prefer plugins on the npm registry (#1215)
  • feat: add path completion hints to CLI args (#1217)
  • feat: support formatting directory args (#1196)
  • feat: format explicit paths outside the working directory (#1204)
  • fix: keep a duplicate plugin's checksum when deduping plugin sources (#1211)
  • fix: don't duplicate a plugin specified in both a config and its extended config (#1043) (#1208)
  • fix: apply implicit node_modules exclude and unanchored patterns in rebased scopes (#1210)
  • fix: resolve literal file and directory args without directory traversal (#1207)
  • fix: handle overflow panic in progress bars (#1223)

Install

Run dprint upgrade or see https://dprint.dev/install/

Checksums

Artifact SHA-256 Checksum
dprint-x86_64-apple-darwin.zip 466dd67e15fca266f3749008ef5d23ea7a6c657ef8204257dbb8c23636fc9aca
dprint-aarch64-apple-darwin.zip 79f5c80a3ddebb4717a89a25a79ec1c50947d4cef141df243757925cb47d32e1
dprint-x86_64-pc-windows-msvc.zip cbcb0c6fdbb72289e895c3857720eb769046d42069973f38655b6aee16c01c73
dprint-x86_64-pc-windows-msvc-installer.exe 795de3adb60187bad989b330f8c8ec03c7a4a69509b1a8d47dc3025266e0158a
dprint-aarch64-pc-windows-msvc.zip c4356e5f9e1b6edce345bd2de902384e3a51e46b0b98775db7011f0996b6b230
dprint-x86_64-unknown-linux-gnu.zip 49fe9d970cdbe0f742e18187c221a7a1dd985d35d4fa9bf4740f7a261c08d96c
dprint-x86_64-unknown-linux-musl.zip e958bfa3fec5256e72c2e4e028fa5674e43023eaff80d704ca96827af2eba240
dprint-aarch64-unknown-linux-gnu.zip a0dcf153cce38096f43bdde36fdd32cfd11c2227b6a04c2202fa83573fe517a6
dprint-aarch64-unknown-linux-musl.zip 2e7d50e342d9d9d85b811635a04f3d49abdf7ec96d5b346cda932a7c4d42a7ab
dprint-riscv64gc-unknown-linux-gnu.zip c888b0e2f559341a62fa666b1609ec957e609bfc146b5ee0ab7898723ebbe231
dprint-loongarch64-unknown-linux-gnu.zip d86a6d3fc063992d152237885f51053748b60361228d851ca6aeaec65d84fb8e
dprint-loongarch64-unknown-linux-musl.zip d781022e4fbfec13688db1dd3d0fb9da964f6f5cf79b31ffcf5196d364f22cf0
dprint-powerpc64le-unknown-linux-gnu.zip 935e117e23650a9874b444a7a6445ec7a8d593778e514f34ebea72dd88180599
dprint-powerpc64le-unknown-linux-musl.zip 93d03c5f3b615955c9fce64a4867b8aa5959988646bfebd1bfd74b5618a1f2ed
dprint-aarch64-linux-android.zip 718707dcd1637d312d2b430ae6313550bac7f21143d9344cd8fd80bf2ec5bf25
dprint-x86_64-linux-android.zip 2b09284549bd96dfa2389d85237da15bacbae9076cdec0e849ec3fb50b804923
mikefarah/yq (aqua:mikefarah/yq)

v4.53.4: v4.53.4

Compare Source

  • Close input files after processing each one (#2796) (#2808) Thanks @​MsfPablo
  • Fixed non string HCL string keys (#2795)
  • Fixed heap allocation bug (#2809) Thanks @​MsfPablo
  • Fix deleting commented empty list YAML output (#2765) Thanks @​dpersek
  • Fix (has) return false for negative array indices (#2769) Thanks @​maximilize
  • Fix (sort): avoid int64 overflow comparing large integers (#2771) Thanks @​maximilize
  • Fix: preserve correct parent references in explode merge anchor reconstruction (#2730) Thanks @​vomba
  • Improve Guard ExpressionParser initialization with sync.Once (#2789) Thanks @​arcaven
  • Fix: reject negative indent instead of panicking (#2746) Thanks @​StressTestor
  • Fix: parse signed hex and octal integers (#2749) Thanks @​StressTestor
  • Fix: skip UTF-8 BOM when processing front matter (#2751) Thanks @​StressTestor
  • Fix !!merge tag regression for yq (#2705) Thanks @​W-Floyd
  • Default to yaml when a file's extension is not a recognised format (#2785) Thanks @​devthedevil
  • Bumped dependencies
openai/codex (aqua:openai/codex)

rust-v0.148.0: 0.148.0

Compare Source

New Features

  • Export complete TUI conversations to Markdown with /export, either to the clipboard or a new file. (#37358)
  • Fork sessions with codex exec fork, and archive or restore sessions from the TUI resume picker. (#37367, #37369, #37371)
  • Draft prompts while the TUI initializes, with resume and fork progress shown during startup. (#38642, #38788)
  • View estimated thread credits or cost in /status, status lines, and terminal titles for eligible workspaces. (#38281, #38282)
  • Use Amazon Bedrock Runtime as a built-in provider with AWS profile, region, and GPT-5.6 routing support. (#38470)
  • Hooks can now run commands asynchronously and invoke MCP tools. (#37533, #38705)

Bug Fixes

  • Model switches and settings updates no longer leave stale instructions behind or change an active turn midstream. (#37260, #38785)
  • Resumed sessions now restore their persisted working directory and approval policy, with more accurate transcript previews. (#37198, #37368, #38605)
  • Turns reconnect through temporary provider outages, and MCP servers recover after OAuth reauthentication without restarting Codex. (#37337, #37485, #38418)
  • TUI startup no longer lets buffered terminal input activate prompts accidentally, and onboarding appears when authentication is missing. (#38641, #38643, #38644)
  • Composer and transcript rendering now handle CRLF pastes, wrapped whitespace, and long URLs correctly. (#37709, #38380, #38704)
  • Sandbox restrictions now fail closed for denied or unreadable paths across Linux and Windows. (#37875, #38026, #38416, #38660)

Documentation

  • The bundled skill-creator guide is more focused, and validation now rejects unfinished TODO placeholders. (#38384)

Changelog

Full Changelog: openai/codex@rust-v0.147.0...rust-v0.148.0

  • #37190 Interrupt cyber model turns after one Guardian denial @​copyberry
  • #37191 Preserve legacy semantics during rollout migration @​copyberry
  • #37198 Prefer persisted cwd when reading local threads @​copyberry
  • #37199 Track thread archive analytics @​copyberry
  • #37204 Add durable user-message queue dispatch @​copyberry
  • #37206 Add a unified image budget @​copyberry
  • #37210 Fetch remote installed plugins across all scopes @​copyberry
  • #37211 Harden network proxy MITM authorization @​copyberry
  • #37248 Cover remote MCP discovery timeout cleanup @​copyberry
  • #37252 Allow agent roles on full-history forks @​copyberry
  • #37260 Fix first-turn model switching and rollback @​copyberry
  • #37261 Start cached MCP servers lazily for subagents @​copyberry
  • #37267 Support plugin roots in the host skill loader @​copyberry
  • #37273 Reuse MCP handlers across sampling steps @​copyberry
  • #37279 Avoid cloning immutable metadata on tool search cache hits @​copyberry
  • #37335 Fully repaint inline viewports after history overlap @​copyberry
  • #37336 Use step environments for extension turn input @​copyberry
  • #37337 Recover MCP servers after OAuth reauthentication @​copyberry
  • #37338 Honor the configured ChatGPT origin in connector install URLs @​copyberry
  • #37339 Reload app-server telemetry after account changes @​copyberry
  • #37340 Consolidate deferred environment provisioning APIs @​copyberry
  • #37341 Support content references for inline visualizations @​copyberry
  • #37342 Preserve foreign cwd URIs for turn-input contributors @​copyberry
  • #37343 Stage Bazel app-server test binaries in TEST_TMPDIR @​copyberry
  • #37344 Fix subagent MCP startup status settling @​copyberry
  • #37345 Send model routing hints to the Codex backend @​copyberry
  • #37347 Track context windows per agent @​copyberry
  • #37348 Add rollout migration tooling and background migration @​copyberry
  • #37349 Mount a minimal /dev in full-filesystem Bubblewrap sandboxes @​copyberry
  • #37350 Allow ThreadManager to customize thread ID generation @​copyberry
  • #37352 Configure the default code-mode exec yield timeout @​copyberry
  • #37354 Retry busy app-server test executable spawns @​copyberry
  • #37356 Support agent identity endpoint overrides @​copyberry
  • #37357 Clamp short wait_agent timeouts to the configured minimum @​copyberry
  • #37358 Add Markdown conversation export to the TUI @​copyberry
  • #37360 Use consistent TUI input placeholders @​copyberry
  • #37363 Recognize MCP tool hook configurations @​copyberry
  • #37366 Harden local MCP server process tree cleanup @​copyberry
  • #37367 Add session forking to codex exec @​copyberry
  • #37368 Restore approval policy when resuming threads @​copyberry
  • #37369 Add session archiving to the resume picker @​copyberry
  • #37371 Restore archived sessions from the resume picker @​copyberry
  • #37389 Add tool namespace metadata configuration @​copyberry
  • #37400 Rename the tool registry metadata setting @​copyberry
  • #37406 Add a loader for executor-local config layers @​copyberry
  • #37408 Add executor-local config reads to the exec server @​copyberry
  • #37424 Cap project instructions across environments @​copyberry
  • #37433 Expose multi-agent versions in model/list @​copyberry
  • #37434 Add process diagnostics snapshots @​copyberry
  • #37439 Add shared skill root loading interfaces @​copyberry
  • #37440 Load plugin skill roots through the host skills service @​copyberry
  • #37444 Unify plugin skill loading with the host skill service @​copyberry
  • #37446 Preserve base instruction provenance across sessions @​copyberry
  • #37447 Respect plugin skill availability in tool suggestions @​copyberry
  • #37452 Unify plugin skill loading through the shared loader @​copyberry
  • #37457 Remove the legacy core skill loader @​copyberry
  • #37461 Remove the unused remote skills client @​copyberry
  • #37466 Move skill config rule resolution into codex-config @​copyberry
  • #37470 Expose app-server diagnostics through the experimental API @​copyberry
  • #37477 Include call IDs in MCP requests and clarify metadata config @​copyberry
  • #37478 Shard state unit tests under Bazel @​copyberry
  • #37479 Report temporary directories in exec-server environment info @​copyberry
  • #37480 Delegate remote process sandboxing to the executor @​copyberry
  • #37483 Interrupt active code-mode cells with their turn @​copyberry
  • #37485 Keep response streams alive through connection failures @​copyberry
  • #37486 Expose runtime activity in server diagnostics @​copyberry
  • #37488 Generalize skill locator aliases across providers @​copyberry
  • #37489 Alias resource-backed skill locators under context pressure @​copyberry
  • #37492 Include tool namespace inventory in turn metadata @​copyberry
  • #37494 Add MCP event discovery and subscriptions @​copyberry
  • #37497 Limit payload traces in diagnostic logs @​copyberry
  • #37498 Preserve child waiters during process termination @​copyberry
  • #37500 Remove the legacy code-mode tool metadata inventory @​copyberry
  • #37503 Move host skill prompt injection into the skills extension @​copyberry
  • #37504 Disable Nagle's algorithm for code-mode WebSockets @​copyberry
  • #37505 Remove the codex-core-skills crate @​copyberry
  • #37507 Include sandbox mode in response metadata @​copyberry
  • #37510 Define the code-mode host gRPC protocol @​copyberry
  • #37511 Enforce automatic review for managed models @​copyberry
  • #37513 Reuse parent compactions in Guardian review sessions @​copyberry
  • #37516 Ignore reusable command approvals for cyber models @​copyberry
  • #37519 Expose auto-review ignore rules in config requirements @​copyberry
  • #37527 Terminate timed-out hook process trees @​copyberry
  • #37528 Keep external agent detection from blocking config requests @​copyberry
  • #37530 Implement the gRPC code-mode host service @​copyberry
  • #37533 Support asynchronous command hooks @​copyberry
  • #37538 Expose execution mode in hook listings @​copyberry
  • #37607 Prevent launch context from reaching child processes @​copyberry
  • #37610 Add workload identity token exchange support @​copyberry
  • #37618 Use step environments for Guardian approval reviews @​copyberry
  • #37622 Include buffered turns when editing prompts @​copyberry
  • #37641 Use the step context for command approval prefix rules @​copyberry
  • #37644 Generalize hook handler execution @​copyberry
  • #37645 Improve plugin install failure analytics @​copyberry
  • #37654 Advertise environment config read support @​copyberry
  • #37709 Keep wrapped composer whitespace with following text @​copyberry
  • #37723 Report I/O subtypes for session config import failures @​copyberry
  • #37745 Add gRPC TCP transport to the code-mode host @​copyberry
  • #37747 Bound Cursor project path resolution @​copyberry
  • #37757 Add a line-ending preservation mode to apply_patch @​copyberry
  • #37758 Add a feature flag to preserve apply_patch line endings @​copyberry
  • #37773 Forward install attempt IDs for remote plugins @​copyberry
  • #37788 Use native transparency in the imagegen skill @​copyberry
  • #37806 Initialize the install attempt ID in the plugin analytics test @​copyberry
  • #37807 Share model-visible tool specs across prompts @​copyberry
  • #37808 Simplify package-based skill reads @​copyberry
  • #37810 Support packaged defaults in config layering @​copyberry
  • #37812 Keep multi-workspace skill listings consistent @​copyberry
  • #37828 Track running unified exec processes at turn completion @​copyberry
  • #37832 Remove obsolete plugin skill discovery helpers @​copyberry
  • #37833 Encapsulate watchable skill root selection @​copyberry
  • #37836 Run plugin and skill tests on Windows @​copyberry
  • #37838 Tighten the skills extension API surface @​copyberry
  • #37842 Speed up MCP OAuth credential reads @​copyberry
  • #37843 Use the shared environment scrubber in git-utils @​copyberry
  • #37847 Preserve environments when reloading V2 agents @​copyberry
  • #37848 Expose the session ID to shell commands @​copyberry
  • #37850 Expose plugin ownership in MCP server status @​copyberry
  • #37851 Route intercepted exec approvals through shared review @​copyberry
  • #37860 Speed up MCP OAuth credential reads @​copyberry
  • #37862 Rename environment config for turn scope @​copyberry
  • #37864 Support MCP form input in full-access user threads @​copyberry
  • #37866 Add MCP OAuth credential contention regression tests @​copyberry
  • #37867 Reject duplicate resolved paths in apply_patch @​copyberry
  • #37871 Extract persisted history types into a dedicated crate @​copyberry
  • #37874 Keep runtime summary metrics out of Statsig exports @​copyberry
  • #37875 Honor the configured Windows sandbox level for managed networking @​copyberry
  • #37878 Add configurable goal token budget limits @​copyberry
  • #37882 Read safety buffering from response metadata @​copyberry
  • #37886 Extend bundled package discovery and expose its version @​copyberry
  • #37889 Ignore Unix socket proxy settings on Windows @​copyberry
  • #37891 Use thread configuration for app/read @​copyberry
  • #37892 Validate images before returning view_image output @​copyberry
  • #37895 Add configurable Responses API request metadata @​copyberry
  • #37896 Add hermetic Windows SDK and MSVC runtime repositories @​copyberry
  • #37898 Add appearance metadata to thread sections @​copyberry
  • #37901 Make submission operations move-only @​copyberry
  • #37902 Defer view_image processing to history insertion @​copyberry
  • #37906 Make gRPC code-mode notifications fire-and-forget @​copyberry
  • #37908 Apply refreshed cloud config bundles to later sessions @​copyberry
  • #37922 Extract reusable code-mode host test support @​copyberry
  • #37926 Distinguish turn-start thread persistence @​copyberry
  • #37929 Add shared runtime build information @​copyberry
  • #37939 Validate images before returning view_image output @​copyberry
  • #37970 Cache tool catalogs for streamable HTTP MCP servers @​copyberry
  • #37979 Honor per-directory bundled skill settings in skills/list @​copyberry
  • #37984 Stop re-exporting skill APIs from codex-core @​copyberry
  • #38011 Remove config lockfile support @​copyberry
  • #38020 Retry transient exec-server startup failures @​copyberry
  • #38024 Expose image generation usage-limit failures @​copyberry
  • #38026 Fail closed on unsafe Linux unreadable globs @​copyberry
  • #38032 Hide approved Guardian assessments from TUI history @​copyberry
  • #38033 Use session metadata to validate thread history paths @​copyberry
  • #38034 Filter live rollout items in place @​copyberry
  • #38035 Propagate MCP elicitation event delivery failures @​copyberry
  • #38036 Limit TUI streaming traces in SQLite logs @​copyberry
  • #38040 Propagate custom CA settings to local MCP servers @​copyberry
  • #38041 Add gRPC-backed code-mode sessions @​copyberry
  • #38043 Sandbox remote apply_patch operations @​copyberry
  • #38044 Compact code mode tool calls in TUI history @​copyberry
  • #38045 Store model history in response item envelopes @​copyberry
  • #38046 Include auto-review state in turn metadata @​copyberry
  • #38047 Add turn-aware response item injection @​copyberry
  • #38049 Harden network proxy credential brokerage @​copyberry
  • #38051 Run required CI against pull request merge commits @​copyberry
  • #38052 Add per-login MCP OAuth client registration selection @​copyberry
  • #38054 Add configuration-backed external authentication @​copyberry
  • #38056 Configure PSP routing through the feature system @​copyberry
  • #38057 Track artifact operations from trusted plugin markers @​copyberry
  • #38058 Preserve harness metadata across conversation history @​copyberry
  • #38060 Disable storage for Azure Responses requests @​copyberry
  • #38061 Preserve proxy settings for Windows sandbox debug sessions @​copyberry
  • #38064 Grant Windows sandbox access to the Codex app root @​copyberry
  • #38066 Track resource-backed skill invocations @​copyberry
  • #38067 Scope environment readiness config to thread attachments @​copyberry
  • #38072 Forward gRPC code-mode callbacks to session delegates @​copyberry
  • #38074 Track implicit executor skill invocations @​copyberry
  • #38075 Respect rendered width when adding TUI history @​copyberry
  • #38078 Reduce cloning in world-state patch handling @​copyberry
  • #38080 Allow nested Git repositories in the Windows sandbox @​copyberry
  • #38081 Use ReviewDecision for MCP tool approvals @​copyberry
  • #38083 Remove standard form input from app-server docs @​copyberry
  • #38084 Allow empty input to start a turn @​copyberry
  • #38086 Support execution-host context when resolving cloud config @​copyberry
  • #38087 Route gRPC code-mode sessions through the shared HTTP client @​copyberry
  • #38089 Add CIMD support to MCP OAuth registration @​copyberry
  • #38092 Simplify queued user message admission @​copyberry
  • #38094 Test Guardian context for code mode commands @​copyberry
  • #38101 Attach hosted app context to file uploads @​copyberry
  • #38103 Avoid cloning MCP invocations in TUI history @​copyberry
  • #38108 Route MCP tool calls through shared approval handling @​copyberry
  • #38127 Distinguish rollout IDs from thread IDs @​copyberry
  • #38165 Resolve subagent analytics connections lazily @​copyberry
  • #38167 Read executor skill packages directly @​copyberry
  • #38170 Notify running turn watchers only on count changes @​copyberry
  • #38172 Update lru and webbrowser dependencies @​copyberry
  • #38179 Embed defaults in the packaged config layer @​copyberry
  • #38183 Add conservative restriction helpers for tool policies @​copyberry
  • #38184 Run search tool integration tests on Windows @​copyberry
  • #38186 Stop overriding environments in the skills user-turn test @​copyberry
  • #38188 Integrate workload identity with Codex authentication @​copyberry
  • #38189 Run plugin app-server tests in automatic environments @​copyberry
  • #38197 Add an LRU baseline to skill shadow selection @​copyberry
  • #38204 Fuse recent and lexical skills in shadow selection @​copyberry
  • #38205 Enforce non-interactive approval policy for Codex delegates @​copyberry
  • #38214 Avoid allocations when sanitizing TUI user text @​copyberry
  • #38217 Start required cached MCP servers lazily for subagents @​copyberry
  • #38227 Add a flag to retain client developer messages @​copyberry
  • #38228 Detect implicit skill invocations from PowerShell reads @​copyberry
  • #38232 Track root turns across delegated Codex requests @​copyberry
  • #38238 Add manifest-defined metrics for trusted plugin scripts @​copyberry
  • #38239 Add bounded plugin measurement analytics @​copyberry
  • #38241 Include Node REPL policy in turn metadata @​copyberry
  • #38242 Cache stable active-cell layout measurements @​copyberry
  • #38243 Track client-authored developer messages in rollout history @​copyberry
  • #38244 Resolve paginated thread history by rollout ID @​copyberry
  • #38245 Add dynamic HTTP header helpers for MCP servers @​copyberry
  • #38251 Read model ETags from WebSocket metadata events @​copyberry
  • #38252 Collect metrics from plugin shell commands @​copyberry
  • #38253 Collect plugin metrics from unified exec commands @​copyberry
  • #38256 Report the latest rejection from multiple network reviews @​copyberry
  • #38257 Reconnect gRPC code-mode sessions after host restarts @​copyberry
  • #38258 Unify external authentication provider handling @​copyberry
  • #38261 Resolve skill package aliases in skills.read @​copyberry
  • #38265 Use bounded fallback ports for Windows managed proxies @​copyberry
  • #38268 Expose executor skill roots from skills.read @​copyberry
  • #38270 Add per-thread usage queries to the backend client @​copyberry
  • #38272 Stamp conversation history items with creation times @​copyberry
  • #38274 Represent persisted world state as JSON objects @​copyberry
  • #38275 Unify turn input submission and routing @​copyberry
  • #38276 Track plugin metrics for background unified exec commands @​copyberry
  • #38278 Add app-server coverage for plugin measurement analytics @​copyberry
  • #38280 Use protobuf's built-in Bazel proto rule @​copyberry
  • #38281 Show estimated thread usage in /status @​copyberry
  • #38282 Add thread usage to TUI status surfaces @​copyberry
  • #38283 Collect plugin metrics from remote executors @​copyberry
  • #38285 Move codex-execpolicy to protocol dev dependencies @​copyberry
  • #38288 Support gRPC code-mode hosts in app server @​copyberry
  • #38291 Remove unused apply_patch prompt fallback @​copyberry
  • #38292 Add durable reverts for paginated threads @​copyberry
  • #38299 Route network access through the shared approval pipeline @​copyberry
  • #38303 Add interrupted turn recovery @​copyberry
  • #38306 Protect inline visualization viewers from sandbox writes @​copyberry
  • #38321 Make gRPC code-mode yield tests deterministic @​copyberry
  • #38336 Add Guardian V2 extension scaffold @​copyberry
  • #38356 Support sandboxed file streaming in exec-server @​copyberry
  • #38358 Optimize orphan output normalization @​copyberry
  • #38361 Test hook rejection for explicitly started queue items @​copyberry
  • #38362 Stabilize exec-server byte-budget tests @​copyberry
  • #38363 Persist security risk scores in rollout history @​copyberry
  • #38368 Add the Guardian V2 Luna sampler @​copyberry
  • #38377 Constrain Guardian reviews to parent filesystem permissions @​copyberry
  • #38380 Preserve user message styling when wrapping long URLs @​copyberry
  • #38381 Prevent unread events from blocking in-process requests @​copyberry
  • #38383 Return Luna samples when streamed JSON completes @​copyberry
  • #38384 Refine skill creation guidance and validation @​copyberry
  • #38390 Use effective permissions when trusting app-server projects @​copyberry
  • #38394 Reject sessions with unloadable required managed hooks @​copyberry
  • #38396 Reap orphaned processes in Linux sandboxes @​copyberry
  • #38397 Include Node REPL results in Guardian reviews @​copyberry
  • #38399 Preserve floating-point values when decoding rollout lines @​copyberry
  • #38400 Refresh tracing interest in the token estimate test @​copyberry
  • #38403 Expose conversation history to tool lifecycle extensions @​copyberry
  • #38406 Pool Guardian sampling WebSocket connections @​copyberry
  • #38409 Classify tool calls in the Guardian V2 extension @​copyberry
  • #38413 Allow metadata updates without materializing threads @​copyberry
  • #38414 Add bounded transcript rendering for Guardian v2 @​copyberry
  • #38415 Recognize PowerShell Get-Content file reads @​copyberry
  • #38416 Honor filesystem permissions for app file uploads @​copyberry
  • #38418 Clarify MCP OAuth reauthentication errors @​copyberry
  • #38419 Apply Codex attribution to app-created commits @​copyberry
  • #38420 Recover capability discovery after executor disconnects @​copyberry
  • #38423 Centralize thread environment selection state @​copyberry
  • #38424 Fail closed when workload identity initialization fails @​copyberry
  • #38426 Protect workload identity auth in app-server account RPCs @​copyberry
  • #38427 Add Guardian guidance for Node REPL tool calls @​copyberry
  • #38429 Route curated plugin catalogs by authentication mode @​copyberry
  • #38432 Gate Node REPL Guardian guidance on model metadata @​copyberry
  • #38436 Add rustls fallback for local MCP HTTP requests @​copyberry
  • #38439 Preserve approval policies for auto-reviewed models @​copyberry
  • #38440 Add app-server support for reverting paginated threads @​copyberry
  • #38441 Give Guardian V2 full tool action context @​copyberry
  • #38443 Tag current time reminders in model context @​copyberry
  • #38445 Retain client developer messages across context compaction @​copyberry
  • #38446 Refresh current-time reminders for full-history subagents @​copyberry
  • #38447 Add running-task exit choices to local daemon sessions @​copyberry
  • #38448 Support per-server MCP OAuth callback ports @​copyberry
  • #38449 Expose model upgrade retirement times @​copyberry
  • #38450 Embed the Windows sandbox setup manifest in Bazel builds @​copyberry
  • #38452 Add structured telemetry for response retries @​copyberry
  • #38454 Include node_repl images in Guardian review evidence @​copyberry
  • #38456 Add experimental thread queue APIs to app server @​copyberry
  • #38460 Add an AbsolutePathBuf conversion for FileSystemPath @​copyberry
  • #38461 Centralize turn environment selection state @​copyberry
  • #38463 Preserve thread subscriptions across revert reloads @​copyberry
  • #38467 Parse model annotations from skill frontmatter @​copyberry
  • #38470 Add an Amazon Bedrock Runtime provider @​copyberry
  • #38473 Stop generating accepted-line fingerprints @​copyberry
  • #38475 Add bounded skill model delegation instructions @​copyberry
  • #38483 Include agent names in turn metadata @​copyberry
  • #38484 Search selected plugin apps before falling back @​copyberry
  • #38492 Enforce strict auto-review for MCP tool calls @​copyberry
  • #38493 Reuse pending MCP startups during reconciliation @​copyberry
  • #38494 Verify bundled bwrap in Bazel builds @​copyberry
  • #38499 Enable parallel tool calls for all model prompts @​copyberry
  • #38521 Carry environment config in turn selections @​copyberry
  • #38527 Configure Guardian sampling for responses lite @​copyberry
  • #38540 Record Guardian V2 risk scores on threads @​copyberry
  • #38553 Initialize Guardian V2 samplers per thread @​copyberry
  • #38555 Preserve Guardian transcript boundaries in sampling input @​copyberry
  • #38558 Improve Guardian transcript context selection @​copyberry
  • #38561 Restrict filesystem helper sandbox access @​copyberry
  • #38564 Reuse compatible parent compactions in Guardian V2 @​copyberry
  • #38567 Store security risk scores as a snapshot @​copyberry
  • #38568 Run tool start callbacks after pre-tool hooks @​copyberry
  • #38569 Require automatic review for high-risk Guardian v2 actions @​copyberry
  • #38579 Report thread storage changes after rollout migration @​copyberry
  • #38580 Keep the latest Guardian risk score during concurrent sampling @​copyberry
  • #38581 Honor cloud-managed requirements in feature listings @​copyberry
  • #38586 Bound Guardian V2 tool actions before risk classification @​copyberry
  • #38592 Let extensions resolve approval reviews before Guardian @​copyberry
  • #38596 Prioritize new Guardian classifications under load @​copyberry
  • #38597 Install Guardian V2 in the app server @​copyberry
  • #38601 Make unbounded connection retries configurable @​copyberry
  • #38602 Isolate Guardian reviewer sessions from parent extensions @​copyberry
  • #38604 Avoid paginated resume requests for verified legacy rollouts @​copyberry
  • #38605 Fix resume transcript preview line selection @​copyberry
  • #38606 Allow larger gRPC code mode tool descriptions @​copyberry
  • #38608 Fix the missing resume picker history mode import @​copyberry
  • #38610 Support workload identity in remote exec-server auth @​copyberry
  • #38612 Skip stale Guardian risk score persistence @​copyberry
  • #38615 Remove the gRPC code-mode enabled tool limit @​copyberry
  • #38616 Route escalated approval retries through Guardian @​copyberry
  • #38617 Prioritize global models in the Bedrock Runtime catalog @​copyberry
  • #38618 Apply Guardian policies to v2 risk classification @​copyberry
  • #38619 Source multi-agent instructions from the model catalog @​copyberry
  • #38621 Preserve large gRPC code-mode tool errors @​copyberry
  • #38623 Preserve MCP namespace descriptions in the tool catalog cache @​copyberry
  • #38624 Open notes when accepting the request input Other option @​copyberry
  • #38625 Enable unified exec by default on Windows @​copyberry
  • #38628 Make Guardian v2 risk classification configurable @​copyberry
  • #38630 Remove the gRPC code-mode open session limit @​copyberry
  • #38634 Add MCP protocol discovery metrics @​copyberry
  • #38635 Remove repository-local Codex skills @​copyberry
  • #38639 Render the initial TUI session header before input @​copyberry
  • #38641 Harden TUI startup input handling @​copyberry
  • #38642 Keep the composer editable during TUI startup @​copyberry
  • #38643 Delay the startup composer until first-login onboarding @​copyberry
  • #38644 Show onboarding when Codex home lacks authentication state @​copyberry
  • #38645 Deliver gRPC code-mode notifications without truncation @​copyberry
  • #38646 Read Apple notarization issuer ID from Key Vault @​copyberry
  • #38647 Add an override to skip project configuration @​copyberry
  • #38649 Reuse the TUI startup account response during bootstrap @​copyberry
  • #38650 Canonicalize default namespaces in gRPC subscription filters @​copyberry
  • #38651 Move permission profile snapshots into the protocol @​copyberry
  • #38657 Skip terminal hyperlink layout when no links are present @​copyberry
  • #38660 Enforce managed deny-read rules in the Windows sandbox @​copyberry
  • #38662 Delete Thai combining marks one at a time in the composer @​copyberry
  • #38664 Resolve local JSON Schema refs in Code Mode types @​copyberry
  • #38670 Forward executor network policy decisions for auditing @​copyberry
  • #38673 Honor per-environment permission profiles @​copyberry
  • #38675 Exclude shortcut-modified input from TUI paste bursts @​copyberry
  • #38678 Preserve environment configuration ownership @​copyberry
  • #38681 Preserve HTTP fallback for delegated sessions @​copyberry
  • #38682 Surface misalignment policy violations as typed errors @​copyberry
  • #38684 Support pending environment attachment configuration @​copyberry
  • #38690 Propagate request trace context through exec-server relays @​copyberry
  • #38701 Route permission requests through shared Guardian approvals @​copyberry
  • #38703 Refresh hook runtimes after plugin changes @​copyberry
  • #38704 Normalize CRLF line endings in pasted text @​copyberry
  • #38705 Add MCP tool handler support to the hooks engine @​copyberry
  • #38743 Scope TUI app directory state to the active context @​copyberry
  • #38746 Remove the TUI test dependency on codex-cli @​copyberry
  • #38767 Forward workload identity context during token exchange @​copyberry
  • #38774 Use paginated history for persistent exec threads @​copyberry
  • #38785 Keep active-turn model settings stable across updates @​copyberry
  • #38788 Show resume and fork status during TUI startup @​copyberry
  • #38795 Add storage diagnostics to codex doctor @​copyberry
  • #38800 Route executor policy audits through log-only telemetry @​copyberry
  • #38806 Add a health endpoint to the code-mode gRPC listener @​copyberry
siderolabs/talos (aqua:siderolabs/talos)

v1.13.9: v1.13.9

Compare Source

Talos 1.13.9 (2026-08-19)

Welcome to the v1.13.9 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.44
containerd: 2.2.7
Kubernetes: 1.36.3

Talos is built with Go 1.26.6.

Contributors

  • Andrey Smirnov
  • Noel Georgi

Changes

7 commits

  • siderolabs/talos@​3ebd10a7c release(v1.13.9): prepare release
  • siderolabs/talos@​9ade215ce feat: update Kubernetes to 1.36.3
  • siderolabs/talos@​14343cd29 test: save the provision test logs
  • siderolabs/talos@​b33e5fce2 fix: support try mode apply without prior config
  • siderolabs/talos@​6a8f29591 fix: share IPC namespace with the host for extension services
  • siderolabs/talos@​b525b8290 fix: size the receive/send buffers for nftables netlink
  • siderolabs/talos@​7ac52642c feat: update Go to 1.26.6

Changes from siderolabs/pkgs

5 commits

  • siderolabs/pkgs@​f541ca4 feat: bump kernel to 6.18.44
  • siderolabs/pkgs@​a4f2c26 feat: bump kernel to 6.18.43
  • siderolabs/pkgs@​79a7531 feat: update Linux firmware to 20260810
  • siderolabs/pkgs@​89d76bf feat: update backportable dependencies
  • siderolabs/pkgs@​af6c08a feat: update Go to 1.26.6

Changes from siderolabs/tools

1 commit

  • siderolabs/tools@​a201d19 feat: update Go to 1.26.6

Dependency Changes

  • github.com/siderolabs/pkgs v1.13.0-55-gf677246 -> v1.13.0-60-gf541ca4
  • github.com/siderolabs/talos/pkg/machinery v1.13.8 -> v1.13.9
  • github.com/siderolabs/tools v1.13.0-8-gc2844e6 -> v1.13.0-9-ga201d19
  • golang.org/x/net v0.57.0 -> v0.58.0
  • golang.org/x/text v0.40.0 -> v0.41.0
  • k8s.io/api v0.36.2 -> v0.36.3
  • k8s.io/apiextensions-apiserver v0.36.2 -> v0.36.3
  • k8s.io/apimachinery v0.36.2 -> v0.36.3
  • k8s.io/apiserver v0.36.2 -> v0.36.3
  • k8s.io/client-go v0.36.2 -> v0.36.3
  • k8s.io/component-base v0.36.2 -> v0.36.3
  • k8s.io/cri-api v0.36.2 -> v0.36.3
  • k8s.io/kube-scheduler v0.36.2 -> v0.36.3
  • k8s.io/kubectl v0.36.2 -> v0.36.3
  • k8s.io/kubelet v0.36.2 -> v0.36.3
  • k8s.io/pod-security-admission v0.36.2 -> v0.36.3

Previous release can be found at v1.13.8

Images

ghcr.io/siderolabs/flannel:0.28.8
registry.k8s.io/coredns/coredns:v1.14.6
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.3
registry.k8s.io/kube-controller-manager:v1.36.3
registry.k8s.io/kube-scheduler:v1.36.3
registry.k8s.io/kube-proxy:v1.36.3
ghcr.io/siderolabs/kubelet:v1.36.3
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.9
ghcr.io/siderolabs/installer-base:v1.13.9
ghcr.io/siderolabs/imager:v1.13.9
ghcr.io/siderolabs/talos:v1.13.9
ghcr.io/siderolabs/talosctl-all:v1.13.9
ghcr.io/siderolabs/overlays:v1.13.9
ghcr.io/siderolabs/extensions:v1.13.9
agavra/tuicr (github:agavra/tuicr)

v0.23.0: v0.23.0

Compare Source

What's Changed

New Contributors

Full Changelog: agavra/tuicr@v0.22.0...v0.23.0

anthropics/claude-code (github:anthropics/claude-code)

v2.1.235: v2.1.235

Compare Source

What's changed

  • Added an optional spellcheck setting that underlines misspelled words in the prompt input as you type, using your installed aspell, hunspell, or ispell
  • Fixed whole-prompt-cache invalidation when a language server disconnected or reconnected mid-session
  • Fixed nested markdown list items misaligning at depth 3+ and added a hanging indent to wrapped list items in the terminal UI
  • Fixed prompt input highlights (slash commands, keywords, mentions) appearing shifted by one or more characters in some multi-line prompts
  • Fixed Shift+Tab inside the permission prompt's comment field approving the edit and granting session-wide edit permission instead of closing the field
  • Fixed the Agent tool advertising a general-purpose default in sessions where that agent is unavailable: an omitted subagent_type there now gets a clear error listing the available agents
  • Fixed notebook cell delete/replace approval dialogs silently omitting the existing cell content when the notebook or cell could not be read; the dialog now says why
  • Fixed slash commands run while Claude is responding showing HTML entities instead of the actual characters
  • Fixed the prompt footer not showing the "Update installed" restart notice after a background auto-update
  • Fixed the expanded task list (ctrl+t) always starting collapsed when resuming or relaunching into a session that still has open tasks
  • Improved memory and CPU usage while cloud sessions such as /ultrareview or /autofix-pr run in the background — their event streams are no longer re-scanned and re-rendered on every update
  • Improved permission dialogs: display text and "don't ask again" options now always match what a grant would cover, and "don't ask again" is withheld when contents cannot be fully displayed
  • Improved the embedded grep in native macOS/Linux builds: pathological patterns now fail fast instead of exhausting memory, and -m N with -A/-C prints correct context
  • Improved the context-limit error to say when auto-compact is off and point to /config to re-enable it
  • Vim mode: NORMAL mode and cursor position are now preserved when toggling the detailed transcript (ctrl+o) or closing a panel
  • Dialogs: arrow keys and Enter pressed in quick succession now select the option you navigated to instead of the previously highlighted one
  • SendMessage now refuses messages too large for cross-session delivery up front instead of silently dropping them
  • Remote Control: claude rc now applies the same enterprise-gateway availability check as interactive startup
  • [VSCode] Fixed focus jumping between open Claude tabs on its own when a window with several Claude panels is restored or reloaded
janosmiko/lfk (github:janosmiko/lfk)

v0.17.4: v0.17.4

Compare Source

0.17.4 (2026-08-18)

Bug Fixes

  • sort the Changed and Uptime columns by their real timestamps (#641) (54b38b3)

@renovate
renovate Bot merged commit c8fe436 into main Aug 23, 2026
6 checks passed
@renovate
renovate Bot deleted the renovate/mise-packages branch August 23, 2026 10:19
@scottames-github-bot scottames-github-bot Bot mentioned this pull request Aug 22, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@renovate-approve renovate-approve[bot] renovate-approve[bot] approved these changes
@scottames scottames Awaiting requested review from scottames scottames is a code owner

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants