Bump the nuget group with 1 update

[dependabot]

Updated vpk from 1.2.0 to 1.2.158.

Release notes

Sourced from vpk's releases.

1.2.158

What's Changed

• Fix NodeJSElectron sample for TypeScript 6.0 compatibility by @​caesay in Fix NodeJSElectron sample for TypeScript 6.0 compatibility velopack/velopack#931
• Localize setup disk-space error and use byte units by @​chinaszzt-erio in Localize setup disk-space error and use byte units velopack/velopack#932
• Ignore pyo3 RUSTSEC-2026-0176/0177 advisories in cargo deny by @​caesay in Ignore pyo3 RUSTSEC-2026-0176/0177 advisories in cargo deny velopack/velopack#942
• Move argument validation to command layer, add JSON support, refactor deployment commands by @​caesay in Move argument validation to command layer, add JSON support, refactor deployment commands velopack/velopack#934
• Fix supply-chain CI: bump vite to 8.0.16 to resolve npm audit failure by @​caesay in Fix supply-chain CI: bump vite to 8.0.16 to resolve npm audit failure velopack/velopack#952
• Allow S3 region to be specified at the same time as endpoint by @​caesay in Allow S3 region to be specified at the same time as endpoint velopack/velopack#957
• Ship 64-bit Windows bootstrapper binaries from vpk pack by @​roysyahputra in Ship 64-bit Windows bootstrapper binaries from vpk pack velopack/velopack#944
• Renovate/dotnet packages deny cleanup by @​caesay in Renovate/dotnet packages deny cleanup velopack/velopack#968
• Add NodeJS pre-built sources & add HttpOptions class by @​caesay in Add NodeJS pre-built sources & add HttpOptions class velopack/velopack#969
• Fix MSI quiet-install default location and bracket escaping in packTitle by @​caesay in Fix MSI quiet-install default location and bracket escaping in packTitle velopack/velopack#970
• Use atomic rename on macos by @​caesay in Use atomic rename on macos velopack/velopack#972
• Add timing logs to diagnose slow update apply on EDR machines (#​947) by @​caesay in Add timing logs to diagnose slow update apply on EDR machines (#947) velopack/velopack#974
• Fix supply-chain CI: address new RUSTSEC advisories by @​caesay in Fix supply-chain CI: address new RUSTSEC advisories velopack/velopack#984
• Add new deployment and sources tests by @​caesay in Add new deployment and sources tests velopack/velopack#973
• Fix portable/MSI launcher renamed after update (packTitle vs mainExe) by @​caesay in Fix portable/MSI launcher renamed after update (packTitle vs mainExe) velopack/velopack#985
• Windows installer channel-override tag readers (Setup.exe + MSI) by @​caesay in Windows installer channel-override tag readers (Setup.exe + MSI) velopack/velopack#987
• Make Velopack Flow a first-class update source across all client libraries by @​caesay in Make Velopack Flow a first-class update source across all client libraries velopack/velopack#999
• Fix swapped MSI banner/dialog images, rename to --msiTopBanner and --msiDialogBackground by @​caesay in Fix swapped MSI banner/dialog images, rename to --msiTopBanner and --msiDialogBackground velopack/velopack#1009
• Remove bsdiff fallback; zstd is the only delta patch format by @​caesay in Remove bsdiff fallback; zstd is the only delta patch format velopack/velopack#1010
• Show progress dialog during Windows uninstall by @​caesay in Show progress dialog during Windows uninstall velopack/velopack#1011
• Windows signing: pass /d (content description) for Azure Trusted Signing by @​SamHartleyFixes in Windows signing: pass /d (content description) for Azure Trusted Signing velopack/velopack#1047
• Write EstimatedSize as a REG_DWORD so Windows shows the app size by @​timkonieczny in Write EstimatedSize as a REG_DWORD so Windows shows the app size velopack/velopack#1051
• fix(vpk): safely handle non-JSON error responses in FlowApiExtensions by @​Keboo in fix(vpk): safely handle non-JSON error responses in FlowApiExtensions velopack/velopack#1055
• Lock file maintenance by @​caesay in Lock file maintenance velopack/velopack#1063
• Update all dependencies to latest by @​caesay in Update all dependencies to latest velopack/velopack#1064

New Contributors

• @​chinaszzt-erio made their first contribution in Localize setup disk-space error and use byte units velopack/velopack#932
• @​roysyahputra made their first contribution in Ship 64-bit Windows bootstrapper binaries from vpk pack velopack/velopack#944
• @​SamHartleyFixes made their first contribution in Windows signing: pass /d (content description) for Azure Trusted Signing velopack/velopack#1047
• @​timkonieczny made their first contribution in Write EstimatedSize as a REG_DWORD so Windows shows the app size velopack/velopack#1051

Dependency Updates

Expand to see all changed dependencies

• Pin dependencies by @​renovate[bot] in Pin dependencies velopack/velopack#925
• Pin dependencies by @​renovate[bot] in Pin dependencies velopack/velopack#926
• Lock file maintenance by @​renovate[bot] in Lock file maintenance velopack/velopack#930
• Update npm packages by @​renovate[bot] in Update npm packages velopack/velopack#927
• Update sample dotnet packages by @​renovate[bot] in Update sample dotnet packages velopack/velopack#940
• Update npm packages by @​renovate[bot] in Update npm packages velopack/velopack#937
• Update sample js packages by @​renovate[bot] in Update sample js packages velopack/velopack#951
• Update dotnet test packages to 18.6.0 by @​renovate[bot] in Update dotnet test packages to 18.6.0 velopack/velopack#938
• Update dotnet packages by @​renovate[bot] in Update dotnet packages velopack/velopack#949
• Update sample dotnet packages to 1.2.0 by @​renovate[bot] in Update sample dotnet packages to 1.2.0 velopack/velopack#950
• Lock file maintenance by @​renovate[bot] in Lock file maintenance velopack/velopack#943
• Update dependency WixToolset.Dtf.WindowsInstaller to v7 by @​renovate[bot] in Update dependency WixToolset.Dtf.WindowsInstaller to v7 velopack/velopack#939
  ... (truncated)

1.2.110-ge826545

What's Changed

• Fix NodeJSElectron sample for TypeScript 6.0 compatibility by @​caesay in Fix NodeJSElectron sample for TypeScript 6.0 compatibility velopack/velopack#931
• Localize setup disk-space error and use byte units by @​chinaszzt-erio in Localize setup disk-space error and use byte units velopack/velopack#932
• Ignore pyo3 RUSTSEC-2026-0176/0177 advisories in cargo deny by @​caesay in Ignore pyo3 RUSTSEC-2026-0176/0177 advisories in cargo deny velopack/velopack#942
• Move argument validation to command layer, add JSON support, refactor deployment commands by @​caesay in Move argument validation to command layer, add JSON support, refactor deployment commands velopack/velopack#934
• Fix supply-chain CI: bump vite to 8.0.16 to resolve npm audit failure by @​caesay in Fix supply-chain CI: bump vite to 8.0.16 to resolve npm audit failure velopack/velopack#952
• Allow S3 region to be specified at the same time as endpoint by @​caesay in Allow S3 region to be specified at the same time as endpoint velopack/velopack#957
• Ship 64-bit Windows bootstrapper binaries from vpk pack by @​roysyahputra in Ship 64-bit Windows bootstrapper binaries from vpk pack velopack/velopack#944
• Renovate/dotnet packages deny cleanup by @​caesay in Renovate/dotnet packages deny cleanup velopack/velopack#968
• Add NodeJS pre-built sources & add HttpOptions class by @​caesay in Add NodeJS pre-built sources & add HttpOptions class velopack/velopack#969
• Fix MSI quiet-install default location and bracket escaping in packTitle by @​caesay in Fix MSI quiet-install default location and bracket escaping in packTitle velopack/velopack#970
• Use atomic rename on macos by @​caesay in Use atomic rename on macos velopack/velopack#972
• Add timing logs to diagnose slow update apply on EDR machines (#​947) by @​caesay in Add timing logs to diagnose slow update apply on EDR machines (#947) velopack/velopack#974
• Fix supply-chain CI: address new RUSTSEC advisories by @​caesay in Fix supply-chain CI: address new RUSTSEC advisories velopack/velopack#984
• Add new deployment and sources tests by @​caesay in Add new deployment and sources tests velopack/velopack#973
• Fix portable/MSI launcher renamed after update (packTitle vs mainExe) by @​caesay in Fix portable/MSI launcher renamed after update (packTitle vs mainExe) velopack/velopack#985
• Windows installer channel-override tag readers (Setup.exe + MSI) by @​caesay in Windows installer channel-override tag readers (Setup.exe + MSI) velopack/velopack#987
• Make Velopack Flow a first-class update source across all client libraries by @​caesay in Make Velopack Flow a first-class update source across all client libraries velopack/velopack#999

New Contributors

• @​chinaszzt-erio made their first contribution in Localize setup disk-space error and use byte units velopack/velopack#932
• @​roysyahputra made their first contribution in Ship 64-bit Windows bootstrapper binaries from vpk pack velopack/velopack#944

Dependency Updates

Expand to see all changed dependencies

• Pin dependencies by @​renovate[bot] in Pin dependencies velopack/velopack#925
• Pin dependencies by @​renovate[bot] in Pin dependencies velopack/velopack#926
• Lock file maintenance by @​renovate[bot] in Lock file maintenance velopack/velopack#930
• Update npm packages by @​renovate[bot] in Update npm packages velopack/velopack#927
• Update sample dotnet packages by @​renovate[bot] in Update sample dotnet packages velopack/velopack#940
• Update npm packages by @​renovate[bot] in Update npm packages velopack/velopack#937
• Update sample js packages by @​renovate[bot] in Update sample js packages velopack/velopack#951
• Update dotnet test packages to 18.6.0 by @​renovate[bot] in Update dotnet test packages to 18.6.0 velopack/velopack#938
• Update dotnet packages by @​renovate[bot] in Update dotnet packages velopack/velopack#949
• Update sample dotnet packages to 1.2.0 by @​renovate[bot] in Update sample dotnet packages to 1.2.0 velopack/velopack#950
• Lock file maintenance by @​renovate[bot] in Lock file maintenance velopack/velopack#943
• Update dependency WixToolset.Dtf.WindowsInstaller to v7 by @​renovate[bot] in Update dependency WixToolset.Dtf.WindowsInstaller to v7 velopack/velopack#939
• Update sample js packages by @​renovate[bot] in Update sample js packages velopack/velopack#961
• Update dependency System.IO.Packaging to 10.0.9 by @​renovate[bot] in Update dependency System.IO.Packaging to 10.0.9 velopack/velopack#959
• Update dependency @​types/node to v25.9.4 - autoclosed by @​renovate[bot] in Update dependency @types/node to v25.9.4 - autoclosed velopack/velopack#958
• Update codecov/codecov-action action to v7 by @​renovate[bot] in Update codecov/codecov-action action to v7 velopack/velopack#963
• Lock file maintenance by @​renovate[bot] in Lock file maintenance velopack/velopack#965
• Update rust crates to 0.29 by @​renovate[bot] in Update rust crates to 0.29 velopack/velopack#962
• Update dotnet packages by @​renovate[bot] in Update dotnet packages velopack/velopack#960
• Update actions/checkout action to v7 by @​renovate[bot] in Update actions/checkout action to v7 velopack/velopack#980
• Update dotnet packages by @​renovate[bot] in Update dotnet packages velopack/velopack#976
• Update dependency electron to v43 by @​renovate[bot] in Update dependency electron to v43 velopack/velopack#977
  ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions