chore(master): release 0.48.0

[rtk-release-bot]

🤖 I have created a release beep boop

0.48.0 (2026-09-04)

Features

• add Bun and Deno runtime support (856c345)
• bun,deno: add Bun and Deno runtime support (36788f6)
• bun: route bun x to bunx tool filters (a9ef10f)
• runner: bun and deno test summaries (f4ac0cc)

Bug Fixes

• benchmark: skip find's disclosure note and tee pointer when counting names (c7fc40a)
• benchmark: skip find's disclosure note and tee pointer when counting names (d952a6b)
• bun,deno: address review feedback (55d2390)
• bun,deno: fix routing bugs, align with project conventions (2c52649)
• bun,deno: run via arg vectors, not shell (2416b8c)
• bun: add tee recovery to run_pkg/run_pm_ls (3b6d1e4)
• bun: filter combined stdout and stderr (b850696)
• bun: parse real pm ls tree output (4fb2c3a)
• bun: route pkg and pm ls through the core runner (0a7e992)
• bun: stop rejecting valid package specs (8f056b2)
• deno: route lint/check through core runner (d23e158)
• diff: don't report byte-different files as identical (4f3c9fe)
• discover: derive savings from passthrough status (e78427b)
• discover: log real hook decisions instead of guessing coverage retroactively (f57af35)
• discover: stop crediting passthrough subcommands (a3cca44)
• filters: reject unanchored TOML match_command at load (3522477)
• find: bound disclosure bookkeeping, disclose through a symlinked root, align the note with ls (68dc719)
• find: report a missing path like find does, and disclose hidden/gitignored matches (9cf048a)
• find: report a missing path like find does, and disclose hidden/gitignored matches (765b270), closes #3851
• js: correct bun and deno filtering, routing, and accounting (9bee7a0)
• js: correct bun and deno runtime behavior (1173de0)
• js: keep each caller's behavior for a missing tool (6ff2571)
• js: run tools through the runner the user named (c7c1d96)
• rebase: clean up flat-layout stale files and fix i32 return types (afcad86)
• runner: anchor bun test summary extraction (9e2e4b6)
• runner: keep real diagnostics, drop test stdout (50bee30)
• runner: parse current deno test output format (65cd2f7)
• telemetry: distinguish "consent not given" from missing salt in status (#1656) (5189bde)
• telemetry: distinguish "consent not given" from missing salt in status (#1656) (ef363a4)
• telemetry: label the missing salt by the gate that actually fired (3a0ed92)
• telemetry: treat an empty RTK_TELEMETRY_URL as no endpoint (bb85017)

---

This PR was generated with Release Please. See documentation.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[rtk-release-bot]

Automatic message from CI checks : It seems like this branch is targeting the wrong branch, any contribution should target develop branch.

See CONTRIBUTING.md for details.

[rtk-release-bot]

🤖 Created releases:

• v0.48.0

🌻