chore(deps): update ⬆️ mise-packages

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change	Pending	Age	Adoption	Passing	Confidence
aqua:anthropics/claude-code	patch	2.1.150 → 2.1.158	2.1.162 (+3)
aqua:astral-sh/ruff	patch	0.15.14 → 0.15.15
aqua:astral-sh/uv	patch	0.11.16 → 0.11.17	0.11.19 (+1)
aqua:cli/cli	minor	2.92.0 → 2.93.0
aqua:crate-ci/typos	minor	1.46.3 → 1.47.0	1.47.2 (+1)
aqua:dagger/dagger	patch	0.21.0 → 0.21.3	0.21.4
aqua:jesseduffield/lazygit	minor	0.61.1 → 0.62.1	0.62.2
aqua:nushell/nushell	patch	0.113.0 → 0.113.1
aqua:sst/opencode	patch	1.15.10 → 1.15.13
aqua:walles/moor	patch	2.13.2 → 2.13.3	2.13.4
github:always-further/nono	minor	v0.58.0 → v0.59.0	v0.61.1 (+2)
github:aquaproj/aqua	patch	2.59.0 → v2.59.1
github:janosmiko/lfk	minor	v0.12.6 → v0.13.1	v0.13.5 (+3)
github:max-sixty/worktrunk	minor	v0.53.0 → v0.55.0	v0.56.0
github:tassiovirginio/try-rs	patch	v1.7.9 → v1.7.10
npm:@commitlint/cli (source)	patch	21.0.1 → 21.0.2
npm:@fsouza/prettierd	minor	0.27.0 → 0.28.0
npm:cspell (source)	patch	10.0.0 → 10.0.1
npm:socket	patch	1.1.105 → 1.1.112	1.1.113
pipx:semgrep (changelog)	minor	1.163.0 → 1.164.0	1.165.0
rust	minor	1.95.0 → 1.96.0

---

Release Notes

anthropics/claude-code (aqua:anthropics/claude-code)

v2.1.158

Compare Source

• Auto mode is now available on Bedrock, Vertex, and Foundry for Opus 4.7 and Opus 4.8. Opt in by setting CLAUDE_CODE_ENABLE_AUTO_MODE=1

v2.1.157

Compare Source

• Plugins in .claude/skills directories are now automatically loaded, no marketplace required
• Added claude plugin init <name> to scaffold a new plugin in .claude/skills
• Added autocomplete for /plugin arguments: subcommands, installed plugin names, and plugins from known marketplaces
• claude agents: the agent field in settings.json is now honored for dispatched sessions, with --agent <name> to override it
• EnterWorktree can now switch between Claude-managed worktrees mid-session
• tool_decision telemetry events now include tool_parameters (bash commands, MCP/skill names) when OTEL_LOG_TOOL_DETAILS=1
• Worktrees managed by Claude are now left unlocked when the agent finishes, so git worktree remove/prune can clean them up
• Fixed unprocessable images (zero-byte, corrupt) attached via paste, MCP, or dialog crashing the request instead of becoming a text placeholder
• Fixed sandbox network permission prompts appearing in auto and bypass-permissions mode when using the desktop app, IDE extensions, or SDK
• Fixed claude agents completed sessions not retiring when an idle subagent was still parked or had leaked a backgrounded shell
• Fixed claude agents pressing Esc not cancelling a slow "opening…", leaving the list unresponsive
• Fixed background agent worktrees under .claude/worktrees/ being orphaned after the 30-day job retention sweep
• Fixed background sessions re-attached after a sleep/wake not telling the model the correct date
• Fixed copy-on-select in claude agents not reaching the system clipboard inside tmux with set-clipboard on (regression in 2.1.153)
• Fixed --resume not reporting background subagents that were running when the previous Claude Code process exited
• Fixed the --resume session picker leaving its contents on the terminal after exiting in fullscreen mode
• Fixed --worktree and --worktree --tmux returning to the canonical repo root instead of the current linked worktree
• Fixed the /model picker showing an incorrect "Newer version available" hint when the selected model is already the newest in its family; the pinned-model row now shows the model's description instead of its raw ID
• Fixed literal markdown markers (backticks, asterisks) appearing in the in-progress message text in fullscreen mode
• Fixed the terminal freezing after approving the managed-settings security dialog at startup
• Fixed a rare duplicate line appearing in scrollback after the terminal UI redraws
• Fixed right-click paste duplicating the clipboard in the VS Code, Cursor, and Windsurf integrated terminals
• WSL: fixed image paste (alt+v keybinding), screenshot paste on Windows 11, and added support for dragging images from Windows Explorer
• Improved performance of long and resumed conversations by eliminating redundant message-rendering recomputations
• /terminal-setup now disables GPU acceleration in VS Code/Cursor/Windsurf integrated terminals to prevent garbled-text rendering
• The Feature of the Week credit-claim status now appears as a notification in the status area instead of a line above the prompt
• claude agents: slash-command autocomplete in the dispatch input now matches substrings
• Removed the "bash commands will be sandboxed" startup banner — sandbox status still shows in /status and when a command is blocked
• Removed the "/ide for …" startup hint toast
• [IDE] Fixed clicking Stop while a background subagent is running not actually stopping it
• [VSCode] Fixed the fast mode indicator not appearing on Opus 4.8
• Pressing backspace right after a workflow trigger keyword now dismisses the workflow request (same as alt+w) instead of deleting a character
• Added a "Workflow keyword trigger" setting in /config to stop the word "workflow" in a prompt from triggering a dynamic workflow

v2.1.156

Compare Source

• Fixed an issue when using Opus 4.8 where thinking blocks were modified, leading to API errors.

v2.1.154

Compare Source

• Opus 4.8 is here! Now defaults to high effort · /effort xhigh for your hardest tasks
• Introducing dynamic workflows: ask Claude to create a workflow and it orchestrates work across tens to hundreds of agents in the background, so you can take on larger, more complex tasks. Run /workflows to view your runs
• Fast mode on Opus 4.8 is now available at a fraction of its previous cost: 2x the standard rate for 2.5x the speed
• The lean system prompt is now the default for all models except Haiku, Sonnet, and Opus 4.7 and earlier
• Claude now reserves the multiple-choice question prompt for decisions it genuinely cannot make itself, instead of asking when it already has enough context to proceed
• /simplify now runs a cleanup-only review (reuse, simplification, efficiency, altitude) and applies the fixes, instead of running the full /code-review --fix bug-hunting review
• Renamed the /effort slider labels from "Speed"/"Intelligence" to "Faster"/"Smarter" for clarity
• claude agents: type ! <command> to run a shell command as a background session you can attach to and detach from. Also available as claude --bg --exec '<command>'
• claude agents: /logout now signs you out instead of being sent to a background session
• ←← to open the agents view now works on Bedrock, Vertex, Foundry, and with telemetry disabled
• Claude in Chrome: pick which connected browser to use via /chrome → "Select browser…", or in-chat when a browser action runs with multiple connected
• Plugins can now declare defaultEnabled: false in plugin.json or a marketplace entry; enable them with /plugin or claude plugin enable. Dependencies of enabled plugins are still enabled automatically
• The /plugin Discover tab now pins plugins whose relevance signals match the current directory with a "suggested for this directory" annotation
• Streaming tool execution is now always enabled, including when telemetry is disabled or on Bedrock/Vertex/Foundry (previously behind a feature flag)
• Stdio MCP server subprocesses now receive CLAUDE_CODE_SESSION_ID and CLAUDECODE=1 in their environment
• claude mcp list/get now show unapproved .mcp.json servers as ⏸ Pending approval instead of auto-approving and connecting when output is piped
• /remote-control autocomplete now shows "Disconnect Remote Control" when Remote Control is already active
• Added Claude Opus 4.8 support and 4.7 → 4.8 migration guidance to the /claude-api skill
• Deprecated CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE (will be removed on 06/01). To use fast mode on Opus 4.6, switch with /model claude-opus-4-6[1m] and then /fast on
• Improved the auto-mode classifier's detection of data exfiltration, particularly bulk transfers of repository contents
• Fixed rm -rf $HOME not being blocked as a dangerous path when HOME has a trailing slash
• Fixed $TMPDIR resolving to different directories in sandboxed vs unsandboxed Bash commands within the same session
• Fixed unreadable highlighted-row text in claude agents when the Claude Code theme doesn't match the terminal background
• Fixed background-agent completion notifications triggering premature "out of context" behavior on some 1M-context models
• Fixed background-session classifier losing the user's goal when a scheduled /command fires
• Fixed pinned background sessions respawning every minute after a Claude Code update, causing repeated agent-start notifications and process churn at idle
• Fixed background sessions stuck at "blocked", "running", or "working" not retiring after the idle grace period
• Fixed subagents in background sessions bypassing the worktree-isolation guard and writing to the shared checkout
• Fixed orphaned claude --bg-pty-host processes spinning at 100% CPU after the daemon exits on macOS
• Fixed number key shortcuts not working for options shown below the divider in option dialogs
• Fixed worktree.baseRef: "head" resolving to the main checkout's HEAD instead of the current worktree's HEAD when spawning subagents or calling EnterWorktree from inside a linked worktree
• Fixed a stray leading space on wrapped lines when the previous line ended exactly at the terminal width
• Fixed intermittent terminal rendering corruption in VS Code by capping the number of distinct colors the thinking spinner produces
• Fixed plan file names including [Image #N] / [Pasted text #N] placeholders when a plan-mode prompt starts with pasted images or text
• Fixed a phantom expand/click affordance on colored tool output: short ANSI-colored lines that fit on screen no longer show a "ctrl+o to expand" hint
• Fixed a single invalid allowedMcpServers/deniedMcpServers entry in managed settings discarding all managed-settings policy; the bad entry is now dropped with a claude doctor warning
• Fixed API 400 errors on models that don't support the effort parameter when CLAUDE_CODE_ALWAYS_ENABLE_EFFORT is set
• Windows: Fixed update failures caused by claude.exe being in use showing a generic error instead of telling you to close other sessions and retry
• Removed the stale "& for background" hint from the shortcuts help panel
• [VSCode] Auto mode no longer requires the bypass-permissions setting to appear in the mode picker, and a dismissable notice on the new-session screen explains auto mode the first time it's active
• Fixed the task panel below the prompt showing a stray unselectable "main" row when only a workflow is running
• Fixed /mcp tools list and tool detail rendering when MCP servers have long or multi-line tool names or long descriptions
• Fixed the /model picker not showing fast mode pricing on the Default option for API (pay-as-you-go) users when fast mode is on
• Fixed auto mode incorrectly blocking actions with "could not evaluate this action" when the safety classifier ran out of output tokens while reasoning

v2.1.153

Compare Source

• Added skipLfs option to github/git plugin marketplace sources to skip Git LFS downloads during clone and update
• Claude Code now shows a one-time notice when your npm global install can't auto-update; /doctor lists the fixes
• Status line commands now receive COLUMNS and LINES environment variables so scripts can size output to the terminal width
• claude agents: autocomplete in the dispatch input now suggests native slash commands and bundled skills, not just project skills
• claude agents: PR column now shows PR #N for a single PR or N PRs for multiple
• claude doctor now shows the result of your last update attempt
• Combined the separate "needs authentication" startup notifications for MCP servers and connectors into a single message
• macOS: background agents now appear as "Claude Code" in Privacy & Security and keep their permission grants across upgrades
• Fixed stateful MCP servers without the optional GET SSE stream reconnect-looping on tools/list (regression in v2.1.147)
• Fixed a regression where a custom API gateway could receive the user's Anthropic OAuth credential instead of the gateway's own token
• Fixed subagent (Agent tool) frontmatter MCP servers ignoring --strict-mcp-config, --bare, remote mode, enterprise managed MCP config, and managed-settings MCP server allow/deny policies
• --strict-mcp-config no longer strips inline mcpServers from explicitly-passed agent definitions (--agents / SDK agents), and blocked subagent MCP servers now surface a visible warning
• Fixed the Windows PowerShell installer reporting "Installation complete!" when installation actually failed
• Fixed claude update installing the latest version instead of the configured release channel's version for npm installations
• Fixed excessive memory usage (multiple GB) when resuming a session by transcript file path on machines with many stored sessions
• Fixed claude agents and claude --bg running on a stale daemon started before binary-takeover support, even after upgrading
• Fixed a hang where the CLI could fail to exit when stdin was closed without EOF in stream-json mode, leaving a stale session marker behind
• Fixed malformed file:// links in Claude's responses not being clickable in the terminal
• Fixed claude --help rendering unwrapped output on terminals narrower than 92 columns
• Fixed MCP tool progress notifications not rendering in the collapsed tool view
• Fixed Agent tool with subagent_type: 'claude' running in an undocumented temporary worktree, which could silently discard outputs written to gitignored paths
• /bg while Claude is responding now continues the response in the background session instead of dropping it
• Fixed /btw keyboard shortcuts becoming unresponsive in background sessions while a task is running
• Fixed background sessions writing temp files to $CLAUDE_JOB_DIR triggering a "sensitive file" permission prompt
• Fixed recovering a background agent whose working directory was deleted showing a truncated stack trace instead of a clear error message
• Fixed EnterWorktree not being available immediately in background sessions (previously required ToolSearch first)
• Fixed cmd+k in iTerm2/Terminal.app not repainting attached background sessions
• Fixed the IME candidate window appearing at the bottom of the screen instead of next to the input caret in attached background sessions on Windows
• Fixed background-color bleed when attaching to a background agent from 256-color-only terminals after the agent had rendered file diffs
• Fixed /copy and copy-on-select silently failing to update the system clipboard when attached to a background session inside tmux
• Fixed opening claude agents with Remote Control enabled leaving zombie session entries on the Code tab after exiting
• Fixed /rename in background sessions not updating the session banner immediately
• Fixed Windows update rollback: if a Windows update fails, Claude Code now restores the original executable by copy and tells you how to recover
• [VSCode] Fixed Claude Code processes not shutting down cleanly when VS Code closed on Windows, causing false "unclean exit" reports and orphaned MCP servers
• /model now saves your selection as the default for new sessions (matching the IDE). Press s in the picker to switch models for the current session only.
• If you customized the modelPicker:setAsDefault keybinding, rename it to modelPicker:thisSessionOnly in keybindings.json (the d action was replaced by s)

v2.1.152

Compare Source

• /code-review --fix now applies review findings to your working tree after the review, surfacing reuse, simplification, and efficiency suggestions; /simplify now invokes /code-review --fix
• Skills and slash commands can now set disallowed-tools in frontmatter to remove tools from the model while the skill is active
• Added /reload-skills command to re-scan skill directories without restarting the session
• SessionStart hooks can now return reloadSkills: true to re-scan skill directories, making skills installed by the hook available in the same session
• SessionStart hooks can now set the session title via hookSpecificOutput.sessionTitle on startup and resume
• Added a MessageDisplay hook event that lets hooks transform or hide assistant message text as it is displayed
• Added pluginSuggestionMarketplaces managed setting: admins can allowlist org marketplaces whose plugins may be suggested via context-aware tips
• claude plugin marketplace remove now accepts --scope user|project|local for symmetry with marketplace add, install, and uninstall
• Claude Code now switches to your configured --fallback-model for the rest of the session when the primary model is not found, instead of failing every request
• Auto mode no longer requires opt-in consent
• Vim mode: / in NORMAL mode now opens reverse history search (like Ctrl+R), matching bash/zsh vi-mode
• The /usage breakdown now includes large session files; files are scanned with a streaming read so memory usage stays flat
• Thinking summaries in the collapsed group now stay readable for at least 3 seconds, render as markdown, and cap at 10 lines (Ctrl+O shows the full thinking)
• In fullscreen mode, the "Thinking for Ns" indicator now counts up live while the model is thinking, and keeps its value if you interrupt mid-thought
• Simplified the Workflow tool's inline progress display — live agent counts now show only in the persistent workflow status row below the prompt
• The post-response timer now shows "Waiting for N background agents/workflows to finish" when backgrounded agents or workflows are still running, and reports the cumulative time once their results are processed
• Added the session entrypoint as an OpenTelemetry metric attribute (app.entrypoint, opt-in via OTEL_METRICS_INCLUDE_ENTRYPOINT=true)
• Fixed terminal styling degrading in very long sessions by recycling the renderer's style pool
• Fixed the sandbox-enabled warning not appearing in condensed startup mode — it now shows in every layout
• Fixed the loading spinner showing "still thinking"/"almost done thinking" while a tool is running, and reset the thinking status to "thinking" after each tool
• Fixed focus mode showing a spurious "N messages hidden" count on turns with no hidden activity
• Fixed clicking a link inside an expanded tool result collapsing the section instead of opening the link
• Fixed markdown table cell borders inheriting the color of inline code, wrapped continuation lines losing their style, and empty header cells showing a label in the narrow-terminal stacked layout
• Fixed plugin MCP servers with the same command but different environment variables being incorrectly deduplicated
• Fixed /doctor reporting "marketplace not found" or "plugin not found" for stale enabledPlugins entries referencing removed marketplaces or dropped plugins
• Fixed plugins that track a git branch silently no longer receiving updates after the plugin registry was rebuilt
• Fixed remote MCP servers failing to connect in Claude Code Remote sessions when the egress proxy is enabled
• Fixed the effort-change confirmation dialog appearing when the conversation has no messages or when switching between effort levels that resolve to the same underlying value
• Fixed the Agent tool description referencing an agent list that is never delivered when running with --bare or with attachments disabled
• Fixed a background worker crash in claude agents when accepting a stale permission prompt after a subagent was cancelled
• Fixed cache_creation_input_tokens reporting as 0 in transcript and result usage when the API reports cache writes only via the nested cache_creation breakdown
• Fixed the PushNotification tool incorrectly reporting "Mobile push not sent (Remote Control inactive)" in SDK-hosted sessions when Remote Control is enabled
• Fixed sessions getting stuck after a model or login switch left stale thinking-block signatures in history; now stripped proactively with a retry safety-net

astral-sh/ruff (aqua:astral-sh/ruff)

v0.15.15

Compare Source

Released on 2026-05-28.

Preview features

• Fix Markdown closing fence handling (#​25310)
• [pyflakes] Report duplicate imports in typing.TYPE_CHECKING block (F811) (#​22560)

Bug fixes

• [pyflakes] Treat function-scope bare annotations as locals per PEP 526 (F821) (#​21540)

Performance

• Avoid redundant TokenValue drops in the lexer (#​25300)
• Reduce memory usage by dropping token-excess capacity and improve performance by approximating the initial tokens Vec size (#​25354)
• Use ThinVec in AST to shrink Stmt (#​25361)

Documentation

• Fix line-length example for --config option (#​25389)
• [flake8-comprehensions] Document RecursionError edge case in __len__ (C416) (#​25286)
• [mccabe] Improve example (C901) (#​25287)
• [pyupgrade] Clarify fix safety docs (UP007, UP045) (#​25288)
• [refurb] Document FURB192 exception change for empty sequences (#​25317)
• [ruff] Document false negative for user-defined types (RUF013) (#​25289)

Formatter

• Fix formatting of lambdas nested within f-strings (#​25398)

Server

• Return code action for codeAction/resolve requests that contain no or no valid URL (#​25365)

Other changes

• Expand semantic syntax errors for invalid walruses (#​25415)

Contributors

• @​chirizxc
• @​ntBre
• @​adityasingh2400
• @​charliermarsh
• @​fallintoplace
• @​martin-schlossarek
• @​MichaReiser
• @​Ruchir28

astral-sh/uv (aqua:astral-sh/uv)

v0.11.17

Compare Source

Released on 2026-05-28.

Enhancements

• Add a diagnostic for uv add with standard library modules (#​19572)
• Expose uv workspace and its list subcommand in help output (#​19533)
• Improve the "403 forbidden" hint to suggest ignore-error-codes when applicable (#​19521)
• Skip direct URL lock freshness checks while offline (#​19596)
• Add import-names and import-namespaces support to uv-build (PEP 794) (#​19380)
• Add a --no-editable-package flag to various commands (#​19584)
• Infer Python version requests from source trees in uv tool invocations (#​19577)

Preview features

• Add module owners to uv workspace metadata (#​19122)
• Do not allow uv venv --clear to remove non-virtual environments (#​19595)

Bug fixes

• Improve the performance of large entries in tool.uv.conflicts (#​19538)
• Avoid modifying the parent process' env with --env-file in uv run (#​19567)
• Fix script environment creation for scripts with long filenames (#​19539)
• Fix transitive Git archive dependencies in lockfiles (#​19589)
• Preserve Git repository URLs in direct URL metadata (#​19590)
• Support redirects in --check-url (#​19594)
• Accept case-insensitive HTML tags in --find-links parsing (#​19537)
• Reject duplicate script metadata blocks (#​19544)
• Ban names like "python3" as script entry points (#​19535, #​19536)
• Validate Git LFS artifacts for Git archives (#​19592)
• Use a relative path when creating symlinks in cache to improve relocatability (#​19033)

Documentation

• Fix malformed positional anchors in the CLI reference (#​19575)

cli/cli (aqua:cli/cli)

v2.93.0: GitHub CLI 2.93.0

Compare Source

Security

A security vulnerability has been identified, and fixed, that would incorrectly include authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands.

Users are advised to update gh to version v2.93.0 as soon as possible.

For more information see: GHSA-8xvp-7hj6-mcj9

Support agents in gh secret command set

The gh secret command set can now set agent secrets. For more information, see "Configuring secrets and variables for Copilot cloud agent".

What's Changed

✨ Features

• Allow agents as application for secrets by @​tenjaa in #​13421

🐛 Fixes

• fix(pr): remove numberFieldOnly optimization that skips API validation by @​williammartin in #​13327
• Print gh auth refresh for 401 returns by @​333fred in #​13068
• Derive digest algorithm from ref length in release verify commands by @​bdehamer in #​13430

📚 Docs & Chores

• Add missing //go:build integration tag to verify_integration_test.go by @​pdostal in #​13303
• Fix flaky accessible prompter Password test timeout by @​pdostal in #​13304
• Enable extended PR screening for external PRs by @​tidy-dev in #​13312
• Grammar fixes by @​scop in #​13326
• Bump gh copilot telemetry sampling to 100% by @​williammartin in #​13362
• Record accessibility feature state in telemetry by @​williammartin in #​13363
• Poll TTY echo mode instead of sleeping in password tests by @​pdostal in #​13305
• Switch from actions/attest-build-provenance to actions/attest by @​scop in #​13325
• Fix skills acceptance tests by @​williammartin in #​13365
• Bump Go toolchain to 1.26.3 by @​Copilot in #​13367
• Trigger triage check-requirements on ready_for_review by @​BagToad in #​13383
• fix(copilot): hint to run copilot directly when exec fails by @​babakks in #​13393
• Update installation commands for GitHub CLI by @​sassdawe in #​13126
• Update CODEOWNERS for skills directory ownership by @​williammartin in #​13416
• fix(telemetry): prevent tzutil console flash on Windows by @​adehad in #​13353
• Fix bump-go.sh to tolerate missing toolchain directive by @​Copilot in #​12581
• docs: drop --repo gh-cli from dnf install lines by @​c-tonneslan in #​13444
• Remove third-party license debris by @​williammartin in #​13470
• Remove dependency on persistent token by @​williammartin in #​13474
• Remove discussion workflow by @​williammartin in #​13476
• Stop bumping homebrew on release by @​williammartin in #​13479
• build: update golang.org/x/crypto by @​tommaso-moro in #​13486
• Add 3 day dependabot cooldown period by @​williammartin in #​13488
• Run govulncheck daily instead of weekly by @​williammartin in #​13487
• SHA pin first-party GitHub Actions by @​williammartin in #​13491
• Link to Accessibility category for community discussions instead of ACR by @​mxie in #​13481
• docs: fix duplicated "of" in release-process-deep-dive by @​vip892766gma in #​13425
• chore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 by @​BagToad in #​13510
• docs: note immutable releases starting v2.93.0 by @​BagToad in #​13518
• fix CI attestation integration tests after rename by @​BagToad in #​13536

Dependencies

• chore(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 by @​dependabot[bot] in #​13297
• chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 by @​dependabot[bot] in #​13328
• chore(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0 by @​dependabot[bot] in #​13381
• chore(deps): bump golang.org/x/term from 0.42.0 to 0.43.0 by @​dependabot[bot] in #​13396
• chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @​dependabot[bot] in #​13346
• chore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 by @​dependabot[bot] in #​13397
• chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 by @​dependabot[bot] in #​13420
• chore(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1 by @​dependabot[bot] in #​13436
• chore(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by @​dependabot[bot] in #​13461
• chore(deps): bump github/codeql-action from 4 to 4.35.5 by @​dependabot[bot] in #​13489
• chore(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.4.1 to 2.4.2 by @​dependabot[bot] in #​13462
• chore(deps): bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6 by @​dependabot[bot] in #​13457

New Contributors

• @​pdostal made their first contribution in #​13303
• @​333fred made their first contribution in #​13068
• @​scop made their first contribution in #​13326
• @​sassdawe made their first contribution in #​13126
• @​adehad made their first contribution in #​13353
• @​c-tonneslan made their first contribution in #​13444
• @​tenjaa made their first contribution in #​13421
• @​mxie made their first contribution in #​13481
• @​vip892766gma made their first contribution in #​13425

Full Changelog: cli/cli@v2.92.0...v2.93.0

crate-ci/typos (aqua:crate-ci/typos)

v1.47.0

Compare Source

Features

• Updated the dictionary with the May 2026 changes

dagger/dagger (aqua:dagger/dagger)

v0.21.3

Compare Source

Fixed

• Fix regression in 1password secret provider support @​marcosnils + @​sipsma in #​13283

What to do next?

• Read the documentation
• Join our Discord server
• Follow us on Twitter

v0.21.2

Compare Source

Fixed

• Fix dagger release publishing to bust cache of operations that involve external state by @​tiborvass + @​sipsma in #​13279
  The previous v0.21.1 release hit a long-standing bug in our version module tooling where certain operations did not bust cache based on changes in external state. We hit this for the first time because v0.21.0 and our infrastructure have had significant improvements in cache re-use.

What to do next?

• Read the documentation
• Join our Discord server
• Follow us on Twitter

v0.21.1

Compare Source

Added

• Add native GraphQL interfaces and unified object IDs in DagQL by @​vito in #​12041
  Dagger now exposes objects through the standard Node interface and ID scalar, enabling APIs to accept generic Dagger objects while preserving SDK compatibility through legacy FooID and loadFooFromID views for older clients.

Fixed

• Python SDK: fix unhandled module registration cases and bugs by removing the AST-based module analyzer and returning to runtime introspection by @​eunomie in #​13251
• Fix Go module generation to avoid unnecessary dependency churn in generated go.mod and go.sum files by @​sipsma in #​13244
• Fix registry authentication so withRegistryAuth credentials are not incorrectly skipped and authenticated publishes keep working after anonymous pulls to the same registry by @​marcosnils + @​sipsma in #​13255 #​13256
• Fix published image layer structure so withDirectory and withFile operations preserve expected layer boundaries instead of being squashed into a few large layers by @​sipsma in #​13242
• Fix Dockerfile RUN --mount=type=bind conversion when the bind source selector points to a regular file, improving compatibility with file and directory bind mounts by @​sipsma in #​13273
• Fix module source cache dependency retention, including ephemeral missing shared result errors after cache persistence or engine restarts by @​sipsma in #​13243
• Fix a bug where some cache entries did not have their size calculated during background and shutdown pruning by @​sipsma in #​13225
• Fix repeated op:// 1Password secret reads by caching resolved 1Password secret values during a run, avoiding provider rate limits when the same secret is mounted or read multiple times by @​matipan in #​13249
• Fix Windows Changeset exports so RemovePaths entries cannot remove files outside the selected export root through backslash or absolute-path interpretation by @​marcosnils in #​13222
• Fix dagger --x-release for tagged releases so semver refs download release artifacts instead of looking in the main-build artifact namespace, and prevent local runner override environment from leaking into the re-executed CLI by @​grouville in #​13259

What to do next?

• Read the documentation
• Join our Discord server
• Follow us on Twitter

jesseduffield/lazygit (aqua:jesseduffield/lazygit)

v0.62.1

Compare Source

This fixes a regression (crash) introduced in 0.62.0. For the full list of changes in 0.62, see here.

What's Changed

Fixes 🔧

• Fix crash when keybindings are disabled that normally show in the status bar by @​stefanhaller in #​5655

Docs 📖

• Add docs for how to add the default, non-pager diff to the list of pagers by @​stefanhaller in #​5656

Full Changelog: jesseduffield/lazygit@v0.62.0...v0.62.1

v0.62.0

Compare Source

The big change in this release is what I have been referring to as the "keybinding revamp": it allows you to use richer keybindings than the few that were available before; see Custom_Keybindings.md for details. It also describes a new keybinding syntax that is a bit more intuitive than the previous <c-x> notation (but the old one is still supported for backwards compatibility).

Note the section about Terminal compatibility in that document; not all terminals support the new

✂ Note

PR body was truncated to here.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: mise/mise.lock

mise ERROR error parsing config file: /tmp/renovate/repos/github/scottames/dots/mise/config.toml
mise ERROR Config files in /tmp/renovate/repos/github/scottames/dots/mise/config.toml are not trusted.
Trust them with `mise trust`. See https://mise.en.dev/cli/trust.html for more information.
mise ERROR Version: 2026.6.0 linux-x64 (2026-06-03)
mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information

Command failed: mise lock aqua:anthropics/claude-code aqua:astral-sh/ruff aqua:astral-sh/uv aqua:cli/cli aqua:crate-ci/typos aqua:dagger/dagger aqua:jesseduffield/lazygit aqua:nushell/nushell aqua:sst/opencode aqua:walles/moor github:always-further/nono github:aquaproj/aqua github:janosmiko/lfk github:max-sixty/worktrunk github:tassiovirginio/try-rs npm:@commitlint/cli npm:@fsouza/prettierd npm:cspell pipx:semgrep rust
mise ERROR error parsing config file: /tmp/renovate/repos/github/scottames/dots/mise/config.toml
mise ERROR Config files in /tmp/renovate/repos/github/scottames/dots/mise/config.toml are not trusted.
Trust them with `mise trust`. See https://mise.en.dev/cli/trust.html for more information.
mise ERROR Version: 2026.6.0 linux-x64 (2026-06-03)
mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.