chore(deps): update ⬆️ mise-packages#926
Merged
Merged
Conversation
Contributor
Author
|
renovate
Bot
force-pushed
the
renovate/mise-packages
branch
from
June 9, 2026 22:49
963972c to
a3f3017
Compare
scottames
approved these changes
Jun 9, 2026
scottames
pushed a commit
that referenced
this pull request
Jun 23, 2026
🤖 I have created a release *beep* *boop* --- ## [0.47.0](v0.46.0...v0.47.0) (2026-06-23) ### Updates & Misc Chores * **deps:** lock file maintenance ([#934](#934)) ([480a323](480a323)) * **deps:** lock file maintenance ([#944](#944)) ([ecd0611](ecd0611)) * **deps:** lock file maintenance ⬆️ mise-packages ([#936](#936)) ([4e91cb5](4e91cb5)) * **deps:** update ⬆️ aqua-packages ([#920](#920)) ([cdc3cab](cdc3cab)) * **deps:** update ⬆️ aqua-packages ([#942](#942)) ([aae9b2d](aae9b2d)) * **deps:** update ⬆️ aqua-packages to v4.520.0 ([#924](#924)) ([f56cfc8](f56cfc8)) * **deps:** update ⬆️ aqua-packages to v4.520.1 ([#925](#925)) ([1f7eb02](1f7eb02)) * **deps:** update ⬆️ container digests ([#919](#919)) ([d241f14](d241f14)) * **deps:** update ⬆️ dagger to v0.21.3 ([#921](#921)) ([deb7722](deb7722)) * **deps:** update ⬆️ dagger to v0.21.4 ([#930](#930)) ([fb8c104](fb8c104)) * **deps:** update ⬆️ dagger to v0.21.6 ([#941](#941)) ([7dd8b50](7dd8b50)) * **deps:** update ⬆️ mise-packages ([#917](#917)) ([ef28dfc](ef28dfc)) * **deps:** update ⬆️ mise-packages ([#926](#926)) ([39cea80](39cea80)) * **deps:** update ⬆️ mise-packages ([#928](#928)) ([fd1f171](fd1f171)) * **deps:** update ⬆️ mise-packages ([#933](#933)) ([39d566b](39d566b)) * **deps:** update ⬆️ mise-packages ([#937](#937)) ([66f8a50](66f8a50)) * **deps:** update ⬆️ mise-packages ([#939](#939)) ([14c1b76](14c1b76)) * **deps:** update ⬆️ mise-packages ([#943](#943)) ([9885419](9885419)) * **deps:** update ⬆️ mise-packages ([#945](#945)) ([a977547](a977547)) * **deps:** update ⬆️ mise-packages ([#946](#946)) ([04963b3](04963b3)) * **deps:** update ⬆️ mise-packages to v2.1.167 ([#927](#927)) ([a3c34db](a3c34db)) * **deps:** update ⬆️ mise-packages to v2.1.173 ([#935](#935)) ([f00499e](f00499e)) * **deps:** update busybox docker tag to v1.38.0 ([#922](#922)) ([17183b0](17183b0)) * **deps:** update dependency gabm/satty to v0.21.1 ([#931](#931)) ([7937647](7937647)) * **deps:** update github-actions ([#932](#932)) ([4274b39](4274b39)) * **deps:** update github-actions to v1.0.5 ([#923](#923)) ([0fb5abf](0fb5abf)) * **fish/herdr:** abbr ([51defbc](51defbc)) * **mise:** bump herdr 0.6.10 ([143e560](143e560)) * **mise:** rm tenv for now - use in specific projects ([aa2d09e](aa2d09e)) * **niri:** ignore focus for Akiflow ([b9d8848](b9d8848)) * **nvim:** disable copilot lsp when not in use ([c7003ea](c7003ea)) * **nvim:** disable precognition ([fa5b3c1](fa5b3c1)) * **nvim:** lazy updates ([d17812a](d17812a)) * **nvim:** lazyvim updates ([afc2bd5](afc2bd5)) * **opencode:** herdr skill allow ([214a427](214a427)) * upgrade trunk ([#918](#918)) ([6707f7f](6707f7f)) * upgrade trunk ([#929](#929)) ([e8bf723](e8bf723)) * upgrade trunk ([#940](#940)) ([8e16875](8e16875)) ### Documentation * **agents:** clarify worktree layout guidance ([86b8150](86b8150)) ### Features * add herdr ([e51f54e](e51f54e)) * **agents:** add ponytail ([a67eedb](a67eedb)) * **fish/herdr:** add workspace abbrs ([7579c8f](7579c8f)) * **fish:** extend project_label +subtitutions ([a70fc16](a70fc16)) * **git:** add layout-aware project labels ([70c2397](70c2397)) * **git:** support normal worktree clone layout ([4d6bbc9](4d6bbc9)) * **herdr:** add worktrunk / worktree helpers ([d9d8ff8](d9d8ff8)) * **herdr:** config ([d2a0633](d2a0633)) * **nono:** opencode-local - additional permissions ([c9ac773](c9ac773)) * **wt:** run trunk to initiate tools (avoid bug) ([57394c6](57394c6)) ### Bug Fixes * **agents/opencode:** symlink agents ([2927595](2927595)) * **aqua:** rm stale entries, force mise use ([c927d63](c927d63)) * **fish/herdr:** respect label on restore ([7dfea09](7dfea09)) * **gh:** attempt in ensuring the use of our wrapper ([c540930](c540930)) * **git:** harden local hook chaining ([e13a5aa](e13a5aa)) * **herdr:** worktree open, use project_label ([6be9dd2](6be9dd2)) * **nono/opencode:** additional permissions ([b878aa5](b878aa5)) * **nono/opencode:** allow prettierc ([ab203cd](ab203cd)) * **nono/opencode:** deprecated overridedeny ([5a052c9](5a052c9)) * **nono/opencode:** git commit signing permission ([c83e852](c83e852)) * **opencode/nono:** permissions ([4c31fe9](4c31fe9)) * **opencode:** perms missing wildcard ([d848d40](d848d40)) * **opencode:** skill perm covers non-config root ([c764871](c764871)) * **opencode:** skill perms ([bb9fbe1](bb9fbe1)) * **renovate:** avoid mise lockfile races ([bf78481](bf78481)) ### Code Refactoring * **chezmoi/git:** move clones to non-bare worktree ([666e468](666e468)) * **nono:** cleanup wrappers ([74a8574](74a8574)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). Co-authored-by: scottames-github-bot[bot] <162828115+scottames-github-bot[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.1.158→2.1.1652.1.170(+4)0.70.0→0.71.00.15.15→0.15.160.11.17→0.11.191.47.0→1.47.20.21.3→0.21.42.63.1→2.64.20.62.1→0.62.22.26.1→2.27.11.1305.0→1.1305.11.21.5→1.21.61.22.01.15.13→1.16.20.62.1→0.63.12.70.4→2.70.50.27.0→0.27.12.13.3→2.13.42.14.0v0.16.1→v0.17.1v0.59.0→v0.61.2v0.62.0v0.13.1→v0.13.7v0.14.2(+4)v0.55.0→v0.56.0v0.57.0v0.14.0→v0.14.1v0.15.01.26.3→1.26.41.1.112→1.1.1151.1.118(+2)15.8.0→15.8.117.12.0→17.13.01.164.0→1.165.04.2.1→4.2.23.3.0→3.4.0Release Notes
anthropics/claude-code (aqua:anthropics/claude-code)
v2.1.165Compare Source
v2.1.163Compare Source
requiredMinimumVersionandrequiredMaximumVersionmanaged settings — Claude Code refuses to start if its version is outside the allowed range and directs the user to an approved version/plugin listcommand to list installed plugins, with--enabled/--disabledfilters/btwthat copies the raw markdown answer to the clipboard, preserving formatting when pasted elsewherehookSpecificOutput.additionalContextto give Claude feedback and keep the turn going without being labeled a hook error\$escape syntax to include a literal$before a digit in command bodiesCLAUDE_CODE_SESSION_IDas hooks/Bash on--resumeclaude -phanging forever after its final result when a backgrounded command never exits — background shells are now stopped ~5s after the result once stdin closesclaude -pfailing with "ANTHROPIC_API_KEY required" on Bedrock/Vertex/Foundry whenCI=trueand no Anthropic API key is set$TMPDIRwas overridden to/tmp/claude-{uid}for all commands instead of only sandboxed ones (regression in 2.1.154)claude agentslosing their running background tasks when reattached after a Claude Code updateif: "Bash(...)"conditions firing on every Bash command containing$()or$VAR; the pattern now matches against commands inside subshells and backticks tooRead(~/Desktop/**)) not blocking Bash commands that reference the path via$HOMEclaude agentsdispatching from the state-grouped view now starts the session in the directory the agent view was opened fromv2.1.162Compare Source
claude agents --jsonnow includeswaitingForshowing what a waiting session is blocked on (e.g. permission prompt)--tools: explicitly listing Grep/Glob now provides the dedicated search tools on native builds with embedded search (previously these names were silently ignored)/effortnow confirms when your chosen level will persist as the default for new sessions/idemenu,/terminal-setup, and/scroll-speed, following the editor's rebrandWebFetch(domain:...)deny/ask/allow rules now take precedence over the preapproved-host auto-allow~\,\\server\share) or case-variant paths, and Read deny rules not hiding files from Glob/Grep resultsno low surrogate in stringerrors for classifier side-queries and MCP server descriptions containing emoji near a truncation boundarytimeoutconfig values below 1000 ms being floored to a 1-second watchdog that aborted every tool call; sub-1000 ms values are now ignored (falling back toMCP_TOOL_TIMEOUTor default), andclaude mcp getannotates them accordinglyworkspaceSymboloperation returning no results; it now accepts aqueryparameter and passes it to the language serverclaude agentscutting live status text (tool args, replies, prompts, exec output) at 60–120 columns on wide terminals; the status detail now uses the full terminal widthclaude agentstruncating long session names at 40 columns; the name column now grows with terminal widthclaude agentsattach occasionally bouncing straight back to the session list on the first try after a background-service restartclaude agentsCtrl+V image paste doing nothing in the dispatch input and the session reply box; pasting with no image now shows a hintSendMessage) silently breaking whenCLAUDE_CODE_TMPDIRor$TMPDIRpoints at a deep directoryclaude agentsstalling for 5 seconds before attachingclaude updateverification to wait out endpoint-security scanning of new binaries instead of failing after 5 secondsv2.1.161Compare Source
OTEL_RESOURCE_ATTRIBUTESvalues are now included as labels on metric datapoints, so you can slice usage metrics by custom dimensions like team or repoclaude agentsrows now showdone/totalbefore the detail when work is fanned out; peek shows the longest-running item/mcpnow collapses claude.ai connectors you've never signed in to behind a "Show unused connectors" rowwl-copy/xclip/xselon Linux when available, copies to both the clipboard and PRIMARY selection for middle-click paste, and the "hold {key} for native selection" hint now shows the correct key per terminal/effortdialog, workflow animations, and prompt keyword shimmer not honoring the "Reduce motion" settingforceLoginOrgUUID/forceLoginMethodmanaged-settings policies blocking third-party provider sessions (Bedrock, Vertex, Foundry, Mantle) alongside the org pin (regression in 2.1.146)claude -pstdout when using--output-format textorjson/usage-creditsstarting a re-login for Team and Enterprise admins instead of pointing to the organization's usage settings page/autofix-prreporting "cannot run on the default branch" when the session is inside a git worktree or another repository--resumepicker not showing sessions from the current directory when it isn't a git worktree (e.g., jj workspaces)/usr/bin/bash script.sh) failing with "command not found" or "cannot execute binary file"user_prompt,api_request,tool_result,tool_decision) being silently dropped when emitted before telemetry initialization completedclaude mcplist/get/add printing secrets to the terminal:${VAR}references are no longer expanded, and credential headers and URL secrets are redactedisolation: "worktree"in background sessions being blocked from editing files inside their own worktreeclaude agentsbooting on a stale model from the daemon's environment instead of the model insettings.jsonEADDRINUSEerrors from tools that bind Unix sockets under$TMPDIRwhenCLAUDE_CODE_TMPDIRis set to a deep path/terminal-setup) to fix garbled glyphsv2.1.160Compare Source
.zshenv,.zlogin,.bash_login) and~/.config/git/, which could otherwise lead to unintended command executionacceptEditsmode now prompts before writing build-tool config files that grant code execution (.npmrc,.yarnrc*,bunfig.toml,.bazelrc,.pre-commit-config.yaml,.devcontainer/, etc.)grep: single-filegrep/egrep/fgrepcommands now satisfy the read-before-edit checkclaude agentsdropping chat history and re-running the original promptclaude --bgoccasionally failing with "socket missing" when the background daemon was cold-starting on a loaded machineclaude rmuntil the background daemon exitedclaude agentsfreezing for several seconds when returning to the session list due to the auto-updater re-checking on every exitclaude agentsviewfile:///C:/...links being rewritten to a broken path on Windows terminals with hyperlink supportCLAUDE_CODE_ENABLE_AUTO_MODEopt-in instead of incorrectly blaming the model/effort ultracodeincorrectly blaming the dynamic workflows setting when the model cannot run xhigh; ultracode is no longer offered on models that do not support it--modelwhen running via the SDK or other hosts where the CLI flag doesn't applyppasting on the line below instead of at the cursor when the register was yanked withv$claude agentsclaude rm/stop, idle reap) to send SIGTERM to running shell subprocesses before SIGKILL, so cleanup handlers runCLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE; the environment variable is now a no-opworkflowtoultracode. The word "workflow" no longer triggers a run; asking for one in your own words still works. The trigger keyword is highlighted in violet in the prompt inputv2.1.159Compare Source
aquasecurity/trivy (aqua:aquasecurity/trivy)
v0.71.0Compare Source
⚡ Highlights ⚡
👉 https://github.com/aquasecurity/trivy/discussions/10767
Changelog
https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0710-2026-06-01
astral-sh/ruff (aqua:astral-sh/ruff)
v0.15.16Compare Source
Released on 2026-06-04.
Preview features
flake8-async] Implementyield-in-context-manager-in-async-generator(ASYNC119) (#24644)pylint] Narrow diagnostic range and exclude cases without exception handlers (PLW0717) (#25440)ruff] Treatyieldbeforebreakfrom a terminal loop as terminal (RUF075) (#25447)Bug fixes
eradicate] Avoid flaggingruff:ignorecomments as code (ERA001) (#25537)eradicate] FixERA001/RUF100conflict whennoqais on commented-out code (#25414)pyflakes] Avoid removing theformatcall when it would change behavior (F523) (#25320)pylint] Avoid syntax errors in invalid character replacements in f-strings before Python 3.12 (PLE2510,PLE2512,PLE2513,PLE2514,PLE2515) (#25544)pyupgrade] Avoid convertingformatcalls with more kinds of side effects (UP032) (#25484)Rule changes
flake8-pytest-style] Avoid fixes for ambiguousargnamesandargvaluescombinations (PT006) (#24776)Performance
Documentation
pydocstyle] Improve discoverability of rules enabled for each convention (#24973)ruff] Restore example code for Python versions before 3.15 (RUF017) (#25439)bin/active→bin/activatein tutorial (#25473)Other changes
Contributors
astral-sh/uv (aqua:astral-sh/uv)
v0.11.19Compare Source
Released on 2026-06-03.
Python
Enhancements
Preview features
--isolatedinuv check(#19666)Bug fixes
v0.11.18Compare Source
Released on 2026-06-01.
Performance
Preview
uv checkto runtyfrom uv (#19605)Bug fixes
Other changes
crate-ci/typos (aqua:crate-ci/typos)
v1.47.2Compare Source
Fixes
inferrableinferiblevariantv1.47.1Compare Source
Fixes
requestorsdagger/dagger (aqua:dagger/dagger)
v0.21.4Compare Source
Fixed
What to do next?
fastfetch-cli/fastfetch (aqua:fastfetch-cli/fastfetch)
v2.64.2Compare Source
Bugfixes:
--dynamic-intervalmodeLogos:
openwrt_oldv2.64.1Compare Source
Features:
-DPACKAGES_REMOVE_DISABLEDto remove detection code of disabled packages (-DPACKAGES_DISABLE_<PACKAGE_NAME>) for slightly smaller binary size (Packages)Bugfixes:
encode_jsonwhen encoding deeply nested tables or circular referencesv2.64.0Compare Source
New optional build dependencies:
libvaandlibvdpaufor the newCodecmodule.Features:
Codecmodule support for Windows, macOS, Linux, and Android for hardware-accelerated video codec detection (Codec)libvaandlibvdpausupport to enable these backends."useVulkan": true)Noneis reported. This behavior can be configured using the"showType": "encoder|decoder"option.Titleas an example):{ "type": "title", "format": "lua:return string.format('Hello %s@%s', (...).userName, (...).hostName)" }. Thelua:prefix indicates a Lua script. Areturnstatement is required to pass the final result back to the fastfetch module; otherwise,nilis returned implicitly and the entire module output is skipped.(...). Users can assign them to named variables for better readability. For example:lua:local args = ...; string.format('Hello %s@%s', args.userName, args.hostName).{ "type": "shell", "format": "lua:shell = ..." } // Note: no "return" here{ "type": "terminal", "format": "lua:return shell.prettyName .. ' in ' .. (...).prettyName" } // This will print the detected shell and terminal namesjson_encode(table, is_pretty)function has been added to the Lua API for easier debugging. For example,lua:return json_encode(...)will print all available variables and their values in JSON format.fastfetch --list-features.{ "type": "title", "format": "qjs:Hello ${this.userName}@${this.hostName}" }. Theqjs:prefix indicates a JavaScript script. Noreturnstatement is needed; the final result is simply the evaluated value of the script.thisobject. Usage is mostly the same as Lua, but using JavaScript syntax.-DMODULE_DISABLE_<MODULE_NAME>=ONto disable modules at compile time for a smaller binary sizecmake -L . | grep MODULE_DISABLE_to list all available options.-DCMAKE_BUILD_TYPE=Releaseshould enable LTO by default).src/logo/ascii/[a-z]/*) and re-runcmake.num-color) (#2364). Limitations:|specifier has been added to center strings. For example,{user-name|20}will center the username in a 20-character-wide field.Bootmgr,Brightness, andWMThemedetection support for Haiku (#2358, Haiku)WallpaperandWMThemedetection support for the COSMIC desktop environment (Linux)ddcciSleep: nulloption to skip DDC/CI detection.--logo-padding-bottomoption to control the padding between the bottom of the logo and the first module when--logo-position topis used--logo-padding-rightwas used for both right and bottom padding.Samsung Exynos 2600to CPU detection (CPU, Android)ashas the pretty name (Shell, Linux)Bugfixes:
--statoutput to correctly align with the right border (Global)iBoot(Bootmgr, macOS)Logos:
jesseduffield/lazygit (aqua:jesseduffield/lazygit)
v0.62.2Compare Source
This fixes another small regression introduced in 0.62.0. For the full list of changes in 0.62, see here.
What's Changed
Fixes 🔧
Full Changelog: jesseduffield/lazygit@v0.62.1...v0.62.2
securego/gosec (aqua:securego/gosec)
v2.27.1Compare Source
Changelog
9e6a984Downgrade google lib to avoid min Go version bump (#1687)v2.27.0Compare Source
Changelog
0a5c650Downgrade the jsonschema dep to v0.13.0 due to incompatibility with anthropick-sdk-go (#1686)b48e668Update all dependencies (#1685)bd17b25Downgrade the github.com/invopop/jsonschema v0.13.0 to solve incopatibility with anthropic-sdk (#1683)c6f8c3dUpdate all dependencies (#1682)5676cbcUpdate vulnerabilities alerts for indirect dependenciesce167d4Pin dependencies (#1681)74b726dSkip pining for my reposa68f882Update renovate configuration2f8791bFix typoad3778aUpdate branch config in renovate configb1583feMigrate config renovate.json (#1678)139e33dUpdate renovate to refresh the branch creationf3c03ebUpdate the renovate branch prefix85814f2Update renovate config to pin the actions dependencies by digests (#1676)55f0519Migrate the html remport to react v19. (#1675)6ad4476Manually update version to fix renovate (#1674)8f88312feat: integrate Atlas Cloud provider (#1672)6351b0cRefactor error position parsing to support path with colon. (#1673)de65614Add two options to require rule ID and justificaiton for inline annotations (#1671)e354c57Fix false positive in G118 when cancel is stored in a slice/map (#1670)4161f0bchore(go): update supported Go versions to 1.25.10 and 1.26.3 (#1669)b4f2934Harden the github workflows and action (#1665)b7aca26Fix justification delimiter in annotation format doc (#1661)945bce7Update all dependencies (#1664)5f4eec9Update action to use gosec version v2.26.1 (#1660)snyk/cli (aqua:snyk/cli)
v1.1305.1Compare Source
Bug Fixes
X-RateLimit-Resetheader. (2e690df)spacelift-io/spacectl (aqua:spacelift-io/spacectl)
v1.21.6Compare Source
What's Changed
New Contributors
Full Changelog: spacelift-io/spacectl@v1.21.5...v1.21.6
Artifacts
Binaries
The binaries are available at the bottom of this release.
Docker images
The following multi-arch (amd64 and arm64) Docker images have been published:
ghcr.io/spacelift-io/spacectl:latestghcr.io/spacelift-io/spacectl:1.21.6sst/opencode (aqua:sst/opencode)
v1.16.2Compare Source
Core
Bugfixes
Improvements
TUI
Bugfixes