Skip to content

chore(deps): update ⬆️ mise-packages#971

Merged
renovate[bot] merged 2 commits into
mainfrom
renovate/mise-packages
Jul 5, 2026
Merged

chore(deps): update ⬆️ mise-packages#971
renovate[bot] merged 2 commits into
mainfrom
renovate/mise-packages

Conversation

@renovate

@renovate renovate Bot commented Jul 5, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change Pending Age Adoption Passing Confidence
aqua:anthropics/claude-code patch 2.1.1952.1.197 2.1.201 (+3) age adoption passing confidence
aqua:aquasecurity/trivy minor 0.71.20.72.0 age adoption passing confidence
aqua:astral-sh/uv patch 0.11.250.11.26 age adoption passing confidence
aqua:casey/just minor 1.54.01.55.1 age adoption passing confidence
aqua:crate-ci/typos minor 1.47.21.48.0 age adoption passing confidence
aqua:sst/opencode patch 1.17.111.17.12 1.17.13 age adoption passing confidence
aqua:suzuki-shunsuke/ghtkn patch 0.3.10.3.3 age adoption passing confidence
github:max-sixty/worktrunk minor v0.63.0v0.64.0 v0.65.0 age adoption passing confidence
npm:socket patch 1.1.1311.1.135 1.1.137 (+1) age adoption passing confidence
pipx:ansible-lint (changelog) minor 26.4.026.6.0 age adoption passing confidence
rust patch 1.96.01.96.1 age adoption passing confidence

Release Notes

anthropics/claude-code (aqua:anthropics/claude-code)

v2.1.197

Compare Source

  • Introducing Claude Sonnet 5: now the default model in Claude Code, with a native 1M-token context window and promotional pricing of $2/$10 per Mtok through August 31. Update to version 2.1.197 for access. https://www.anthropic.com/news/claude-sonnet-5

v2.1.196

Compare Source

  • Added support for organization default models — admins set it in the org console; it shows as "Org default" (or "Role default") in /model when you haven't picked one yourself
  • Added readable default names for sessions at start, making them easier to identify and message
  • Added clickable file attachments in chat — Cmd/Ctrl-click reveals the file in Finder/Explorer
  • Security: claude mcp list/get no longer spawn .mcp.json servers that a repo self-approved via a committed .claude/settings.json; untrusted workspaces show ⏸ Pending approval
  • Fixed waking a background job permanently deleting its conversation and re-running the original prompt when the transcript probe misread a real transcript; the file is now set aside, never deleted
  • Fixed the rate-limit warning flickering off and rate-limit telemetry being over-counted when multiple parallel requests were in flight at the moment a usage limit was hit
  • Fixed duplicate recap lines after a background session's turn: a schema-rejected StructuredOutput attempt no longer renders alongside its retry
  • Fixed PowerShell git diff/git grep, egrep/fgrep, and quoted search patterns containing | being reported as failures when they exit 1, matching Bash behavior
  • Fixed multiple claude agents side panel issues: keyboard focus getting stuck when opening an agent, background jobs losing their subagent types on every open, and sessions showing incorrect status while actively running
  • Fixed claude agents --dangerously-skip-permissions silently falling back to auto mode instead of showing the bypass disclaimer and applying bypass mode to spawned agents
  • Fixed mid-turn crash recovery for Remote sessions — sessions interrupted by a server restart now auto-resume on the next worker
  • Fixed sessions moved with /cd reappearing in the old directory's resume list after a non-graceful exit when the old path contained special characters
  • Fixed claude plugin validate skipping local plugins whose source is "." and stopping after the first error class
  • Fixed Esc Esc at an idle prompt not opening the rewind menu (regression); use Ctrl+C or Ctrl+X Ctrl+K to stop background agents
  • Fixed MCP OAuth requesting the authorization server's full scopes_supported catalog when no scope is specified, causing invalid_scope failures on GitLab self-hosted and other enterprise IdPs
  • Fixed /context showing 0 tokens for all tool groups on Bedrock
  • Fixed /deep-research misreporting verifier failures as "all claims refuted" instead of unverified
  • Fixed plugin dependency version pins not being honored when the marketplace was added as a local folder path backed by a git repo
  • Fixed claude agents session status: completed rows no longer flip between "Done" and "Needs your input", stalled agents are now labeled "Needs attention", and results that mention a PR show a clickable link
  • Fixed voice dictation swallowing spaces and spuriously starting a recording during very fast typing when voice mode is enabled
  • Improved background session reliability: long-running commands and workflows now survive the session's process being stopped, restarted, or updated — including on Windows, where background shells are handed off instead of being killed
  • Improved background agents: workers killed by a daemon restart are now automatically resumed from where they left off the next time the agents view opens
  • Improved /code-review workflow: merged five cleanup finders into one, cutting token usage by roughly 25%
  • Reduced per-frame rendering work in the terminal UI by skipping no-op subtree walks during streaming
  • The streaming idle watchdog is now on by default for all providers — it aborts and retries when a response stream produces no events for 5 minutes. Set CLAUDE_ENABLE_STREAM_WATCHDOG=0 to disable.
  • Remote Control is now disabled when ANTHROPIC_BASE_URL points at a non-Anthropic host, matching the existing behavior under CLAUDE_CODE_USE_BEDROCK/_VERTEX/_FOUNDRY
  • Changed opening the agents view from a foreground session to require a single press instead of two, matching the behavior in background sessions
aquasecurity/trivy (aqua:aquasecurity/trivy)

v0.72.0

Compare Source

⚡ Highlights ⚡

👉 https://github.com/aquasecurity/trivy/discussions/10907

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0720-2026-06-30

astral-sh/uv (aqua:astral-sh/uv)

v0.11.26

Compare Source

Released on 2026-06-30.

Performance
  • Adapt uv to IDs-only PubGrub dependencies (#​20048)
  • Avoid allocations in ForkMap::contains (#​20023)
  • Reuse resolver work across PubGrub iterations (#​20020)
  • Speed up candidate selection for disjoint ranges (#​20026)
Bug fixes
  • Warn when the build cache is inside the source directory (#​20056)
casey/just (aqua:casey/just)

v1.55.1

Compare Source

Fixed
  • Fix panic when empty path is passed to --show and --usage (#​3511 by casey)
Misc

v1.55.0

Compare Source

Fixed
Changed
Added
Misc
crate-ci/typos (aqua:crate-ci/typos)

v1.48.0

Compare Source

Features
  • Updated the dictionary with the June 2026 changes
sst/opencode (aqua:sst/opencode)

v1.17.12

Compare Source

Core

Bugfixes
  • Enable adaptive thinking for Claude Sonnet 5.
  • Prefer MCP content responses over structured output when both are present.
  • Reconnect MCP servers after OAuth even if the server was disabled. (@​MaxAnderson95)
  • Request MCP refresh-token scope during OAuth.
  • Show MCP OAuth completion errors instead of a generic failure.
  • Refresh cached remote skills.
  • Preserve skill resource paths.
  • Pick better default small models across providers.
  • Scope MCP auth status to each server URL.

TUI

Improvements
  • Add a yolo mode to auto-approve permissions.
  • Pass ServerAuth headers through external served TUI connections. (@​OpeOginni)

Desktop

Improvements
  • Autocomplete MCP resources in the composer.
  • Add workspace controls when starting a new session.
  • Show stored token and cost totals in the session context. (@​OpeOginni)
Bugfixes
  • Autocomplete configured references in prompts.
  • Restore the prompt cursor when the composer regains focus.
  • Remember the last active desktop URL across restarts.
  • Preserve the selected model when promoting a session. (@​usrnk1)
  • Keep session pages in sync during concurrent events.
  • Support normal auth input prompts in the desktop connect-provider dialog. (@​OpeOginni)
  • Prevent hidden terminal tabs from hanging or resizing incorrectly.
  • Re-enable auto-accept in session settings.
  • Keep session tabs scoped to the correct server.
  • Remember the selected home project and server.

SDK

Improvements
  • Add a live event subscription stream.
  • Add SDK access to active sessions.
  • Restore session runtime operations such as event streaming, interrupts, and message lookup.
  • Add paged durable session history.
  • Add session permission request create and fetch endpoints.
Bugfixes
  • Preserve V2Event names in SSE streams.
  • Wake embedded session execution after new prompts.
  • Improve V2 runtime tool results and avoid duplicate model switch events.
  • Resolve MIME types for prompt attachments sent by URI.

Thank you to 11 community contributors:

  • @​usrnk1:
    • feat(app): refine session UI styling (#​33860)
    • fix(desktop): preserve selected model during session promotion (#​34466)
    • fix(desktop): context menu button / tab intermittent issue (#​34420)
    • feat(desktop): add hover background to session title and single-click edit (#​34589)
    • feat(app): hide separators around active tabs (#​34591)
    • feat(desktop): polish inline session title editing (#​34607)
    • feat(desktop): make error view draggable (#​34627)
    • feat(desktop): polish tooltips and session search (#​34632)
  • @​arvsrn:
    • feat(app): updates to design system (#​34066)
    • feat(app): update home screen alignment + markdown styles (#​34172)
    • feat(app): minor visual updates (#​34205)
    • feat(app): new debug bar (#​34237)
    • feat(app): sticky session list header (#​34220)
    • feat(app): show loader on session hover (#​34224)
    • feat(app): new timeline header (#​34192)
    • feat(app): improve projects sidebar reactivity (#​34391)
    • feat(app): update message part ui to v2 (#​34394)
    • feat(app): align slash popover to v2 tokens (#​34286)
  • @​ariane-emory:
    • docs(providers): document blacklist and whitelist model filtering (#​33792)
  • @​Slickstef11:
    • docs: route enterprise contact links (#​34080)
  • @​affanali2k3:
    • fix(app): slow tooltip display for models (#​30745)
  • @​OpeOginni:
    • fix(desktop): recognize normal auth metadata input prompts in connect provider dialog (#​33024)
    • feat(desktop): Display stored totals for Tokens and Cost in Desktop Session Context (#​28887)
    • feat(tui): integrate ServerAuth headers into transport configuration for external served TUI thread (#​29876)
  • @​BenGu3:
    • fix(tui): register prompt.skills keybinds (#​34180)
  • @​neriousy:
    • fix(app): disable add project when given server is offline (#​34294)
    • fix(app): disable empty server chevron (#​34292)
  • @​MaxAnderson95:
    • fix(mcp): reconnect after OAuth even when server is disabled
  • @​StarpTech:
    • fix(console): cancel upstream provider requests (#​34467)
  • @​runvip:
    • fix(docs): fix Russian translation for index.mdx (#​34001)
suzuki-shunsuke/ghtkn (aqua:suzuki-shunsuke/ghtkn)

v0.3.3

Compare Source

Features

#​487 Publish agent skills and split README.md.

gh skill install:

gh skill install suzuki-shunsuke/ghtkn --all

#​488 Improve help messages by adding descriptions

Please run ghtkn help [<command>].

v0.3.2

Compare Source

Fixes

#​484 Update urfave/cli/v3 to v3.10.1

max-sixty/worktrunk (github:max-sixty/worktrunk)

v0.64.0: 0.64.0

Compare Source

Release Notes

Improved
  • {{ git.branch.* }} template namespace for custom columns: wt list custom columns can now read a branch's own git config via {{ git.branch.<key> }} — both convention keys you set yourself (branch.<name>.jira) and the git-native branch.<name>.description — without re-storing the values through wt config state vars set. It complements {{ vars.* }}, which reads only worktrunk's own state namespace. (#​3319, thanks @​cazador481 for the request)

  • Faster warm-cache wt list re-runs: A repeat wt list (with .git/wt/cache/ already populated) is ~36% faster, by removing redundant per-row git subprocesses — priming the commit→tree cache from the %ct batch already issued, persisting merge-base results to a content-addressed on-disk cache, and seeding worktree roots and git-dirs from the single git worktree list instead of re-forking git rev-parse per worktree. (#​3334)

Fixed
  • Refs that look like flags can't inject git options: wt's git diff previews and diffstats (picker diff previews, show_diffstat, push diffstat) now fence user-controlled refs behind --end-of-options, and branch removal (git branch -D) passes them after --, so a branch literally named like a flag (-x, --foo) reaches git as a positional ref instead of being misparsed as an option. (#​3317)

  • Statusline renders untruncated when COLUMNS=0: wt list statusline treated COLUMNS=0 as a zero-width budget and dropped every segment, rendering an empty line. A zero or unparsable COLUMNS is now treated as no detectable width, so the line renders everything untruncated — as the statusline sizing already documented for a missing width. (#​3318)

  • Watchdog "still waiting" line uses the hint symbol: The transient Waiting for the commit message (Ns) line shown during a slow wt step commit LLM call now uses the hint prefix () instead of the info symbol (), matching the convention for fully-dim status lines. (#​3330)

Install worktrunk 0.64.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/max-sixty/worktrunk/releases/download/v0.64.0/worktrunk-installer.sh | sh && wt config shell install
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/max-sixty/worktrunk/releases/download/v0.64.0/worktrunk-installer.ps1 | iex"; git-wt config shell install
Install prebuilt binaries via Homebrew
brew install worktrunk && wt config shell install

Download worktrunk 0.64.0

File Platform Checksum
worktrunk-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
worktrunk-x86_64-apple-darwin.tar.xz Intel macOS checksum
worktrunk-x86_64-pc-windows-msvc.zip x64 Windows checksum
worktrunk-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum
worktrunk-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum
Install via Cargo
cargo install worktrunk && wt config shell install
Install via Winget (Windows)
winget install max-sixty.worktrunk && git-wt config shell install
Install via AUR (Arch Linux)
paru worktrunk-bin && wt config shell install
SocketDev/socket-cli (npm:socket)

v1.1.135

Compare Source

v1.1.134

Compare Source

v1.1.133

Compare Source

v1.1.132

Compare Source

ansible/ansible-lint (pipx:ansible-lint)

v26.6.0

Compare Source

Features
Fixes
Maintenance
rust-lang/rust (rust)

v1.96.1

Compare Source


Configuration

📅 Schedule: (in timezone America/Los_Angeles)

  • Branch creation
    • Between 03:00 AM and 05:59 AM (* 3-5 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Jul 5, 2026
@renovate
renovate Bot requested a review from scottames as a code owner July 5, 2026 10:56
@renovate
renovate Bot enabled auto-merge (squash) July 5, 2026 10:56
@renovate renovate Bot added the dependencies label Jul 5, 2026
@renovate
renovate Bot merged commit 073b1d8 into main Jul 5, 2026
5 checks passed
@renovate
renovate Bot deleted the renovate/mise-packages branch July 5, 2026 11:00
scottames pushed a commit that referenced this pull request Jul 16, 2026
🤖 I have created a release *beep* *boop*
---


## [0.49.0](v0.48.0...v0.49.0)
(2026-07-16)


### Updates & Misc Chores

* **agents:** note dagger+nono limitation
([96c5ff8](96c5ff8))
* **deps:** update ⬆️ aqua-packages to v4.530.0
([#970](#970))
([1901dea](1901dea))
* **deps:** update ⬆️ aqua-packages to v4.531.0
([#974](#974))
([a59cd90](a59cd90))
* **deps:** update ⬆️ aqua-packages to v4.533.1
([#977](#977))
([8df8b26](8df8b26))
* **deps:** update ⬆️ mise-packages
([#969](#969))
([6fdc9d0](6fdc9d0))
* **deps:** update ⬆️ mise-packages
([#971](#971))
([073b1d8](073b1d8))
* **deps:** update ⬆️ mise-packages
([#972](#972))
([962a7be](962a7be))
* **deps:** update ⬆️ mise-packages
([#976](#976))
([2c82fd4](2c82fd4))
* **deps:** update ⬆️ mise-packages
([#978](#978))
([ce9c00d](ce9c00d))
* **deps:** update ⬆️ mise-packages to v2.1.201
([#973](#973))
([0624520](0624520))
* **mise:** bump herdr 0.7.2
([d455310](d455310))
* **mise:** bump herdr 0.7.3
([fb32d95](fb32d95))
* **nono/opencode:** add permissions for `go test`
([88996a5](88996a5))
* **nvim:** lazy updates
([c2d876d](c2d876d))
* **nvim:** lazy updates
([78b082a](78b082a))
* **opencode:** add explicit thts permissions
([6387dae](6387dae))
* **opencode:** additional permissions
([8dc3942](8dc3942))
* **renovate:** fix mise/codex version regex
([a37b0e8](a37b0e8))
* upgrade trunk ([#967](#967))
([49c3518](49c3518))
* upgrade trunk ([#975](#975))
([c3b6477](c3b6477))


### Features

* **fish/abbr:** wt remove
([51d91f7](51d91f7))
* **nvim/thts:** sort picker by last modified
([ebad483](ebad483))
* **opencode:** enable exa websearch by default
([06d5f9f](06d5f9f))


### Bug Fixes

* **git/alias:** stack-watch rendering
([619c758](619c758))
* **herdr:** match nav up/down to vim keys
([6cb0660](6cb0660))
* **herdr:** remap pane nav + conflicting ghostty agent nav
([184e777](184e777))


### Code Refactoring

* **agents:** trim and scope down AGENTS.md
([32b00aa](32b00aa))
* **yubikey-touch-detector:** run_once_after
([ee3caa1](ee3caa1))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: scottames-github-bot[bot] <162828115+scottames-github-bot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants