Bump vpk from 1.2.0 to 1.2.158

[dependabot]

Updated vpk from 1.2.0 to 1.2.158.

Release notes

Sourced from vpk's releases.

1.2.158

What's Changed

• Fix NodeJSElectron sample for TypeScript 6.0 compatibility by @​caesay in Fix NodeJSElectron sample for TypeScript 6.0 compatibility velopack/velopack#931
• Localize setup disk-space error and use byte units by @​chinaszzt-erio in Localize setup disk-space error and use byte units velopack/velopack#932
• Ignore pyo3 RUSTSEC-2026-0176/0177 advisories in cargo deny by @​caesay in Ignore pyo3 RUSTSEC-2026-0176/0177 advisories in cargo deny velopack/velopack#942
• Move argument validation to command layer, add JSON support, refactor deployment commands by @​caesay in Move argument validation to command layer, add JSON support, refactor deployment commands velopack/velopack#934
• Fix supply-chain CI: bump vite to 8.0.16 to resolve npm audit failure by @​caesay in Fix supply-chain CI: bump vite to 8.0.16 to resolve npm audit failure velopack/velopack#952
• Allow S3 region to be specified at the same time as endpoint by @​caesay in Allow S3 region to be specified at the same time as endpoint velopack/velopack#957
• Ship 64-bit Windows bootstrapper binaries from vpk pack by @​roysyahputra in Ship 64-bit Windows bootstrapper binaries from vpk pack velopack/velopack#944
• Renovate/dotnet packages deny cleanup by @​caesay in Renovate/dotnet packages deny cleanup velopack/velopack#968
• Add NodeJS pre-built sources & add HttpOptions class by @​caesay in Add NodeJS pre-built sources & add HttpOptions class velopack/velopack#969
• Fix MSI quiet-install default location and bracket escaping in packTitle by @​caesay in Fix MSI quiet-install default location and bracket escaping in packTitle velopack/velopack#970
• Use atomic rename on macos by @​caesay in Use atomic rename on macos velopack/velopack#972
• Add timing logs to diagnose slow update apply on EDR machines (#​947) by @​caesay in Add timing logs to diagnose slow update apply on EDR machines (#947) velopack/velopack#974
• Fix supply-chain CI: address new RUSTSEC advisories by @​caesay in Fix supply-chain CI: address new RUSTSEC advisories velopack/velopack#984
• Add new deployment and sources tests by @​caesay in Add new deployment and sources tests velopack/velopack#973
• Fix portable/MSI launcher renamed after update (packTitle vs mainExe) by @​caesay in Fix portable/MSI launcher renamed after update (packTitle vs mainExe) velopack/velopack#985
• Windows installer channel-override tag readers (Setup.exe + MSI) by @​caesay in Windows installer channel-override tag readers (Setup.exe + MSI) velopack/velopack#987
• Make Velopack Flow a first-class update source across all client libraries by @​caesay in Make Velopack Flow a first-class update source across all client libraries velopack/velopack#999
• Fix swapped MSI banner/dialog images, rename to --msiTopBanner and --msiDialogBackground by @​caesay in Fix swapped MSI banner/dialog images, rename to --msiTopBanner and --msiDialogBackground velopack/velopack#1009
• Remove bsdiff fallback; zstd is the only delta patch format by @​caesay in Remove bsdiff fallback; zstd is the only delta patch format velopack/velopack#1010
• Show progress dialog during Windows uninstall by @​caesay in Show progress dialog during Windows uninstall velopack/velopack#1011
• Windows signing: pass /d (content description) for Azure Trusted Signing by @​SamHartleyFixes in Windows signing: pass /d (content description) for Azure Trusted Signing velopack/velopack#1047
• Write EstimatedSize as a REG_DWORD so Windows shows the app size by @​timkonieczny in Write EstimatedSize as a REG_DWORD so Windows shows the app size velopack/velopack#1051
• fix(vpk): safely handle non-JSON error responses in FlowApiExtensions by @​Keboo in fix(vpk): safely handle non-JSON error responses in FlowApiExtensions velopack/velopack#1055
• Lock file maintenance by @​caesay in Lock file maintenance velopack/velopack#1063
• Update all dependencies to latest by @​caesay in Update all dependencies to latest velopack/velopack#1064

New Contributors

• @​chinaszzt-erio made their first contribution in Localize setup disk-space error and use byte units velopack/velopack#932
• @​roysyahputra made their first contribution in Ship 64-bit Windows bootstrapper binaries from vpk pack velopack/velopack#944
• @​SamHartleyFixes made their first contribution in Windows signing: pass /d (content description) for Azure Trusted Signing velopack/velopack#1047
• @​timkonieczny made their first contribution in Write EstimatedSize as a REG_DWORD so Windows shows the app size velopack/velopack#1051

Dependency Updates

Expand to see all changed dependencies

• Pin dependencies by @​renovate[bot] in Pin dependencies velopack/velopack#925
• Pin dependencies by @​renovate[bot] in Pin dependencies velopack/velopack#926
• Lock file maintenance by @​renovate[bot] in Lock file maintenance velopack/velopack#930
• Update npm packages by @​renovate[bot] in Update npm packages velopack/velopack#927
• Update sample dotnet packages by @​renovate[bot] in Update sample dotnet packages velopack/velopack#940
• Update npm packages by @​renovate[bot] in Update npm packages velopack/velopack#937
• Update sample js packages by @​renovate[bot] in Update sample js packages velopack/velopack#951
• Update dotnet test packages to 18.6.0 by @​renovate[bot] in Update dotnet test packages to 18.6.0 velopack/velopack#938
• Update dotnet packages by @​renovate[bot] in Update dotnet packages velopack/velopack#949
• Update sample dotnet packages to 1.2.0 by @​renovate[bot] in Update sample dotnet packages to 1.2.0 velopack/velopack#950
• Lock file maintenance by @​renovate[bot] in Lock file maintenance velopack/velopack#943
• Update dependency WixToolset.Dtf.WindowsInstaller to v7 by @​renovate[bot] in Update dependency WixToolset.Dtf.WindowsInstaller to v7 velopack/velopack#939
  ... (truncated)

1.2.110-ge826545

What's Changed

• Fix NodeJSElectron sample for TypeScript 6.0 compatibility by @​caesay in Fix NodeJSElectron sample for TypeScript 6.0 compatibility velopack/velopack#931
• Localize setup disk-space error and use byte units by @​chinaszzt-erio in Localize setup disk-space error and use byte units velopack/velopack#932
• Ignore pyo3 RUSTSEC-2026-0176/0177 advisories in cargo deny by @​caesay in Ignore pyo3 RUSTSEC-2026-0176/0177 advisories in cargo deny velopack/velopack#942
• Move argument validation to command layer, add JSON support, refactor deployment commands by @​caesay in Move argument validation to command layer, add JSON support, refactor deployment commands velopack/velopack#934
• Fix supply-chain CI: bump vite to 8.0.16 to resolve npm audit failure by @​caesay in Fix supply-chain CI: bump vite to 8.0.16 to resolve npm audit failure velopack/velopack#952
• Allow S3 region to be specified at the same time as endpoint by @​caesay in Allow S3 region to be specified at the same time as endpoint velopack/velopack#957
• Ship 64-bit Windows bootstrapper binaries from vpk pack by @​roysyahputra in Ship 64-bit Windows bootstrapper binaries from vpk pack velopack/velopack#944
• Renovate/dotnet packages deny cleanup by @​caesay in Renovate/dotnet packages deny cleanup velopack/velopack#968
• Add NodeJS pre-built sources & add HttpOptions class by @​caesay in Add NodeJS pre-built sources & add HttpOptions class velopack/velopack#969
• Fix MSI quiet-install default location and bracket escaping in packTitle by @​caesay in Fix MSI quiet-install default location and bracket escaping in packTitle velopack/velopack#970
• Use atomic rename on macos by @​caesay in Use atomic rename on macos velopack/velopack#972
• Add timing logs to diagnose slow update apply on EDR machines (#​947) by @​caesay in Add timing logs to diagnose slow update apply on EDR machines (#947) velopack/velopack#974
• Fix supply-chain CI: address new RUSTSEC advisories by @​caesay in Fix supply-chain CI: address new RUSTSEC advisories velopack/velopack#984
• Add new deployment and sources tests by @​caesay in Add new deployment and sources tests velopack/velopack#973
• Fix portable/MSI launcher renamed after update (packTitle vs mainExe) by @​caesay in Fix portable/MSI launcher renamed after update (packTitle vs mainExe) velopack/velopack#985
• Windows installer channel-override tag readers (Setup.exe + MSI) by @​caesay in Windows installer channel-override tag readers (Setup.exe + MSI) velopack/velopack#987
• Make Velopack Flow a first-class update source across all client libraries by @​caesay in Make Velopack Flow a first-class update source across all client libraries velopack/velopack#999

New Contributors

• @​chinaszzt-erio made their first contribution in Localize setup disk-space error and use byte units velopack/velopack#932
• @​roysyahputra made their first contribution in Ship 64-bit Windows bootstrapper binaries from vpk pack velopack/velopack#944

Dependency Updates

Expand to see all changed dependencies

• Pin dependencies by @​renovate[bot] in Pin dependencies velopack/velopack#925
• Pin dependencies by @​renovate[bot] in Pin dependencies velopack/velopack#926
• Lock file maintenance by @​renovate[bot] in Lock file maintenance velopack/velopack#930
• Update npm packages by @​renovate[bot] in Update npm packages velopack/velopack#927
• Update sample dotnet packages by @​renovate[bot] in Update sample dotnet packages velopack/velopack#940
• Update npm packages by @​renovate[bot] in Update npm packages velopack/velopack#937
• Update sample js packages by @​renovate[bot] in Update sample js packages velopack/velopack#951
• Update dotnet test packages to 18.6.0 by @​renovate[bot] in Update dotnet test packages to 18.6.0 velopack/velopack#938
• Update dotnet packages by @​renovate[bot] in Update dotnet packages velopack/velopack#949
• Update sample dotnet packages to 1.2.0 by @​renovate[bot] in Update sample dotnet packages to 1.2.0 velopack/velopack#950
• Lock file maintenance by @​renovate[bot] in Lock file maintenance velopack/velopack#943
• Update dependency WixToolset.Dtf.WindowsInstaller to v7 by @​renovate[bot] in Update dependency WixToolset.Dtf.WindowsInstaller to v7 velopack/velopack#939
• Update sample js packages by @​renovate[bot] in Update sample js packages velopack/velopack#961
• Update dependency System.IO.Packaging to 10.0.9 by @​renovate[bot] in Update dependency System.IO.Packaging to 10.0.9 velopack/velopack#959
• Update dependency @​types/node to v25.9.4 - autoclosed by @​renovate[bot] in Update dependency @types/node to v25.9.4 - autoclosed velopack/velopack#958
• Update codecov/codecov-action action to v7 by @​renovate[bot] in Update codecov/codecov-action action to v7 velopack/velopack#963
• Lock file maintenance by @​renovate[bot] in Lock file maintenance velopack/velopack#965
• Update rust crates to 0.29 by @​renovate[bot] in Update rust crates to 0.29 velopack/velopack#962
• Update dotnet packages by @​renovate[bot] in Update dotnet packages velopack/velopack#960
• Update actions/checkout action to v7 by @​renovate[bot] in Update actions/checkout action to v7 velopack/velopack#980
• Update dotnet packages by @​renovate[bot] in Update dotnet packages velopack/velopack#976
• Update dependency electron to v43 by @​renovate[bot] in Update dependency electron to v43 velopack/velopack#977
  ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)