Skip to content

Commit 581e9dd

Browse files
Update all patch updates (#8085)
This PR contains the following updates: | Package | Type | Update | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---|---|---| | [anthropics/claude-code-action](https://redirect.github.com/anthropics/claude-code-action) | action | patch | `v1.0.123` → `v1.0.133` | ![age](https://developer.mend.io/api/mc/badges/age/github-tags/anthropics%2fclaude-code-action/v1.0.133?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/anthropics%2fclaude-code-action/v1.0.123/v1.0.133?slim=true) | | [crate-ci/typos](https://redirect.github.com/crate-ci/typos) | action | patch | `v1.46.2` → `v1.46.3` | ![age](https://developer.mend.io/api/mc/badges/age/github-tags/crate-ci%2ftypos/v1.46.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/crate-ci%2ftypos/v1.46.2/v1.46.3?slim=true) | | [jiff](https://redirect.github.com/BurntSushi/jiff) | workspace.dependencies | patch | `0.2.24` → `0.2.26` | ![age](https://developer.mend.io/api/mc/badges/age/crate/jiff/0.2.26?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/jiff/0.2.24/0.2.26?slim=true) | | [lance](https://redirect.github.com/lance-format/lance) | dependencies | patch | `6.0.0` → `6.0.1` | ![age](https://developer.mend.io/api/mc/badges/age/crate/lance/6.0.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/lance/6.0.0/6.0.1?slim=true) | | [lance-encoding](https://redirect.github.com/lance-format/lance) | dependencies | patch | `6.0.0` → `6.0.1` | ![age](https://developer.mend.io/api/mc/badges/age/crate/lance-encoding/6.0.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/lance-encoding/6.0.0/6.0.1?slim=true) | | [log](https://redirect.github.com/rust-lang/log) | workspace.dependencies | patch | `0.4.29` → `0.4.30` | ![age](https://developer.mend.io/api/mc/badges/age/crate/log/0.4.30?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/log/0.4.29/0.4.30?slim=true) | | [mimalloc](https://redirect.github.com/purpleprotocol/mimalloc_rust) | workspace.dependencies | patch | `0.1.50` → `0.1.52` | ![age](https://developer.mend.io/api/mc/badges/age/crate/mimalloc/0.1.52?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/mimalloc/0.1.50/0.1.52?slim=true) | | [release-drafter/release-drafter](https://redirect.github.com/release-drafter/release-drafter) | action | patch | `v7.3.0` → `v7.3.1` | ![age](https://developer.mend.io/api/mc/badges/age/github-tags/release-drafter%2frelease-drafter/v7.3.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/release-drafter%2frelease-drafter/v7.3.0/v7.3.1?slim=true) | | [reqwest](https://redirect.github.com/seanmonstar/reqwest) | workspace.dependencies | patch | `0.13.3` → `0.13.4` | ![age](https://developer.mend.io/api/mc/badges/age/crate/reqwest/0.13.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/reqwest/0.13.3/0.13.4?slim=true) | | [serde_json](https://redirect.github.com/serde-rs/json) | workspace.dependencies | patch | `1.0.149` → `1.0.150` | ![age](https://developer.mend.io/api/mc/badges/age/crate/serde_json/1.0.150?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/serde_json/1.0.149/1.0.150?slim=true) | | [similar](https://redirect.github.com/mitsuhiko/similar) | workspace.dependencies | patch | `3.1.0` → `3.1.1` | ![age](https://developer.mend.io/api/mc/badges/age/crate/similar/3.1.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/similar/3.1.0/3.1.1?slim=true) | | [tar](https://redirect.github.com/composefs/tar-rs) | workspace.dependencies | patch | `0.4.45` → `0.4.46` | ![age](https://developer.mend.io/api/mc/badges/age/crate/tar/0.4.46?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/tar/0.4.45/0.4.46?slim=true) | | [tower-http](https://redirect.github.com/tower-rs/tower-http) | dependencies | patch | `0.6.10` → `0.6.11` | ![age](https://developer.mend.io/api/mc/badges/age/crate/tower-http/0.6.11?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/tower-http/0.6.10/0.6.11?slim=true) | | [vite](https://vite.dev) ([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite)) | devDependencies | patch | [`8.0.13` → `8.0.14`](https://renovatebot.com/diffs/npm/vite/8.0.13/8.0.14) | ![age](https://developer.mend.io/api/mc/badges/age/npm/vite/8.0.14?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/vite/8.0.13/8.0.14?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/357) for more information. --- ### Release Notes <details> <summary>anthropics/claude-code-action (anthropics/claude-code-action)</summary> ### [`v1.0.133`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.133) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.132...v1.0.133) ##### What's Changed - Use workload identity federation for Claude auth in CI workflows by [@&#8203;ashwin-ant](https://redirect.github.com/ashwin-ant) in [#&#8203;1344](https://redirect.github.com/anthropics/claude-code-action/pull/1344) **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.133> ### [`v1.0.132`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.132) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.131...v1.0.132) **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.132> ### [`v1.0.131`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.131) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.130...v1.0.131) **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.131> ### [`v1.0.130`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.130) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.129...v1.0.130) ##### What's Changed - Add Workload Identity Federation (OIDC) authentication support by [@&#8203;ashwin-ant](https://redirect.github.com/ashwin-ant) in [#&#8203;1338](https://redirect.github.com/anthropics/claude-code-action/pull/1338) **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.130> ### [`v1.0.129`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.129) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.128...v1.0.129) **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.129> ### [`v1.0.128`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.128) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.127...v1.0.128) **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.128> ### [`v1.0.127`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.127) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.126...v1.0.127) ##### What's Changed - Refactor allowed\_bots actor resolution by [@&#8203;ashwin-ant](https://redirect.github.com/ashwin-ant) in [#&#8203;1330](https://redirect.github.com/anthropics/claude-code-action/pull/1330) **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.127> ### [`v1.0.126`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.126) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.125...v1.0.126) **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.126> ### [`v1.0.125`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.125) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.124...v1.0.125) ##### What's Changed - Simplify comment tool instructions in prompt by [@&#8203;ashwin-ant](https://redirect.github.com/ashwin-ant) in [#&#8203;1328](https://redirect.github.com/anthropics/claude-code-action/pull/1328) **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.125> ### [`v1.0.124`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.124) [Compare Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.123...v1.0.124) ##### What's Changed - fix: add parentheses to fix operator precedence in co-author check by [@&#8203;FuturizeRush](https://redirect.github.com/FuturizeRush) in [#&#8203;1199](https://redirect.github.com/anthropics/claude-code-action/pull/1199) - Strengthen simplified tag-mode prompt (USE\_SIMPLE\_PROMPT) by [@&#8203;ashwin-ant](https://redirect.github.com/ashwin-ant) in [#&#8203;1313](https://redirect.github.com/anthropics/claude-code-action/pull/1313) - Fix prettier formatting in create-prompt by [@&#8203;ashwin-ant](https://redirect.github.com/ashwin-ant) in [#&#8203;1325](https://redirect.github.com/anthropics/claude-code-action/pull/1325) ##### New Contributors - [@&#8203;FuturizeRush](https://redirect.github.com/FuturizeRush) made their first contribution in [#&#8203;1199](https://redirect.github.com/anthropics/claude-code-action/pull/1199) **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.124> </details> <details> <summary>crate-ci/typos (crate-ci/typos)</summary> ### [`v1.46.3`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.46.3) [Compare Source](https://redirect.github.com/crate-ci/typos/compare/v1.46.2...v1.46.3) #### \[1.46.3] - 2026-05-23 ##### Fixes - Don't correct to `sequentials` - Don't correct to `subdolder` </details> <details> <summary>BurntSushi/jiff (jiff)</summary> ### [`v0.2.26`](https://redirect.github.com/BurntSushi/jiff/blob/HEAD/CHANGELOG.md#0226-2026-05-25) [Compare Source](https://redirect.github.com/BurntSushi/jiff/compare/0.2.25...0.2.26) \=================== This release has a couple enhancements. Firstly, Jiff now uses `windows-link` for calling FFI routines on Windows instead of `windows-sys`. Using `windows-link` means less churn and fewer duplicates in the dependency graph. Secondly, a new `jiff-sqlx 0.2.0` release has been put out to support `sqlx 0.9.0`. Enhancements: - [#&#8203;538](https://redirect.github.com/BurntSushi/jiff/pull/538): Replace use of `windows-sys` with `windows-link` and inline bindings. - [#&#8203;561](https://redirect.github.com/BurntSushi/jiff/pull/561): Update `jiff-sqlx` to use `sqlx 0.9.0` and release `jiff-sqlx 0.2.0`. Bug fixes: - [#&#8203;548](https://redirect.github.com/BurntSushi/jiff/pull/548): Absolutetize incorrect relative size terms in the documentation of `RoundMode`. ### [`v0.2.25`](https://redirect.github.com/BurntSushi/jiff/blob/HEAD/CHANGELOG.md#0225-2026-05-24) [Compare Source](https://redirect.github.com/BurntSushi/jiff/compare/0.2.24...0.2.25) \=================== This release updates Jiff's bundled copy of the \[IANA Time Zone Database] to `2026b`. See the [`2026b` release announcement] for more details. [`2026b` release announcement]: https://lists.iana.org//hyperkitty/list/tz-announce@iana.org/thread/VX2Z3CBO6KHTYZNBBKFFWM7ZCI6TVCXP/ </details> <details> <summary>lance-format/lance (lance)</summary> ### [`v6.0.1`](https://redirect.github.com/lance-format/lance/releases/tag/v6.0.1) [Compare Source](https://redirect.github.com/lance-format/lance/compare/v6.0.0...v6.0.1) <!-- Release notes generated using configuration in .github/release.yml at v6.0.1 --> ##### What's Changed ##### Bug Fixes 🐛 - fix: drop stale has\_all\_zeros guard so block bitpack engages on rep/def by [@&#8203;pengw0048](https://redirect.github.com/pengw0048) in [#&#8203;6629](https://redirect.github.com/lance-format/lance/pull/6629) - fix(optimize): fix stale OCC read\_version in distributed compaction to prevent row resurrection by [@&#8203;xiaguanglei](https://redirect.github.com/xiaguanglei) in [#&#8203;6653](https://redirect.github.com/lance-format/lance/pull/6653) - fix: avoid nested tokio runtime panic in AWS credential vendor by [@&#8203;jackye1995](https://redirect.github.com/jackye1995) in [#&#8203;6689](https://redirect.github.com/lance-format/lance/pull/6689) - fix: simplify column-map expressions before physical planning by [@&#8203;westonpace](https://redirect.github.com/westonpace) in [#&#8203;6698](https://redirect.github.com/lance-format/lance/pull/6698) - fix(encoding): support sparse boolean lists in full-zip encoding by [@&#8203;shenganzhang](https://redirect.github.com/shenganzhang) in [#&#8203;6723](https://redirect.github.com/lance-format/lance/pull/6723) - fix: use multipart-aware put for transaction file writes by [@&#8203;jackye1995](https://redirect.github.com/jackye1995) in [#&#8203;6750](https://redirect.github.com/lance-format/lance/pull/6750) - fix: complex all-null list struct decoding by [@&#8203;Xuanwo](https://redirect.github.com/Xuanwo) in [#&#8203;6771](https://redirect.github.com/lance-format/lance/pull/6771) - fix: decode constant list struct children by [@&#8203;Xuanwo](https://redirect.github.com/Xuanwo) in [#&#8203;6801](https://redirect.github.com/lance-format/lance/pull/6801) - fix(encoding): fail cleanly when blob data fails to load by [@&#8203;nsLance](https://redirect.github.com/nsLance) in [#&#8203;6817](https://redirect.github.com/lance-format/lance/pull/6817) **Full Changelog**: <lance-format/lance@v6.0.0...v6.0.1> </details> <details> <summary>rust-lang/log (log)</summary> ### [`v0.4.30`](https://redirect.github.com/rust-lang/log/blob/HEAD/CHANGELOG.md#0430---2026-05-21) [Compare Source](https://redirect.github.com/rust-lang/log/compare/0.4.29...0.4.30) ##### What's Changed - Support capturing of `std::net` types by [@&#8203;KodrAus](https://redirect.github.com/KodrAus) in [#&#8203;724](https://redirect.github.com/rust-lang/log/pull/724) ##### New Contributors - [@&#8203;V0ldek](https://redirect.github.com/V0ldek) made their first contribution in [#&#8203;720](https://redirect.github.com/rust-lang/log/pull/720) - [@&#8203;woodruffw](https://redirect.github.com/woodruffw) made their first contribution in [#&#8203;723](https://redirect.github.com/rust-lang/log/pull/723) **Full Changelog**: <rust-lang/log@0.4.29...0.4.30> ##### Notable Changes - MSRV is bumped to 1.71.0 in [#&#8203;723](https://redirect.github.com/rust-lang/log/pull/723) </details> <details> <summary>purpleprotocol/mimalloc_rust (mimalloc)</summary> ### [`v0.1.52`](https://redirect.github.com/purpleprotocol/mimalloc_rust/releases/tag/v0.1.52): Version 0.1.52 [Compare Source](https://redirect.github.com/purpleprotocol/mimalloc_rust/compare/v0.1.51...v0.1.52) ##### Changes - Expose `mi_stats_get_json()`. - Fix ARM compilation. ### [`v0.1.51`](https://redirect.github.com/purpleprotocol/mimalloc_rust/releases/tag/v0.1.51): Version 0.1.51 [Compare Source](https://redirect.github.com/purpleprotocol/mimalloc_rust/compare/v0.1.50...v0.1.51) ##### Changes - Mimalloc bumped to `v3.3.2` and `v2.3.2`. - Compile with msvc on windows. </details> <details> <summary>release-drafter/release-drafter (release-drafter/release-drafter)</summary> ### [`v7.3.1`](https://redirect.github.com/release-drafter/release-drafter/releases/tag/v7.3.1) [Compare Source](https://redirect.github.com/release-drafter/release-drafter/compare/v7.3.0...v7.3.1) ### What's Changed #### Bug Fixes - fix: output name and tag\_name in dry-run mode ([#&#8203;1625](https://redirect.github.com/release-drafter/release-drafter/issues/1625)) [@&#8203;cchanche](https://redirect.github.com/cchanche) #### Maintenance - chore(deps): update graphql-codegen to 7.0.0 ([#&#8203;1619](https://redirect.github.com/release-drafter/release-drafter/issues/1619)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update dependency nock to 14.0.15 ([#&#8203;1609](https://redirect.github.com/release-drafter/release-drafter/issues/1609)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update graphql-codegen ([#&#8203;1615](https://redirect.github.com/release-drafter/release-drafter/issues/1615)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update dependency typescript to 6.0.3 ([#&#8203;1610](https://redirect.github.com/release-drafter/release-drafter/issues/1610)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - ci(deps): update actions/download-artifact action to v8.0.1 ([#&#8203;1620](https://redirect.github.com/release-drafter/release-drafter/issues/1620)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update dependency [@&#8203;types/node](https://redirect.github.com/types/node) to 24.12.3 ([#&#8203;1608](https://redirect.github.com/release-drafter/release-drafter/issues/1608)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update vitest to 4.1.5 ([#&#8203;1612](https://redirect.github.com/release-drafter/release-drafter/issues/1612)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update dependency [@&#8203;biomejs/biome](https://redirect.github.com/biomejs/biome) to 2.4.15 ([#&#8203;1607](https://redirect.github.com/release-drafter/release-drafter/issues/1607)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update dependency vite to 8.0.11 ([#&#8203;1611](https://redirect.github.com/release-drafter/release-drafter/issues/1611)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - ci(deps): pin dependencies ([#&#8203;1606](https://redirect.github.com/release-drafter/release-drafter/issues/1606)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) #### Dependency Updates <details> <summary>8 changes</summary> - chore(deps): update node.js to v24.15.0 ([#&#8203;1616](https://redirect.github.com/release-drafter/release-drafter/issues/1616)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update vite to v8.0.13 and vitest to v4.1.6 ([#&#8203;1624](https://redirect.github.com/release-drafter/release-drafter/issues/1624)) [@&#8203;cchanche](https://redirect.github.com/cchanche) - fix(deps): update dependency semver to 7.8.0 ([#&#8203;1622](https://redirect.github.com/release-drafter/release-drafter/issues/1622)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update npm tool constraint to 11.14.1 ([#&#8203;1617](https://redirect.github.com/release-drafter/release-drafter/issues/1617)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - fix(deps): update dependency zod to 4.4.3 ([#&#8203;1618](https://redirect.github.com/release-drafter/release-drafter/issues/1618)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - fix(deps): update actions ([#&#8203;1613](https://redirect.github.com/release-drafter/release-drafter/issues/1613)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - chore(deps): update dependency [@&#8203;biomejs/biome](https://redirect.github.com/biomejs/biome) to 2.4.15 ([#&#8203;1607](https://redirect.github.com/release-drafter/release-drafter/issues/1607)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) - fix(deps): update dependency yaml to 2.8.4 ([#&#8203;1614](https://redirect.github.com/release-drafter/release-drafter/issues/1614)) @&#8203;[renovate\[bot\]](https://redirect.github.com/apps/renovate) </details> **Full Changelog**: <release-drafter/release-drafter@v7.3.0...v7.3.1> </details> <details> <summary>seanmonstar/reqwest (reqwest)</summary> ### [`v0.13.4`](https://redirect.github.com/seanmonstar/reqwest/blob/HEAD/CHANGELOG.md#v0134) [Compare Source](https://redirect.github.com/seanmonstar/reqwest/compare/v0.13.3...v0.13.4) - Add `ClientBuilder::tls_sslkeylogfile(bool)` option to allow using the related environment variable. - Add `ClientBuilder::http2_keep_alive_*` options for the `blocking` client. - Add TLS 1.3 support when using `native-tls` backend. - Fix redirect handling to strip sensitive headers when the scheme changes. - Fix HTTP/3 happy-eyeball connection creation. - Upgrade hickory-resolver to 0.26. </details> <details> <summary>serde-rs/json (serde_json)</summary> ### [`v1.0.150`](https://redirect.github.com/serde-rs/json/releases/tag/v1.0.150) [Compare Source](https://redirect.github.com/serde-rs/json/compare/v1.0.149...v1.0.150) - Reject non-string enum object keys ([#&#8203;1324](https://redirect.github.com/serde-rs/json/issues/1324), thanks [@&#8203;puneetdixit200](https://redirect.github.com/puneetdixit200)) </details> <details> <summary>mitsuhiko/similar (similar)</summary> ### [`v3.1.1`](https://redirect.github.com/mitsuhiko/similar/blob/HEAD/CHANGELOG.md#311) [Compare Source](https://redirect.github.com/mitsuhiko/similar/compare/3.1.0...3.1.1) - Fixed `DiffOp` cursor positions when compacting adjacent inserts/deletes and in `Algorithm::Histogram` full-replacement output, ensuring operations form contiguous ranges. [#&#8203;95](https://redirect.github.com/mitsuhiko/similar/issues/95) - Renamed sample diff input files to a lexicographic `caseNN.01.before_*` / `caseNN.02.after_*` scheme. </details> <details> <summary>composefs/tar-rs (tar)</summary> ### [`v0.4.46`](https://redirect.github.com/composefs/tar-rs/releases/tag/0.4.46) [Compare Source](https://redirect.github.com/composefs/tar-rs/compare/0.4.45...0.4.46) #### Security - archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm) by [@&#8203;cgwalters](https://redirect.github.com/cgwalters) in [#&#8203;454](https://redirect.github.com/composefs/tar-rs/pull/454) See also <GHSA-3cv2-h65g-fgmm> #### Other changes - ci: Fix and re-enable reverse dependency testing by [@&#8203;cgwalters](https://redirect.github.com/cgwalters) in [#&#8203;444](https://redirect.github.com/composefs/tar-rs/pull/444) - Update astral-tokio-tar requirement from 0.5 to 0.6 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;446](https://redirect.github.com/composefs/tar-rs/pull/446) - Update some links by [@&#8203;atouchet](https://redirect.github.com/atouchet) in [#&#8203;445](https://redirect.github.com/composefs/tar-rs/pull/445) - Add support of absolute paths by [@&#8203;zxvfc](https://redirect.github.com/zxvfc) in [#&#8203;426](https://redirect.github.com/composefs/tar-rs/pull/426) - docs: Expand notes on concurrent mutations and following symlinks by [@&#8203;cgwalters](https://redirect.github.com/cgwalters) in [#&#8203;453](https://redirect.github.com/composefs/tar-rs/pull/453) - Update repo links by [@&#8203;cgwalters](https://redirect.github.com/cgwalters) in [#&#8203;451](https://redirect.github.com/composefs/tar-rs/pull/451) - ci: Add crates.io trusted publishing workflow by [@&#8203;cgwalters](https://redirect.github.com/cgwalters) in [#&#8203;456](https://redirect.github.com/composefs/tar-rs/pull/456) - Release 0.4.46 by [@&#8203;cgwalters](https://redirect.github.com/cgwalters) in [#&#8203;455](https://redirect.github.com/composefs/tar-rs/pull/455) #### New Contributors - [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] made their first contribution in [#&#8203;446](https://redirect.github.com/composefs/tar-rs/pull/446) - [@&#8203;atouchet](https://redirect.github.com/atouchet) made their first contribution in [#&#8203;445](https://redirect.github.com/composefs/tar-rs/pull/445) - [@&#8203;zxvfc](https://redirect.github.com/zxvfc) made their first contribution in [#&#8203;426](https://redirect.github.com/composefs/tar-rs/pull/426) **Full Changelog**: <composefs/tar-rs@0.4.45...0.4.46> </details> <details> <summary>tower-rs/tower-http (tower-http)</summary> ### [`v0.6.11`](https://redirect.github.com/tower-rs/tower-http/releases/tag/tower-http-0.6.11) [Compare Source](https://redirect.github.com/tower-rs/tower-http/compare/tower-http-0.6.10...tower-http-0.6.11) #### Added - `set-header`: add `SetMultipleResponseHeadersLayer` and `SetMultipleResponseHeader` for setting multiple response headers at once. Supports `overriding`, `appending`, and `if_not_present` modes. Header values can be fixed or computed dynamically via closures ([#&#8203;672]) ```rust use http::{Response, header::{self, HeaderValue}}; use http_body::Body as _; use tower_http::set_header::response::SetMultipleResponseHeadersLayer; let layer = SetMultipleResponseHeadersLayer::overriding(vec![ (header::X_FRAME_OPTIONS, HeaderValue::from_static("DENY")).into(), (header::CONTENT_LENGTH, |res: &Response<MyBody>| { res.body().size_hint().exact() .map(|size| HeaderValue::from_str(&size.to_string()).unwrap()) }).into(), ]); ``` - `set-header`: add `SetMultipleRequestHeadersLayer` and `SetMultipleRequestHeaders` for setting multiple request headers at once, mirroring the response-side API ([#&#8203;677]) - `classify`: add `From<i32>` and `From<NonZeroI32>` impls for `GrpcCode`. Unrecognized status codes map to `GrpcCode::Unknown` ([#&#8203;506]) #### Changed - `compression`: compress `application/grpc-web` responses. Previously all `application/grpc*` content types were excluded from compression; now only `application/grpc` (non-web) is excluded ([#&#8203;408]) #### Fixed - `fs`: fix `ServeDir` returning 500 instead of 405 for non-GET/HEAD requests when `call_fallback_on_method_not_allowed` is enabled but no fallback service is configured ([#&#8203;587]) - `fs`: remove duplicate `cfg` attribute on `is_reserved_dos_name` ([#&#8203;675]) [#&#8203;408]: https://redirect.github.com/tower-rs/tower-http/pull/408 [#&#8203;506]: https://redirect.github.com/tower-rs/tower-http/pull/506 [#&#8203;587]: https://redirect.github.com/tower-rs/tower-http/pull/587 [#&#8203;672]: https://redirect.github.com/tower-rs/tower-http/pull/672 [#&#8203;675]: https://redirect.github.com/tower-rs/tower-http/pull/675 [#&#8203;677]: https://redirect.github.com/tower-rs/tower-http/pull/677 #### All PRs - ci: fix flaky encoding test, add nightly stress test job by [@&#8203;jlizen](https://redirect.github.com/jlizen) in [#&#8203;670](https://redirect.github.com/tower-rs/tower-http/pull/670) - ci: use static timeout in stress-test workflow by [@&#8203;jlizen](https://redirect.github.com/jlizen) in [#&#8203;671](https://redirect.github.com/tower-rs/tower-http/pull/671) - Fix serve\_dir method not allowed handling when no fallback is configured by [@&#8203;soerenmeier](https://redirect.github.com/soerenmeier) in [#&#8203;587](https://redirect.github.com/tower-rs/tower-http/pull/587) - Do compress grpc-web responses by [@&#8203;bouk](https://redirect.github.com/bouk) in [#&#8203;408](https://redirect.github.com/tower-rs/tower-http/pull/408) - add From<i32> impl for GrpcCode by [@&#8203;gshipilov](https://redirect.github.com/gshipilov) in [#&#8203;506](https://redirect.github.com/tower-rs/tower-http/pull/506) - feat(set\_header): refactor and improve multiple header middleware by [@&#8203;seun-ja](https://redirect.github.com/seun-ja) in [#&#8203;672](https://redirect.github.com/tower-rs/tower-http/pull/672) - Remove duplicate cfg attribute for is\_reserved\_dos\_name by [@&#8203;GlenDC](https://redirect.github.com/GlenDC) in [#&#8203;675](https://redirect.github.com/tower-rs/tower-http/pull/675) - feat: set multiple request header by [@&#8203;seun-ja](https://redirect.github.com/seun-ja) in [#&#8203;677](https://redirect.github.com/tower-rs/tower-http/pull/677) - chore: release 0.6.11 by [@&#8203;jlizen](https://redirect.github.com/jlizen) in [#&#8203;673](https://redirect.github.com/tower-rs/tower-http/pull/673) #### New Contributors - [@&#8203;gshipilov](https://redirect.github.com/gshipilov) made their first contribution in [#&#8203;506](https://redirect.github.com/tower-rs/tower-http/pull/506) - [@&#8203;seun-ja](https://redirect.github.com/seun-ja) made their first contribution in [#&#8203;672](https://redirect.github.com/tower-rs/tower-http/pull/672) **Full Changelog**: <tower-rs/tower-http@tower-http-0.6.10...tower-http-0.6.11> </details> <details> <summary>vitejs/vite (vite)</summary> ### [`v8.0.14`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-8014-2026-05-21-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v8.0.13...v8.0.14) ##### Features - update rolldown to 1.0.2 ([#&#8203;22484](https://redirect.github.com/vitejs/vite/issues/22484)) ([96efc88](https://redirect.github.com/vitejs/vite/commit/96efc88570b6a6ddf1a910f106920cbac07b3cf0)) ##### Bug Fixes - **deps:** update all non-major dependencies ([#&#8203;22471](https://redirect.github.com/vitejs/vite/issues/22471)) ([98b8163](https://redirect.github.com/vitejs/vite/commit/98b81632139d51820f82036e58d6fbbf122b77b3)) - **dev:** handle errors when sending messages to vite server ([#&#8203;22450](https://redirect.github.com/vitejs/vite/issues/22450)) ([e8e9a34](https://redirect.github.com/vitejs/vite/commit/e8e9a34dcf2540139de558a10187630884d10217)) - **html:** handle trailing slash paths in transformIndexHtml ([#&#8203;22480](https://redirect.github.com/vitejs/vite/issues/22480)) ([5d94d1b](https://redirect.github.com/vitejs/vite/commit/5d94d1bffdb2a15de9341194d89baec86ce1f693)) - **optimizer:** pass oxc jsx options to transformSync in dependency scan ([#&#8203;22342](https://redirect.github.com/vitejs/vite/issues/22342)) ([b3132da](https://redirect.github.com/vitejs/vite/commit/b3132dacea9c6e0cf526cd9f0f09d850f577c262)) ##### Miscellaneous Chores - **deps:** update rolldown-related dependencies ([#&#8203;22470](https://redirect.github.com/vitejs/vite/issues/22470)) ([7cb728e](https://redirect.github.com/vitejs/vite/commit/7cb728eb629cc677661f1bc52a044ffc0b87fc7f)) - remove irrelevant commits from changelog ([2c69495](https://redirect.github.com/vitejs/vite/commit/2c69495f250edf01132d4a20128de19dbe836086)) ##### Code Refactoring - **glob:** do not rewrite import path for absolute base ([#&#8203;22310](https://redirect.github.com/vitejs/vite/issues/22310)) ([0ae2844](https://redirect.github.com/vitejs/vite/commit/0ae2844ab6d6d1ccf78a2975b8132769fc35b302)) ##### Tests - **css:** sass does not use main field ([#&#8203;22449](https://redirect.github.com/vitejs/vite/issues/22449)) ([ebf39a0](https://redirect.github.com/vitejs/vite/commit/ebf39a04329ddc6ba765e006a5d463680a952270)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vortex-data/vortex). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTQuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE5NC4wIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6WyJjaGFuZ2Vsb2cvY2hvcmUiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1 parent 0ec59d3 commit 581e9dd

7 files changed

Lines changed: 235 additions & 309 deletions

File tree

.github/workflows/claude-review.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -242,7 +242,7 @@ jobs:
242242

243243
- name: Run Claude Code in review-only mode
244244
id: claude
245-
uses: anthropics/claude-code-action@51ea8ea73a139f2a74ff649e3092c25a904aed7e # v1.0.123
245+
uses: anthropics/claude-code-action@787c5a0ce96a9a6cfb050ea0c8f4c05f2447c251 # v1.0.133
246246
with:
247247
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
248248
# This workflow deliberately uses the built-in token because it only needs

.github/workflows/claude-write.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -197,7 +197,7 @@ jobs:
197197

198198
- name: Run Claude Code
199199
id: claude
200-
uses: anthropics/claude-code-action@51ea8ea73a139f2a74ff649e3092c25a904aed7e # v1.0.123
200+
uses: anthropics/claude-code-action@787c5a0ce96a9a6cfb050ea0c8f4c05f2447c251 # v1.0.133
201201
with:
202202
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
203203
github_token: ${{ steps.app-token.outputs.token }}

.github/workflows/release-drafter.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
runs-on: ubuntu-latest
2828
timeout-minutes: 10
2929
steps:
30-
- uses: release-drafter/release-drafter@c2e2804cc59f45f57076a99af580d0fedb697927 # v7.3.0
30+
- uses: release-drafter/release-drafter@693d20e7c1ce1a81d3a41962f85914253b518449 # v7.3.1
3131
with:
3232
commitish: ${{ github.ref_name }}
3333
prerelease: ${{ github.event_name == 'workflow_dispatch' }}

.github/workflows/typos.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,4 +21,4 @@ jobs:
2121
- name: Checkout Actions Repository
2222
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2323
- name: Spell Check Repo
24-
uses: crate-ci/typos@aca895bf05aec0cb7dffa6f94495e923224d9f17 # v1.46.2
24+
uses: crate-ci/typos@7b04f660f4ee4f048d18fd341887cf28dfbedfe2 # v1.46.3

0 commit comments

Comments
 (0)