Update dependency github:eljulians/skillfile to v1.9.2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github:eljulians/skillfile	tools	minor	v1.7.1 → v1.9.2

---

Release Notes

eljulians/skillfile (github:eljulians/skillfile)

v1.9.2

Compare Source

Changed

• Rust 1.88 is required for source builds - cargo install --locked skillfile and other source builds now require Rust 1.88 or newer; prebuilt installs are unaffected.
• Dependency refresh - bumped ureq to 3.4.0, thiserror to 2.0.20, similar to 3.1.2, clap_complete to 4.6.9, html-escape to 0.2.15, shlex to 2.0.1, toml to 1.1.4, ratatui to 0.30.2, and serial_test to 3.5.0.

Fixed

• Re-running skillfile init preserves tab-separated install lines - existing platform configuration is now recognized when entries use tabs between fields by @​vjymisal0
• skillfile add preserves entries without a trailing newline - adding an entry no longer merges with the final existing entry in a newline-free Skillfile by @​alloutflo
• Registry searches handle special characters - search queries containing characters such as spaces are encoded correctly before being sent to registries by @​luantaraschi
• Failed registry searches now report an error - skillfile search no longer presents an empty result as success when every configured registry fails by @​luantaraschi

v1.9.1

Compare Source

Changed

• Dependency refresh - bumped serde to 1.0.229.

Fixed

• Failed update checks are cached briefly - slow or unavailable GitHub release checks no longer add the full wait to every command, while successful checks remain cached for 24 hours by @​ychampion
• Unresolved conflicts now fail skillfile resolve - leaving conflict markers in the editor returns a nonzero exit instead of allowing scripts to continue as though resolution succeeded by @​ychampion
• Install warnings are printed once - skillfile install no longer repeats manifest warnings that it has already displayed by @​Rehan30g
• Stale patches are reported explicitly - skillfile status and skillfile info no longer describe an entry as clean when its saved patch cannot apply, including when an upstream change removes the patched file or changes its cache layout, by @​ychampion

v1.9.0

Compare Source

Added

• Custom install paths - deploy skills and agents to any filesystem directory with install-path, including AI tools without a built-in target by @​mto-s

Changed

• Dependency refresh - bumped serde_json to 1.0.151 and thiserror to 2.0.19.

Fixed

• Boolean environment flags now require explicit true values - CI=false no longer blocks skillfile init, while SKILLFILE_QUIET=0 and SKILLFILE_NO_UPDATE_NOTIFIER=0 no longer enable their respective flags by @​floze-the-genius

v1.8.0

Compare Source

Added

• skillfile list command - inspect declared skills, agents, source details, and install targets without reading lock/cache state or making network calls; filter by entity type, print names only, or emit JSON for scripts by @​ebbsanchez and @​clancyclaw

Fixed

• Interactive add now rejects piped input instead of hanging - bare skillfile add and bulk selection require stdin as well as stderr to be attached to a terminal before starting their interactive UI by @​ychampion
• Formatting keeps quoted manifest fields valid - skillfile add and skillfile format now preserve paths and other fields containing whitespace or # instead of rewriting them into a different entry by @​ychampion
• Pinned files now keep stable modification status across line-ending styles - patch round-trips preserve a missing final newline, and CRLF/LF differences no longer make a freshly pinned file appear modified by @​ychampion

v1.7.4

Compare Source

Changed

• Dependency refresh - bumped clap_complete to 4.6.7.

Fixed

• Directory-entry keys now stay consistent during updates and patch application - skillfile install --update preserves edits to nested files when cache paths use platform-native separators, and directory patches use the same portable keys as installed file maps by @​ychampion
• GitHub single-file fetches now handle encoded paths correctly - GitHub entries that point directly at files with spaces, #, or non-ASCII characters in their path now fetch the intended raw file instead of failing with an invalid URI error or requesting the wrong path by @​humammoin09-blip

v1.7.3

Compare Source

Fixed

• Search-to-add now reports GitHub discovery failures - rate-limit, authentication, network, and malformed-response errors are shown instead of being silently converted into an empty result and a misleading Path in repo: prompt by @​ychampion
• Root skill discovery now accepts lowercase marker files - repositories that use skill.md at the root are now fetched as complete root skills instead of falling back to an empty or incomplete directory payload by @​w3lld1
• Directory cache keys are normalized across platforms - skillfile status, skillfile pin, and skillfile diff now compare nested directory-entry files with forward-slash keys even when the local platform reports Windows-style separators, so changed nested files are not silently skipped on Windows by @​w3lld1
• GITLAB_HOST is now normalized before use - a value written with a scheme (https://gitlab.example.com, the format glab's own docs use) no longer produces a broken double-scheme URL, and a trailing slash (gitlab.example.com/) no longer silently drops the auth token by breaking host matching. The scheme prefix and trailing slashes are stripped, so https://gitlab.example.com/ and gitlab.example.com behave identically by @​Rehan30g

v1.7.2

Compare Source

Fixed

• skillfile install now keeps deploying healthy entries even when another upstream entry fails - sync preserves successful SHA resolutions, cache fetches, and lock updates, then installs the valid cached entries before returning the upstream error instead of stopping the whole run early.
• Incomplete directory caches are no longer treated as valid installs - staged cache replacement now publishes remote directory updates only after content and metadata are complete, which prevents metadata-only or partially written caches from being deployed as if they were healthy.
• Missing upstream directories now fail explicitly instead of looking like empty content - GitHub and GitLab directory fetches now surface invalid or missing manifest paths as errors, rather than accepting an empty result and exiting successfully.
• Existing installed skill directories now pick up newly added upstream files without overwriting local edits - nested installs fill in missing files such as helper scripts while leaving already edited files in place.
• Directory deployment is hardened against symlink traversal - source and destination symlinks are now rejected across fresh installs, overwrite installs, and merge-style installs.

Changed

• Dependency refresh - bumped console to 0.16.4, similar to 3.1.1, insta to 1.48.0, and serial_test to 3.5.0.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}