Skip to content

chore(deps): update ⬆️ mise-packages - #1003

Merged
renovate[bot] merged 2 commits into
mainfrom
renovate/mise-packages
Aug 4, 2026
Merged

chore(deps): update ⬆️ mise-packages#1003
renovate[bot] merged 2 commits into
mainfrom
renovate/mise-packages

Conversation

@renovate

@renovate renovate Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending Age Adoption Passing Confidence
aqua:astral-sh/ruff tools patch 0.16.0 → 0.16.1 age adoption passing confidence
aqua:cli/cli tools minor 2.96.0 → 2.97.0 age adoption passing confidence
github:janosmiko/lfk tools patch v0.15.15 → v0.15.16 age adoption passing confidence
github:max-sixty/worktrunk tools minor v0.70.0 → v0.71.0 age adoption passing confidence
npm:socket tools patch 1.1.147 → 1.1.151 1.1.152 age adoption passing confidence
npm:textlint tools minor 15.7.1 → 15.8.0 age adoption passing confidence

Release notes are maintained in a PR comment by the renovate-release-notes-comment workflow.

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

  • Branch creation
    • Between 03:00 AM and 05:59 AM (* 3-5 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Aug 4, 2026
@renovate
renovate Bot requested a review from scottames as a code owner August 4, 2026 10:32
@renovate renovate Bot added the dependencies label Aug 4, 2026
@renovate
renovate Bot enabled auto-merge (squash) August 4, 2026 10:32
@scottames-github-bot

scottames-github-bot Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Renovate Release Notes

Generated from Renovate's update table by the renovate-release-notes-comment workflow.

Packages that cannot be summarized from GitHub releases are listed explicitly below.

astral-sh/ruff (aqua:astral-sh/ruff)

0.16.1: 0.16.1

Compare Source

Release Notes

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

Documentation

  • Cover pycon Markdown formatting (#27153)
  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
  • Vendor latest annotate-snippets (#27033)

Contributors

Install ruff 0.16.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.1/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.1/ruff-installer.ps1 | iex"

Download ruff 0.16.1

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ruff-i686-pc-windows-msvc.zip x86 Windows checksum
ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum
ruff-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
ruff-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
ruff-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum
ruff-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
ruff-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
ruff-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
ruff-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
ruff-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
ruff-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
ruff-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum
ruff-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum
ruff-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum
ruff-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo astral-sh/ruff

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
cli/cli (aqua:cli/cli)

v2.97.0: GitHub CLI 2.97.0

Compare Source

Security

Four security vulnerabilities have been identified, and fixed, in this release. Users are advised to update gh to version v2.97.0 as soon as possible.

Several commands (including gh gist view, gh api, gh pr diff, gh release download --output -, gh codespace logs, gh skills preview, and gh agent-task view/create) printed externally controlled content without neutralizing terminal escape sequences, allowing escape sequence injection into a user's terminal.

See GHSA-3m3g-3wcr-px46 for more information.

Some request URLs were built without escaping their variable path components, so a value containing URL path metacharacters could alter the request path and cause gh to address a different resource than intended.

See GHSA-4fjg-2h4q-fwg3 for more information.

gh auth status (without --show-token) could print a portion of the authentication token in plaintext for token types whose format contains an underscore after the prefix, such as github_pat_*, ghs_*, and ghu_*.

See GHSA-cg6r-mpgc-h9mm for more information.

gh attestation verify built the certificate matcher from --signer-repo and --signer-workflow without escaping regex metacharacters, so a lookalike repository or workflow name could satisfy a matcher intended for a trusted signer and bypass attestation verification.

See GHSA-mm27-mwq9-fr5g for more information.

Address project fields and items by name in gh project

gh project item-edit and gh project item-list can now reference project fields and single-select options by name:

# Set an item's field by name
gh project item-edit 1 --owner monalisa --url <url> --field "Status" --value "In Progress"

# Show named fields as extra columns
gh project item-list 1 --owner "@&#8203;me" --field "Status" --field "Priority"

What's Changed

✨ Features

  • Add name-based resolution to gh project item-edit by @​zwick in #13807
  • Add named field columns to gh project item-list by @​zwick in #13823
  • Add Grok skill host support by @​tommaso-moro in #13864
  • Replace Windsurf with Devin in gh skill agents by @​tommaso-moro in #13987

🐛 Fixes

  • Gracefully handle failed GitHub verifier initialization caused by a missing trusted root by @​malancas in #13624
  • Bump keyring operation timeout from 3s to 60s so interactive unlock prompts have time to complete by @​kofuk in #13787
  • Fix skill picker label wrapping by @​tommaso-moro in #13967

📚 Docs & Chores

  • Bump Go to 1.26.5 by @​github-actions[bot] in #13817
  • Add OWNER/REPO format hint to the gh search --repo flag by @​BagToad in #13922
  • Present by-name item-edit as the first-class project flow in docs by @​Solaris-star in #13927
  • Add a macOS keyring security doc by @​williammartin in #13960
  • Add a code review agent skill by @​BagToad in #14003
  • Establish a pull request template for scale by @​BagToad in #14004
  • Add an agentic issue-triage workflow by @​lukewar in #13777
  • Use the Actions token for Copilot inference in the issue-triage workflow by @​tidy-dev in #13830
  • Refresh the issue-triage agentic workflow to gh-aw v0.83.1 by @​alondahari in #13949
  • Add a dependabot-triage agentic workflow by @​williammartin in #13985
  • Harden the deployment workflow by @​niik in #13780
  • Replace SITE_DEPLOY_PAT with the gh-cli-site-deployer App by @​williammartin in #13492
  • Group CodeQL Dependabot updates by @​williammartin in #13943
  • Remove a dead CODEOWNERS rule for the non-existent pkg/cmd/release/attestation/ by @​kobihikri in #13886
  • Fix typos in code and documentation by @​pstoeckle in #13940
  • Fix duplicated-word typos in comments by @​SORBELLOSTEFANIE in #13900

:dependabot: Dependencies

  • chore(deps): bump charm.land/lipgloss/v2 from 2.0.4 to 2.0.5 by @​dependabot in #13790
  • chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @​dependabot in #13789
  • chore(deps): bump https://github.com/klauspost/compress from 1.18.6 to 1.19.0 by @​dependabot in #13791
  • chore(deps): bump charm.land/bubbletea/v2 from 2.0.7 to 2.0.8 by @​dependabot in #13800
  • chore(deps): bump golang.org/x/text from 0.38.0 to 0.39.0 by @​dependabot in #13812
  • chore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by @​dependabot in #13821
  • chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3 by @​dependabot in #13801
  • chore(deps): bump github/gh-aw-actions/setup from 0.81.6 to 0.82.2 by @​dependabot in #13832
  • chore(deps): bump charm.land/bubbles/v2 from 2.1.0 to 2.1.1 by @​dependabot in #13813
  • chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @​dependabot in #13822
  • chore(deps): bump github/gh-aw-actions/setup from 0.82.2 to 0.82.3 by @​dependabot in #13843
  • chore(deps): bump actions/cache/restore from 5.0.5 to 6.1.0 by @​dependabot in #13841
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @​dependabot in #13867
  • chore(deps): bump github/codeql-action/analyze from 4.36.3 to 4.37.0 by @​dependabot in #13869
  • chore(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 by @​dependabot in #13868
  • chore(deps): bump github/codeql-action/init from 4.36.3 to 4.37.1 by @​dependabot in #13870
  • chore(deps): bump https://github.com/yuin/goldmark from 1.8.2 to 1.8.4 by @​dependabot in #13888
  • chore(deps): bump https://github.com/sigstore/sigstore-go from 1.2.1 to 1.2.2 by @​dependabot in #13842
  • chore(deps): bump github/gh-aw-actions/setup from 0.82.3 to 0.82.8 by @​dependabot in #13877
  • chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @​dependabot in #13933
  • chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @​dependabot in #13934
  • chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @​dependabot in #13936
  • chore(deps): bump actions/attest from 4.1.1 to 4.2.0 by @​dependabot in #13935
  • chore(deps): bump https://github.com/mattn/go-isatty from 0.0.22 to 0.0.23 by @​dependabot in #13937
  • chore(deps): bump github/gh-aw-actions/setup from 0.82.8 to 0.82.13 by @​dependabot in #13938
  • chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in #13941
  • chore(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.1 by @​dependabot in #13942
  • chore(deps): bump https://github.com/gabriel-vasile/mimetype from 1.4.13 to 1.4.14 by @​dependabot in #13944
  • chore(deps): bump nodeselector/setup-apple-codesign from ab275d0 to 309922b by @​dependabot in #13878
  • chore(deps): bump https://github.com/klauspost/compress from 1.19.0 to 1.19.1 by @​dependabot in #13950
  • chore(deps): bump github/gh-aw-actions/setup from 0.82.13 to 0.82.14 by @​dependabot in #13951
  • chore(deps): bump the codeql-actions group with 3 updates by @​dependabot in #13965
  • chore(deps): bump https://github.com/mattn/go-isatty from 0.0.23 to 0.0.24 by @​dependabot in #13977
  • chore(deps): bump the codeql-actions group with 3 updates by @​dependabot in #13978
  • chore(deps): bump https://github.com/gabriel-vasile/mimetype from 1.4.14 to 1.4.15 by @​dependabot in #13976
  • chore(deps): bump github/gh-aw-actions/setup from 0.83.1 to 0.83.2 by @​dependabot in #13979
  • chore(deps): bump github/gh-aw-actions/setup-cli from 0.83.1 to 0.83.2 by @​dependabot in #13980
  • chore(deps): bump actions/checkout from 6 to 7 by @​dependabot in #13981
  • chore(deps): bump github/gh-aw-actions/setup from 0.83.2 to 0.83.3 by @​dependabot in #13995
  • chore(deps): bump github/gh-aw-actions/setup-cli from 0.83.2 to 0.83.3 by @​dependabot in #13996
  • chore(deps): bump github/gh-aw-actions/setup-cli from 0.83.3 to 0.83.4 by @​dependabot in #14018

New Contributors

Full Changelog: cli/cli@v2.96.0...v2.97.0

janosmiko/lfk (github:janosmiko/lfk)

v0.15.16: v0.15.16

Compare Source

0.15.16 (2026-07-31)

Features

  • delete: select the cascade policy for force delete too (9ee809f)
  • delete: selectable cascade policy for delete and force delete (#570) (9ee809f)
max-sixty/worktrunk (github:max-sixty/worktrunk)

v0.71.0: 0.71.0

Compare Source

Release Notes

Improved

  • Forge hosts are classified by exact DNS label: Host detection matched the bare substring, so github anywhere in a hostname selected the GitHub provider — evil-github.com and dev.azure.com.attacker.example included. Classification now requires github, gitlab, or gitea as a whole dot-separated label (Azure DevOps matches dev.azure.com / visualstudio.com as a domain suffix), and userinfo is split at the final @&#8203;, so https://github.com@&#8203;attacker.example/owner/repo resolves to attacker.example rather than GitHub. Ports and a trailing DNS root dot are normalized away first, so both transports classify identically.

    github.mycompany.com still resolves, but a host that carries the forge name only as part of a label no longer does — gitlab-internal.company.com, github-mirror.example.com, and mygithub.com all become unknown, alongside the lookalikes the change targets. What is lost is forge-derived detail: CI status in wt list --full, wt switch --prs, and repo.provider in wt list --format=json, which reads unknown. Setting forge.platform in .config/wt.toml restores all of it, and wt switch pr:{N} keeps working either way.

    Only one case announces itself — a single-label SSH alias of the github-personal form, the shape used for multi-account setups: SSH host alias github-personal is not auto-detected as a forge; enable CI status and wt switch --prs with forge.platform = "github" @&#8203; .config/wt.toml. A self-hosted instance at a hyphenated hostname gets no such message; it simply stops reporting CI. Going the other way, a recognized Gitea or Azure DevOps remote now knows its own change-request vocabulary, so wt switch 123 against a missing branch suggests wt switch pr:123 instead of offering both pr: and mr: forms. (Breaking: a remote whose host merely contains a forge name is no longer detected. Set forge.platform in project config.) (#3662)

  • The retired single-file shell directive is no longer honored: Wrappers written before 0.37 passed one WORKTRUNK_DIRECTIVE_FILE, mixing a trusted directory path with arbitrary shell for the parent to source. The split WORKTRUNK_DIRECTIVE_CD_FILE / ..._EXEC_FILE pair replaced it in 0.37, the fallback has warned since 0.54, and it is now gone. A shell still running the old wrapper fails closed on both halves: Cannot change directory — shell wrapper is out of date, with the repair line To update the shell wrapper, run wt config shell install, and --execute disabled because the shell wrapper is out of date in place of running the payload. That makes a stale wrapper stricter than no wrapper at all, where --execute still runs the command directly — deliberate, since a retired wrapper is the one case where worktrunk cannot tell what the parent will do with what it writes. Child processes can no longer inherit the retired capability. (Breaking: a live shell on a pre-0.37 wrapper stops changing directory and stops running --execute until wt config shell install and a shell restart; nushell needs the reinstall because its wrapper is a static file.) (#3662)

  • Every hyperlink is underlined: The statusline underlined its PR reference but not the dev-server port, so nothing marked the port as clickable. Both now route through one helper that emits the OSC 8 sequence and the underline together, closing with [24m rather than a full reset so a wrapping color or a dim survives the link. Text that is not a link stays plain: the picker cannot carry OSC 8 through skim, so it prints the same short text with no underline instead of underlining something unclickable, and on a terminal without OSC 8 support a dev-server URL still prints in full and stays copyable. (#3643, #3651)

  • Shell completion answers a Tab press in roughly half the time: Completion forks a whole wt process on every Tab press, with the user's finger still on the key, and it has nowhere to hide work — nothing paints progressively, no cache survives the process, and no shell caches a dynamic completion. It was doing every git read in sequence. The reads now overlap, the repository caches prewarm on this path, refs/remotes/ is not scanned where a remote-only branch can never be offered (wt remove and worktree-only arguments), and the handler returns before main builds a rayon pool it never reaches. wt switch <Tab> goes from 45.7 ms to 27.4 ms on a fixture of 80 worktrees and 1400 remote-tracking refs; on worktrunk's own checkout, 47.9 ms to 29.0 ms, and wt <Tab> from 22.2 ms to 12.8 ms. (#3664)

  • wt step prune prunes stale metadata alongside its other removals: Stale-detached and not-yet-planned prunable candidates were held on the scan lock's write side because the repo-wide git worktree prune they used to call raced sibling prunes. Each call now names its own entry, so both shapes join the read-side fan-out; the write side keeps only the candidates that run arbitrary commands or own the terminal — hook-bearing ones, --foreground ones, and the deferred current worktree. (#3655)

Fixed

  • Removing one worktree no longer unregisters another: Every stale-metadata cleanup in the removal chain ran a bare git worktree prune, which takes no path filter — it walks every entry in .git/worktrees/ and unregisters each one whose directory it cannot find at that instant. A worktree that is merely absent right now (an unmounted volume, a dropped network mount, a half-finished mv) is indistinguishable from a deleted one, so removing worktree A also unregistered bystander B. B's commits and files survive, but its admin directory does not: the index, ORIG_HEAD, the per-worktree reflog, refs/worktree/* and refs/bisect/*, and any in-progress rebase or merge go with it — and git worktree repair can relink an admin directory but cannot recreate one. Each cleanup now names the entry it means to remove, so a removal's blast radius equals its intent. (#3650)

  • A locked worktree whose directory is missing is no longer removed: The missing-directory fallback was tested before the lock guard, so a worktree that was both locked and currently absent skipped the lock entirely — its registration was pruned and it fell through to branch deletion, which is precisely the case git worktree lock exists for (removable media, a network mount, a dropped VPN). The lock is now honored whether or not the directory is present, and --force still does not override it, matching git worktree remove. Fixes #3645. (#3647)

  • A branch that gains a checkout just before deletion is retained: Branch deletion read worktree topology from cache, so a worktree registered after that read — by a hook, or a concurrent wt switch — was invisible, and the ref was deleted out from under it, leaving that worktree unable to resolve HEAD. A fresh topology read now sits immediately before the compare-and-swap delete, and a branch found checked out (live or locked) is kept and reported. Git exposes no transaction spanning worktree registration and ref updates, so the window cannot be closed entirely; it is now as narrow as two adjacent commands allow, and either one failing leaves the branch intact. (#3662)

  • Planning a removal no longer prunes metadata as a side effect: prepare_worktree_removal pruned stale worktree metadata while planning the missing-directory fallback, so every "validate first" path quietly mutated — a refused wt remove of the default branch still pruned its entry, wt remove pruned before its approval prompt, and the picker pruned on skim's event loop during row validation. Planning is now a pure read, and the prune happens at execution, ahead of the branch deletion that may still be declined. Two related contracts move with it: a failing metadata prune surfaces as a removal failure and abandons the rest of wt step prune's queue instead of being skipped silently, and --dry-run plans stale entries through the same gate as every other candidate, so a dirty prunable-but-present entry is correctly left out of the preview. (#3658)

  • wt config shell install previews and confirms the legacy files it reclaims: Install reclaims its own legacy wrapper paths — the fish conf.d/{cmd}.fish and stranded nushell autoload copies — but the deletion never appeared in anything the user saw before it happened. --dry-run returned an empty cleanup list, the ? preview showed only the files to add, and when everything was already configured the cleanup ran and returned without prompting at all. Both previews now render Will remove <old> (deprecated; now using <new>), and the already-configured branch prompts before removing and preserves the file on decline. --yes still skips the prompt, so no non-interactive flow changes. Fixes #3644. (#3648)

  • Completion offers remote branches in a stable order: They were grouped through a HashMap and sorted by timestamp with a stable sort, so on tied timestamps the order was whatever that process's hashing produced — three consecutive completions could print three different orders. Ties now break on name. (#3664)

  • The Codex plugin clears its activity marker when the session ends: The marker returned to idle only at turn end, so one set by a session's last turn outlived the session. Codex now exposes SessionEnd, and a main-session exit hook clears the marker there, within Codex's three-second maximum hook timeout. (#3660)

Documentation

  • wt switch --execute documents what {{ base }} resolves to without --create: The help text said {{ base }} and {{ base_worktree_path }} require --create; they describe the source either way — the selected base with --create, or the invoking worktree when switching to an existing one. The picker's comments preview tab was likewise documented as --prs-only when it loads for any row whose branch has a PR/MR. Both are help-text corrections; neither behavior changed. (#3663)

Internal

  • Library API rework (Breaking library API): cargo-semver-checks fails ten lints, all from the forge, shell, and removal consolidation — removed trait worktrunk::git::RefContext, enum worktrunk::git::CiPlatform (superseded by ForgeKind), function worktrunk::shell::detect_zsh_compinit, const DIRECTIVE_FILE_ENV_VAR (renamed RETIRED_DIRECTIVE_FILE_ENV_VAR), methods Repository::prune_worktrees, Cmd::directive_legacy_file, and GitRepoProvider::from_platform, and field RemoteRefInfo::ref_type; RemoteRefProvider::platform_label replaced by forge_kind; Repository::branches_for_completion gained a parameter; and BranchDeletionOutcome gained a RetainedCheckedOut variant. (#3662, #3650, #3664)

  • The integration suite stopped leaking a temp directory per test: isolated_test_cwd() held its TempDir in a LazyLock; statics do not run destructors at process exit, and nextest runs one process per test, so every test leaked an empty directory into the system temp root — 704 per integration-suite run, and one machine had accumulated 454,907 entries. Stale entries are cheap to ignore but expensive to enumerate, and git::recover::recover_from_path reads every ancestor of a deleted CWD: one recovery test took 14.2 s against that temp root versus 0.27 s against an empty one. One fixed directory replaces the leak, fixtures root under $TMPDIR/wt/ rather than the shared temp root, and task profile-tests makes the measurement repeatable. (#3604, #3666)

  • The integration suite converged on distinct contracts: Two tranches removed duplicated and false-confidence coverage — overlapping list-layout suites, command-by-shell wrapper cross-products, and setup variants that never reached the behavior they named — and cut the switch picker from 42 PTYs to 19. Snapshots go from 1,259 to 1,131, a warm all-feature run from 84.7 s to roughly 73 s, and comparable production-line coverage is essentially unchanged at 97.3% to 97.2%. (#3657, #3663)

  • Benchmark fixtures and harness are shared: Each benchmark target had reimplemented temporary-repository ownership, linked-worktree paths, subprocess isolation, and warm/cold loops; a shared FixtureRepo with canonical command and cache helpers replaces that, leaving each scenario's workload and destructive lifecycle explicit. The completion benchmark now fails when its measured subprocess fails instead of silently timing it, and its two fixture ids collapse into one mixed that reaches the completer's 100-candidate threshold. (#3669, #3664)

Install worktrunk 0.71.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/max-sixty/worktrunk/releases/download/v0.71.0/worktrunk-installer.sh | sh && wt config shell install

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/max-sixty/worktrunk/releases/download/v0.71.0/worktrunk-installer.ps1 | iex"; git-wt config shell install

Install prebuilt binaries via Homebrew

brew install worktrunk && wt config shell install

Download worktrunk 0.71.0

File Platform Checksum
worktrunk-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
worktrunk-x86_64-apple-darwin.tar.xz Intel macOS checksum
worktrunk-x86_64-pc-windows-msvc.zip x64 Windows checksum
worktrunk-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum
worktrunk-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

Install via Cargo

cargo install worktrunk && wt config shell install

Install via Winget (Windows)

winget install max-sixty.worktrunk && git-wt config shell install

Install via AUR (Arch Linux)

paru worktrunk-bin && wt config shell install
SocketDev/socket-cli (npm:socket)

v1.1.151: v1.1.151

Compare Source

Full Changelog: SocketDev/socket-cli@v1.1.150...v1.1.151

v1.1.150: v1.1.150

Compare Source

Full Changelog: SocketDev/socket-cli@v1.1.149...v1.1.150

v1.1.149: v1.1.149

Compare Source

Full Changelog: SocketDev/socket-cli@v1.1.148...v1.1.149

v1.1.148: v1.1.148

Compare Source

What's Changed

Full Changelog: SocketDev/socket-cli@v1.1.147...v1.1.148

textlint/textlint (npm:textlint)

v15.8.0: v15.8.0

Compare Source

What's Changed

Feature

Documentation

Refactoring

CI

Dependency Updates

New Contributors

Full Changelog: textlint/textlint@v15.7.1...v15.8.0

@renovate
renovate Bot merged commit 208186a into main Aug 4, 2026
6 checks passed
@renovate
renovate Bot deleted the renovate/mise-packages branch August 4, 2026 10:37
@scottames-github-bot scottames-github-bot Bot mentioned this pull request Aug 3, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@renovate-approve renovate-approve[bot] renovate-approve[bot] approved these changes
@scottames scottames Awaiting requested review from scottames scottames is a code owner

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants