chore(deps): bump @nanocollective/prompt-scrub from 1.0.1 to 1.0.2

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps @nanocollective/prompt-scrub from 1.0.1 to 1.0.2.

Release notes

Sourced from @​nanocollective/prompt-scrub's releases.

v1.0.2

prompt-scrub v1.0.2

What's changed

Patch release — dev-dependency and CI maintenance only. No public-API or runtime changes.

• @biomejs/biome — ^2.5.1 → ^2.5.2 (devDependency, via dependabot). Resolves the CLI/schema version warning at lint time (CLI 2.5.3 was reporting that the configured 2.5.1 schema was stale).
• ava — ^5.3.1 → ^8.0.1 (devDependency, via dependabot). Bumps the test-runner major; no test-suite changes were needed.
• knip — ^6.23.0 → ^6.25.0 (devDependency, via dependabot). No findings change.
• GitHub Actions — bumps via dependabot:
  • actions/checkout 4 → 7
  • pnpm/action-setup 4 → 6
  • actions/setup-node 4 → 6
  • actions/github-script 7 → 9

Installation

npm install -g @nanocollective/prompt-scrub

CLI usage

# Inspect a prompt before sending (recommended first step)
echo "My email is alice@example.com" | prompt-scrub inspect
Scrub a prompt
echo "My email is alice@example.com" | prompt-scrub scrub
Rehydrate a response
echo "Contact Email_1 for details." | prompt-scrub rehydrate --session-id <id>

Library usage

import { scrub, rehydrate } from "@nanocollective/prompt-scrub";
const { scrubbedContent, sessionId } = scrub({ content: prompt });
// send scrubbedContent to LLM...
const { content } = rehydrate({ content: response, sessionId });

Full changelog

Changelog

Sourced from @​nanocollective/prompt-scrub's changelog.

1.0.2

Patch release — dev-dependency and CI maintenance only. No public-API or runtime changes.

• @biomejs/biome — ^2.5.1 → ^2.5.2 (devDependency, via dependabot). Resolves the CLI/schema version warning at lint time (CLI 2.5.3 was reporting that the configured 2.5.1 schema was stale).
• ava — ^5.3.1 → ^8.0.1 (devDependency, via dependabot). Bumps the test-runner major; no test-suite changes were needed.
• knip — ^6.23.0 → ^6.25.0 (devDependency, via dependabot). No findings change.
• GitHub Actions — bumps via dependabot:
  • actions/checkout 4 → 7
  • pnpm/action-setup 4 → 6
  • actions/setup-node 4 → 6
  • actions/github-script 7 → 9

Commits

• 7e6189e fix: version bump related issues
• a6dfd1b Merge pull request #62 from Nano-Collective/dependabot/npm_and_yarn/tsx-4.23.0
• f2aa4fa Merge branch 'main' into dependabot/npm_and_yarn/tsx-4.23.0
• de8afe0 Merge pull request #61 from Nano-Collective/dependabot/npm_and_yarn/types/nod...
• 4d16895 Merge branch 'main' into dependabot/npm_and_yarn/types/node-26.1.0
• 09150b4 Merge pull request #60 from Nano-Collective/dependabot/npm_and_yarn/biomejs/b...
• 3ceaa9c Merge pull request #59 from Nano-Collective/dependabot/npm_and_yarn/ava-8.0.1
• 020ed7e Merge pull request #58 from Nano-Collective/dependabot/npm_and_yarn/knip-6.25.0
• d3e9e47 Merge pull request #57 from Nano-Collective/dependabot/github_actions/actions...
• ebba447 Merge pull request #56 from Nano-Collective/dependabot/github_actions/actions...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

No changeset found

This PR does not add a changeset, so it will not appear in the changelog or trigger a release.

If the change is user-facing, add one:

pnpm changeset

Pick a bump (patch / minor / major) and write the changelog entry in our usual voice ("Added X... Thanks to @you. Closes #123."), then commit the generated .changeset/*.md file.

If this PR is docs-only or a chore that needs no release note, you can ignore this — or run pnpm changeset --empty to record that intentionally.

[github-actions]

nc-review: nothing to raise

Dependabot patch bump of @nanocollective/prompt-scrub from 1.0.1 to 1.0.2. The diff is limited to pnpm-lock.yaml: the resolved version moves to 1.0.2 with a matching SHA-512 integrity hash, while package.json's ^1.0.1 specifier is unchanged (and still satisfied). The upstream release notes describe this as a dev-dependency and CI maintenance release with no public-API or runtime changes, and no nanocoder source/config/schema is touched. Nothing to fix, nothing to test, no changeset needed, no duplicate among open PRs.

---

_{🔴 blocking · 🟠 a reviewer would ask for a change · ⚪ optional}

_{Automated code review — correctness, security, design, tests, plus duplicates and scope. A human still decides; this is not a substitute for review and is not exhaustive. The required status checks separately cover lint, formatting, types, unused dependencies, the test suite and the build. This bot never merges. Maintainers can rerun with /re-review.}