chore: version 2025.11.3

Author: desbma

CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## v2025.11.3
+
+### <!-- 01 -->💡 Features
+
+- Use 'systemctl cat' to get unit config ([2ed0c51](https://github.com/desbma/shh/commit/2ed0c519b7dd02f762fa275c134cdbeb8469ea1c) by desbma)
+
+### <!-- 02 -->🐛 Bug fixes
+
+- Type=oneshot units triggering strace named pipe collision ([41bdaea](https://github.com/desbma/shh/commit/41bdaea500dc8f7d25599639ee028542689d9c01) by desbma)
+- Fstat on unknown fd ([f3c935e](https://github.com/desbma/shh/commit/f3c935efd977fac6e651c9f7179c10cb4c70faf2) by desbma)
+- CapabilityBoundingSet requires unprivileged_userns_clone for user instance ([56380e8](https://github.com/desbma/shh/commit/56380e8d28aaca4610e398048162a717eb341835) by desbma)
+- Fix possible panic when updating some effects ([182a17a](https://github.com/desbma/shh/commit/182a17acf43e546fbc2cc5582365428bd1c795d2) by desbma)
+- MemoryDenyWriteExecute=true not compatible with mprotect adding exec bit ([48fc222](https://github.com/desbma/shh/commit/48fc22254ed37160f5efb627f78b4f51339e6dd1) by desbma)
+
+### <!-- 06 -->🚜 Refactor
+
+- Make use of anyhow::ensure ([b9ca66e](https://github.com/desbma/shh/commit/b9ca66ec6b7315686e68a7a49ba23dfc6a76072d) by desbma)
+
+### <!-- 10 -->🧰 Miscellaneous tasks
+
+- Add todo lint ([ac17c5c](https://github.com/desbma/shh/commit/ac17c5c5d59d0126149aff06844bf68fe67d195c) by desbma)
+- Remove redundant test prefixes ([0a77b41](https://github.com/desbma/shh/commit/0a77b41031087f451626a748a17af064ffaed1cd) by desbma)
+- Fix lint for Rust 1.91 ([d4543de](https://github.com/desbma/shh/commit/d4543de5ad010c647287c02b435e7d053384596c) by desbma)
+
+---
+
 ## v2025.10.22
 
 ### <!-- 01 -->💡 Features

Cargo.lock

@@ -7,7 +7,7 @@ repository = "https://github.com/desbma/shh"
 keywords = ["systemd", "hardening", "strace", "system", "security"]
 categories = ["command-line-utilities"]
 license = "GPL-3.0-only"
-version = "2025.10.22"
+version = "2025.11.3"
 rust-version = "1.85"
 edition = "2024"
 
@@ -27,8 +27,8 @@ const-gen = { version = "1.6.8", default-features = false, features = ["std", "p
 anyhow = { version = "1.0.100", default-features = false, features = ["std", "backtrace"] }
 bincode = { version = "2.0.1", default-features = false, features = ["std", "serde"] }
 chrono = { version = "0.4.42", default-features = false, features = ["clock", "std"] }
-clap = { version = "4.5.50", default-features = false, features = ["std", "color", "help", "usage", "error-context", "suggestions", "derive"] }
-clap_complete = { version = "4.5.59", default-features = false, optional = true }
+clap = { version = "4.5.51", default-features = false, features = ["std", "color", "help", "usage", "error-context", "suggestions", "derive"] }
+clap_complete = { version = "4.5.60", default-features = false, optional = true }
 clap_mangen = { version = "0.2.31", default-features = false, optional = true }
 function_name = { version = "0.3.0", default-features = false }
 goblin = { version = "0.10.3", default-features = false, features = ["std", "elf32", "elf64", "endian_fd"] }
@@ -49,7 +49,7 @@ tempfile = { version = "3.23.0", default-features = false }
 thiserror = { version = "2.0.17", default-features = false, features = ["std"] }
 
 [dev-dependencies]
-assert_cmd = { version = "2.0.17", default-features = false, features = ["color", "color-auto"] }
+assert_cmd = { version = "2.1.1", default-features = false, features = ["color", "color-auto"] }
 fastrand = { version = "2.3.0", default-features = false, features = ["std"] }
 insta = { version = "1.43.2", default-features = false, features = ["colors", "ron"] }
 nix = { version = "0.30.1", default-features = false, features = ["user"] }