chore(deps): update ⬆️ mise-packages

[renovate]

This PR contains the following updates:

Package	Update	Change	Pending	Age	Adoption	Passing	Confidence
aqua:anthropics/claude-code	patch	2.1.215 → 2.1.217	2.1.220 (+2)
aqua:astral-sh/uv	patch	0.11.29 → 0.11.31	0.11.32
aqua:earendil-works/pi	minor	0.80.10 → 0.81.1	0.82.1 (+1)
aqua:openai/codex	minor	rust-v0.144.6 → rust-v0.145.0
aqua:siderolabs/talos	patch	1.13.6 → 1.13.7
aqua:sst/opencode	patch	1.18.3 → 1.18.4	1.18.5
aqua:twpayne/chezmoi	patch	2.71.0 → 2.71.1
github:aquaproj/aqua	patch	v2.62.0 → v2.62.1
github:janosmiko/lfk	patch	v0.15.12 → v0.15.13	v0.15.14
github:ogulcancelik/herdr	patch	0.7.4 → v0.7.5
npm:socket	patch	1.1.143 → 1.1.145	1.1.146
pipx:semgrep (changelog)	patch	1.170.0 → 1.170.1	1.171.0
usage	patch	3.5.5 → 3.5.6	3.6.0 (+1)

Release notes are maintained in a PR comment by the renovate-release-notes-comment workflow.

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • Between 03:00 AM and 05:59 AM (* 3-5 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[scottames-github-bot]

Renovate Release Notes

Generated from Renovate's update table by the renovate-release-notes-comment workflow.

Packages that cannot be summarized from GitHub releases are listed explicitly below.

anthropics/claude-code (aqua:anthropics/claude-code)

v2.1.217: v2.1.217

Compare Source

What's changed

• Added emoji shortcode autocomplete in the prompt input: type :heart: to insert ❤️, or :hea for suggestions — disable with the emojiCompletionEnabled setting
• Added warnings when transcript writes are failing (e.g. disk full) or when session saving is off due to an inherited environment variable, instead of losing transcripts silently
• Fixed a memory leak where truncated MCP tool outputs kept the full untruncated result in memory for the rest of the session
• Fixed Windows auto-update failures that could leave claude.exe missing; failed updates now restore the preserved executable automatically
• Fixed background session isolation not canonicalizing symlinked working directories, which could let sessions escape their workspace folder
• Fixed auto-compact never triggering for Claude Opus 4.8 on Bedrock and /compact failing once over the limit
• Fixed corporate mTLS, TLS-verify, OAuth scope, and proxy settings being ignored in Claude Desktop sessions
• Fixed screen reader mode's startup announcement being cut off by the first prompt render, and the thinking status row re-rendering every few seconds to update elapsed time and token counts
• Fixed managed settings that set OTEL_EXPORTER_OTLP_ENDPOINT not governing all signals — lower-scope signal-specific overrides no longer redirect telemetry away from the managed endpoint
• Fixed --resume/--continue and /resume failing with a TypeError when a transcript has a malformed attachment entry
• Fixed Remote Control sessions not showing a pending permission prompt or dialog to viewers that connected after it appeared
• Fixed background shells sometimes becoming impossible to stop after a session is sent to the background (/background or ←) or when the session exits on a heavily loaded machine, most visible on Windows
• Fixed a CLAUDE.md or SKILL.md paths frontmatter value with many brace groups OOM-killing or stalling the CLI at startup — brace expansion is now budget-bounded
• Fixed the transcript preview sitting flush against the input area when attaching to a starting background session; it now leaves the same one-line gap as the live layout, so the transcript no longer shifts when the session takes over
• Improved footer PR badge links to be clickable hyperlinks even when terminal support can't be detected (e.g. over ssh/tmux); set FORCE_HYPERLINK=0 to opt out
• Changed the login-expiry warning to appear 3 days before expiry instead of 5
• Capped the frontend-design plugin suggestion tip at 3 lifetime impressions instead of repeating indefinitely
• Added a cap on concurrently-running subagents (default 20, override with CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS) so one message can't fan out unbounded background agents
• Changed subagents to no longer spawn nested subagents by default; set CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH to allow deeper nesting
• Fixed --max-budget-usd not stopping background subagents: once the cap is reached, new spawns are denied and running background agents are halted

v2.1.216: v2.1.216

Compare Source

What's changed

• Added sandbox.filesystem.disabled setting to skip filesystem isolation while keeping network egress control
• Fixed a slowdown in long sessions where message normalization cost grew quadratically with the number of turns, causing multi-second stalls and slow resumes
• Fixed auto mode denying commands with "HTTP 401" classifier errors after the OAuth token expired or rotated mid-session
• Fixed AskUserQuestion telling Claude to continue even when your answer asked it to wait or explain first — free-text answers now get neutral wording
• Fixed Claude Code on the web re-asking the same question and dropping your answer after the session sat idle for a few minutes
• Fixed @​-mentions silently attaching nothing after file-modifying hooks, vim dot-repeat of c-operators and paste, statusline running twice on resume, and resume-picker hangs on failure
• Fixed resumed background agent sessions reverting to the default agent: the agent's prompt and tool restrictions are now restored
• Fixed worktree-isolated subagents redirecting git into the shared checkout via git -C, --git-dir, or GIT_DIR/GIT_WORK_TREE
• Fixed worktree sessions landing in another project's leftover worktree when the working directory did not match the selected project
• Fixed background sessions whose worktree has no git repository being undeletable
• Fixed claude daemon stop --any potentially terminating an unrelated process via a stale legacy daemon lockfile
• Fixed Esc-Esc at an idle prompt not opening the rewind picker in long-running sessions with background tasks
• Fixed Bash command permission checking for compound statements with redirects inside && lists or negations
• Fixed pressing Ctrl+X twice in the agent list failing to delete a session, and deleted sessions reappearing when their background worker had died
• Fixed background subagents getting cancelled when a high-priority message arrives during their startup window
• Fixed mouse and focus garbage in the terminal while a GUI editor from /memory, /plan, /keybindings, or Ctrl+G is open; /memory no longer waits for the editor to close
• Fixed Claude-in-Chrome 403-looping on reconnect when the session's OAuth token lacks a required scope
• Fixed workflow saves and scheduled-task writes following a symlink at .claude, which could redirect writes outside the project
• Fixed MCP re-authenticate revoking working credentials before the new sign-in succeeds, and the reconnect needs-auth message in background sessions pointing at an unusable command
• Fixed read-only commands on Windows accessing network paths without a permission prompt
• Fixed Bash command parsing of non-ASCII characters to match real shell word boundaries
• Fixed PowerShell tool permission validation of commands containing invisible Unicode characters
• Fixed dialogs in fullscreen mode stretching past the right-hand edge of their panel
• Fixed the /config settings list in fullscreen mode clipping its keyboard-hint footer
• Fixed the transcript-mode (Ctrl+O) footer hint wrapping on terminals narrower than 104 columns
• Fixed the Prometheus metrics endpoint (OTEL_METRICS_EXPORTER=prometheus) emitting invalid # UNIT lines
• Fixed skills and commands changed during a session not appearing in the slash menu until restart
• Fixed plugin skills with a name frontmatter field losing their plugin prefix in slash-command autocomplete
• Fixed telemetry misreporting permission denials: failed permission-prompt requests no longer count as user rejections, and user interrupts are now reported as user aborts instead of rejections
• Improved the /fork confirmation to one line with the new session's name, claude attach id, and a note when the copy shares your checkout
• Improved validation of git and gh command arguments in the PowerShell tool
• Improved the /ultrareview diff-too-large error to show configured limits, measured diff size, and largest contributing files
• Improved /code-review ultra empty-diff message to name the exact base ref and suggest passing an explicit base
• Improved the spend limit adjustment prompt to show the server's reason when a spend limit change is rejected
• /context now shows an explicit warning when the conversation exceeds the context window, and a failed /compact displays as an error
• /rewind no longer restores or deletes files through symlinks or hard links at tracked paths and reports how many paths it skipped
• Background sessions: /mcp and /install-github-app now park a "needs input" request in the agent view when no client is attached
• Updated the bundled dataviz skill: reordered the default chart palette and fixed guidance that suggested direct labels for four-series charts
• [VSCode] Fixed right-to-left text (Arabic, Hebrew, Persian) rendering in the wrong order when mixed with English or code
• Fixed cloud sessions dropping the in-flight message when the session's container restarts mid-turn — the interrupted turn now re-runs on resume instead of leaving the session unresponsive

astral-sh/uv (aqua:astral-sh/uv)

0.11.31: 0.11.31

Compare Source

Release Notes

Released on 2026-07-21.

Enhancements

• Allow workspace sources to reference members in another workspace by path (#18401)
• Support .venv files containing paths to centralized project environments (#20022)
• Update bundled Windows timezone data to IANA 2026c (#20554)

Preview features

• Add an index-specific hash-algorithm setting for lockfile generation (#20605)

Configuration

• Add audit.malware-check and audit.malware-check-url settings (#20587)

Performance

• Avoid quadratic work when deduplicating transitive conflicts (#20578)

Bug fixes

• Suggest --emit-build-options for unsupported uv pip compile --emit-options (#20582)
• Reject source distributions and wheels with mismatched package names (#20432)
• Avoid retrying TLS certificate verification failures (#16245)
• Avoid warnings about uv_build settings for in-tree build backends (#20153)

Install uv 0.11.31

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.31/uv-installer.ps1 | iex"

Download uv 0.11.31

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
uv-i686-pc-windows-msvc.zip	x86 Windows	checksum
uv-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
uv-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
uv-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz	PPC64LE Linux	checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz	RISCV Linux	checksum
uv-s390x-unknown-linux-gnu.tar.gz	S390x Linux	checksum
uv-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz	ARMv7 Linux	checksum
uv-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
uv-i686-unknown-linux-musl.tar.gz	x86 MUSL Linux	checksum
uv-riscv64gc-unknown-linux-musl.tar.gz	RISCV MUSL Linux	checksum
uv-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum
uv-arm-unknown-linux-musleabihf.tar.gz	ARMv6 MUSL Linux (Hardfloat)	checksum
uv-armv7-unknown-linux-musleabihf.tar.gz	ARMv7 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

0.11.30: 0.11.30

Compare Source

Release Notes

Released on 2026-07-20.

Python

• Add CPython 3.15.0b4 (#20519)

Preview features

• Allow uv workspace metadata --sync to target the active virtual environment with --active (#20500)
• Reuse centralized project environments when workspaces are accessed through symlinks (#20436)

Performance

• Skip resolver candidates whose files are all excluded by exclude-newer (#20460)
• Limit parallel cache reads to reduce resolver scheduling and allocation overhead (#20427)
• Accelerate lockfile serialization with toml_writer (#20450)
• Compact cached Simple API distribution metadata and hashes (#20463, #20483)
• Decode stale cache entries in a single blocking task (#20486)
• Decode cached payloads outside resolver workers (#20464)
• Cache resolver Python requirement markers (#20461)
• Reuse resolver fork markers while recording preferences (#20462)

Bug fixes

• Prevent skipped tar-wheel entries from causing unrelated files to be removed during uninstall (#20429)
• Preserve literal extends-environment paths in pyvenv.cfg on Unix (#20466)

Documentation

• Add a contribution guide (#20511, #20552)

Install uv 0.11.30

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.30/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.30/uv-installer.ps1 | iex"

Download uv 0.11.30

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
uv-i686-pc-windows-msvc.zip	x86 Windows	checksum
uv-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
uv-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
uv-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz	PPC64LE Linux	checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz	RISCV Linux	checksum
uv-s390x-unknown-linux-gnu.tar.gz	S390x Linux	checksum
uv-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
uv-armv7-unknown-linux-gnueabihf.tar.gz	ARMv7 Linux	checksum
uv-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
uv-i686-unknown-linux-musl.tar.gz	x86 MUSL Linux	checksum
uv-riscv64gc-unknown-linux-musl.tar.gz	RISCV MUSL Linux	checksum
uv-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum
uv-arm-unknown-linux-musleabihf.tar.gz	ARMv6 MUSL Linux (Hardfloat)	checksum
uv-armv7-unknown-linux-musleabihf.tar.gz	ARMv7 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

earendil-works/pi (aqua:earendil-works/pi)

v0.81.1: v0.81.1

Compare Source

New Features

• Verifiable release source archives — GitHub releases now include deterministic, checksummed source archives with instructions for rebuilding standalone binaries. See Building standalone binaries from release source.
• Resilient compaction and branch summaries — Transient provider failures now follow the configured retry policy, with retry lifecycle events available to interactive, JSON, RPC, and SDK consumers. See Compaction & Branch Summarization and RPC retry events.

Added

• Added deterministic, checksummed source archives to GitHub releases with documented standalone binary rebuild instructions (#6913 by @​christianklotz).

Fixed

• Fixed compaction and branch summarization to retry transient provider failures using the configured retry policy, with retry lifecycle events exposed to interactive, JSON, RPC, and SDK consumers (#6901 by @​davidbrai).
• Fixed interactive startup waiting for background model catalog refresh while computing the footer provider count.
• Restored the default stream fallback for extensions using the pre-0.81 agent-core API (#6915).
• Fixed inherited Kimi K3 models from Moonshot AI and Moonshot AI China to use the OpenAI thinking format and expose reasoning effort support.

v0.81.0: v0.81.0

Compare Source

New Features

• Local llama.cpp model management — Connect to a llama.cpp router, search and download Hugging Face models, and explicitly load or unload models with live progress. See llama.cpp.
• Full provider extensions — Extensions can register complete pi-ai providers with authentication, model refresh, filtering, and custom streaming. See Register New Provider.
• Qwen Token Plan providers — Use the built-in international and China subscription providers with regional endpoints and API-key authentication. See API Keys.
• Expanded usage accounting — Tool, compaction, and branch-summary usage is persisted and included in session totals. See Compaction & Branch Summarization.

Added

• Added Qwen Token Plan and Qwen Token Plan China to built-in provider setup, default model resolution, and provider documentation (#6858 by @​QuintinShaw).
• Added the get_available_thinking_levels RPC command and RpcClient.getAvailableThinkingLevels() method (#6865 by @​cristinaponcela).
• Exported message and tool execution lifecycle event types from the package root (#6772 by @​davidbrai).
• Added built-in llama.cpp router support with /login connection setup and /llama Hugging Face model search and downloads, explicit loading, unloading, and live progress. See llama.cpp.
• Added extension registration for complete pi-ai providers, including native authentication, model refresh, filtering, and streaming behavior.
• Added usage accounting for tools, compaction, and branch summaries in persisted sessions, footer totals, and session statistics (#6671 by @​davidbrai).

Fixed

• Updated the packaged brace-expansion dependency to 5.0.7 (#6896 by @​davidbrai).
• Fixed persisted remote model catalogs from overriding newer bundled catalogs after an upgrade.
• Fixed inherited stored API-key credentials to apply their provider-scoped env values, including Amazon Bedrock profiles (#6864 by @​cristinaponcela).
• Fixed inherited OpenAI-compatible cross-provider replay to keep tool call IDs unique when multiple calls share a provider call ID (#6854 by @​cristinaponcela).
• Fixed inherited Kimi K3 thinking levels to expose low, high, and max, and normalized the k2p7 alias to kimi-for-coding.
• Fixed inherited OpenCode Go models routed through the OpenAI Responses API.
• Fixed inherited pi-ai package metadata to avoid repeated consumer lockfile changes (#6812 by @​jmfederico).
• Fixed inherited terminal shutdown to clear the editor's inverted software cursor before restoring the hardware cursor (#6790 by @​dam9000).
• Fixed inherited ANSI-aware text wrapping to recognize CRLF and CR line endings while preserving styles (#6764 by @​xz-dev).
• Fixed inherited editor paste registry corruption after deleting and undoing paste markers, preventing literal or mismatched paste markers in submitted prompts (#6844).
• Fixed sessionless OpenAI Codex WebSocket requests to use UUIDv7 request IDs (#6834 by @​xl0).
• Fixed inherited GPT-5.6 Codex models to default to the 272K context window, avoiding automatic long-context pricing (#6853 by @​aadishv).
• Fixed messages queued during compaction to preserve steering and follow-up delivery behavior (#6730 by @​dannote).
• Fixed read tool errors being syntax-highlighted as if they were file contents (#6731 by @​dannote).
• Fixed llama.cpp router download progress updates and removed redundant wording from model action confirmations.
• Moved automatic model catalog network refresh out of startup initialization and into the running interactive and RPC modes.
• Fixed persisted sessions being read and parsed twice when opened, reducing startup latency for large sessions (#6793).
• Fixed prompt-template defaults for all arguments (${@​:-default} and ${ARGUMENTS:-default}) (#6695).
• Fixed obsolete custom UI, custom tool, and custom editor examples in the extension documentation (#6735).
• Fixed Kimi Coding sessions to show API-equivalent implied costs with the subscription indicator.
• Fixed OpenAI Responses early stream endings to trigger automatic retry instead of ending the agent run (#6727).

[scottames-github-bot]

openai/codex (aqua:openai/codex)

rust-v0.145.0: 0.145.0

Compare Source

New Features

• Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, #33907, #34085, #34229, #34386)
• Expanded /import to migrate Cursor and Claude Code settings, MCP servers, plugins, sessions, commands, and project-scoped memories. (#31672, #33411, #33426, #33444)
• Added experimental Amazon Bedrock login, custom endpoint and authentication support, and GPT-5.6 Sol as the default Bedrock model. (#31327, #33170, #33175, #32288, #33695)
• Added audio inputs and tool outputs, including common local audio formats, and introduced streaming realtime V3 conversations. (#33261, #33856, #33932, #34080, #34385)
• Stabilized the opt-in multi-agent V2 experience with configurable sub-agent models, reasoning levels, concurrency, restored roles, and improved agent navigation. (#33550, #33631, #33657, #33841, #34383)
• Added secure, clickable inline visualization links in the terminal UI. (#33925, #34217, #34346)

Bug Fixes

• Editing an earlier prompt or retrying a safety-buffered turn now creates a contextual branch, preserving the original conversation, attachments, and mention bindings. (#33201, #33207, #33211)
• Improved terminal responsiveness for long conversations and streamed output through incremental Markdown rendering, fewer redraws, caching, and bounded command output. (#34045, #34049, #34216, #34223, #34359)
• Prevented slow or conflicting MCP startup and authentication flows by enforcing startup timeouts, avoiding blocking OAuth discovery, serializing refreshes, and reusing tool catalogs safely. (#32229, #32781, #32825, #33184, #33297)
• Improved Windows execution and sandbox reliability, including native exec-server sandboxing, network-proxy enforcement, hidden helper consoles, and correctly quoted hook commands. (#32849, #32857, #33926, #34423)
• Fixed compact release-metadata parsing and macOS code-mode installation, with an in-process fallback when the external code-mode host is unavailable. (#31667, #31876, #31899)
• Strengthened safety and approval handling with better forced-rm detection, consistent full-access confirmation, and preserved rejection reasons across tools. (#32989, #33464, #34400)

Documentation

• Updated the bundled OpenAI Docs skill with current GPT-5.6 model resolution, prompting, and migration guidance across macOS, Linux, and Windows. (#31842, #33121)

Chores

• Migrated bundled GPT-5.4 selections and internal uses to the corresponding GPT-5.6 Terra and Luna variants. (#33173)
• Reduced startup and large-context overhead with concurrent skill/plugin discovery and more efficient remote compaction. (#31566, #33369, #33423, #34431)
• Updated the packaged ripgrep binary to 15.2.0. (#34384)

Changelog

Full Changelog: openai/codex@rust-v0.144.0...rust-v0.145.0

• #31667 fix: parse compact release metadata in installer @​efrazer-oai
• #31362 core: route realtime and memories through HTTP client factory @​bolinfest
• #31566 perf(skills): reuse walk inventory for host loading @​jif-oai
• #31576 Bound exec-server process event reordering @​jif-oai
• #31756 test(skills): assert symlinked metadata loading @​jif-oai
• #31581 Resolve selected capability roots without starting executors @​jif-oai
• #31789 Stop persisting RMCP service traces @​jif-oai
• #31792 Summarize streamed response item logs @​jif-oai
• #31791 Filter routine Hyper logs from SQLite @​jif-oai
• #31790 Reduce MCP tool-list trace volume @​jif-oai
• #31804 Stabilize the memories feature flag @​jif-oai
• #31803 fix(mcp): default Apps product SKU to codex @​alecbarber-oai
• #31745 code-mode: retain shared MCP types for deferred tools @​sayan-oai
• #31672 Import enabled plugins from known marketplaces @​charlesgong-openai
• #31652 fix(tui): hide empty reasoning summaries @​fcoury-oai
• #31767 Remove the network proxy config wrapper @​jif-oai
• #31481 fix: forward originator to Codex Apps MCP @​raquel-openai
• #31363 codex-api: route file uploads through HTTP client factory @​bolinfest
• #31813 tui: update safety buffering copy @​etraut-openai
• #31830 fix(sandboxing): initialize network proxy config inline @​fcoury-oai
• #31431 build: ratchet direct reqwest dependencies @​bolinfest
• #31876 code-mode: fix installation on darwin @​cconger
• #31842 Update bundled OpenAI Docs skill for GPT-5.6 @​kkahadze-oai
• #31637 login: route raw auth flows through HTTP client @​bolinfest
• #31686 [codex-apps] Filter optional file fields by tool schema @​tsarlandie-oai
• #31899 code-mode: fall back to using in process v8 if we fail to resolve external process @​cconger
• #31805 Bound remote MCP stdio lines @​jif-oai
• #30293 Resolve and pin MCP OAuth credential stores @​stevenlee-oai
• #31892 exec-server: materialize filesystem workspace roots @​pakrym-oai
• #31327 feat: add managed Bedrock login API @​celia-oai
• #31295 bench: add codex help e2e macrobenchmark @​anp-oai
• #31428 bench: add e2e benchmark entrypoints @​anp-oai
• #31937 exec-server: expose process helper to outer sandbox @​pakrym-oai
• #32093 Remove the legacy exec policy engine @​copyberry
• #32106 Reduce startup latency for ancestor discovery @​copyberry
• #32112 Bound streamed exec-server HTTP response bodies @​copyberry
• #32122 Test the shared exec-server HTTP response byte budget @​copyberry
• #32123 Bound exec-server stdio JSON-RPC messages @​copyberry
• #32126 Test bounded concurrency in ancestor discovery @​copyberry
• #32134 Test stdio JSON-RPC size limits with LF and CRLF @​copyberry
• #32135 Propagate tracing subscribers to exec start tasks @​copyberry
• #32150 Keep unified exec output collection bounded @​copyberry
• #32193 Validate memory consolidation artifacts before succeeding @​copyberry
• #32197 Rebind memory consolidation workspace roots @​copyberry
• #32200 Add a skill invocation extension contributor @​copyberry
• #32206 Always send reasoning parameters in Responses requests @​copyberry
• #32213 Generate unique IDs for review rollout messages @​copyberry
• #32214 Propagate workspace roots to exec-server sandboxes @​copyberry
• #32229 Serialize MCP OAuth credential refreshes @​copyberry
• #32231 Support pending remote environment registration @​copyberry
• #32232 Let permission hooks resolve strict auto-review requests @​copyberry
• #32234 Add dedicated storage for paginated thread history @​copyberry
• #32246 Extract reverse JSONL scanning from session indexing @​copyberry
• #32256 Improve Responses WebSocket timing telemetry @​copyberry
• #32261 Preserve local path conventions in automatic approvals @​copyberry
• #32263 Include start times in terminal turn events @​copyberry
• #32272 Expose scheduled tasks in plugin details @​copyberry
• #32274 Remove the personality migration @​copyberry
• #32276 Repair unterminated rollout files before appending @​copyberry
• #32277 Honor personality = "none" in model instructions @​copyberry
• #32280 Include terminal errors in turn completion events @​copyberry
• #32286 Clarify waiting behavior in safety buffering prompts @​copyberry
• #32288 Make GPT-5.6 Sol the default Bedrock model @​copyberry
• #32289 Persist paginated items in the local thread store @​copyberry
• #32290 Respect model support for reasoning summaries @​copyberry
• #32301 Trust hooks from materialized workspace plugins @​copyberry
• #32302 Prefer the Codex home socket for Unix IDE context @​copyberry
• #32305 Improve file blob upload diagnostics @​copyberry
• #32312 Require prefixes for outbound response item IDs @​copyberry
• #32316 Stop falling back to older model availability announcements @​copyberry
• #32326 Use canonical links in the moved config notice @​copyberry
• #32332 Add ordinals to paginated rollout records @​copyberry
• #32441 Preserve parent sandbox enforcement for memory consolidation @​copyberry
• #32460 Emit thread-idle lifecycle after guardian interrupts @​copyberry
• #32461 Expand tabs when rendering TUI diffs @​copyberry
• #32485 Use available width for skill names in the toggle view @​copyberry
• #32628 Improve composer completion target resolution @​copyberry
• #32698 Extract connector runtime snapshot management @​copyberry
• #32744 Log missing personality messages at trace level @​copyberry
• #32746 Make advanced reasoning selection explicit in the TUI @​copyberry
• #32747 Align Guardian reviews with session configuration @​copyberry
• #32749 Expose model overrides for multi-agent v2 spawns @​copyberry
• #32751 Restrict spawned-agent models to the active backend @​copyberry
• #32761 Add shadow metrics for lexical skill selection @​copyberry
• #32768 Align shadow skill selection with observable sources @​copyberry
• #32780 Enable skill search shadow selection by default @​copyberry
• #32781 Apply MCP startup timeouts during client creation @​copyberry
• #32801 Refactor OAuth store lock contention tests @​copyberry
• #32822 Make explicit multi-agent mode override proactive delegation @​copyberry
• #32825 Avoid blocking thread startup on MCP OAuth discovery @​copyberry
• #32835 Forward turn metadata in standalone web search @​copyberry
• #32837 Restore V2 agent identities on root thread resume @​copyberry
• #32838 Reap exited PID-managed app-server children @​copyberry
• #32844 Expand millisecond duration histogram boundaries @​copyberry
• #32849 Hide Windows filesystem helper console windows @​copyberry
• #32857 Require the elevated Windows sandbox for network proxies @​copyberry
• #32858 Persist slash-command popup dismissal @​copyberry
• #32864 Coalesce concurrent Windows sandbox setup requests @​copyberry
• #32866 Allow responses after image generation @​copyberry
• #32867 Include connector IDs in MCP tool call analytics @​copyberry
• #32875 Use model catalog policies for Guardian auto review @​copyberry
• #32881 Broaden remote compaction model fallback @​copyberry
• #32884 Prepare external agent migration for source adapters @​copyberry
• #32887 Tag shell tool telemetry by command category @​copyberry
• #32891 Attach connector caches to diagnostic uploads @​copyberry
• #32894 Serialize plugin install requests @​copyberry
• #32896 Load model context from a bounded rollout suffix @​copyberry
• #32897 Route blocked network requests to their owning calls @​copyberry
• #32898 Expose structured standalone web search results @​copyberry
• #32899 Add exec-server environment status checks @​copyberry
• #32900 Derive collaboration settings from turn context @​copyberry
• #32903 Include session IDs in tool item analytics events @​copyberry
• #32905 Timestamp app-server notifications at emission @​copyberry
• #32911 Allow injecting the models manager into ThreadManager @​copyberry
• #32920 Expose environment status through app-server @​copyberry
• #32923 Materialize paginated thread history in SQLite @​copyberry
• #32928 Resume thread history projection from its SQLite checkpoint @​copyberry
• #32945 Restrict Guardian reviewer tools @​copyberry
• #32949 Tighten recommended plugin install suggestions @​copyberry
• #32952 Scope runtime workspace roots to execution environments @​copyberry
• #32985 Expose exact per-response usage in raw app-server events @​copyberry
• #32989 Always confirm before enabling full access @​copyberry
• #33013 Bound exec-server JSON-RPC decoding complexity @​copyberry
• #33026 Include raw response completions in TypeScript envelopes @​copyberry
• #33030 Remove task messages from list_agents output @​copyberry
• #33031 Preserve JSON number precision in exec-server RPC messages @​copyberry
• #33035 Use session IDs for prompt cache keys @​copyberry
• #33040 Send plugin analytics with API key authentication @​copyberry
• #33076 Add an agent extension runner @​copyberry
• #33093 Preserve streamed output during capped history replay @​copyberry
• #33105 Fix TUI status visibility around streamed output @​copyberry
• #33107 Preserve special filesystem subpaths as wire strings @​copyberry
• #33109 Reject forks of paginated threads @​copyberry
• #33113 Allow injecting the Codex Apps tools cache @​copyberry
• #33121 Refine GPT-5.6 prompting and migration guidance @​copyberry
• #33147 Support model catalog permission messages @​copyberry
• #33149 Build MCP tool runtimes before router planning @​copyberry
• #33150 Clarify exec yield timing on Windows @​copyberry
• #33152 Support paginated thread history in app-server list APIs @​copyberry
• #33155 Trace startup prewarm tasks @​copyberry
• #33156 Run detached reviews as review-agent turns @​copyberry
• #33159 Move sleep items to the extension-owned lifecycle path @​copyberry
• #33166 Defer Noise environment connections until registration @​copyberry
• #33167 Document the Windows exec yield time range @​copyberry
• #33170 Support Amazon Bedrock login in the app server @​copyberry
• #33173 Migrate GPT-5.4 uses to GPT-5.6 variants @​copyberry
• #33175 Handle Amazon Bedrock credentials during logout @​copyberry
• #33177 Support model catalog templates for Guardian policy prompts @​copyberry
• #33180 Serialize concurrent MCP stdin writes @​copyberry
• #33182 Preserve plugin install failure subtypes during imports @​copyberry
• #33184 Reuse MCP tool catalogs across sessions @​copyberry
• #33185 Keep approval test targets in the temporary home @​copyberry
• #33187 Honor workspace spend controls in rate-limit handling @​copyberry
• #33198 Keep interrupted prompts in conversation history @​copyberry
• #33200 Separate exec permission paths from core models @​copyberry
• #33201 Branch conversations when editing earlier TUI prompts @​copyberry
• #33203 Preserve in-flight state when restoring thread input @​copyberry
• #33207 Retry safety-buffered turns on a forked thread @​copyberry
• #33209 Separate session state from session I/O @​copyberry
• #33211 Preserve thread context when retrying or editing turns @​copyberry
• #33213 Prepare Python SDK 0.144.4 stable release @​copyberry
• #33223 Instrument environment and plugin resolution paths @​copyberry
• #33232 Disambiguate skill mentions from shell parameters @​copyberry
• #33237 Fix skill completion around bound mentions with suffixes @​copyberry
• #33239 Render TUI composer tabs as single-column spaces @​copyberry
• #33243 Add auto-compaction fallback token-budget settings @​copyberry
• #33251 Report selected environment connection transitions @​copyberry
• #33255 Add a fallback phase before automatic context rollover @​copyberry
• #33261 Add Frameless Bidi support for realtime conversations @​copyberry
• #33297 Allow MCP servers to opt out of tool catalog caching @​copyberry
• #33308 Expand MCP tool catalog cache regression coverage @​copyberry
• #33364 Enable paginated thread history in app-server @​copyberry
• #33367 Respect final-answer boundaries for queued agent mail @​copyberry
• #33369 Scan skill roots concurrently @​copyberry
• #33373 Render TUI prompts before submitting user turns @​copyberry
• #33411 Migrate plugin commands into skills on install @​copyberry
• #33412 Refactor world-state rendering tests into snapshots @​copyberry
• #33414 Expose connector candidates from imported sessions @​copyberry
• #33421 Fetch workspace connectors concurrently @​copyberry
• #33423 Load executor plugin declarations concurrently @​copyberry
• #33424 Attribute OpenAI docs MCP requests to Codex @​copyberry
• #33425 Refresh host skill catalogs through world state @​copyberry
• #33426 Add Cursor support to setup import @​copyberry
• #33427 Propagate deferred environment capability roots to MCP @​copyberry
• #33430 Avoid creating metadata paths in the Windows sandbox @​copyberry
• #33432 Preserve paginated history for spawned subagents @​copyberry
• #33435 Warn on conflicting capability root locations @​copyberry
• #33441 Shut down Codex threads after approval scenarios @​copyberry
• #33444 Add external agent memory migration @​copyberry
• #33445 Select the elevated Windows sandbox for network proxies @​copyberry
• #33446 Remove the unused network proxy loader @​copyberry
• #33454 Track prompt cache write token usage @​copyberry
• #33456 Move external agent migration into its crate @​copyberry
• #33457 Use final answers in turn history summaries @​copyberry
• #33459 Allow more time for image generation in code mode @​copyberry
• #33464 Strengthen forced rm command detection @​copyberry
• #33467 Remove template IDs from MCP tool call metadata @​copyberry
• #33500 Add cache-write tokens to the raw response schema @​copyberry
• #33509 Preserve encrypted content in MCP tool outputs @​copyberry
• #33550 Unify multi-agent settings under agents @​copyberry
• #33572 Expose spawn agent types only when roles are configured @​copyberry
• #33605 Add fielded BM25 to shadow skill selection @​copyberry
• #33613 Add character n-gram skill selection @​copyberry
• #33614 Add multi-query lexical skill selection @​copyberry
• #33631 Honor configured model defaults for spawned agents @​copyberry
• #33632 Remove generated-default filesystem path variants @​copyberry
• #33633 Clarify when to wait for starting environments @​copyberry
• #33636 Clarify when to wait for starting environments @​copyberry
• #33639 Remove the unused realtime WebRTC crate @​copyberry
• #33640 Avoid duplicate cached app list update notifications @​copyberry
• #33645 Run write_stdin concurrently across terminal sessions @​copyberry
• #33651 Add an app-server API for reading app metadata @​copyberry
• #33656 Validate reasoning effort after applying spawn roles @​copyberry
• #33657 Restore agent roles when reloading v2 sub-agents @​copyberry
• #33658 Keep active-turn environments stable across settings updates @​copyberry
• #33659 Require data URLs for code-mode image output @​copyberry
• #33665 Refresh step world state for all sessions @​copyberry
• #33677 Forward thread originators from standalone extensions @​copyberry
• #33680 Reword the apply_patch tool description @​copyberry
• #33683 Preserve scope and provenance for imported agent memory @​copyberry
• #33684 Extract TUI approval request payloads into structs @​copyberry
• #33687 Avoid unnecessary writes during migration repair @​copyberry
• #33695 Support custom transports for Amazon Bedrock @​copyberry
• #33841 Make parent-owned sub-agent threads read-only in the TUI @​copyberry
• #33842 Give the zsh fork decline test more execution time @​copyberry
• #33843 Add an API for reading installed app runtime state @​copyberry
• #33845 Confirm usage-limit resets before redemption @​copyberry
• #33848 Fix the managed Bedrock logout test assertion @​copyberry
• #33851 Record web search result payload sizes @​copyberry
• #33852 Add batched executor capability discovery @​copyberry
• #33855 Tag realtime transcript tail flush delegations @​copyberry
• #33856 Stream realtime V3 Codex handoff output @​copyberry
• #33858 Isolate core tests from shell and rollout persistence @​copyberry
• #33861 Test workspace write isolation across exec servers @​copyberry
• #33862 Suppress empty multi-agent mode messages @​copyberry
• #33863 Report detailed session import error types @​copyberry
• #33864 Keep feature tests focused on behavior @​copyberry
• #33866 Remove the redundant tool dispatch wrapper @​copyberry
• #33867 Add grace period to code-mode yield timeouts @​copyberry
• #33868 Remove stale ignored core tests @​copyberry
• #33870 Remove the redundant borrowed line wrapping helper @​copyberry
• #33872 Remove unused TUI collaboration mode indicators @​copyberry
• #33876 Track collaboration mode instructions in world state @​copyberry
• #33883 Report CLI as the external agent config import source @​copyberry
• #33889 Centralize thread MCP connections in McpRuntime @​copyberry
• #33892 Limit rollout metadata reads to headers @​copyberry
• #33893 Track realtime conversation state in world state @​copyberry
• #33895 Add SessionEnd hooks for thread teardown @​copyberry
• #33896 Expose plugin installation interstitial requirements @​copyberry
• #33901 Support ChatGPT-branded Desktop app builds @​copyberry
• #33902 Add bounded batch lookups for message history @​copyberry
• #33903 Route realtime V3 handoffs by response channel @​copyberry
• #33905 Batch persistent history reads during reverse search @​copyberry
• #33906 Launch managed network proxies on remote executors @​copyberry
• #33907 Add occurrence search for paginated threads @​copyberry
• #33908 Allow publishing plugins through share updates @​copyberry
• #33921 Preserve sub-agent liveness in the agent picker @​copyberry
• #33922 Allow selecting path-backed agents in the TUI picker @​copyberry
• #33923 Add audio variants to user input protocols @​copyberry
• #33925 Render inline visualization links in the TUI @​copyberry
• #33926 Fix quoted hook commands on Windows @​copyberry
• #33929 Handle audio inputs and Bazel unit test arguments @​copyberry
• #33930 Track inherited paginated rollout prefixes @​copyberry
• #33932 Forward audio inputs to the Responses API @​copyberry
• #33938 Centralize SQLite connection configuration @​copyberry
• #33944 Track permission instructions in world state @​copyberry
• #33950 Let users remember the working directory for resumed sessions @​copyberry
• #33961 Refresh bundled model metadata @​copyberry
• #33963 Add context to sampling retry logs @​copyberry
• #33982 Gate audio history by model input modalities @​copyberry
• #34038 Handle compressed rollouts in doctor thread inventory @​copyberry
• #34045 Render streamed Markdown incrementally @​copyberry
• #34047 Avoid resending the model for reasoning shortcuts @​copyberry
• #34049 Avoid redundant TUI redraws while streaming @​copyberry
• #34067 Seed realtime V3 sessions with initial text items @​copyberry
• #34080 Add audio output support to dynamic tools and code mode @​copyberry
• #34085 Support legacy views for paginated thread history @​copyberry
• #34194 Avoid cloning thread data when rendering transcripts @​copyberry
• #34197 Use the Markdown collector as the streaming source of truth @​copyberry
• #34198 Start side conversations without replaying inherited turns @​copyberry
• #34199 Avoid liveness races when starting side conversations @​copyberry
• #34204 Avoid cloning buffered TUI history lines @​copyberry
• #34206 Avoid retaining decoded MCP images in history cells @​copyberry
• #34216 Speed up TUI Markdown layout @​copyberry
• #34217 Keep incremental rendering with visualization context @​copyberry
• #34218 Track TUI command completion separately from output @​copyberry
• #34222 Avoid buffering replay-irrelevant thread notifications @​copyberry
• #34223 Cache finalized Markdown history rendering @​copyberry
• #34224 Avoid cloning file changes in TUI diff rendering @​copyberry
• #34226 Backfill completion items only for the active exec turn @​copyberry
• #34229 Persist names for paginated threads @​copyberry
• #34232 Remeasure dynamic cells in the transcript overlay @​copyberry
• #34234 Avoid redundant TUI subagent metadata requests @​copyberry
• #34271 Migrate legacy exec policy allow rules @​copyberry
• #34293 Preserve zsh tied PATH exports in shell snapshots @​copyberry
• #34344 Reject unsupported history modes when loading rollouts @​copyberry
• #34345 Remove unused Rust helpers @​copyberry
• #34346 Track inline visualization directives during streaming @​copyberry
• #34347 Avoid cloning deferred TUI lifecycle payloads @​copyberry
• #34348 Cache TUI flex heights across frame passes @​copyberry
• #34355 Parallelize TUI bootstrap requests @​copyberry
• #34357 Render streamed command output through preview iterators @​copyberry
• #34359 Keep streamed command output bounded in the TUI @​copyberry
• #34361 Avoid cloning thread history for token usage replay @​copyberry
• #34365 Animate Max and Ultra reasoning effort changes @​copyberry
• #34366 Avoid cloning hyperlink text during TUI rendering @​copyberry
• #34368 Use app-server skill metadata directly in the TUI @​copyberry
• #34371 Clear stale Guardian reviews when turns end @​copyberry
• #34375 Extend second-based latency histogram buckets @​copyberry
• #34378 Avoid rendering generated images twice @​copyberry
• #34380 Stop retrying turns with invalid tool images @​copyberry
• #34381 Avoid cloning Responses WebSocket payloads @​copyberry
• #34382 Keep paginated thread Git metadata in SQLite @​copyberry
• #34383 Mark multi-agent v2 as stable @​copyberry
• #34384 Update packaged ripgrep to 15.2.0 @​copyberry
• #34385 Preserve audio across history and tool outputs @​copyberry
• #34386 Enable memories for paginated threads @​copyberry
• #34387 Refresh bundled model metadata @​copyberry
• #34389 Route Codex Apps MCP through plugin service @​copyberry
• #34390 Use copy-on-write storage for history snapshots @​copyberry
• #34392 Ignore inherited ACEs when refreshing Windows write roots @​copyberry
• #34393 Add configurable hook context spill limits @​copyberry
• #34396 Run compact session-start hooks before turn continuation @​copyberry
• #34400 Propagate approval rejection reasons @​copyberry
• #34403 Update tests for history and hook API changes @​copyberry
• #34407 Resolve paginated rollout lineages @​copyberry
• #34408 Support threadless MCP connections without event channels @​copyberry
• #34409 Limit the Linux /proc preflight filesystem view @​copyberry
• #34411 Require absolute paths for test SQLite configuration @​copyberry
• #34413 Remove CSV-backed agent jobs @​copyberry
• #34416 Show completed hook warnings in TUI headers @​copyberry
• #34417 Enrich app/read connector metadata @​copyberry
• #34423 Support Windows sandboxing in the exec server @​copyberry
• #34429 Move shared skill models into codex-skills @​copyberry
• #34431 Optimize remote compaction history handling @​copyberry
• #34434 Support catalog messages for non-request approval policies @​copyberry
• #34435 Resolve outbound proxy routes explicitly @​copyberry
• #34436 Honor managed permission profiles in network proxy resolution @​copyberry
• #34438 Increase the patch approval test timeout @​copyberry
• #34441 Add buffered code-mode exec yields @​copyberry

siderolabs/talos (aqua:siderolabs/talos)

v1.13.7: v1.13.7

Compare Source

Talos 1.13.7 (2026-07-21)

Welcome to the v1.13.7 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.18.39
containerd: 2.2.6
Flannel: 0.28.7
CoreDNS: 1.14.4

Talos is built with Go 1.26.5.

Contributors

• Andrey Smirnov
• Mateusz Urbanek
• Noel Georgi
• Calin
• Dario Emerson
• Maja Bojarska

Changes

19 commits

• siderolabs/talos@​b0039b717 release(v1.13.7): prepare release
• siderolabs/talos@​fc6f9b173 test: add nginx to the image cache integration
• siderolabs/talos@​c6c435ba7 test: increase resource inmem buffer to stabilize the tests
• siderolabs/talos@​202dc152a fix: add ca-certificates to talosctl
• siderolabs/talos@​3a14c8d36 fix: vrf sorting
• siderolabs/talos@​a4c1e6eb4 fix: oom podruntime protection
• siderolabs/talos@​57b861657 feat: bump CoreDNS, Flannel
• siderolabs/talos@​58a78fe22 fix: use symlinks for init aliases
• siderolabs/talos@​428872bf4 fix: do proper backoff for NTP Kiss-of-Death responses
• siderolabs/talos@​1d55e281a feat: add iommufd as a kernel module
• siderolabs/talos@​576638def fix: make audit restartable
• siderolabs/talos@​76328f941 fix: avoid image cache mount request churn
• siderolabs/talos@​46f9ac675 feat: bring in ifb.ko module
• siderolabs/talos@​0d752e784 fix: provide correct handler for Ctrl-Alt-Delete sequence
• siderolabs/talos@​fe9d33095 fix: terminate log persistence a bit harder
• siderolabs/talos@​7c8021a3e feat: add --no-reboot flag to upgrade cmd
• siderolabs/talos@​a155bad1b fix: do not block volume lifecycle teardown on failed user volumes
• siderolabs/talos@​c63f0789a fix: flaky tests
• siderolabs/talos@​2bf6b7462 feat: bring in Linux 6.18.39, containerd 2.2.6

Changes from siderolabs/pkgs

6 commits

• siderolabs/pkgs@​91fe0a0 feat: update Linux to 6.18.39
• siderolabs/pkgs@​1018556 feat: enable CONFIG_IOMMUFD and CONFIG_VFIO_DEVICE_CDEV
• siderolabs/pkgs@​d529479 chore: bump nvidia to 580.167.08
• siderolabs/pkgs@​971fd23 fix: enable CONFIG_IFB as a module
• siderolabs/pkgs@​acece91 feat: update DRBD to 9.3.3
• siderolabs/pkgs@​b91905c feat: update containerd to 2.2.6

Changes from siderolabs/tools

1 commit

• siderolabs/tools@​c2844e6 feat: update util-linux to 2.42.2

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0 -> v1.5.0
• github.com/aws/aws-sdk-go-v2/service/kms v1.51.1 -> v1.52.0
• github.com/docker/cli v29.4.0 -> v29.4.3
• github.com/google/go-containerregistry v0.21.5 -> v0.21.6
• github.com/klauspost/compress v1.18.5 -> v1.18.6
• github.com/moby/moby/api v1.54.1 -> v1.54.2
• github.com/moby/moby/client v0.4.0 -> v0.4.1
• github.com/siderolabs/pkgs v1.13.0-43-gd8c80cc -> v1.13.0-49-g91fe0a0
• github.com/siderolabs/talos/pkg/machinery v1.13.6 -> v1.13.7
• github.com/siderolabs/tools v1.13.0-7-gc58afd5 -> v1.13.0-8-gc2844e6
• github.com/sigstore/sigstore v1.10.6 -> v1.10.8
• github.com/sigstore/sigstore-go v1.1.4 -> v1.2.0
• github.com/theupdateframework/go-tuf/v2 v2.4.1 -> 7e8f69f906ef
• google.golang.org/grpc v1.81.0 -> v1.81.1

Previous release can be found at v1.13.6

Images

ghcr.io/siderolabs/flannel:0.28.7
registry.k8s.io/coredns/coredns:v1.14.4
registry.k8s.io/etcd:v3.6.12
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.36.2
registry.k8s.io/kube-controller-manager:v1.36.2
registry.k8s.io/kube-scheduler:v1.36.2
registry.k8s.io/kube-proxy:v1.36.2
ghcr.io/siderolabs/kubelet:v1.36.2
registry.k8s.io/networking/kube-network-policies:v1.1.0
ghcr.io/siderolabs/installer:v1.13.7
ghcr.io/siderolabs/installer-base:v1.13.7
ghcr.io/siderolabs/imager:v1.13.7
ghcr.io/siderolabs/talos:v1.13.7
ghcr.io/siderolabs/talosctl-all:v1.13.7
ghcr.io/siderolabs/overlays:v1.13.7
ghcr.io/siderolabs/extensions:v1.13.7

sst/opencode (aqua:sst/opencode)

v1.18.4: v1.18.4

Compare Source

Core

Improvements

• Use adaptive thinking controls for Kimi models on Anthropic-compatible providers, with summarized reasoning output by default. (@​chouqin)

Bugfixes

• Reduce OpenAI provider header timeouts during slow connection setup.
• Respect provider-defined reasoning options instead of falling back to the wrong reasoning controls.
• Restore Azure Cognitive Services endpoint support for Azure-hosted models.

Desktop

Improvements

• Sync the embedded terminal theme with the app theme.
• Improve the review panel so open file tabs can stay aligned with the current diff view.
• Rewrite the v2 prompt input for more reliable command, context, shell, attachment, and history interactions.
• Improve review panel resizing and sticky controls.

Bugfixes

• Preserve command drafts in the command menu.
• Avoid session view failures when message parent links are missing.
• Prevent sending empty prompt text parts.
• Restore model variant selection accessibility.
• Show keybind tooltips on prompt input controls. (@​ProdigyRahul)
• Deduplicate repeated file entries in diff summaries.
• Prevent recovery window handling from touching destroyed windows.

Thank you to 3 community contributors:

• @​jerome-benoit:
  • fix(nix): relax Bun version check for desktop build (#36767)
  • fix(nix): restore desktop integration (#37197)
• @​ProdigyRahul:
  • fix(app): show keybind tooltips on prompt input controls (#37824)
• @​chouqin:
  • feat(opencode): use adaptive thinking effort for kimi family on anthr… (#37696)

twpayne/chezmoi (aqua:twpayne/chezmoi)

v2.71.1: v2.71.1

Compare Source

Changelog

Features

• 8e75b751495194b0e4eb7e5cd65b619a82e1b23a feat: Add --verbose flag to upgrade command
• 8d986d53c884f3da344b3d5ffa66dd0ef0d001c4 feat: Add --skip-secrets flag

Fixes

• 942c82cc0e0f0a3ad438b008d45684f3a97d10d4 fix: Ensure that external target paths are in target dir

aquaproj/aqua (github:aquaproj/aqua)

v2.62.1: v2.62.1

Compare Source

aquaproj/aqua@v2.62.0...v2.62.1

🐛 Bug Fixes

#5048 unarchive: expand a pkg file into a non-existent destination
#5051 installpackage: create package directories with the usual permissions

janosmiko/lfk (github:janosmiko/lfk)

v0.15.13: v0.15.13

Compare Source

0.15.13 (2026-07-21)

Bug Fixes

• explorer: keep focused row untinted in foreground row-status-tint (#540) (#552) (bc702d0)

ogulcancelik/herdr (github:ogulcancelik/herdr)

v0.7.5: v0.7.5

Compare Source

Breaking Changes

• Installed and linked plugins, including their enabled state, are now global to the current user instead of isolated by Herdr session. Plugins installed only in a named session on Herdr 0.7.3 must be installed or linked again. (#1174)

Added

• Added a live-agent CLI facade with named start, atomic prompt, logical send-keys, and server-owned wait workflows. Agent startup targets an existing pane without changing topology, validates the requested interactive agent kind and strict agent name, and accepts native arguments after --.
• Added transient declarative Agent view queries through agent.view.set/clear; filtered and sorted views now define sidebar, mobile, mouse, and agent-keybind navigation order.
• Added one-shot plugin [[startup]] hooks for restoring plugin-owned state after server startup and live handoff.
• Added per-token foreground, bold, and dim styling to expanded Space and Agent sidebar row layouts.
• Added ui.sidebar_start_collapsed to launch Herdr with the sidebar collapsed. (#1463)
• Added ui.prompt_new_workspace_name to ask for a workspace name before interactive TUI creation.
• Added macOS support for the HERDR_AGENT=<agent> foreground-process hint, allowing agents hidden behind host-visible wrappers such as nono to use the named agent's screen manifest. (chore: upgrade trunk #679)

Changed

• Agent commands now accept only a unique live agent name or the pane ID currently hosting that agent. Names are cleared when the occupant exits, is released, or is replaced. The old top-level wait commands were replaced by agent wait and pane wait-output, and agent send was replaced by agent send-keys.
• The session navigator now uses connected tree glyphs, groups matches by workspace, and automatically selects the first result when a search begins. (#1611)

Fixed

• CLI requests now return a machine-readable protocol_mismatch error when the client and server protocols differ, while recovery commands remain available. (#1435)
• Linux sound notifications now terminate and reap audio players that do not exit, preventing unavailable audio from leaving CPU-bound mpg123 processes behind. (#1622)
• Oversized bracketed text pastes are now rejected with a client-local notification instead of disconnecting the client. (#1665)
• Agent prompt waits now report agent_prompt_stalled after five seconds without an observed state change instead of waiting indefinitely after an ineffective submission.
• herdr config check now reports unknown config keys with their full paths instead of treating ignored typos as valid configuration. (#1573)
• Codex panes with customized static terminal titles now fall back to the live working footer instead of remaining idle, while OSC activity remains preferred. (#1563)
• Grok panes now preserve working and blocked state from terminal signals and pinned background-work status instead of falling back to idle mid-turn.
• OpenCode lifecycle reports are now serialized so out-of-order plugin events cannot leave an idle pane marked working. (#1519)
• Kimi question prompts now report blocked until the user answers or dismisses them.
• Pi lifecycle reporting now uses settled events, preventing transient message boundaries from publishing an idle state mid-turn.
• The Pi, OMP, OpenCode, and Kilo Code integrations can now be installed on Windows and report lifecycle state and native session identity through Herdr's named-pipe API. (#1531)
• Named agent prompts now honor live bracketed-paste mode before sending Enter, preserving OpenCode text such as A != B instead of triggering shell mode. (#1525)
• New panes, tabs, layouts, and workspaces using new_cwd = "follow" now inherit the foreground process-group leader's working directory instead of an unrelated helper process directory. (#1472)
• Cached pane working directories no longer trigger repeated filesystem checks, avoiding slow sidebar rendering on network filesystems such as Ceph. (#1603)
• Windows foreground-process snapshots are now shared across panes, reducing idle CPU use in sessions with many panes. (#1158)
• Terminal diff streams now batch contiguous writes, reducing the visible wave effect while scrolling pane history. (chore(main): release 0.15.0 #283)
• A standalone Escape arriving beside another key is now preserved as its own input instead of being combined into a fabricated Alt chord. (chore(deps): update ⬆️ dagger to v0.18.16 #541)
• Pane viewports that were following live output now continue following after a resize.
• Mouse selections now remain visible when ui.copy_on_select = false while clipboard writes stay disabled. (#1471)
• Workspace close confirmation now shows the current workspace name instead of a stale or unrelated label. (#1364)
• Plugin command arrays now preserve whitespace-only arguments. (#1594, #1613)
• Plugins can now be installed or linked while no Herdr server is running. (#1670)
• Remote attach now discovers Herdr installed in mise's canonical tool path before offering to install a sidecar binary. (#1201)
• Noninteractive update, plugin, integration, sound, custom-command, and Git subprocesses no longer flash console windows on Windows. (#1468)
• Live handoff now preserves installed plugins and no longer lets the next plugin installation overwrite the existing registry. (chore(deps): update ⬆️ github-actions to v3 #893)
• herdr agent wait now returns agent_not_running promptly when its target pane closes instead of waiting for the full timeout. (#1439)
• Pane graphics streams now shut down cleanly when a client disconnect races stream teardown.

SocketDev/socket-cli (npm:socket)

v1.1.145: v1.1.145

Compare Source

Backfilled GitHub Release for npm socket@​1.1.145 (tag points at the published commit).

v1.1.144: v1.1.144

Compare Source

Backfilled GitHub Release for npm socket@​1.1.144 (tag points at the published commit).

jdx/usage (usage)

v3.5.6: v3.5.6: Private completion cache and Markdown code-block escaping

Compare Source

A security-focused patch release that moves the shell-completion spec cache out of world-writable /tmp into a private per-user cache dir, plus a Markdown renderer fix that stops mangling < inside fenced code blocks.

Fixed

• Completion spec cache is no longer written to world-writable tmp (#727, fixes #722). The generated bash, zsh, fish, and nu completion scripts previously cached the usage spec at a predictable path under ${TMPDIR:-/tmp}. Because /tmp is typically world-writable and the filename is guessable, another local user could pre-plant a symlink there and have the completion script's >| / save -f overwrite an arbitrary file owned by the invoking user. Caches now live in a per-user directory created with mode 700:

  • bash / zsh / fish: ${XDG_CACHE_HOME:-$HOME/.cache}/usage
  • nu: ($env.XDG_CACHE_HOME? | default (home-dir | path join ".cache") | path join "usage")

  Because ~/.cache persists across reboots (unlike /tmp), version-keyed cache files are now reaped on a cache miss if they haven't been regenerated in 30 days. The prune is age-based and scoped to the current bin, so running two versions of the same tool concurrently no longer thrashes the cache. Users who regenerate their completion scripts will pick up the fix; the cache location change is otherwise transparent.

• nu: completion cache dir permissions and nushell 0.110+ compatibility (#731). Nushell's builtin mkdir has no mode flag, so the initial fix in chore(deps): update ⬆️ mise-packages #727 created the nu cache dir at the process umask (usually 755, world-readable). The generator now runs ^chmod 0700 on the dir at creation time (non-Windows only) to match bash/zsh/fish. Separately, $nu.home-path was renamed to $nu.home-dir in nushell 0.110.0, which broke the completer on any recent nushell even when XDG_CACHE_HOME was set (because default's argument is evaluated eagerly). The lookup now uses optional access with a fallback that works on both old and new nushell:

  let spec_dir = ($env.XDG_CACHE_HOME? | default ($nu.home-dir? | default $nu.home-path? | path join ".cache") | path join "usage")

• markdown: preserve HTML inside fenced code blocks (#720) — thanks @​risu729. The Markdown renderer's HTML-escape filter processed lines independently and would turn < into < even inside multiline fenced code blocks, corrupting examples like echo <value>. It now tracks fenced-block state across lines and leaves content between column-zero triple-backtick fences untouched, while still escaping < in surrounding prose. Addresses the escaping problem reported in jdx/mise#6949.

• cli: avoid trailing semicolon in macro expression position (#729). The two miette::bail!("unsupported shell: ...") match arms in complete_word and usage_spec were wrapped in a block so the macro expands in statement position. This clears the semicolon_in_expressions_from_macros lint that is already a hard error on nightly Rust. Runtime behavior is unchanged.

• lib: remove needless borrows in format! args (#726) — minor cleanup for newer clippy.

Full Changelog: jdx/usage@v3.5.5...v3.5.6

💚 Sponsor usage

usage is maintained by @​jdx, an open source developer for entire.io, the title sponsor of the jdx.dev open source tools including mise, aube, hk, and more. Work on usage is funded by sponsorships.

If usage powers CLI specs, docs, or completions for a tool you maintain or use, please consider sponsoring at jdx.dev. Every sponsorship helps the project stay independent and moving.

Skipped Packages

GitHub Release Notes Unavailable

• pipx:semgrep: No GitHub release was found for 1.170.1