chore(deps): bump github.com/openclaw/crawlkit from 0.11.0 to 0.13.1

[dependabot]

Bumps github.com/openclaw/crawlkit from 0.11.0 to 0.13.1.

Release notes

Sourced from github.com/openclaw/crawlkit's releases.

crawlkit v0.13.0

What's new

• Add content-deduplicated encrypted file bundles with safe current and historical restore for crawler backups.
• Add shared SQL LIKE literal escaping for crawler search queries.
• Preserve Unicode combining marks in tokenized FTS5 queries.
• Add a safe tokenized FTS5 query helper for arbitrary user search input.
• Preserve unrelated tracked mirror edits across write synchronization rebases.
• Retry atomic branch-and-tag snapshot pushes after rebasing and retargeting unpublished tags.
• Update Go to 1.26.4 for current standard-library security fixes and add race and vulnerability CI gates.
• Preserve unpublished local mirror branches during pulls, clone the requested remote branch, and support caller-selected private repository directory modes.
• Allow managed sidecar trees to prune selected generated files while preserving unrelated files.
• Add non-mutating archive tag validation and rebase-based write synchronization for durable multi-machine backup retries.
• Add reusable Git snapshot history/tag/ref restoration, SQLite bundle snapshots, managed snapshot sidecars, mapped sync-state adapters, FTS5 helpers, and the shared contact-export contract; refresh stable dependencies.

Full changelog: https://github.com/openclaw/crawlkit/blob/v0.13.0/CHANGELOG.md

crawlkit 0.12.2

v0.12.2

• Fix SQLite file URI generation for absolute Windows paths while preserving reserved-character escaping.
• Add a Windows CI job and a Windows-specific regression test for drive-letter SQLite paths.

Verification

• CI: https://github.com/openclaw/crawlkit/actions/runs/27676867804
• CodeQL: https://github.com/openclaw/crawlkit/actions/runs/27676867668
• Secret scan: https://github.com/openclaw/crawlkit/actions/runs/27676867709

crawlkit v0.12.1

• Harden crawlkit maintenance surfaces found by clawpatch: safer crawlctl log tailing, GOWORK-isolated validation, atomic backup/cache/store writes, safer snapshot incremental imports, scoped state schemas, scheduler lock and interval handling, release/version checks, remote bearer-token transport validation, and path-scoped mirror commits.

Verification

• CI
• CodeQL
• Secret scanning
• Tested from source against gitcrawl, discrawl, slacrawl, notcrawl, and wacrawl through an isolated Go workspace.

crawlkit v0.12.0

Changelog

• Add shared vector.Search backends, including the existing exact cosine scorer and an optional Python turbovec bridge for downstream semantic search over dimensions divisible by 8 up to 8,192. Thanks @​vincentkoc.
• Add a remote.Client.UploadSQLite helper, SQLite object metadata in remote status payloads, and contract metadata for publisher-side raw SQLite archive uploads.

... (truncated)

Changelog

Sourced from github.com/openclaw/crawlkit's changelog.

v0.13.1 - 2026-06-23

• Harden crawlkit scheduler, output, release-check, vector ranking, and CI workflow edges found by clawpatch.
• Expose remote ingest reset progress so crawl publishers can drain large Cloudflare D1 table replacements before sending row batches.

v0.13.0 - 2026-06-19

• Add content-deduplicated encrypted file bundles with safe current and historical restore for crawler backups.
• Add shared SQL LIKE literal escaping for crawler search queries.
• Preserve Unicode combining marks in tokenized FTS5 queries.
• Add a safe tokenized FTS5 query helper for arbitrary user search input.
• Preserve unrelated tracked mirror edits across write synchronization rebases.
• Retry atomic branch-and-tag snapshot pushes after rebasing and retargeting unpublished tags.
• Update Go to 1.26.4 for current standard-library security fixes and add race and vulnerability CI gates.
• Preserve unpublished local mirror branches during pulls, clone the requested remote branch, and support caller-selected private repository directory modes.
• Allow managed sidecar trees to prune selected generated files while preserving unrelated files.
• Add non-mutating archive tag validation and rebase-based write synchronization for durable multi-machine backup retries.
• Add reusable Git snapshot history/tag/ref restoration, SQLite bundle snapshots, managed snapshot sidecars, mapped sync-state adapters, FTS5 helpers, and the shared contact-export contract; refresh stable dependencies.

v0.12.2 - 2026-06-17

• Fix SQLite file URI generation for absolute Windows paths while preserving reserved-character escaping, and add Windows CI coverage.

v0.12.1 - 2026-06-17

• Harden crawlkit maintenance surfaces found by clawpatch: safer crawlctl log tailing, GOWORK-isolated validation, atomic backup/cache/store writes, safer snapshot incremental imports, scoped state schemas, scheduler lock and interval handling, release/version checks, remote bearer-token transport validation, and path-scoped mirror commits.

v0.12.0 - 2026-06-10

• Add shared vector.Search backends, including the existing exact cosine scorer and an optional Python turbovec bridge for downstream semantic search over dimensions divisible by 8 up to 8,192. Thanks @​vincentkoc.
• Add a remote.Client.UploadSQLite helper, SQLite object metadata in remote status payloads, and contract metadata for publisher-side raw SQLite archive uploads.
• Add gzip-compressed SQLite bundle manifests, chunk builders, and upload helpers for R2-backed remote archive bootstrap/fallback data.

v0.9.0 - 2026-05-28

• Add explicit remote protocol contract metadata and a public Client.Contract helper so Worker-fronted archive services can prove their supported routes, auth roles, query names, and ingest tables without coupling

... (truncated)

Commits

• 5ebd0de fix(remote): expose ingest reset progress
• 232aef3 fix: harden crawlkit clawpatch findings
• b2a3797 chore: reopen changelog after 0.13.0
• d8d9116 chore: prepare release 0.13.0
• 28d58de [codex] Add encrypted backup file bundles (#38)
• 797628a fix: preserve Unicode marks in FTS queries (#37)
• e74b0c4 feat: add SQL LIKE escaping helper (#36)
• 9a63644 feat: add tokenized FTS query helper (#35)
• eb1aa35 fix: preserve edits during mirror sync (#34)
• ca6cd66 fix: retry atomic snapshot pushes (#33)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Summary by cubic

Upgrade github.com/openclaw/crawlkit to 0.13.1 to pull in security/stability hardening and new backup/search helpers. Also updates a few indirect deps for crypto, syscalls, and SQLite.

• Dependencies
  • github.com/openclaw/crawlkit 0.11.0 → 0.13.1.
  • Indirect bumps: golang.org/x/crypto 0.53.0, golang.org/x/sys 0.46.0, modernc.org/sqlite 1.52.0, github.com/pelletier/go-toml/v2 2.4.0, modernc.org/libc 1.73.4.
  • Notable upstream gains: encrypted backup bundles with safe restore; safer FTS5/LIKE search helpers with Unicode support; scheduler/output/release-check hardening.

^{Written for commit 333639b. Summary will update on new commits.}

[dependabot]

Looks like github.com/openclaw/crawlkit is up-to-date now, so this is no longer needed.