Skip to content

chore(deps): group the open dependency updates - #2038

Merged
jeremi merged 9 commits into
mainfrom
chore/dependency-updates-2026-10-13
Oct 13, 2026
Merged

chore(deps): group the open dependency updates#2038
jeremi merged 9 commits into
mainfrom
chore/dependency-updates-2026-10-13

Conversation

@jeremi

@jeremi jeremi commented Oct 13, 2026

Copy link
Copy Markdown
Member

Pull Request

Summary

Grouped dependency update. This pull request replaces seven open Dependabot pull requests with one branch, one commit per original pull request, plus two companion commits that keep the pin gates in step:

It crosses owning areas (crates/, products/, docs/site/, release/, .github/) on purpose, because it is a grouped dependency update. The Dependabot commits are cherry-picked unchanged and are byte-identical to the heads of the pull requests they replace. No source code changes; no generated output needed regeneration.

Companion commits:

  • chore(ci): .github/scripts/test_ci_changes.py and release/scripts/check-gates-inventory.py assert exact action pins and now assert the new ones.
  • chore(release): release/scripts/check-debian13-images.py holds the Debian preparation digest and now holds the new one.

The pin gates fail on the two Dependabot commits that move the pins and pass from the last commit on.

Version bumps

Root Cargo.lock (#2037)

  • napi 3.14.0 -> 3.14.2
  • napi-derive 3.6.11 -> 3.6.12
  • rmcp 3.5.0 -> 3.5.1
  • signal-hook 0.4.4 -> 0.4.5
  • tokio 1.53.1 -> 1.53.2
  • tree-sitter 0.27.0 -> 0.27.1
  • tree-sitter-language 0.1.8 -> 0.1.9 (transitive)
  • uuid 1.27.0 -> 1.28.0
  • zeroize 1.9.0 -> 1.9.1

Re-resolution side effects, with no version added or removed: oxrdf and one sibling RDF crate now resolve thiserror to 1.0.69 instead of 2.0.21, and tempfile 3.27.0 resolves getrandom to 0.3.4 instead of 0.4.3. Both versions of each were already in the lockfile.

products/breg/wasm-handler-sdk/Cargo.lock (#2035)

  • tokio 1.53.1 -> 1.53.2
  • uuid 1.27.0 -> 1.28.0
  • zeroize 1.9.0 -> 1.9.1
  • side effect: tempfile resolves getrandom to 0.3.4 instead of 0.4.3

Standalone lockfiles (#1970)

  • editors/zed/Cargo.lock: anyhow 1.0.103 -> 1.0.104
  • products/evidence/fuzz/Cargo.lock: tokio 1.53.1 -> 1.53.2, uuid 1.26.1 -> 1.28.0, zeroize 1.9.0 -> 1.9.1
  • products/platform/fuzz/Cargo.lock: tokio 1.53.1 -> 1.53.2, uuid 1.26.1 -> 1.28.0, zeroize 1.9.0 -> 1.9.1

Node.js client bindings (#2036, dev dependencies only)

  • crates/registry-breg-client-node: @napi-rs/cli 3.10.6 -> 3.10.8, @types/node 24.19.1 -> 24.19.2
  • crates/registry-casework-client-node: @napi-rs/cli 3.10.6 -> 3.10.8, @types/node 24.19.1 -> 24.19.2
  • crates/registry-discovery-client-node: @napi-rs/cli 3.10.6 -> 3.10.8, @types/node 24.19.1 -> 24.19.2
  • crates/registry-evidence-client-node: @napi-rs/cli 3.10.6 -> 3.10.8
  • crates/registry-messaging-client-node: @napi-rs/cli 3.10.6 -> 3.10.8, @types/node 24.19.1 -> 24.19.2
  • crates/registry-scheduling-client-node: @napi-rs/cli 3.10.6 -> 3.10.8, @types/node 24.19.1 -> 24.19.2

No transitive changes in these lockfiles.

docs/site (#2000)

Direct:

  • @astrojs/starlight 0.42.5 -> 0.42.6
  • astro 7.3.5 -> 7.3.8
  • starlight-openapi 0.26.3 -> 0.27.0
  • @astrojs/markdown-remark 7.3.1 -> 7.3.2
  • @redocly/cli 2.57.0 -> 2.60.0

Transitive, changed:

  • @babel/parser 7.29.7 -> 7.29.9
  • @babel/types 7.29.7 -> 7.29.8
  • @clack/core 1.4.2 -> 1.5.1
  • @clack/prompts 1.6.0 -> 1.8.1
  • @oxc-project/types 0.137.0 -> 0.153.0
  • @rolldown/binding-android-arm64 1.1.3 -> 1.2.13
  • @rolldown/binding-darwin-arm64 1.1.3 -> 1.2.13
  • @rolldown/binding-darwin-x64 1.1.3 -> 1.2.13
  • @rolldown/binding-freebsd-x64 1.1.3 -> 1.2.13
  • @rolldown/binding-linux-arm-gnueabihf 1.1.3 -> 1.2.13
  • @rolldown/binding-linux-arm64-gnu 1.1.3 -> 1.2.13
  • @rolldown/binding-linux-arm64-musl 1.1.3 -> 1.2.13
  • @rolldown/binding-linux-ppc64-gnu 1.1.3 -> 1.2.13
  • @rolldown/binding-linux-s390x-gnu 1.1.3 -> 1.2.13
  • @rolldown/binding-linux-x64-gnu 1.1.3 -> 1.2.13
  • @rolldown/binding-linux-x64-musl 1.1.3 -> 1.2.13
  • @rolldown/binding-openharmony-arm64 1.1.3 -> 1.2.13
  • @rolldown/binding-win32-arm64-msvc 1.1.3 -> 1.2.13
  • @rolldown/binding-win32-x64-msvc 1.1.3 -> 1.2.13
  • @shikijs/core 4.3.0 -> 4.5.0
  • @shikijs/engine-javascript 4.3.0 -> 4.5.0
  • @shikijs/engine-oniguruma 4.3.0 -> 4.5.0
  • @shikijs/langs 4.3.0 -> 4.5.0
  • @shikijs/primitive 4.3.0 -> 4.5.0
  • @shikijs/themes 4.3.0 -> 4.5.0
  • @shikijs/types 4.3.0 -> 4.5.0
  • am-i-vibing 0.4.0 -> 0.5.0
  • @astrojs/markdown-satteri (nested under astro) 0.4.2 -> 0.4.3
  • get-tsconfig 5.0.0-beta.4 -> 5.0.0-beta.6
  • lightningcss 1.32.0 -> 1.33.0
  • lightningcss-android-arm64 1.32.0 -> 1.33.0
  • lightningcss-darwin-arm64 1.32.0 -> 1.33.0
  • lightningcss-darwin-x64 1.32.0 -> 1.33.0
  • lightningcss-freebsd-x64 1.32.0 -> 1.33.0
  • lightningcss-linux-arm-gnueabihf 1.32.0 -> 1.33.0
  • lightningcss-linux-arm64-gnu 1.32.0 -> 1.33.0
  • lightningcss-linux-arm64-musl 1.32.0 -> 1.33.0
  • lightningcss-linux-x64-gnu 1.32.0 -> 1.33.0
  • lightningcss-linux-x64-musl 1.32.0 -> 1.33.0
  • lightningcss-win32-arm64-msvc 1.32.0 -> 1.33.0
  • lightningcss-win32-x64-msvc 1.32.0 -> 1.33.0
  • magic-string 1.4.1 -> 1.4.3
  • magicast 0.5.3 -> 0.5.5
  • p-limit 7.3.0 -> 7.3.3
  • p-queue 9.3.0 -> 9.3.3
  • p-timeout 7.0.1 -> 7.0.2
  • package-manager-detector 1.6.0 -> 1.9.0
  • picomatch 4.0.4 -> 4.0.7
  • rolldown 1.1.3 -> 1.2.13
  • shiki 4.3.0 -> 4.5.0
  • tinyexec 1.2.4 -> 1.3.1
  • ultrahtml 1.6.0 -> 1.7.0
  • verkit 0.4.1 -> 0.5.0
  • vite 8.1.0 -> 8.3.4
  • yaml 2.9.0 (lockfile metadata only, devOptional flag)

Transitive, added:

  • @astrojs/internal-helpers 0.12.0 (nested under @astrojs/markdown-remark)
  • @astrojs/internal-helpers 0.12.0 (nested under astro)
  • @rolldown/binding-android-arm-eabi 1.2.13
  • es-module-lexer 3.0.3 (nested under astro)

Transitive, removed:

  • esbuild 0.28.1
  • @esbuild/aix-ppc64 0.28.1
  • @esbuild/android-arm 0.28.1
  • @esbuild/android-arm64 0.28.1
  • @esbuild/android-x64 0.28.1
  • @esbuild/darwin-arm64 0.28.1
  • @esbuild/darwin-x64 0.28.1
  • @esbuild/freebsd-arm64 0.28.1
  • @esbuild/freebsd-x64 0.28.1
  • @esbuild/linux-arm 0.28.1
  • @esbuild/linux-arm64 0.28.1
  • @esbuild/linux-ia32 0.28.1
  • @esbuild/linux-loong64 0.28.1
  • @esbuild/linux-mips64el 0.28.1
  • @esbuild/linux-ppc64 0.28.1
  • @esbuild/linux-riscv64 0.28.1
  • @esbuild/linux-s390x 0.28.1
  • @esbuild/linux-x64 0.28.1
  • @esbuild/netbsd-arm64 0.28.1
  • @esbuild/netbsd-x64 0.28.1
  • @esbuild/openbsd-arm64 0.28.1
  • @esbuild/openbsd-x64 0.28.1
  • @esbuild/openharmony-arm64 0.28.1
  • @esbuild/sunos-x64 0.28.1
  • @esbuild/win32-arm64 0.28.1
  • @esbuild/win32-ia32 0.28.1
  • @esbuild/win32-x64 0.28.1
  • @rolldown/binding-wasm32-wasi 1.1.3

astro 7.3.8 replaced esbuild with Vite's Oxc transform and Rolldown, which is why esbuild leaves the lockfile.

starlight-openapi 0.27.0 carries one potentially breaking change: the heading level of examples and callback response headers now depends on where they are rendered, so custom CSS that targets those headings by element may need an update. docs/site/src/styles/custom.css has no such selector, so the site is not affected.

GitHub Actions (#2004)

Action Old New Uses
astral-sh/setup-uv v10.2.0 c18668ad3cf93ea998bef934396af7bb5c839dc7 v10.3.0 1c37ad07a6a961277cf70c0d37d6f313000f5884 20
taiki-e/install-action v2.87.22 83ac0ad63c0167e6f06796fab0fce28db1bf3db0 v2.87.27 ab6895351a88b908e96a4697860d4ffea5e57dbe 8
actions/upload-artifact v7.0.1 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a v7.0.2 cf430e030ddbb5b0abf93d22962f4752f3646cd9 34
actions/download-artifact v8.0.1 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c v8.0.2 9000827ccba6bdab643e8b6fd33ac0654aef8333 36
actions/setup-node v7.0.0 820762786026740c76f36085b0efc47a31fe5020 v7.1.0 949feb2413d6458794dcd2491c4babbbce0c15c1 21
github/codeql-action/init v4.38.2 2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 v4.38.3 24c54180a607b1449ed407dd24f251e4e9147c8d 1
github/codeql-action/analyze v4.38.2 2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 v4.38.3 24c54180a607b1449ed407dd24f251e4e9147c8d 1

Per workflow:

  • ci.yml: download-artifact 1, setup-node 11, upload-artifact 3, setup-uv 14, install-action 4
  • codeql.yml: codeql-action/init 1, codeql-action/analyze 1
  • docs-pages.yml: setup-node 1, setup-uv 1
  • evidence-dev.yml: download-artifact 2, setup-node 1, upload-artifact 3
  • macos-contributor.yml: setup-node 1, setup-uv 1
  • nightly-release.yml: download-artifact 6, upload-artifact 7
  • nightly-rust-coverage.yml: upload-artifact 1, install-action 1
  • nightly-security.yml: upload-artifact 3, install-action 3
  • release-canary.yml: download-artifact 1, upload-artifact 1
  • release-candidate-cleanup.yml: upload-artifact 1
  • release-candidate.yml: download-artifact 7, setup-node 3, upload-artifact 7, setup-uv 1
  • release-native-benchmark.yml: download-artifact 5, upload-artifact 2
  • release-rehearsal.yml: download-artifact 5, setup-node 3, upload-artifact 2, setup-uv 1
  • release-repeatability.yml: upload-artifact 1, setup-uv 1
  • release-upgrade-rehearsal.yml: setup-uv 1
  • release.yml: download-artifact 9, setup-node 1, upload-artifact 3

Release image preparation stage (#2021)

public.ecr.aws/docker/library/debian:trixie-slim moves from sha256:a99cfc517144bc59b1978475ec53b46ecabec7e43635402ee5b77cc54cd1b20a to sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f in the runtime-root stage of ten Dockerfiles under release/docker/: Dockerfile.breg, Dockerfile.breg-mcp, Dockerfile.breg-review, Dockerfile.casework, Dockerfile.discovery, Dockerfile.evidence, Dockerfile.evidence-oid4vci, Dockerfile.messaging, Dockerfile.registry-render, Dockerfile.scheduling. The shipped runtime base (gcr.io/distroless/cc-debian13:nonroot) is unchanged.

Evidence

Local run on macOS arm64, 2026-10-13. CI on this pull request is authoritative.

Claim Command Result
Branch contains only the seven pull requests plus three gate files git diff --name-only origin/main...HEAD compared with the union of the seven pull request heads 48 files: 45 from the pull requests, 3 gate files, none missing
Cherry-picks match the Dependabot heads git diff --quiet <head> HEAD -- <files> per pull request exit 0 for all seven
CI pin assertions hold uv run --no-project --with PyYAML==6.0.2 python .github/scripts/test_ci_changes.py exit 0, 156 tests (2 failures before the companion commit)
Gate inventory holds python3 release/scripts/check-gates-inventory.py exit 0, 255 gates (exit 1 before the companion commit)
Gate inventory tests python3 -m unittest release/scripts/test_check_gates_inventory.py exit 0, 77 tests
Image contract holds python3 release/scripts/check-debian13-images.py exit 0 (exit 1 before the companion commit)
Image contract tests python3 -m unittest release/scripts/test_check_debian13_images.py exit 0, 21 tests
Release tooling tests python3 -m unittest release/scripts/test_registry_release.py and the 36 other release tooling modules CI runs exit 0 for all 37; test_registry_release 119 tests
Current release manifest valid release/scripts/registry-release validate-current exit 0
Release source model release/scripts/check-release-source-model.sh exit 0
Unified Node.js client in sync python3 release/scripts/sync-registry-client-node.py --check exit 0
Workflows lint actionlint 1.7.12 exit 0
No stale pin left rg for the six old action SHAs and the old digest no match
Lockfiles consistent cargo metadata --locked at root, products/breg/wasm-handler-sdk, editors/zed, products/evidence/fuzz, products/platform/fuzz exit 0 for all five
Standalone lockfiles current cargo update --workspace --locked --manifest-path <dir>/Cargo.toml for the five standalone workspaces exit 0 for all five
Workspace compiles cargo check --locked --workspace --all-targets exit 0, no warnings
Dependency policy cargo deny --locked check (cargo-deny 0.19.7 locally, CI pins 0.19.8) exit 0: advisories, bans, licenses, sources ok
Docs site installs npm ci in docs/site, Node 24.21.0 exit 0
Docs site tests npm test exit 0, 690 of 690 pass
Docs site checks npm run check exit 0
Docs site audit unchanged npm audit --package-lock-only on the lockfile from main and from this branch identical: 28 findings (5 low, 12 moderate, 11 high), same packages
Binding installs and builds npm ci, npm run build:debug, npm run check:types in crates/registry-breg-client-node exit 0 for all three
Binding tests node --test __test__/*.test.js after registry_prepare_cargo_runtime (the macOS path in crates/CLIENTS.md) exit 0, 57 of 57 pass

npm test in the binding directory fails on macOS with the AWS-LC FIPS dylib load error that crates/CLIENTS.md documents; the direct node --test run above is the documented substitute.

Security review notes

The action pins in release.yml and release-candidate.yml and the base image digest in the release Dockerfiles are release provenance.

What changed

  • release.yml: actions/download-artifact (9 uses), actions/setup-node (1), actions/upload-artifact (3).
  • release-candidate.yml: actions/download-artifact (7 uses), actions/setup-node (3), actions/upload-artifact (7), astral-sh/setup-uv (1).
  • The old and new SHA and version of each action are in the table above. The other fourteen workflows take the same pins.
  • Debian preparation image digest sha256:a99cfc51...1b20a -> sha256:a29215f6...f11f in ten release Dockerfiles. The stage only assembles /workspace/runtime-root, which the distroless runtime stage copies in.

How each new action SHA was verified

Read-only gh api repos/<owner>/<repo>/git/ref/tags/<tag>; annotated tags dereferenced with gh api repos/<owner>/<repo>/git/tags/<sha>.

Tag Tag type Resolves to Matches pin
astral-sh/setup-uv v10.3.0 lightweight 1c37ad07a6a961277cf70c0d37d6f313000f5884 yes
taiki-e/install-action v2.87.27 lightweight ab6895351a88b908e96a4697860d4ffea5e57dbe yes
actions/upload-artifact v7.0.2 lightweight cf430e030ddbb5b0abf93d22962f4752f3646cd9 yes
actions/download-artifact v8.0.2 lightweight 9000827ccba6bdab643e8b6fd33ac0654aef8333 yes
actions/setup-node v7.1.0 lightweight 949feb2413d6458794dcd2491c4babbbce0c15c1 yes
github/codeql-action v4.38.3 annotated (tag object cee97f86b972a3ded3c58d04148362b193ddc518) 24c54180a607b1449ed407dd24f251e4e9147c8d yes

The six old pins were checked the same way and matched their old tags.

How the new Debian digest was verified

  • An anonymous registry GET of public.ecr.aws/v2/docker/library/debian/manifests/trixie-slim on 2026-10-13 returned an OCI image index whose SHA-256 is a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f. The response carried no Docker-Content-Digest header, so the digest was computed over the returned bytes.
  • The same request against Docker Hub (library/debian:trixie-slim) returned Docker-Content-Digest: sha256:a29215f6...f11f and a byte-identical index.
  • The index lists eight Linux platforms (amd64, arm/v5, arm/v7, arm64/v8, 386, ppc64le, riscv64, s390x) with their attestation manifests, created 2026-10-05. The previous index is dated 2026-09-18.
  • trixie-slim is a moving tag, so this holds as of the check date.
  • dpkg-query -W libssl3t64 libc6 inside the old and the new index, on linux/amd64 and linux/arm64 (pulled by digest from Docker Hub): libc6 is 2.41-12+deb13u4 in both; libssl3t64 moves from 3.5.7-1~deb13u2 to 3.5.7-1~deb13u3. The runtime package overlay and the Distroless runtime base are unchanged, so the packages in the shipped images do not move.

What still enforces the pins

  • .github/scripts/test_ci_changes.py: asserts the exact astral-sh/setup-uv and actions/setup-node pins in the breg-contracts and discovery-contracts jobs.
  • release/scripts/check-gates-inventory.py: asserts the exact actions/download-artifact pin in the platform coverage upload job, the only job there with id-token: write.
  • release/scripts/check-debian13-images.py: requires every release Dockerfile to use exactly the DEBIAN_PREPARATION reference.

All three failed on the Dependabot commits alone and pass with the companion commits. No gate asserts the # vX.Y.Z comments, and the other action uses are not asserted individually by a gate.

What was not proven

  • No release image was built with the new preparation digest, and the OCI label smoke (release/scripts/smoke-release-image-oci-labels.sh) was not run.
  • Advisory baselines and release repeatability were not re-evaluated against images built from the new preparation stage.
  • No signature or provenance attestation of the Debian image was verified. Of the package contents, only libc6 and libssl3t64 were compared between the old and new index.
  • The new action versions were not executed. Their release notes and source diffs were not reviewed; only tag-to-commit identity was checked.
  • cargo clippy, cargo test --workspace, cargo fmt --check and the docs check:production variant were not run locally.
  • Only registry-breg-client-node was built and tested among the six bindings.

Notes

Compatibility: none. No source, configuration key, route, command, or generated output changes. The seven Dependabot pull requests this replaces (#2037, #2035, #1970, #2036, #2000, #2004, #2021) can close once this is on main; Dependabot closes them itself when main carries the same versions.

DCO

  • Every commit includes a Signed-off-by trailer.
  • I reviewed the submitted changes and am responsible for the contribution.

dependabot Bot and others added 9 commits October 13, 2026 16:09
@dependabot @jeremi
build(deps): Bump the cargo-minor-patch group across 1 directory with…
7341de2 
… 8 updates

Bumps the cargo-minor-patch group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [napi](https://github.com/napi-rs/napi-rs) | `3.14.0` | `3.14.2` |
| [napi-derive](https://github.com/napi-rs/napi-rs) | `3.6.11` | `3.6.12` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.5.0` | `3.5.1` |
| [signal-hook](https://github.com/vorner/signal-hook) | `0.4.4` | `0.4.5` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.2` |
| [tree-sitter](https://github.com/tree-sitter/tree-sitter) | `0.27.0` | `0.27.1` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.27.0` | `1.28.0` |
| [zeroize](https://github.com/RustCrypto/utils) | `1.9.0` | `1.9.1` |



Updates `napi` from 3.14.0 to 3.14.2
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](napi-rs/napi-rs@napi-v3.14.0...napi-v3.14.2)

Updates `napi-derive` from 3.6.11 to 3.6.12
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](napi-rs/napi-rs@napi-derive-v3.6.11...napi-derive-v3.6.12)

Updates `rmcp` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.5.0...rmcp-v3.5.1)

Updates `signal-hook` from 0.4.4 to 0.4.5
- [Changelog](https://github.com/vorner/signal-hook/blob/master/CHANGELOG.md)
- [Commits](vorner/signal-hook@v0.4.4...v0.4.5)

Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `tree-sitter` from 0.27.0 to 0.27.1
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](tree-sitter/tree-sitter@v0.27.0...v0.27.1)

Updates `uuid` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.27.0...v1.28.0)

Updates `zeroize` from 1.9.0 to 1.9.1
- [Commits](RustCrypto/utils@zeroize-v1.9.0...zeroize-v1.9.1)

---
updated-dependencies:
- dependency-name: napi
  dependency-version: 3.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: napi-derive
  dependency-version: 3.6.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: rmcp
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: signal-hook
  dependency-version: 0.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tree-sitter
  dependency-version: 0.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: uuid
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: zeroize
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @jeremi
build(deps): Bump the cargo-minor-patch group across 1 directory with…
5f52ba8 
… 3 updates

Bumps the cargo-minor-patch group with 3 updates in the /products/breg/wasm-handler-sdk directory: [tokio](https://github.com/tokio-rs/tokio), [uuid](https://github.com/uuid-rs/uuid) and [zeroize](https://github.com/RustCrypto/utils).


Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `uuid` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.27.0...v1.28.0)

Updates `zeroize` from 1.9.0 to 1.9.1
- [Commits](RustCrypto/utils@zeroize-v1.9.0...zeroize-v1.9.1)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: uuid
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: zeroize
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @jeremi
build(deps): Bump the cargo-minor-patch group across 2 directories wi…
de6931b 
…th 3 updates

Bumps the cargo-minor-patch group with 3 updates in the /products/evidence/fuzz directory: [tokio](https://github.com/tokio-rs/tokio), [uuid](https://github.com/uuid-rs/uuid) and [zeroize](https://github.com/RustCrypto/utils).
Bumps the cargo-minor-patch group with 3 updates in the /products/platform/fuzz directory: [tokio](https://github.com/tokio-rs/tokio), [uuid](https://github.com/uuid-rs/uuid) and [zeroize](https://github.com/RustCrypto/utils).


Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `uuid` from 1.26.1 to 1.28.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.26.1...v1.28.0)

Updates `zeroize` from 1.9.0 to 1.9.1
- [Commits](RustCrypto/utils@zeroize-v1.9.0...zeroize-v1.9.1)

Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `uuid` from 1.26.1 to 1.28.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.26.1...v1.28.0)

Updates `zeroize` from 1.9.0 to 1.9.1
- [Commits](RustCrypto/utils@zeroize-v1.9.0...zeroize-v1.9.1)

Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `uuid` from 1.26.1 to 1.28.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.26.1...v1.28.0)

Updates `zeroize` from 1.9.0 to 1.9.1
- [Commits](RustCrypto/utils@zeroize-v1.9.0...zeroize-v1.9.1)

Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `uuid` from 1.26.1 to 1.28.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.26.1...v1.28.0)

Updates `zeroize` from 1.9.0 to 1.9.1
- [Commits](RustCrypto/utils@zeroize-v1.9.0...zeroize-v1.9.1)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: uuid
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: uuid
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: uuid
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: uuid
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: zeroize
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: zeroize
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: zeroize
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: zeroize
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @jeremi
build(deps-dev): Bump the npm-minor-patch group across 6 directories …
74447b6 
…with 2 updates

Bumps the npm-minor-patch group with 2 updates in the /crates/registry-breg-client-node directory: [@napi-rs/cli](https://github.com/napi-rs/napi-rs) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).
Bumps the npm-minor-patch group with 2 updates in the /crates/registry-casework-client-node directory: [@napi-rs/cli](https://github.com/napi-rs/napi-rs) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).
Bumps the npm-minor-patch group with 2 updates in the /crates/registry-discovery-client-node directory: [@napi-rs/cli](https://github.com/napi-rs/napi-rs) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).
Bumps the npm-minor-patch group with 1 update in the /crates/registry-evidence-client-node directory: [@napi-rs/cli](https://github.com/napi-rs/napi-rs).
Bumps the npm-minor-patch group with 2 updates in the /crates/registry-messaging-client-node directory: [@napi-rs/cli](https://github.com/napi-rs/napi-rs) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).
Bumps the npm-minor-patch group with 2 updates in the /crates/registry-scheduling-client-node directory: [@napi-rs/cli](https://github.com/napi-rs/napi-rs) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).


Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@napi-rs/cli` from 3.10.6 to 3.10.8
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.6...@napi-rs/cli@3.10.8)

Updates `@types/node` from 24.19.1 to 24.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 24.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @jeremi
chore(deps): Bump the npm-minor-patch group in /docs/site with 5 updates
ab46495 
Bumps the npm-minor-patch group in /docs/site with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.42.5` | `0.42.6` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.5` | `7.3.8` |
| [starlight-openapi](https://github.com/HiDeoo/starlight-openapi/tree/HEAD/packages/starlight-openapi) | `0.26.3` | `0.27.0` |
| [@astrojs/markdown-remark](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark) | `7.3.1` | `7.3.2` |
| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `2.57.0` | `2.60.0` |


Updates `@astrojs/starlight` from 0.42.5 to 0.42.6
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.42.6/packages/starlight)

Updates `astro` from 7.3.5 to 7.3.8
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.8/packages/astro)

Updates `starlight-openapi` from 0.26.3 to 0.27.0
- [Release notes](https://github.com/HiDeoo/starlight-openapi/releases)
- [Changelog](https://github.com/HiDeoo/starlight-openapi/blob/main/packages/starlight-openapi/CHANGELOG.md)
- [Commits](https://github.com/HiDeoo/starlight-openapi/commits/starlight-openapi@0.27.0/packages/starlight-openapi)

Updates `@astrojs/markdown-remark` from 7.3.1 to 7.3.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/remark/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-remark@7.3.2/packages/markdown/remark)

Updates `@redocly/cli` from 2.57.0 to 2.60.0
- [Release notes](https://github.com/Redocly/redocly-cli/releases)
- [Commits](https://github.com/Redocly/redocly-cli/compare/@redocly/cli@2.57.0...@redocly/cli@2.60.0)

---
updated-dependencies:
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.42.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: astro
  dependency-version: 7.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: starlight-openapi
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@astrojs/markdown-remark"
  dependency-version: 7.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@redocly/cli"
  dependency-version: 2.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @jeremi
build(deps): Bump the actions group across 1 directory with 7 updates
2dcdbab 
Bumps the actions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.2.0` | `10.3.0` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.87.22` | `2.87.27` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` |
| [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` |



Updates `astral-sh/setup-uv` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@c18668a...1c37ad0)

Updates `taiki-e/install-action` from 2.87.22 to 2.87.27
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@83ac0ad...ab68953)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

Updates `github/codeql-action/init` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...24c5418)

Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...24c5418)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.87.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @jeremi
build(deps): Bump docker/library/debian
223132d 
Bumps the docker-images group with 1 update in the /release/docker directory: docker/library/debian.


Updates `docker/library/debian` from `a99cfc5` to `a29215f`

---
updated-dependencies:
- dependency-name: docker/library/debian
  dependency-version: trixie-slim
  dependency-type: direct:production
  dependency-group: docker-images
...

Signed-off-by: dependabot[bot] <support@github.com>
@jeremi
chore(ci): track the bumped action pins in the CI gates
8489233 
The actions group update moves three pins that our own gates assert by
full commit SHA, so the gates fail until they name the same commits as
the workflows:

- .github/scripts/test_ci_changes.py: astral-sh/setup-uv v10.3.0
  (1c37ad07a6a961277cf70c0d37d6f313000f5884) in the breg-contracts job,
  and actions/setup-node v7.1.0
  (949feb2413d6458794dcd2491c4babbbce0c15c1) in the discovery-contracts
  job.
- release/scripts/check-gates-inventory.py: actions/download-artifact
  v8.0.2 (9000827ccba6bdab643e8b6fd33ac0654aef8333) in the platform
  coverage upload job that holds the only id-token permission.

No other file pins a replaced SHA.

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>
@jeremi
chore(release): track the Debian preparation digest in the image gate
1936840 
The ten release Dockerfiles now prepare their runtime root on
public.ecr.aws/docker/library/debian:trixie-slim at
sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f.
check-debian13-images.py requires every release Dockerfile to carry the
exact preparation base it names, so it moves to the same digest.

No other file names the previous digest.

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-13T09:34:58.749862Z 1936840 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@jeremi
jeremi added this pull request to the merge queue Oct 13, 2026
Merged via the queue into main with commit bf321af Oct 13, 2026
107 of 110 checks passed
@jeremi
jeremi deleted the chore/dependency-updates-2026-10-13 branch October 13, 2026 10:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jeremi