[dependabot]

Bumps the all-dependencies group with 7 updates:

Package	From	To
github.com/anthropics/anthropic-sdk-go	1.73.0	1.84.0
github.com/lmittmann/tint	1.2.0	1.2.1
github.com/onsi/ginkgo/v2	2.33.0	2.33.1
github.com/onsi/gomega	1.40.0	1.44.0
github.com/openai/openai-go/v3	3.69.0	3.90.0
golang.org/x/sys	0.48.0	0.49.0
google.golang.org/genai	1.71.0	1.77.0

Updates github.com/anthropics/anthropic-sdk-go from 1.73.0 to 1.84.0

Release notes

Sourced from github.com/anthropics/anthropic-sdk-go's releases.

v1.84.0

Features

• api: add org webhook endpoints and user profile enforcement events

Chores

• ci: run the changelog check on a standard runner

v1.83.0

Features

• api: add data_refreshed_at and has_more to analytics report pages
• api: add workspace rate-limit updates to the Admin API
• api: make User Profiles generally available
• client: yield server-sent events with unrecognized event names
• google-cloud: use the v1 endpoints and add the organization endpoint

Bug Fixes

• client: close the response body of calls that discard the response
• client: treat x-amz-security-token as a sensitive header

Chores

• ci: fix Go cache restore when go.mod sets a newer toolchain
• ci: skip the changelog check on draft pull requests
• docs: add credential expiry descriptions to the Managed Agents API reference
• docs: add Messages API request descriptions
• docs: correct plugin manifest_version and reach descriptions
• docs: improve Managed Agents memory store descriptions
• docs: improve Managed Agents vault and credential descriptions

v1.82.0

Features

• api: add between_tools to thinking types in model capabilities
• api: add the speed parameter and usage.speed to Messages
• api: return a Console organization's usage-tier spend cap as a read-only spend limit

Chores

• ci: speed up breaking change detection
• docs: describe headers on Managed Agents and telemetry endpoints
• tests: add tests for custom HTTP clients and trace propagation

... (truncated)

Changelog

Sourced from github.com/anthropics/anthropic-sdk-go's changelog.

1.84.0 (2026-10-20)

Features

• api: add org webhook endpoints and user profile enforcement events

Chores

• ci: run the changelog check on a standard runner

1.83.0 (2026-10-20)

Features

• api: add data_refreshed_at and has_more to analytics report pages
• api: add workspace rate-limit updates to the Admin API
• api: make User Profiles generally available
• client: yield server-sent events with unrecognized event names
• google-cloud: use the v1 endpoints and add the organization endpoint

Bug Fixes

• client: close the response body of calls that discard the response
• client: treat x-amz-security-token as a sensitive header

Chores

• ci: fix Go cache restore when go.mod sets a newer toolchain
• ci: skip the changelog check on draft pull requests
• docs: add credential expiry descriptions to the Managed Agents API reference
• docs: add Messages API request descriptions
• docs: correct plugin manifest_version and reach descriptions
• docs: improve Managed Agents memory store descriptions
• docs: improve Managed Agents vault and credential descriptions

1.82.0 (2026-10-15)

Features

• api: add between_tools to thinking types in model capabilities
• api: add the speed parameter and usage.speed to Messages
• api: return a Console organization's usage-tier spend cap as a read-only spend limit

Chores

• ci: speed up breaking change detection

... (truncated)

Commits

• 1e8e13c release: 1.84.0
• 3208f69 Merge pull request #502 from anthropics/synced/published
• 8f7877b feat(api): add org webhook endpoints and user profile enforcement events
• 4fadf22 codegen metadata
• 26b6a77 codegen metadata
• b632381 chore(ci): run the changelog check on a standard runner
• 4ac8e6e fix(sessions): settle tool calls invalidated by a processed session-wide inte...
• addf728 Merge branch 'main'
• da9a9fb release: 1.83.0
• 645b398 Merge pull request #485 from anthropics/synced/published
• Additional commits viewable in compare view

Updates github.com/lmittmann/tint from 1.2.0 to 1.2.1

Release notes

Sourced from github.com/lmittmann/tint's releases.

v1.2.1

What's Changed

• Fix group color inheritance by @​database64128 in lmittmann/tint#111

Full Changelog: lmittmann/tint@v1.2.0...v1.2.1

Commits

• ce10bb1 Fix group color inheritance (#111)
• See full diff in compare view

Updates github.com/onsi/ginkgo/v2 from 2.33.0 to 2.33.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.33.1

Fixes

• Add several missing fields to spec report JSON output.

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.33.1

Fixes

• Add several missing fields to spec report JSON output.

Commits

• 7ff96d7 v2.33.1
• 699632a Precompile the fixture in the suite-timeout integration test (#1689)
• 9e02cad ci: default the release bump so a mobile dispatch can't send it empty (#1688)
• ef6a46c Update CHANGELOG.md
• 6c652a2 Add missing fields to SpecReport JSON marshalling, and add unit test
• 510c8d5 Update TestMu AI sponsor logo and link
• 5c1e7ef Refer sanitizer help to go help build
• See full diff in compare view

Updates github.com/onsi/gomega from 1.40.0 to 1.44.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.44.0

Fixes

• BeNumerically compares signed and unsigned integers by value: -1 no longer equals uint64(math.MaxUint64) and uint(5) is now greater than -3 (#925) [26e3c6b]
• BeNumerically("~") no longer overflows when computing the distance between extreme integers (#928) [1955764]
• BeNumerically("==", x, threshold) now honors the threshold for floats, as it already did for integers (#927) [10e2aca]
• HaveKeyWithValue succeeds if any key accepted by the key matcher has a matching value, rather than depending on map iteration order (#929) [ffc577a]
• HaveKey and HaveKeyWithValue treat key and value matcher errors like ContainElement does: a match wins, and an error is only reported when nothing matches (#926) [dc91598]
• MatchJSON no longer treats numbers too large for a float64 as equal to one another (#930) [9d619a5]
• MatchJSON compares integers beyond ±2^53 exactly, so neighboring large integers (e.g. IDs) no longer match; all other numbers are still compared as float64s (#931) [8ef1aa7, 630fe12]
• HaveExactElements reports missing or extra elements that start at index 0, and reports the first extra element's index rather than the last (#934) [af1b777]
• MatchYAML compares every document in a multi-document stream rather than only the first; empty documents (e.g. a leading or trailing ---) are ignored (#933) [2773796]
• MatchXML ignores namespace prefixes: elements and attributes are compared by namespace URI, and the URIs declared on each element must match whatever prefix they are bound to (#932) [c0dbd89, 2565350]

v1.43.1

Maintenance

• Update go.yaml.in/yaml/v3 to v3.0.5 [d547015]
• Releases are now cut by a GitHub Actions workflow (Actions -> Release -> Run workflow) rather than by hand, with changelog entries collected under ## Unreleased as the work happens. Releases still ship the stripped-down tree on master-lite - tests removed and Ginkgo dropped from go.mod - and the workflow now builds it and checks it on every push. See RELEASING.md. [e9dc84d]

v1.43.0

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

v1.42.1

1.42.1

Bump Dependencies

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

v1.41.0

No release notes provided.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.44.0

Fixes

• BeNumerically compares signed and unsigned integers by value: -1 no longer equals uint64(math.MaxUint64) and uint(5) is now greater than -3 (#925) [26e3c6b]
• BeNumerically("~") no longer overflows when computing the distance between extreme integers (#928) [1955764]
• BeNumerically("==", x, threshold) now honors the threshold for floats, as it already did for integers (#927) [10e2aca]
• HaveKeyWithValue succeeds if any key accepted by the key matcher has a matching value, rather than depending on map iteration order (#929) [ffc577a]
• HaveKey and HaveKeyWithValue treat key and value matcher errors like ContainElement does: a match wins, and an error is only reported when nothing matches (#926) [dc91598]
• MatchJSON no longer treats numbers too large for a float64 as equal to one another (#930) [9d619a5]
• MatchJSON compares integers beyond ±2^53 exactly, so neighboring large integers (e.g. IDs) no longer match; all other numbers are still compared as float64s (#931) [8ef1aa7, 630fe12]
• HaveExactElements reports missing or extra elements that start at index 0, and reports the first extra element's index rather than the last (#934) [af1b777]
• MatchYAML compares every document in a multi-document stream rather than only the first; empty documents (e.g. a leading or trailing ---) are ignored (#933) [2773796]
• MatchXML ignores namespace prefixes: elements and attributes are compared by namespace URI, and the URIs declared on each element must match whatever prefix they are bound to (#932) [c0dbd89, 2565350]

1.43.1

Maintenance

• Update go.yaml.in/yaml/v3 to v3.0.5 [d547015]
• Releases are now cut by a GitHub Actions workflow (Actions -> Release -> Run workflow) rather than by hand, with changelog entries collected under ## Unreleased as the work happens. Releases still ship the stripped-down tree on master-lite - tests removed and Ginkgo dropped from go.mod - and the workflow now builds it and checks it on every push. See RELEASING.md. [e9dc84d]

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

1.42.1

Bump Dependencies

1.42.0

Add a set of Claude skill as a marketplace plugin

1.41.0

Features

Add BeASlice and BeAnArray matchers

Fixes

Object formatting now detects pointer cycles to avoid runaway formatting output.

Commits

• c933817 v1.44.0
• 37fa900 v1.44.0 (full)
• 509f2b0 changelog: entries for #925-#934
• 2565350 fix: MatchXML compares namespace declarations by URI, ignoring the prefix
• 630fe12 fix: MatchJSON only compares integers beyond 2^53 exactly
• c0dbd89 fix: MatchXML ignores namespace prefixes and declarations
• 2773796 fix: MatchYAML compares every document in a multi-document stream
• af1b777 fix: HaveExactElements reports missing/extra elements starting at index 0
• 8ef1aa7 fix: MatchJSON compares numbers exactly
• 9d619a5 fix: MatchJSON reports numbers that do not fit in a float64
• Additional commits viewable in compare view

Updates github.com/openai/openai-go/v3 from 3.69.0 to 3.90.0

Release notes

Sourced from github.com/openai/openai-go/v3's releases.

v3.90.0

3.90.0 (2026-10-28)

Features

• api: add image and web search usage to responses (#1179) (59cb4a5)
• api: add organization external key management (#1180) (bcf55b4)
• api: filter agent sessions by metadata (#1178) (0819c8b)

Bug Fixes

• examples: check each WebSocket response before continuing (#1161) (2638013)

Chores

• api: document upcoming model shutdowns (#1177) (af9a64a)
• api: update image-model documentation (#1175) (071de86)
• enforce generated-file ownership (#1169) (8bfabbe)

v3.89.0

3.89.0 (2026-10-27)

Features

• api: add prompt cache breakpoint TTL options (#1162) (51a5817)

Bug Fixes

• api: isolate decoded null collections (#1159) (898671b)
• api: preserve existing response and decision input behavior (#1158) (0bd7238)

Chores

• api: alphabetize the shared type index (#1163) (d32fa05)
• enforce strict generated-file ownership (#1165) (2bd28ff)
• set custom-code budget to zero (#1164) (9d77839)

Build System

• deps: bump actions/create-github-app-token from 3.2.0 to 3.3.0 (#1139) (67bcaaf)
• deps: bump actions/download-artifact from 8.0.1 to 8.0.2 (#1101) (b2b294f)
• deps: bump actions/setup-node from 7.0.0 to 7.1.0 (#1102) (c3a3c9a)
• deps: bump actions/upload-artifact from 7.0.1 to 7.0.2 (#1100) (17caf9b)

... (truncated)

Changelog

Sourced from github.com/openai/openai-go/v3's changelog.

3.90.0 (2026-10-28)

Features

• api: add image and web search usage to responses (#1179) (59cb4a5)
• api: add organization external key management (#1180) (bcf55b4)
• api: filter agent sessions by metadata (#1178) (0819c8b)

Bug Fixes

• examples: check each WebSocket response before continuing (#1161) (2638013)

Chores

• api: document upcoming model shutdowns (#1177) (af9a64a)
• api: update image-model documentation (#1175) (071de86)
• enforce generated-file ownership (#1169) (8bfabbe)

3.89.0 (2026-10-27)

Features

• api: add prompt cache breakpoint TTL options (#1162) (51a5817)

Bug Fixes

• api: isolate decoded null collections (#1159) (898671b)
• api: preserve existing response and decision input behavior (#1158) (0bd7238)

Chores

• api: alphabetize the shared type index (#1163) (d32fa05)
• enforce strict generated-file ownership (#1165) (2bd28ff)
• set custom-code budget to zero (#1164) (9d77839)

Build System

• deps: bump actions/create-github-app-token from 3.2.0 to 3.3.0 (#1139) (67bcaaf)
• deps: bump actions/download-artifact from 8.0.1 to 8.0.2 (#1101) (b2b294f)
• deps: bump actions/setup-node from 7.0.0 to 7.1.0 (#1102) (c3a3c9a)
• deps: bump actions/upload-artifact from 7.0.1 to 7.0.2 (#1100) (17caf9b)
• deps: bump github.com/aws/aws-sdk-go-v2/config in / (#1098) (e8374d1)
• deps: bump the codeql group across 1 directory with 2 updates (#1099) (a97ac6d)

... (truncated)

Commits

• a9fc372 chore: release main (#1171)
• bcf55b4 feat(api): add organization external key management (#1180)
• 59cb4a5 feat(api): add image and web search usage to responses (#1179)
• 0819c8b feat(api): filter agent sessions by metadata (#1178)
• 2638013 fix(examples): check each WebSocket response before continuing (#1161)
• af9a64a chore(api): document upcoming model shutdowns (#1177)
• 071de86 chore(api): update image-model documentation (#1175)
• 8bfabbe chore: enforce generated-file ownership (#1169)
• 78c965f chore: release main (#1160)
• 2bd28ff chore: enforce strict generated-file ownership (#1165)
• Additional commits viewable in compare view

Updates golang.org/x/sys from 0.48.0 to 0.49.0

Commits

• b6b8557 unix/linux: unify ppc64x syscall wrappers
• aab6988 unix: add PrctlArg5Ptr
• cdfd984 unix: pass fcntl data as unsafe.Pointer in FcntlF{lock,store} on darwin
• 782b836 unix/linux: don't warn about closed stderr from child process
• 61592fb unix: return syscall error in *listxattrNS on BSD
• c136fda unix/linux/Dockerfile: update to Go 1.26.8
• f1d0d79 unix: pass xattr data as unsafe.Pointer in BSD xattr syscalls
• 67f850b unix: update linux to v7.2
• eb1f659 unix: add O_EXEC and O_SEARCH on darwin
• 51bc731 unix: add Mmsghdr for linux
• Additional commits viewable in compare view

Updates google.golang.org/genai from 1.71.0 to 1.77.0

Release notes

Sourced from google.golang.org/genai's releases.

v1.77.0

1.77.0 (2026-10-29)

Features

• Add support for continuation_token and requires_continuation status (51d761f)
• add video upscale task parameter (cab8bf7)
• interactions: add AutomaticContinuation to Interactions.Create in the Go SDK (0a6da26)
• interactions: declare continuation_ids on Interaction (5b54979)
• support video understanding in Gemini Developer API (5407437)

Bug Fixes

• interactions: align SDK User-Agent and x-goog-api-client headers (58187ad)

v1.76.0

1.76.0 (2026-10-22)

Features

• Add store to GenerateContentConfig (Gemini Developer API only) and labels to LiveConnectConfig. (2ca47f8)
• add base_voice to PromptedVoice in GAOS SDK (bfc9e1c)
• Add generation_output_config to GenerateContentConfig (6ae1299)
• Add Live API in-session context updates (send_context_update) and types across GenAI SDKs. (f1d0c6c)
• include AudioContent, DocumentContent, and VideoContent in FunctionResultSubContent (68f1351)
• interactions: populate output_text and output media helpers in the Go SDK (db2b842)
• sdks: enable fixes.openSingleValueEnumsOct2026 across all SDKs (3892a92)
• update discovery doc (525f275)

Bug Fixes

• genai: raise mid-stream SSE errors and dropped connections consistently across SDKs; add continuation conformance tests (9aa2634)
• interactions: sync InteractionSseEventInteractionStatus enum with InteractionStatus (7c129ed)
• keep streamed chat turns in curated history when the stream ends with an empty chunk (4dd02c1), refs #795

v1.75.0

1.75.0 (2026-10-14)

Features

• interactions: add gemini-4-argon to Model enum (f8f7050)

Bug Fixes

... (truncated)

Changelog

Sourced from google.golang.org/genai's changelog.

1.77.0 (2026-10-29)

Features

• Add support for continuation_token and requires_continuation status (51d761f)
• add video upscale task parameter (cab8bf7)
• interactions: add AutomaticContinuation to Interactions.Create in the Go SDK (0a6da26)
• interactions: declare continuation_ids on Interaction (5b54979)
• support video understanding in Gemini Developer API (5407437)

Bug Fixes

• interactions: align SDK User-Agent and x-goog-api-client headers (58187ad)

1.76.0 (2026-10-22)

Features

• Add store to GenerateContentConfig (Gemini Developer API only) and labels to LiveConnectConfig. (2ca47f8)
• add base_voice to PromptedVoice in GAOS SDK (bfc9e1c)
• Add generation_output_config to GenerateContentConfig (6ae1299)
• Add Live API in-session context updates (send_context_update) and types across GenAI SDKs. (f1d0c6c)
• include AudioContent, DocumentContent, and VideoContent in FunctionResultSubContent (68f1351)
• interactions: populate output_text and output media helpers in the Go SDK (db2b842)
• sdks: enable fixes.openSingleValueEnumsOct2026 across all SDKs (3892a92)
• update discovery doc (525f275)

Bug Fixes

• genai: raise mid-stream SSE errors and dropped connections consistently across SDKs; add continuation conformance tests (9aa2634)
• interactions: sync InteractionSseEventInteractionStatus enum with InteractionStatus (7c129ed)
• keep streamed chat turns in curated history when the stream ends with an empty chunk (4dd02c1), refs #795

1.75.0 (2026-10-14)

Features

• interactions: add gemini-4-argon to Model enum (f8f7050)

Bug Fixes

• clear continuation state and preserve prompt feedback when continuation hop returns no candidates (f0c1430)
• fix the grounding metadata merging for automatic continuation in generate content and generate content stream (19689a2)
• make continuation streams retry dropped hops, stop on prompt_feedback, and keep real errors in generate_content (0828ad4)

... (truncated)

Commits

• 1a33369 chore(main): release 1.77.0 (#1027)
• cab8bf7 feat: add video upscale task parameter
• 0a6da26 feat(interactions): add AutomaticContinuation to Interactions.Create in the G...
• 58187ad fix(interactions): align SDK User-Agent and x-goog-api-client headers
• 5407437 feat: support video understanding in Gemini Developer API
• 5b54979 feat(interactions): declare continuation_ids on Interaction
• d386bce chore(cli): update Speakeasy OpenAPI generator to v2.952.4
• 51d761f feat: Add support for continuation_token and requires_continuation status
• 9ba857f chore: update Speakeasy OpenAPI generator to v2.950.11 and bump CLI to v0.4.4
• a66c527 chore(main): release 1.76.0 (#1001)
• Additional commits viewable in compare view

Bumps the all-dependencies group with 4 updates: jdx/mise-action, actions/upload-artifact, actions/download-artifact and fgrosse/go-coverage-report.

Updates jdx/mise-action from 4.3.0 to 5.2.4

Release notes

Sourced from jdx/mise-action's releases.

v5.2.4: Reuse cached signed checksums when restoring mise

Jobs that restore mise from the cache no longer have to download its signed checksums from GitHub on every run, so a network failure at that step no longer fails a job that otherwise restored correctly.

Fixed

• Restoring a cached mise no longer needs a network download of the checksums. The action checks the cached mise binary against the signed SHASUMS256.txt and its .minisig. Before this release it downloaded both files from GitHub on every run, even when the cache restored correctly. When that download failed, for example after repeated curl errors, the job failed. Now, once the signature checks out, the action saves both files as SHASUMS256-<version>.txt and .minisig in <mise_dir>/bin, which is part of the mise cache. On later runs it reads them from the restored cache and checks the minisign signature again before using them. If the files are missing, corrupt or tampered with, the action downloads them as it did before. There are no new inputs. (#708 by @​jdx)
  • Caches saved by earlier versions don't contain these files. The main cache is only saved on a cache miss, so runs keep downloading the checksums until the cache is saved again or its key changes.

Full Changelog: jdx/mise-action@v5.2.3...v5.2.4

v5.2.3: Faster cache key computation in large workspaces

The cache key no longer comes from searching the whole workspace for mise config files. In repos that already contain node_modules or vendor/bundle, this removes a delay of several minutes in "Restoring mise cache".

Fixed

• "Restoring mise cache" no longer takes minutes after installing dependencies. To build the cache key, the action used to match about 25 **/… glob patterns. That meant it walked every subdirectory of the workspace, including node_modules and vendor/bundle, before checking the cache at all. When the action ran after a step like pnpm install or ruby/setup-ruby with bundler-cache: true, this could take 3–7 minutes. The action now looks for mise config files the same way mise does: only in the working directory and each parent directory up to the workspace root. It checks for mise.toml, .mise.toml, .config/mise/…, conf.d fragments, .tool-versions, and their local, env-specific and .lock variants. The step also logs Hashed mise config files in N.Ns. (#703 by @​jdx and @​corsicanec82)
  • If you set a custom cache_key that doesn't use {{file_hash}} or {{default}}, the action no longer hashes config files at all.
  • Config files in subdirectories, such as monorepo sub-projects, no longer affect the cache key. mise only loads them with --monorepo.
  • Cache keys change, so the first run after you upgrade will miss the cache.

New Contributors

• @​corsicanec82 made their first contribution in 91e7f82 (#703)

Full Changelog: jdx/mise-action@v5.2.2...v5.2.3

v5.2.2: Include conf.d config fragments in the cache key

The cache key now includes mise conf.d/*.toml config fragments, so changing one of them invalidates the cache.

Fixed

• Editing a conf.d fragment now invalidates the cache. mise can load config from single-file fragments in conf.d/ directories, but the action didn't hash those files when it built the cache key. As a result, adding or changing tools in a fragment could restore an outdated cache. The cache key now also hashes conf.d/*.toml files under .config/mise/, .mise/ and mise/. If your repo already uses these fragments, the cache will miss once after you upgrade. (#698 by @​rileymichael)

New Contributors

• @​rileymichael made their first contribution in #698

Full Changelog: jdx/mise-action@v5.2.1...v5.2.2

v5.2.1: Require the signed packslip for mise 2026.9.3 and later

The action now refuses to install mise 2026.9.3 or later if the release's signed packslip is missing. This closes a gap where verification could be downgraded to the weaker checksum check.

Fixed

• A missing packslip no longer weakens the check on recent mise releases. v5.2.0 started checking the mise binary against the release's signed packslip.sigstore.json. If that file wasn't found, though, the action quietly fell back to the minisign-signed SHASUMS256 checksums. Anyone who could hide the file could force the weaker check. Every mise release from 2026.9.3 on includes a packslip, so for those versions a missing bundle now stops the install with an error like this:

  mise v2026.10.11 must ship a signed packslip, but https://github.com/jdx/mise/releases/download/v2026.10.11/packslip.sigstore.json was not found
  

  Releases before 2026.9.3 don't include a packslip, so they're still checked against the signed checksums. A version string that isn't three dot-separated numbers also requires a packslip. If you set the sha256 input, it still takes precedence over both checks. A packslip that fails verification still never falls back to the checksums. (#695 by @​jdx)

... (truncated)

Changelog

Sourced from jdx/mise-action's changelog.

Changelog

---

5.2.6 - 2026-11-02

🐛 Bug Fixes

• exit after run and post so a failed cache restore can't hang the step (#718) by @​jdx in #718

---

5.2.5 - 2026-10-31

🔍 Other Changes

• bump versions (#710) by @​deining in #710

---

5.2.4 - 2026-10-27

🐛 Bug Fixes

• (cache) reuse signed checksums saved with a cached mise (#708) by @​jdx in #708

---

5.2.3 - 2026-10-24

🐛 Bug Fixes

• (cache) hash mise config files without walking the workspace (#703) by @​jdx in #703

---

5.2.2 - 2026-10-21

🐛 Bug Fixes

• hash conf.d config fragments in cache key (#698) by @​rileymichael in #698

New Contributors

• @​rileymichael made their first contribution in #698

---

5.2.1 - 2026-10-19

🐛 Bug Fixes

• require the signed packslip for mise 2026.9.3 and later (#695) by @​jdx in #695

---

5.2.0 - 2026-10-16

... (truncated)

Commits

• 6be3c7e chore: release v5.2.4 (#709)
• 40dafec fix(cache): reuse signed checksums saved with a cached mise (#708)
• ed63289 chore(deps): lock file maintenance (#707)
• 82a612c chore: release v5.2.3 (#704)
• 2d0418b chore(deps): update dependency hk to latest (#705)
• e891dde chore(deps): update jdx/mise-action action to v5.2.0 (#706)
• 91e7f82 fix(cache): hash mise config files without walking the workspace (#703)
• 9a35c22 chore(deps): update github actions (#701)
• 8418fed chore: release v5.2.2 (#699)
• bb33e9b chore(deps): update communique, hk in mise.lock (#700)
• Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Updates @​actions/artifact to v6.3.1.

New Contributors

• @​tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

• cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
• c2acded chore: prepare v7.0.2 release
• 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
• 8cbe1be Bump @​actions/artifact to 6.3.1
• See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

• Update the readme by @​danwkennedy in actions/download-artifact#473
• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Update @​actions/artifact to 6.3.1 by @​tunc-d in actions/download-artifact#492
• Prepare download-artifact v8.0.2 by @​tunc-d in actions/download-artifact#493

New Contributors

• @​tunc-d made their first contribution in actions/download-artifact#492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits

• 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
• e455989 Prepare download-artifact v8.0.2
• a00b90c Merge pull request #49...

  Description has been truncated

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml