Skip to content

fix(deps): update all patch versions#19287

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-patch-versions
Open

fix(deps): update all patch versions#19287
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-patch-versions

Conversation

@renovate

@renovate renovate Bot commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@github/copilot 1.0.701.0.71 age confidence dependencies patch 1.0.73 (+1)
grafana/flint v0.22.8v0.22.9 age confidence patch
rumdl 0.2.320.2.40 age confidence patch
com.uber.nullaway:nullaway 0.13.70.13.8 age confidence dependencies patch
org.graalvm.buildtools.native 1.1.41.1.6 age confidence plugin patch
com.google.cloud.tools.jib 3.5.33.5.4 age confidence plugin patch

Release Notes

github/copilot-cli (@​github/copilot)

v1.0.71

Compare Source

  • copilot -p --autopilot no longer hangs when a background shell or agent outlives the turn; it now honors the COPILOT_TASK_WAIT_TIMEOUT_SECONDS timeout the same way plain -p does.
  • Reopening the /subagents model picker keeps each agent's reasoning effort and context tier
  • Refresh memory context after 30 minutes in long-lived sessions
  • Keep MCP tool lists up to date when servers change
  • Avoid leaving long-running background git processes after exit
  • Add a configurable maximum for Ctrl+R command history
  • On startup, an invalid settings.json now shows a warning identifying the offending value instead of silently ignoring your settings
  • /terminal-setup no longer skips setup on terminals without real kitty keyboard support
  • Add /voice devices to choose and persist the microphone for voice mode
  • Limit which built-in agents are available to tasks and subagents
  • Add canvas support in the CLI for extension-driven interactions
  • Enforce the sandbox filesystem policy on LSP file reads and rename edits
  • Allow empty owner and author emails in marketplace metadata
  • Keep all MCP Server Type options visible on short terminals
  • Mark disabled skills in copilot skill list and its JSON output
  • Plan mode now hard-blocks built-in tool calls that would modify the workspace, so the agent can no longer edit files or run mutating shell commands while planning (built-in mutators like opening a pull request are blocked; MCP and external tools are still allowed)
  • Improve /chronicle cost-tips recommendations with richer cost profiles
  • Highlight standalone hex colors inline in Markdown
  • Persist GitHub MCP toolset/tool config via settings.json (githubMcpToolsets, githubMcpTools, etc.)
  • Add plugins marketplace subcommands to list, add, and remove plugin marketplaces
  • Persist sidebar sessions across restarts
  • Add plugins marketplace browse and update commands
  • Split /worktree and /move: /worktree now creates a new worktree and leaves your uncommitted changes behind, while the new /move carries them into the new worktree
  • Add local and cloud cost profiles to /chronicle cost-tips
  • Switching to autopilot mid-turn now auto-answers questions asked during that same turn
  • Custom agents that request a shell tool by alias now also receive the matching read, list, and stop shell tools
  • Slash commands and their autocomplete now match regardless of case (e.g. /SESSION works like /session)
  • Show repo-enabled plugins in /plugin list and skill pickers
  • Press ? twice to dismiss quick help and start a prompt with a literal ?
  • Shell completions suggest positional-argument choices
  • Show the /app launch message and download link immediately on Linux
  • Validate --max-autopilot-continues rejects NaN, negative, and fractional values
  • Honor NO_COLOR in the CLI even when chalk cached a color level
  • Apply updated session options (shell flags, streaming, custom agent defaults) immediately after /settings changes
  • Announce the focused /model row for screen readers
  • Announce the focused picker row to screen readers
  • Show selected custom agents once in /agent and keep their source label when the file name differs from the display name
  • Clear the /model pricing banner when no models match
  • Keep /share file session and /share html session from using the full-session selector as an output path
  • Honor --context in fresh interactive sessions
  • Fixed the model picker changing a hidden model's reasoning effort or context window when the search matched no results, and hid the inert key hints shown in that empty state
  • Display plugin root skills as /plugin instead of /plugin:plugin
  • Keep valid hooks in a config file when one hook entry is malformed
  • Denying write(path) now blocks only the specified path
  • Using --add-github-mcp-tool "*" now enables all GitHub MCP tools
  • Render empty untracked files without a phantom added line
  • Show clean failure messages when copilot skill add fails
  • Press Enter on a blank settings array item to show an error instead of saving an empty value
  • Press Enter once to toggle booleans with a registered default in /settings
  • Declining folder trust in /cwd keeps your live session open and returns to the previous folder
  • Show a warning when a workspace MCP config is malformed or cannot be loaded
  • Make bare copilot mcp and copilot skill print help and exit 0, matching copilot plugin. Consistent with plugin, the implicit help <subcommand> form is not supported for these groups; use copilot mcp <subcommand> --help (or copilot skill <subcommand> --help) instead.
  • Show malformed allowed_models.txt policy errors cleanly in -p mode
  • Resume synced sessions by name without a false multiple matches error
  • Show an error when --name is used with --session-id for an existing session
  • Show --plugin-dir plugins in copilot plugin list
  • Keep backgrounded sessions alive when you switch away from them
  • Link bare #number GitHub refs in -p --stream off output
  • Show the startup banner only on the first launch when set to once
  • Allow copilot update and /update to accept stable as a channel
  • Surface --plugin-dir warnings in the terminal
  • Surface the real load error for malformed custom agents
  • Reject --continue when used with --resume
  • Prompt mode now exits non-zero when a --share or --share-gist export fails
  • Server mode reconnects OAuth MCP servers from cached tokens
  • Keep stored Git credential helpers available for marketplace plugin installs
  • The /model picker shows the Auto model description as markdown with a clickable Learn More link
  • Keep sessions tied to their working directory across prompts, restarts, and workspace tools
  • Always offer a custom answer in ask_user choice prompts
  • Lower the default maximum sub-agent nesting depth from 6 to 4 to curb runaway recursive sub-agent delegation. Usage-based billing users can still adjust subagents.maxDepth (up to 128).
  • Add a pinned prompts setting in /settings to control prompt pinning
  • Add Repo and Repo (local) scope tabs to the /settings dashboard
  • Interactive shell commands now fail with a retryable "reconfiguring" message instead of an "unknown shellManager handle" error after the shell manager is disposed, and a detached command's completion notification is no longer lost when the shell context is reconfigured while a read is in progress
  • Reject custom-agent names that would create hidden files
  • Reject malformed --allow-tool and --deny-tool patterns with an error message
  • Show retained shell output in /tasks Shell Details for finished tasks
  • Remove duplicate Error: prefixes from plugin command failures
  • Shell completions stop suggesting subcommands as flag values
  • Show singular message counts in /usage activity graph
  • Keep /cd from switching to files or inaccessible directories
  • Dismissing the quick-help overlay with ? no longer leaves a stray ? in the prompt
  • --sandbox and --no-sandbox now show their "ignored" warning during interactive startup when the sandbox feature is unavailable (previously it was only visible in non-interactive mode)
  • Show the full command with its arguments (not just the wrapper) in the /mcp server detail view
  • Hide the inert navigate and view-log hints in the empty /lsp logs (LSP Services) panel
  • Exit non-interactive prompt runs with a failure code when a prompt is blocked before responding
  • Show the Auto discount in the redesigned inline model picker
  • New sessions start in the default directory instead of the active session's cwd
  • Fish completion only offers enum values for closed-choice flags
  • Use targeted validation commands and lighter install guidance by default
  • Use ctrl+x → x to close a session and ctrl+x → h to hide the split sidebar
grafana/flint (grafana/flint)

v0.22.9

Compare Source

Fixed
  • stream lychee input files through stdin (#​400)
  • discover flint project root from parent mise files (#​401)
Other
  • add local flint testing guidance (#​402)
  • (deps) update taiki-e/install-action action to v2.83.1 (#​399)
rvben/rumdl (rumdl)

v0.2.40

Compare Source

Fixed
  • md003: consume the setext underline when converting a heading to ATX. Converting a setext heading left the underline behind, where a following blank line turned it into a thematic break, so rumdl fmt added a horizontal rule the document never had (7363c34)
  • md077: stop scoping list items inside blockquotes, which made a lazy continuation line gain indentation on every pass so the formatter never converged (58fb25b)
  • reflow: keep wiki links, shortcodes and math whole inside a wrapped span (db12c2c)
  • config: honor the documented MD033 table_allowed alias, which silently dropped the configured value (db2c204)
  • config: stop reporting MD013's documented semantic-link-understanding alias as an unknown option (1539a64)
  • parity: make the markdownlint comparison harness actually run (182763c)
Documentation
  • md013: document that ignore-link-urls affects reporting only. Reflow measures the markdown as written, matching prettier and mdformat (c4f8bad)

Downloads

File Platform Checksum
rumdl-v0.2.40-x86_64-unknown-linux-gnu.tar.gz Linux x86_64 checksum
rumdl-v0.2.40-x86_64-unknown-linux-musl.tar.gz Linux x86_64 (musl) checksum
rumdl-v0.2.40-aarch64-unknown-linux-gnu.tar.gz Linux ARM64 checksum
rumdl-v0.2.40-aarch64-unknown-linux-musl.tar.gz Linux ARM64 (musl) checksum
rumdl-v0.2.40-x86_64-apple-darwin.tar.gz macOS x86_64 checksum
rumdl-v0.2.40-aarch64-apple-darwin.tar.gz macOS ARM64 (Apple Silicon) checksum
rumdl-v0.2.40-x86_64-pc-windows-msvc.zip Windows x86_64 checksum

Installation

Using uv (Recommended)
uv tool install rumdl
Using pip
pip install rumdl
Using pipx
pipx install rumdl
Direct Download

Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.

v0.2.39

Compare Source

Added
  • config: expand ~ to the home directory in path settings (70f91aa)
Fixed
  • md013: wrap over-long emphasis spans that contain nested markup (ddc73f4)
  • discovery: strip Windows verbatim prefix from canonicalized paths (a85ab87)
  • discovery: apply absolute exclude patterns during directory discovery (0d20fc8)

Downloads

File Platform Checksum
rumdl-v0.2.39-x86_64-unknown-linux-gnu.tar.gz Linux x86_64 checksum
rumdl-v0.2.39-x86_64-unknown-linux-musl.tar.gz Linux x86_64 (musl) checksum
rumdl-v0.2.39-aarch64-unknown-linux-gnu.tar.gz Linux ARM64 checksum
rumdl-v0.2.39-aarch64-unknown-linux-musl.tar.gz Linux ARM64 (musl) checksum
rumdl-v0.2.39-x86_64-apple-darwin.tar.gz macOS x86_64 checksum
rumdl-v0.2.39-aarch64-apple-darwin.tar.gz macOS ARM64 (Apple Silicon) checksum
rumdl-v0.2.39-x86_64-pc-windows-msvc.zip Windows x86_64 checksum

Installation

Using uv (Recommended)
uv tool install rumdl
Using pip
pip install rumdl
Using pipx
pipx install rumdl
Direct Download

Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.

v0.2.38

Compare Source

Added
  • md044: add ignore-frontmatter-fields option (b664e5a)
  • config: warn when an inline enable cannot re-enable a config-disabled rule (a74a923)
Fixed
  • md044: stop flagging proper names inside frontmatter file paths (35649d9)
  • md022: stop panicking when one blank-line requirement is unlimited (8a25eb2)
  • config: report unknown option keys in inline configure-file comments (8f4c0ea)
  • config: apply markdownlint-configure-file when the comment spans lines (7a023a5)
  • config: honor booleans and alias keys in markdownlint-configure-file (#​745) (acefc19)

Downloads

File Platform Checksum
rumdl-v0.2.38-x86_64-unknown-linux-gnu.tar.gz Linux x86_64 checksum
rumdl-v0.2.38-x86_64-unknown-linux-musl.tar.gz Linux x86_64 (musl) checksum
rumdl-v0.2.38-aarch64-unknown-linux-gnu.tar.gz Linux ARM64 checksum
rumdl-v0.2.38-aarch64-unknown-linux-musl.tar.gz Linux ARM64 (musl) checksum
rumdl-v0.2.38-x86_64-apple-darwin.tar.gz macOS x86_64 checksum
rumdl-v0.2.38-aarch64-apple-darwin.tar.gz macOS ARM64 (Apple Silicon) checksum
rumdl-v0.2.38-x86_64-pc-windows-msvc.zip Windows x86_64 checksum

Installation

Using uv (Recommended)
uv tool install rumdl
Using pip
pip install rumdl
Using pipx
pipx install rumdl
Direct Download

Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.

v0.2.37

Compare Source

Added
  • reflow: add atomic_spans configuration and refactor inline wrapping (#​742) (aeabec1)
Changed
  • BREAKING: the MD013 emphasis-spans option is renamed to atomic-spans (default true), with inverted meaning (emphasis-spans = true is now atomic-spans = false). Configs setting the old key should migrate; it is no longer recognized
Fixed
  • reflow: keep code spans atomic when wrapping would collapse whitespace (d43618b)

Downloads

File Platform Checksum
rumdl-v0.2.37-x86_64-unknown-linux-gnu.tar.gz Linux x86_64 checksum
rumdl-v0.2.37-x86_64-unknown-linux-musl.tar.gz Linux x86_64 (musl) checksum
rumdl-v0.2.37-aarch64-unknown-linux-gnu.tar.gz Linux ARM64 checksum
rumdl-v0.2.37-aarch64-unknown-linux-musl.tar.gz Linux ARM64 (musl) checksum
rumdl-v0.2.37-x86_64-apple-darwin.tar.gz macOS x86_64 checksum
rumdl-v0.2.37-aarch64-apple-darwin.tar.gz macOS ARM64 (Apple Silicon) checksum
rumdl-v0.2.37-x86_64-pc-windows-msvc.zip Windows x86_64 checksum

Installation

Using uv (Recommended)
uv tool install rumdl
Using pip
pip install rumdl
Using pipx
pipx install rumdl
Direct Download

Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.

v0.2.36

Compare Source

Added
  • code-block-tools: add shuck:format as a built-in shell formatter (5b23261)
Fixed
  • wasm: stop double-converting already-character-based columns (4178cdf)
  • tests: resolve String addition compilation errors under Rust 1.96 (#​737) (38f36cf)

Downloads

File Platform Checksum
rumdl-v0.2.36-x86_64-unknown-linux-gnu.tar.gz Linux x86_64 checksum
rumdl-v0.2.36-x86_64-unknown-linux-musl.tar.gz Linux x86_64 (musl) checksum
rumdl-v0.2.36-aarch64-unknown-linux-gnu.tar.gz Linux ARM64 checksum
rumdl-v0.2.36-aarch64-unknown-linux-musl.tar.gz Linux ARM64 (musl) checksum
rumdl-v0.2.36-x86_64-apple-darwin.tar.gz macOS x86_64 checksum
rumdl-v0.2.36-aarch64-apple-darwin.tar.gz macOS ARM64 (Apple Silicon) checksum
rumdl-v0.2.36-x86_64-pc-windows-msvc.zip Windows x86_64 checksum

Installation

Using uv (Recommended)
uv tool install rumdl
Using pip
pip install rumdl
Using pipx
pipx install rumdl
Direct Download

Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.

v0.2.35

Compare Source

Added
  • cli: honor --deny-config-warnings on the stdin path (0f93ca5)
  • cli: make --deny-config-warnings cover inline disable-comment rule names (96d75f5)
  • cli: add --deny-config-warnings for config-file and CLI-flag problems (5045daf)
  • reflow: support breaking within emphasis spans (2e8bded)
Fixed
  • reflow: preserve non-breaking spaces and the space before French double punctuation (f66021f)
  • cli: walk directory arguments even when file paths are also passed (d058273)
  • lsp: honor line anchors in goto-definition (17a21e7)
  • md077: attribute middle-level continuation lines to their own list item (c73763b)

Downloads

File Platform Checksum
rumdl-v0.2.35-x86_64-unknown-linux-gnu.tar.gz Linux x86_64 checksum
rumdl-v0.2.35-x86_64-unknown-linux-musl.tar.gz Linux x86_64 (musl) checksum
rumdl-v0.2.35-aarch64-unknown-linux-gnu.tar.gz Linux ARM64 checksum
rumdl-v0.2.35-aarch64-unknown-linux-musl.tar.gz Linux ARM64 (musl) checksum
rumdl-v0.2.35-x86_64-apple-darwin.tar.gz macOS x86_64 checksum
rumdl-v0.2.35-aarch64-apple-darwin.tar.gz macOS ARM64 (Apple Silicon) checksum
rumdl-v0.2.35-x86_64-pc-windows-msvc.zip Windows x86_64 checksum

Installation

Using uv (Recommended)
uv tool install rumdl
Using pip
pip install rumdl
Using pipx
pipx install rumdl
Direct Download

Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.

v0.2.34

Compare Source

Added
  • code-block-tools: restore shuck as a built-in shell linter (da66447)
Performance
  • reflow: probe inline math at the cursor instead of rescanning the suffix (1e6ea3b)
  • reflow: merge emphasis and code span extraction into a single cmark pass (8e03537)
  • reflow: optimize MyST inline role parsing using pre-extracted code spans (e966899)
Downloads
File Platform Checksum
rumdl-v0.2.34-x86_64-unknown-linux-gnu.tar.gz Linux x86_64 checksum
rumdl-v0.2.34-x86_64-unknown-linux-musl.tar.gz Linux x86_64 (musl) checksum
rumdl-v0.2.34-aarch64-unknown-linux-gnu.tar.gz Linux ARM64 checksum
rumdl-v0.2.34-aarch64-unknown-linux-musl.tar.gz Linux ARM64 (musl) checksum
rumdl-v0.2.34-x86_64-apple-darwin.tar.gz macOS x86_64 checksum
rumdl-v0.2.34-aarch64-apple-darwin.tar.gz macOS ARM64 (Apple Silicon) checksum
rumdl-v0.2.34-x86_64-pc-windows-msvc.zip Windows x86_64 checksum
Installation
Using uv (Recommended)
uv tool install rumdl
Using pip
pip install rumdl
Using pipx
pipx install rumdl
Direct Download

Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.

v0.2.33

Compare Source

Fixed
  • md044: stop flagging proper names inside bare URLs (5e9b51a)
  • md040: recognize file-extension fence labels as known languages (686ba20)
  • cli: replace unhelpful panic message with an actionable one (#​717) (37ac880)
  • reflow: re-search cached inline-math after a dollar sign (a30a4f9)
  • reflow: support multiple backticks and optimize code span parsing (81944c5)
  • md013: stop reflow from starting lines with block markers (eebd18b)
Performance
  • reflow: implement cached match lookups to prevent quadratic suffix scanning (1cc8d2b)

Downloads

File Platform Checksum
rumdl-v0.2.33-x86_64-unknown-linux-gnu.tar.gz Linux x86_64 checksum
rumdl-v0.2.33-x86_64-unknown-linux-musl.tar.gz Linux x86_64 (musl) checksum
rumdl-v0.2.33-aarch64-unknown-linux-gnu.tar.gz Linux ARM64 checksum
rumdl-v0.2.33-aarch64-unknown-linux-musl.tar.gz Linux ARM64 (musl) checksum
rumdl-v0.2.33-x86_64-apple-darwin.tar.gz macOS x86_64 checksum
rumdl-v0.2.33-aarch64-apple-darwin.tar.gz macOS ARM64 (Apple Silicon) checksum
rumdl-v0.2.33-x86_64-pc-windows-msvc.zip Windows x86_64 checksum

Installation

Using uv (Recommended)
uv tool install rumdl
Using pip
pip install rumdl
Using pipx
pipx install rumdl
Direct Download

Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.

uber/NullAway (com.uber.nullaway:nullaway)

v0.13.8

Compare Source

Mostly minor bug fixes. Note that NullAway now treats Map.remove as returning @Nullable (#​1623), which may lead
to newly-reported warnings.

graalvm/native-build-tools (org.graalvm.buildtools.native)

v1.1.6

Compare Source

v1.1.5

Compare Source

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.4...1.1.5


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 07:59 AM, only on Tuesday (* 0-7 * * 2)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copilot AI review requested due to automatic review settings July 21, 2026 04:53
@renovate
renovate Bot requested a review from a team as a code owner July 21, 2026 04:53

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates several pinned tool/plugin dependencies to their latest patch versions, keeping the build and CI tooling current.

Changes:

  • Bump Gradle plugins (Jib, GraalVM build tools) versions
  • Update developer/CI tools (rumdl, flint preset, nullaway, Copilot CLI dependency)

Reviewed changes

Copilot reviewed 5 out of 6 changed files in this pull request and generated no comments.

Show a summary per file
File Description
settings.gradle.kts Upgrades pinned Gradle plugin versions (Jib, GraalVM native build tools).
mise.toml Bumps rumdl version used by local/dev tooling.
dependencyManagement/build.gradle.kts Updates the pinned nullaway dependency version.
.github/scripts/copilot-cli/package.json Bumps the GitHub Copilot package used by the CLI script.
.github/renovate.json5 Updates the flint preset reference to match the newer version.
Files not reviewed (1)
  • .github/scripts/copilot-cli/package-lock.json: Generated file

@opentelemetry-pr-dashboard

opentelemetry-pr-dashboard Bot commented Jul 21, 2026

Copy link
Copy Markdown

Pull request dashboard status

Status last refreshed: 2026-07-23 14:31:16 UTC.

  • Waiting on: Reviewers
  • Next step: Review the latest changes.
  • Also blocked by: 1 required status check is failing.

This automated status or its linked feedback items may be incorrect. If something looks wrong, please report it with the result you expected.

@renovate
renovate Bot force-pushed the renovate/all-patch-versions branch from 53e014d to 94e8db6 Compare July 21, 2026 15:59
@renovate
renovate Bot force-pushed the renovate/all-patch-versions branch from 94e8db6 to 6837868 Compare July 22, 2026 18:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant