chore(deps): update all dependencies (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/add-to-project	action	major	v1.0.2 → v2.0.0
vergen	build-dependencies	major	8.2.6 → 10.0.0

---

Release Notes

actions/add-to-project (actions/add-to-project)

v2.0.0: v2

Compare Source

What's Changed

• Update instructions for fine grained PAT by @​talune in #​596
• build(deps-dev): bump prettier from 3.2.5 to 3.3.2 by @​dependabot[bot] in #​594
• build(deps-dev): bump eslint-plugin-github from 4.10.2 to 5.0.1 by @​dependabot[bot] in #​593
• Resolve Regular Expression syntax checking errors by @​talune in #​598
• build(deps-dev): bump typescript from 5.4.5 to 5.5.2 by @​dependabot[bot] in #​595
• build(deps-dev): bump ts-jest from 29.1.5 to 29.3.0 by @​dependabot[bot] in #​675
• Batch updating some dependencies for vulns by @​TylerDixon in #​679
• build(deps): bump undici from 5.28.4 to 5.28.5 by @​dependabot[bot] in #​662
• build(deps-dev): bump eslint-plugin-prettier from 5.1.3 to 5.2.5 by @​dependabot[bot] in #​682
• Have dependabot also run builds as another commit when creating PRs by @​TylerDixon in #​684
• build(deps): bump @​octokit/request-error from 5.1.1 to 6.1.7 by @​dependabot[bot] in #​683
• build(deps): bump @​octokit/request from 8.4.1 to 9.2.2 by @​dependabot[bot] in #​681
• Bump eslint-plugin-jest from 28.6.0 to 28.11.0 by @​dependabot[bot] in #​685
• Bump @​types/node from 16.18.101 to 22.13.14 by @​dependabot[bot] in #​686
• Bump @​types/jest from 29.5.12 to 29.5.14 by @​dependabot[bot] in #​687
• Bump @​vercel/ncc from 0.38.1 to 0.38.3 by @​dependabot[bot] in #​688
• Bump ts-jest from 29.3.0 to 29.3.2 by @​dependabot[bot] in #​694
• chore: removes sourcemap-register from build step by @​andrialexandrou in #​696
• Bump @​octokit/plugin-paginate-rest from 9.2.2 to 13.0.1 by @​dependabot[bot] in #​699
• Bump ts-jest from 29.3.2 to 29.4.0 by @​dependabot[bot] in #​703
• Bump @​types/node from 22.13.14 to 24.0.12 by @​dependabot[bot] in #​709
• Potential fix for code scanning alert no. 6: Workflow does not contain permissions by @​wiinci in #​715
• Potential fix for code scanning alert no. 5: Workflow does not contain permissions by @​wiinci in #​716
• Potential fix for code scanning alert no. 7: Workflow does not contain permissions by @​wiinci in #​717
• Fix code scanning alert:missing regex anchor by @​wiinci in #​719
• Add Missing Languages to CodeQL Advanced Configuration by @​KyFaSt in #​710
• Bump @​octokit/request from 9.2.2 to 10.0.3 by @​dependabot[bot] in #​705
• Bump concurrently from 8.2.2 to 9.2.0 by @​dependabot[bot] in #​707
• Bump prettier from 3.3.2 to 3.6.2 by @​dependabot[bot] in #​721
• Bump concurrently from 9.2.0 to 9.2.1 by @​dependabot[bot] in #​722
• Bump @​types/node from 24.0.12 to 24.5.2 by @​dependabot[bot] in #​730
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​714
• Bump actions/setup-node from 4 to 5 by @​dependabot[bot] in #​726
• build(deps-dev): bump @​typescript-eslint/parser from 7.14.1 to 7.18.0 by @​dependabot[bot] in #​616
• Bump ts-jest from 29.4.1 to 29.4.5 by @​dependabot[bot] in #​742
• Bump js-yaml from 3.14.1 to 3.14.2 by @​dependabot[bot] in #​750
• Bump actions/upload-artifact from 4 to 5 by @​dependabot[bot] in #​748
• Bump github/codeql-action from 3 to 4 by @​dependabot[bot] in #​741
• Bump jest and @​types/jest by @​dependabot[bot] in #​743
• Bump actions/setup-node from 5 to 6 by @​dependabot[bot] in #​744
• Consolidate ESLint 9 and TypeScript ESLint 8 dependency updates by @​Copilot in #​751
• Bump @​octokit/request-error from 6.1.8 to 7.1.0 by @​dependabot[bot] in #​757
• Bump globals from 15.15.0 to 16.5.0 by @​dependabot[bot] in #​756
• Bump @​octokit/plugin-paginate-rest from 13.1.1 to 14.0.0 by @​dependabot[bot] in #​754
• Bump @​vercel/ncc from 0.38.3 to 0.38.4 by @​dependabot[bot] in #​753
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​752
• Bump eslint from 9.39.1 to 9.39.2 by @​dependabot[bot] in #​759
• Bump ts-jest from 29.4.5 to 29.4.6 by @​dependabot[bot] in #​760
• Bump globals from 16.5.0 to 17.0.0 by @​dependabot[bot] in #​762
• Bump eslint-plugin-jest from 29.1.0 to 29.12.1 by @​dependabot[bot] in #​765
• Bump typescript-eslint from 8.47.0 to 8.52.0 by @​dependabot[bot] in #​763
• Bump @​typescript-eslint/parser from 8.47.0 to 8.52.0 by @​dependabot[bot] in #​764
• Bump @​types/node from 24.10.1 to 25.0.3 by @​dependabot[bot] in #​766
• Bump minimatch from 3.1.2 to 3.1.5 by @​dependabot[bot] in #​769
• Bump actions/upload-artifact from 5 to 7 by @​dependabot[bot] in #​768
• Bump eslint-plugin-prettier from 5.5.4 to 5.5.5 by @​dependabot[bot] in #​771
• Bump typescript-eslint from 8.52.0 to 8.57.0 by @​dependabot[bot] in #​772
• Bump flatted from 3.3.3 to 3.4.2 by @​dependabot[bot] in #​775
• Bump @​typescript-eslint/parser from 8.52.0 to 8.57.0 by @​dependabot[bot] in #​774
• Bump @​typescript-eslint/eslint-plugin from 8.52.0 to 8.57.0 by @​dependabot[bot] in #​770
• Bump handlebars from 4.7.8 to 4.7.9 by @​dependabot[bot] in #​780
• Bump globals from 17.0.0 to 17.4.0 by @​dependabot[bot] in #​778
• Bump eslint-plugin-jest from 29.12.1 to 29.15.1 by @​dependabot[bot] in #​779
• Bump @​types/node from 25.0.3 to 25.5.0 by @​dependabot[bot] in #​777
• Upgrade action to use Node 24 by @​salmanmkc in #​712

New Contributors

• @​TylerDixon made their first contribution in #​679
• @​andrialexandrou made their first contribution in #​696
• @​wiinci made their first contribution in #​715
• @​KyFaSt made their first contribution in #​710
• @​Copilot made their first contribution in #​751
• @​salmanmkc made their first contribution in #​712

Full Changelog: actions/add-to-project@v1.0.2...v2.0.0

v2

Compare Source

rustyhorde/vergen (vergen)

v10.0.1: vergen 10.0.1

vergen 10.0.1

Patch release adding a new error-fallback knob, a builder-access API addition, dependency updates, and a security-audit refresh.

New features

• VERGEN_DEFAULT_ON_ERROR fallback (#​509) — When building outside a git worktree (or any time an instruction cannot be generated), the new VERGEN_DEFAULT_ON_ERROR env var and Emitter::default_on_error() builder method populate missing instructions with the idempotent default (VERGEN_IDEMPOTENT_OUTPUT) so env!("VERGEN_GIT_SHA") keeps compiling — while builds inside a real worktree still emit real values.
• all() builder accessor (#​513) — Exposes Build::all(), Cargo::all(), Rustc::all(), and Sysinfo::all() as public methods that return the builder with all instructions enabled, enabling subtractive modification (turn all on, then selectively disable).

Dependency updates

• bon 3.9.1 → 3.9.3
• gix 0.84.0 → 0.85.0
• regex 1.12.3 → 1.12.4
• time 0.3.47 → 0.3.51
• sysinfo 0.39.3 → 0.39.5
• memmap2 0.9.10 → 0.9.11 (resolves RUSTSEC-2026-0186)

Security audit refresh

• Added RUSTSEC-2026-0173 ignore (proc-macro-error2 unmaintained, informational only)
• Removed RUSTSEC-2025-0055 ignore (tracing-subscriber now resolved to ≥ 0.3.20)
• Removed RUSTSEC-2025-0141 ignore (bincode no longer in the dependency tree)
• cargo audit passes clean

Other

• Fixed inaccurate fail_on_error and idempotent docs (#​509)
• Added cargo:rerun-if-changed=VERGEN_DEFAULT_ON_ERROR rerun directive
• Bumped cargo-binstall in CI (#​503)
• Parse deprecation fixes (#​505)

Full Changelog: rustyhorde/vergen@v10.0.0...10.0.1

v10.0.0: vergen 10.0.0

vergen 10.0.0

Major release of the vergen suite (vergen, vergen-lib, vergen-git2, vergen-gitcl, vergen-gix, vergen-pretty).

Highlights

• MSRV raised to 1.95.0 (#​496, prior bumps via #​487, #​440).
• Raw Unix-seconds timestamps — emit build timestamps as raw Unix seconds (#​444).
• SOURCE_DATE_EPOCH decoupling plus a .cargo_vcs_info.json fallback for reproducible builds when building from a published crate without a git repo (#​452, #​448).
• Remote URL support for git functionality (#​459).
• GIT_DIRTY instruction documented and dirty-output fixes for vergen-gix (#​465, #​423).

Internal / maintenance

• Replaced getset with hand-written getters in vergen-lib (#​491).
• Removed bincode from vergen-pretty (#​481).
• Added a cargo-semver-checks CI job (#​478).
• Numerous dependency updates, including gix bumps to address RUSTSEC advisories (#​473, #​488, #​490).
• CI: skip coverage jobs for forked PRs (#​492), pinning + parallelization (#​496).
• Lint and doc fixes across the workspace.

Full Changelog: rustyhorde/vergen@vergen_9.0.6...v10.0.0

v9.0.6: vergen 9.0.6

What's Changed

• Updated MSRV to 1.78.0 by @​CraZySacX in #​388
• Fixed broken tests by @​CraZySacX in #​389
• Removed unnecessary hashes in string literals by @​CraZySacX in #​390
• removed coverage_attribute as it is now supported by @​CraZySacX in #​391
• Added coverage_attribute feature to support llvm-cov by @​CraZySacX in #​392
• Dependency updates by @​CraZySacX in #​394
• Added back coverage_attribute feature for coverage by @​CraZySacX in #​396
• Bump library dependencies by @​CraZySacX in #​397
• Updated to latest deps to clear rustsec from gix by @​CraZySacX in #​401
• Removed lint by @​CraZySacX in #​403
• Fixed lint issues by @​CraZySacX in #​404
• Lint fixes, fixed macos builds by @​CraZySacX in #​407
• gitcl: log output of failed git commands. by @​aznashwan in #​409
• Dependency updates by @​CraZySacX in #​419
• git: Ensure no backend ever takes an index lock by @​bgw in #​406
• Fix lint issues with new mtime tests by @​CraZySacX in #​420
• Implement dirty for gix by @​yodaldevoid in #​412
• Fixed lint issues in gix by @​CraZySacX in #​421

New Contributors

• @​aznashwan made their first contribution in #​409
• @​bgw made their first contribution in #​406
• @​yodaldevoid made their first contribution in #​412

Full Changelog: rustyhorde/vergen@vergen_pretty_0.3.6...vergen_9.0.6

v9.0.3

Compare Source

v9.0.2: vergen 9.0.2

Compare Source

• Dependency Updates to help fix some compilation issues that arose on MacOS.

v9.0.1: vergen 9.0.1

Compare Source

• Dependency updates

v9.0.0: vergen 9.0.0

• Release 9 of the vergen tool.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --workspace
    Updating crates.io index
error: failed to select a version for `vergen`.
    ... required by package `famedly-sync v0.11.3 (/tmp/renovate/repos/github/famedly/famedly-sync)`
versions that meet the requirements `^10.0.0` are: 10.0.1, 10.0.0

package `famedly-sync` depends on `vergen` with feature `git` but `vergen` does not have that feature.
help: there is a feature `si` with a similar name


failed to select a version for `vergen` which could resolve this conflict

[linearb]

✨ PR Review

LGTM

Generated by LinearB AI and added by gitStream.
_{AI-generated content may contain inaccuracies. Please verify before using.
💡 Tip: You can customize your AI Review using Guidelines Learn how}