From 3af73275db357b00c220a7df4c452b7569df26cc Mon Sep 17 00:00:00 2001 From: Matthew Goodwin Date: Thu, 22 Oct 2026 14:20:58 -0500 Subject: [PATCH 1/2] deps.lock: git-lfs 3.8.1, gh 2.103.0, glab 1.124.0, bun 1.4.4, node 24.22.1, cloudflared 2026.10.3, portless 0.15.9 Each sha256 checked against upstream's published checksum (cloudflared and portless against the GitHub asset digest and npm shasum). setup-bun and packageManager follow bun to 1.4.4. Co-Authored-By: Claude Opus 5.5 --- .claude/rules/apps/apps-ci-and-publishing.md | 2 +- .github/workflows/checks.yml | 16 +++---- .github/workflows/e2e.yml | 6 +-- .github/workflows/release.yml | 4 +- .github/workflows/timings.yml | 2 +- package.json | 2 +- rt-tray/deps.lock | 48 ++++++++++---------- 7 files changed, 40 insertions(+), 40 deletions(-) diff --git a/.claude/rules/apps/apps-ci-and-publishing.md b/.claude/rules/apps/apps-ci-and-publishing.md index 856fc213d3..1f5808c649 100644 --- a/.claude/rules/apps/apps-ci-and-publishing.md +++ b/.claude/rules/apps/apps-ci-and-publishing.md @@ -43,7 +43,7 @@ them as `$TURBO_ROOT$` inputs on its package's `test` task `$TURBO_ROOT$` glob carries the `node_modules`/`.turbo`/`dist`/`dist-bin` negations because those globs ignore `.gitignore`. -`setup-bun` is pinned to `1.4.3` in every job. The pin exists because +`setup-bun` is pinned to `1.4.4` in every job. The pin exists because CI byte-compares generated/committed artifacts (deck's `core/generated-fresh.test.ts`, tui-kit's codegen gate) against a live rebuild, and bun's bundler/minifier output is not stable across bun diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml index 136ceb55fd..76080f23bf 100644 --- a/.github/workflows/checks.yml +++ b/.github/workflows/checks.yml @@ -35,7 +35,7 @@ jobs: fetch-depth: 2 - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - id: scope env: EVENT_NAME: ${{ github.event_name }} @@ -52,7 +52,7 @@ jobs: fetch-depth: 0 - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - name: Install dependencies run: bun install --frozen-lockfile @@ -115,7 +115,7 @@ jobs: - uses: actions/checkout@v4 - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - uses: actions/setup-go@v5 with: go-version-file: ui/go.mod @@ -136,7 +136,7 @@ jobs: fetch-depth: 0 - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - run: bun install --frozen-lockfile - uses: actions/cache@v4 with: @@ -176,7 +176,7 @@ jobs: fetch-depth: 2 - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - name: Install backup dependencies run: brew install age zstd git-lfs @@ -220,7 +220,7 @@ jobs: - uses: actions/checkout@v4 - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - run: bun install --frozen-lockfile - name: Always-run guards env: @@ -273,7 +273,7 @@ jobs: fetch-depth: 2 - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - run: bun install --frozen-lockfile # A PR checkout is the merge commit, so HEAD^1 is the base branch tip, # the same base the scope job diffs against. @@ -349,7 +349,7 @@ jobs: - uses: actions/checkout@v4 - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - name: Build the docs site working-directory: website run: bun install --frozen-lockfile && bun run build diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml index f2d66f9850..17088a241f 100644 --- a/.github/workflows/e2e.yml +++ b/.github/workflows/e2e.yml @@ -31,7 +31,7 @@ jobs: fetch-depth: 2 - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - id: scope env: EVENT_NAME: ${{ github.event_name }} @@ -46,7 +46,7 @@ jobs: - uses: actions/checkout@v4 - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - name: Install dependencies run: | @@ -103,7 +103,7 @@ jobs: - uses: actions/checkout@v4 - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - uses: actions/setup-go@v5 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 593c3f7986..d718af8d45 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -27,7 +27,7 @@ jobs: persist-credentials: false - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - run: bun install --frozen-lockfile - name: Build the tree rows run: bun scripts/build-apps.ts --arch arm64 @@ -83,7 +83,7 @@ jobs: - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - name: Install dependencies run: | bun install --frozen-lockfile --ignore-scripts diff --git a/.github/workflows/timings.yml b/.github/workflows/timings.yml index 212c3ba5cf..c2f8475895 100644 --- a/.github/workflows/timings.yml +++ b/.github/workflows/timings.yml @@ -19,7 +19,7 @@ jobs: - uses: actions/checkout@v4 - uses: oven-sh/setup-bun@v2 with: - bun-version: 1.4.3 + bun-version: 1.4.4 - name: Install backup dependencies run: brew install age zstd git-lfs - name: Install dependencies diff --git a/package.json b/package.json index eeafbea8af..2b51341b56 100644 --- a/package.json +++ b/package.json @@ -2,7 +2,7 @@ "name": "repo-tools", "private": true, "license": "MIT", - "packageManager": "bun@1.4.3", + "packageManager": "bun@1.4.4", "workspaces": { "packages": [ "packages/*", diff --git a/rt-tray/deps.lock b/rt-tray/deps.lock index 5a42bc43de..9b1804c806 100644 --- a/rt-tray/deps.lock +++ b/rt-tray/deps.lock @@ -22,35 +22,35 @@ "sha256": "eb33e51f49a15e023950cd7825ca74a4a2b43db8354825ac24fc1b7ee09e6fa3", "archive": "make-src", "extract": "zstd-1.5.7", "bundlePath": "Contents/Helpers/zstd", "exec": ["Contents/Helpers/zstd"], "exposeByDefault": false, "entitlements": "none", "status": "bundled", "kind": "helper" }, - { "name": "git-lfs", "version": "3.8.0", "license": "MIT", - "url": "https://github.com/git-lfs/git-lfs/releases/download/v3.8.0/git-lfs-darwin-arm64-v3.8.0.zip", - "sha256": "caff76a7d070d8160c89bc39b6e85d98f24135b6fed038a3b4de2590d25102d8", - "archive": "zip", "extract": "git-lfs-3.8.0/git-lfs", "bundlePath": "Contents/Helpers/git-lfs", "exec": ["Contents/Helpers/git-lfs"], + { "name": "git-lfs", "version": "3.8.1", "license": "MIT", + "url": "https://github.com/git-lfs/git-lfs/releases/download/v3.8.1/git-lfs-darwin-arm64-v3.8.1.zip", + "sha256": "0ba10e897e0496412cd86eacaed4ed554c97ddc29bc5c709d28faa5eaaa2222c", + "archive": "zip", "extract": "git-lfs-3.8.1/git-lfs", "bundlePath": "Contents/Helpers/git-lfs", "exec": ["Contents/Helpers/git-lfs"], "exposeByDefault": false, "entitlements": "none", "status": "bundled", "kind": "helper" }, { "name": "sops", "version": "3.13.3", "license": "Apache-2.0", "url": "https://github.com/getsops/sops/releases/download/v3.13.3/sops-v3.13.3.darwin.arm64", "sha256": "b97c0d434aab577dc40310e8d22ff9e45eef4c80638ab978daae9b4681c59286", "archive": "raw", "extract": "", "bundlePath": "Contents/Helpers/sops", "exec": ["Contents/Helpers/sops"], "exposeByDefault": false, "entitlements": "none", "status": "bundled", "kind": "helper" }, - { "name": "gh", "version": "2.102.0", "license": "MIT", - "url": "https://github.com/cli/cli/releases/download/v2.102.0/gh_2.102.0_macOS_arm64.zip", - "sha256": "da922c20d1792e5b2cbf375593d7a658acf034c12c84e007e71c76ef959c337e", - "archive": "zip", "extract": "gh_2.102.0_macOS_arm64/bin/gh", "bundlePath": "Contents/Helpers/gh", "exec": ["Contents/Helpers/gh"], + { "name": "gh", "version": "2.103.0", "license": "MIT", + "url": "https://github.com/cli/cli/releases/download/v2.103.0/gh_2.103.0_macOS_arm64.zip", + "sha256": "54be566e9f614bea5de8021e95b9ad33dfee3b9d2ea120c9c294c00defaa5014", + "archive": "zip", "extract": "gh_2.103.0_macOS_arm64/bin/gh", "bundlePath": "Contents/Helpers/gh", "exec": ["Contents/Helpers/gh"], "exposeByDefault": false, "entitlements": "none", "status": "bundled", "kind": "helper" }, - { "name": "glab", "version": "1.123.0", "license": "MIT", - "url": "https://gitlab.com/api/v4/projects/gitlab-org%2Fcli/packages/generic/glab/1.123.0/glab_1.123.0_darwin_arm64.tar.gz", - "sha256": "bf776ea47d3b30410267adab9c870990be274e85f6dccccee4289f5ecf1386df", + { "name": "glab", "version": "1.124.0", "license": "MIT", + "url": "https://gitlab.com/api/v4/projects/gitlab-org%2Fcli/packages/generic/glab/1.124.0/glab_1.124.0_darwin_arm64.tar.gz", + "sha256": "04aad4d989d98cb030318e09359f02e0ba2637ede682ec0dee1f5974dedd44c1", "archive": "tar.gz", "extract": "bin/glab", "bundlePath": "Contents/Helpers/glab", "exec": ["Contents/Helpers/glab"], "exposeByDefault": false, "entitlements": "none", "status": "bundled", "kind": "helper" }, - { "name": "bun", "version": "1.4.3", "license": "MIT", - "url": "https://github.com/oven-sh/bun/releases/download/bun-v1.4.3/bun-darwin-aarch64.zip", - "sha256": "80afd4c069b46a6fa8f3ec520bebc750a7843e4a8d5b9583d29ad436c00a3403", + { "name": "bun", "version": "1.4.4", "license": "MIT", + "url": "https://github.com/oven-sh/bun/releases/download/bun-v1.4.4/bun-darwin-aarch64.zip", + "sha256": "c240d7f0ccb90c263a849fcdb09b7ee62630d921348ed6aafda86b9d577bc510", "archive": "zip", "extract": "bun-darwin-aarch64/bun", "bundlePath": "Contents/Helpers/bun", "exec": ["Contents/Helpers/bun"], "exposeByDefault": false, "entitlements": "jit", "status": "bundled", "kind": "helper" }, - { "name": "node", "version": "24.22.0", "license": "MIT", - "url": "https://nodejs.org/dist/v24.22.0/node-v24.22.0-darwin-arm64.tar.gz", - "sha256": "6a9724d9b50a5f22b4816cded441b5a8d9ddae546191a5e5b7efa5a5e2ee26d5", - "archive": "tar.gz", "extract": "node-v24.22.0-darwin-arm64", "bundlePath": "Contents/Helpers/node", "exec": ["Contents/Helpers/node/bin/node"], + { "name": "node", "version": "24.22.1", "license": "MIT", + "url": "https://nodejs.org/dist/v24.22.1/node-v24.22.1-darwin-arm64.tar.gz", + "sha256": "89c682593d76cd44233fa53b1563264e7de9cbb189cad169135c5b4fadfbc0a7", + "archive": "tar.gz", "extract": "node-v24.22.1-darwin-arm64", "bundlePath": "Contents/Helpers/node", "exec": ["Contents/Helpers/node/bin/node"], "exposeByDefault": false, "entitlements": "jit", "status": "bundled", "kind": "helper" }, { "name": "fast-browser", "version": "0.1.16", "license": "MIT", "url": "https://registry.npmjs.org/@mattstack/fast-browser/-/fast-browser-0.1.16.tgz", @@ -80,9 +80,9 @@ "archive": "raw", "extract": "", "bundlePath": "Contents/Helpers/boxscore", "exec": ["Contents/Helpers/boxscore"], "exposeByDefault": false, "entitlements": "jit", "status": "bundled", "kind": "helper", "serve": { "port": 11005, "args": [] } }, - { "name": "cloudflared", "version": "2026.10.1", "license": "Apache-2.0", - "url": "https://github.com/cloudflare/cloudflared/releases/download/2026.10.1/cloudflared-darwin-arm64.tgz", - "sha256": "647615df99d49cd179ea5e13ef760b9bbfb33630f6ae62f87e33dfadda60adcc", + { "name": "cloudflared", "version": "2026.10.3", "license": "Apache-2.0", + "url": "https://github.com/cloudflare/cloudflared/releases/download/2026.10.3/cloudflared-darwin-arm64.tgz", + "sha256": "1165d14b6f6360a3b8c283d7d1100024d6ec7cd9bc9e32519e96150645f3ec55", "archive": "tar.gz", "extract": "cloudflared", "bundlePath": "Contents/Helpers/cloudflared", "exec": ["Contents/Helpers/cloudflared"], "exposeByDefault": false, "entitlements": "none", "status": "bundled", "kind": "helper" }, @@ -91,9 +91,9 @@ "sha256": "055831648de4cb346382ed1e6950cce9632a6a48cb1a2f4aeb3a28a80eebdd43", "archive": "raw", "extract": "", "bundlePath": "Contents/Helpers/logdy", "exec": ["Contents/Helpers/logdy"], "exposeByDefault": false, "entitlements": "none", "status": "bundled", "kind": "helper" }, - { "name": "portless", "version": "0.15.8", "license": "MIT", - "url": "https://registry.npmjs.org/portless/-/portless-0.15.8.tgz", - "sha256": "c165f8577d1d9e57b04a93f2200432ad0a1343a032027a5f38e608a092c0f443", + { "name": "portless", "version": "0.15.9", "license": "MIT", + "url": "https://registry.npmjs.org/portless/-/portless-0.15.9.tgz", + "sha256": "13e7113dd87f4d49bcd26660df302c8653ad129f9315fe1e48f099c07a0a4b8c", "archive": "npm", "extract": "package", "bundlePath": "Contents/Helpers/portless-dist", "exec": ["Contents/Helpers/node/bin/node", "Contents/Helpers/portless-dist/dist/cli.js"], "exposeByDefault": false, "entitlements": "none", "status": "bundled", "kind": "helper" }, { "name": "sparkle", "version": "2.10.0", "license": "MIT", From f763c227fd8f70edf091d1b5828e6c4ed0eda87b Mon Sep 17 00:00:00 2001 From: Matthew Goodwin Date: Thu, 22 Oct 2026 14:24:58 -0500 Subject: [PATCH 2/2] deps.lock: fast-browser 0.1.18; catalog: fast-browser at c4eb6ff25aa2 sha256 taken from the npm tarball, whose sha1 matches npm's dist.shasum. Co-Authored-By: Claude Opus 5.5 --- marketplace/marketplace.json | 2 +- rt-tray/deps.lock | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/marketplace/marketplace.json b/marketplace/marketplace.json index d275f8063c..26a35d78d7 100644 --- a/marketplace/marketplace.json +++ b/marketplace/marketplace.json @@ -15,7 +15,7 @@ "source": "url", "url": "https://github.com/m4ttstack/fast-browser.git", "ref": "main", - "sha": "8ef404f993df572221e1097ddec48ac42d20ea07" + "sha": "c4eb6ff25aa2fc8d0f6eb2bd3ddb17291a1db895" }, "description": "macOS and Chrome alpha browser automation for Claude Code and Codex" }, diff --git a/rt-tray/deps.lock b/rt-tray/deps.lock index 9b1804c806..b0ebeb7af0 100644 --- a/rt-tray/deps.lock +++ b/rt-tray/deps.lock @@ -52,9 +52,9 @@ "sha256": "89c682593d76cd44233fa53b1563264e7de9cbb189cad169135c5b4fadfbc0a7", "archive": "tar.gz", "extract": "node-v24.22.1-darwin-arm64", "bundlePath": "Contents/Helpers/node", "exec": ["Contents/Helpers/node/bin/node"], "exposeByDefault": false, "entitlements": "jit", "status": "bundled", "kind": "helper" }, - { "name": "fast-browser", "version": "0.1.16", "license": "MIT", - "url": "https://registry.npmjs.org/@mattstack/fast-browser/-/fast-browser-0.1.16.tgz", - "sha256": "39a9474fce8d5d7841f98cff3dca595ccd1d90453c6474f3dc55054d65afac1f", + { "name": "fast-browser", "version": "0.1.18", "license": "MIT", + "url": "https://registry.npmjs.org/@mattstack/fast-browser/-/fast-browser-0.1.18.tgz", + "sha256": "ebb23f60ae37e928e42788e1ab88b1609328da611e6b6aa097e03ee661a4babc", "archive": "npm", "extract": "package", "bundlePath": "Contents/Helpers/fast-browser", "exec": ["Contents/Helpers/node/bin/node", "Contents/Helpers/fast-browser/bin/fast-browser.mjs"], "exposeByDefault": true, "entitlements": "none", "status": "bundled", "kind": "helper" },