Pull request #120 · stacks/ts-auth

[!NOTE] This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@stacksjs/bunpress (source)	`^0.2.11` → `^0.2.31`	devDependencies	patch
actions/cache	`v5.0.4` → `v5.1.0`	action	minor
actions/checkout	`v6.0.2` → `v6.1.0`	action	minor
better-dx	`^0.2.15` → `^0.2.38`	devDependencies	patch
bunfig	`^0.15.13` → `^0.15.21`	dependencies	patch
home-lang/pantry	`v0.9.18` → `v0.11.164`	action	minor
stacksjs/action-releaser	`v1.2.9` → `v1.2.11`	action	patch
ts-rate-limiter	`^0.4.1` → `^0.4.10`	dependencies	patch

Release Notes

stacksjs/bunpress (@stacksjs/bunpress)

actions/cache

`v5.1.0`

Compare Source

What's Changed

Bump @actions/cache to v5.1.0 - handle read-only cache access by @jasongin in #1775

Full Changelog: https://github.com/actions/cache/compare/v5...v5.1.0

`v5.0.5`

Compare Source

What's Changed

Update ts-http-runtime dependency by @yacaovsnc in #1747

Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.5

actions/checkout

`v6.1.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in #2500
backport fixes to releases-v6 by @aiqiaoy in #2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: https://github.com/actions/checkout/compare/v6.0.3...v6.1.0

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

stacksjs/better-dx (better-dx)

`v0.2.38`

Compare Source

`v0.2.37`

Compare Source

`v0.2.36`

Compare Source

`v0.2.35`

Compare Source

`v0.2.34`

Compare Source

`v0.2.33`

Compare Source

`v0.2.32`

Compare Source

`v0.2.31`

Compare Source

`v0.2.30`

Compare Source

`v0.2.29`

Compare Source

`v0.2.28`

Compare Source

`v0.2.27`

Compare Source

`v0.2.26`

Compare Source

`v0.2.25`

Compare Source

`v0.2.24`

Compare Source

`v0.2.23`

Compare Source

`v0.2.22`

Compare Source

`v0.2.21`

Compare Source

`v0.2.20`

Compare Source

`v0.2.19`

Compare Source

`v0.2.18`

Compare Source

`v0.2.17`

Compare Source

`v0.2.16`

Compare Source

stacksjs/bunfig (bunfig)

`v0.15.21`

Compare Source

`v0.15.20`

Compare Source

`v0.15.19`

Compare Source

`v0.15.18`

Compare Source

`v0.15.17`

Compare Source

`v0.15.16`

Compare Source

`v0.15.15`

Compare Source

`v0.15.14`

Compare Source

home-lang/pantry

`v0.11.164`

Compare Source

Compare changes

🐛 Bug Fixes

accept identical exact system pins in frozen installs (6bbbe9f) (by Chris Breuer <chrisbreuer93@>gmail.com>)

✅ Tests

isolate shell routing from the parent project environment (2f13d34) (by Chris Breuer <chrisbreuer93@>gmail.com>)

🔧 Chores

release v0.11.164 (4675128) (by Chris Breuer <chrisbreuer93@>gmail.com>)

Contributors

Chris Breuer <chrisbreuer93@>gmail.com>

`v0.11.163`

Compare Source

Compare changes

✅ Tests

git: confine shim fixtures to their managed registry (70de4cc) (by Chris chris@stacksjs.com) (#276)

🔧 Chores

release v0.11.163 (89f87a7) (by Chris chris@stacksjs.com)

Contributors

Chris chris@stacksjs.com

`v0.11.162`

Compare Source

`v0.11.161`

Compare Source

Compare changes

✨ Features

ts-pantry: TestFlight distribution and the next build number (6072e7a) (by Chris Breuer <chrisbreuer93@>gmail.com>)

🔧 Chores

release v0.11.161 (e34cdb0) (by Chris Breuer <chrisbreuer93@>gmail.com>)

Contributors

Chris Breuer <chrisbreuer93@>gmail.com>

`v0.11.160`

Compare Source

Compare changes

✨ Features

webkitgtk: add the GTK3 WebKit provider craft's Linux binary needs (#272) (4bc3581) (by Glenn Michael Torregosa gtorregosa@gmail.com) (#266, #272)

🐛 Bug Fixes

ci: bot commits land through a checked pull request, not a bypass (#274) (f750d63) (by Glenn Michael Torregosa gtorregosa@gmail.com) (#266, #274)
runtime: normalize copied native helper dependencies (b50b1ea) (by Chris chris@stacksjs.com) (#273)
discovery: a package's own bin programs outrank its nested npm copies (#271) (454f826) (by Glenn Michael Torregosa gtorregosa@gmail.com) (#269, #271)
install: materializing a tree over its own symlinks is repeatable (#264) (39fe503) (by Glenn Michael Torregosa gtorregosa@gmail.com) (#250, #264)

✅ Tests

runtime: record native helper execution identities (ecf736a) (by Chris chris@stacksjs.com) (#273)

🔧 Chores

release v0.11.160 (a88748f) (by Chris chris@stacksjs.com)

Contributors

Chris chris@stacksjs.com
Glenn Michael Torregosa gtorregosa@gmail.com

`v0.11.159`

Compare Source

Compare changes

🐛 Bug Fixes

install: refresh owned commands across package revisions (37de5c9) (by Chris chris@stacksjs.com) (#268)
discovery: find executable nested package commands (31f8448) (by Chris chris@stacksjs.com) (#269)
install: a lock pin decides what installs while it satisfies its spec (#263) (5621d07) (by Glenn Michael Torregosa gtorregosa@gmail.com) (#260, #263, stacksjs/stacks#2905, #253)
registry: resolve build versions from the package catalog (54c533c) (by Chris chris@stacksjs.com) (#267)

🔧 Chores

release v0.11.159 (31320d0) (by Chris chris@stacksjs.com)
preserve upstream package catalog updates (e70b49d) (by Chris chris@stacksjs.com)
update craft to 0.0.424 (4a12ac1) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
integrate reviewed registry and activation fixes (0668d17) (by Chris chris@stacksjs.com) (#267, #268, #269)

Contributors

Chris chris@stacksjs.com
Glenn Michael Torregosa gtorregosa@gmail.com

`v0.11.158`

Compare Source

Compare changes

🐛 Bug Fixes

craft: publish signing repair as immutable 0.0.423.1 (9028f58) (by Chris chris@stacksjs.com) (#265)
runtime: preserve valid Mach-O signatures (241fd7b) (by Chris chris@stacksjs.com) (#265)

🔧 Chores

release v0.11.158 (5204a33) (by Chris chris@stacksjs.com)
update craft to 0.0.423 (71a3389) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update apko, Codex, zotregistry (e1829ab) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris chris@stacksjs.com

`v0.11.157`

Compare Source

Compare changes

🐛 Bug Fixes

install: name each failed package and why, and retry transient failures once (12873b2) (by Chris Breuer <chrisbreuer93@>gmail.com>)

🔧 Chores

release v0.11.157 (1cf4f08) (by Chris Breuer <chrisbreuer93@>gmail.com>)
update craft to 0.0.420 (7bb5183) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update cython, depot, vspipe (2af4f61) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer <chrisbreuer93@>gmail.com>

`v0.11.156`

Compare Source

Compare changes

🐛 Bug Fixes

lockfile: write pantry.lock in sorted order, escaped, and only when it changed (db633c1) (by Chris Breuer <chrisbreuer93@>gmail.com>)

🔧 Chores

release v0.11.156 (25ce55f) (by Chris Breuer <chrisbreuer93@>gmail.com>)

Contributors

Chris Breuer <chrisbreuer93@>gmail.com>

`v0.11.155`

Compare Source

Compare changes

🐛 Bug Fixes

env: a cached environment is valid while its directory exists (a3d4d81) (by Chris Breuer <chrisbreuer93@>gmail.com>)

🔧 Chores

release v0.11.155 (8ae25e2) (by Chris Breuer <chrisbreuer93@>gmail.com>)
update craft to 0.0.418 (e18179e) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update CLIProxyAPI, vim (8bdb048) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer <chrisbreuer93@>gmail.com>

`v0.11.154`

Compare Source

Compare changes

✨ Features

env: print the environment as JSON, for another directory (807242f) (by Chris Breuer <chrisbreuer93@>gmail.com>)

🔧 Chores

release v0.11.154 (be33334) (by Chris Breuer <chrisbreuer93@>gmail.com>)
update carapace, chezmoi, CLIProxyAPI, LLaMA.cpp, macvim, Stats, steampipe, vim, wails, zig (6249a38) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update CLIProxyAPI, LLaMA.cpp (496192a) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.417 (fcc3a74) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update Codex, LLaMA.cpp, rio (dd1eece) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.416 (e570ce1) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.415 (b40f7c8) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.414 (7570989) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update LLaMA.cpp, vim (ba3c0f8) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.413 (0ad4e7d) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update littlecms, vale, xray-core (422c621) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.411 (a970b2b) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update libwebsockets, LLaMA.cpp, mise (33fa622) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer <chrisbreuer93@>gmail.com>

`v0.11.153`

Compare Source

Compare changes

✨ Features

cli: add pantry deprecate and warn on deprecated installs (eb38b5a) (by Chris Breuer chris@stacksjs.com)
registry: let owners deprecate packages (379344b) (by Chris Breuer chris@stacksjs.com)

📝 Documentation

document package deprecation (fd02709) (by Chris Breuer chris@stacksjs.com)

🔧 Chores

release v0.11.153 (3c22611) (by Chris Breuer chris@stacksjs.com)
update craft to 0.0.409 (4883480) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.408 (d605a9f) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update claude-code, LLaMA.cpp, LM Studio, mailpit, mole, tox, uriparse, zrok (d903d2f) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer chris@stacksjs.com

`v0.11.152`

Compare Source

Compare changes

✨ Features

native: accept a Craft AppKit bundle as a native macOS app (18cd098) (by Chris Breuer <chrisbreuer93@>gmail.com>)

🔧 Chores

release v0.11.152 (1f351e9) (by Chris Breuer <chrisbreuer93@>gmail.com>)
update aux4, coder, exr, jbang, libarchive, LLaMA.cpp, opencode.ai, projen, sqlfluff, stripe, vcluster (f2d193a) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer <chrisbreuer93@>gmail.com>

`v0.11.151`

Compare Source

Compare changes

💄 Styles

zig fmt registry.zig (dd42430) (by Chris Breuer chris@stacksjs.com)

🔧 Chores

release v0.11.151 (cc483f9) (by Chris Breuer chris@stacksjs.com)
update aux4, CLIProxyAPI, composer, digger, grpc, LLaMA.cpp, mz, opencode.ai, pnp, vim, virtualenv, WhatsApp, zookeeper (32e6be5) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer chris@stacksjs.com

`v0.11.150`

Compare Source

`v0.11.149`

Compare Source

`v0.11.148`

Compare Source

Compare changes

✨ Features

install: print the registry's purchase message on a 402 (2d7ae00) (by Chris Breuer chris@stacksjs.com)
registry: sell private packages through a storefront (58acbff) (by Chris Breuer chris@stacksjs.com)
publish: explain restricted publish rejections and show visibility (b59b67b) (by Chris Breuer chris@stacksjs.com)
cli: add pantry access for private package grants and tokens (62be50c) (by Chris Breuer chris@stacksjs.com)
install: pin package scopes to a Pantry registry (ff85ca7) (by Chris Breuer chris@stacksjs.com)
registry: private packages with access grants and package-scoped tokens (e626d44) (by Chris Breuer chris@stacksjs.com)

📝 Documentation

registry: selling private packages, and how they differ from public paid ones (de607c9) (by Chris Breuer chris@stacksjs.com)
document private scopes and pantry access (7d738a0) (by Chris Breuer chris@stacksjs.com)
tell a private registry from a private package (27a0712) (by Chris Breuer chris@stacksjs.com)
list private packages in the sidebar (3ee7c55) (by Chris Breuer chris@stacksjs.com)
registry: document private packages, grants and package tokens (8f32bab) (by Chris Breuer chris@stacksjs.com)

✅ Tests

registry: qualify Zig packages against a real native consumer (#261) (7c50055) (by Glenn Michael Torregosa gtorregosa@gmail.com) (#261, #248)

🔧 Chores

release v0.11.148 (4bfe4cf) (by Chris Breuer chris@stacksjs.com)
update craft to 0.0.396 (0178564) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update apko, circleci, LLaMA.cpp, mise, opencode.ai, perf, traefik, zig (10f2c59) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.395 (d081be8) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update casdoor, claude-code, craft, dozzle, LLaMA.cpp, oc, pdm, swift (6309a6b) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer chris@stacksjs.com
Glenn Michael Torregosa gtorregosa@gmail.com

`v0.11.147`

Compare Source

Compare changes

🐛 Bug Fixes

registry: prepare native Zig hashing before accepting uploads (9c199b5) (by Chris Breuer chris@stacksjs.com)

🔧 Chores

release v0.11.147 (4c3530c) (by Chris Breuer chris@stacksjs.com)
update craft to 0.0.393 (bc23583) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer chris@stacksjs.com

`v0.11.146`

Compare Source

Compare changes

🐛 Bug Fixes

install: honor file locks and serialize native publication (f98fa9a) (by Chris Breuer chris@stacksjs.com)
publish: an accepted npm upload no longer fails on a slow readback (#259) (9235e9d) (by Glenn Michael Torregosa gtorregosa@gmail.com) (#245, #259)
services: launch postgres from a script, and find libs where they are (#258) (5374300) (by Glenn Michael Torregosa gtorregosa@gmail.com) (#258, #243)
installer: resolve versions against live sources when one is unreachable (#255) (d55859b) (by Glenn Michael Torregosa gtorregosa@gmail.com) (#242, #255)
install: keep .env-inferred services out of pantry.lock (#254) (f036cca) (by Glenn Michael Torregosa gtorregosa@gmail.com) (#253, #254)

🔧 Chores

release v0.11.146 (4b9f9f8) (by Chris Breuer chris@stacksjs.com)
update craft to 0.0.390 (c0252de) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update chrome-for-testing, exr, LLaMA.cpp, LM Studio, macfuse.github, mole, Slack, vcluster, zarf (19d3dec) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update codex, Codex, depot, Dia, flutter, fly, huggingface/cli, jupyter, lavinmq, LLaMA.cpp, mongosh, moon, nomad, oc, opa, opencode.ai, streamlink, terratag (ab5a11b) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update bw, code-server, composer, Insomnia, LibreOffice, LLaMA.cpp, LM Studio, maturin, mise, projen, rubocop, squawk, terratag, xray-core (ec00d70) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.387 (5188f8a) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.385 (e5ab9be) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update certbot, groonga, LLaMA.cpp, mupdf, mz, ollama, opencode.ai (1f65ed9) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer chris@stacksjs.com
Glenn Michael Torregosa gtorregosa@gmail.com

`v0.11.145`

Compare Source

Compare changes

🐛 Bug Fixes

action: handle process exit during Linux identity reads (5ab2072) (by Chris Breuer chris@stacksjs.com)

🔧 Chores

release v0.11.145 (4780152) (by Chris Breuer chris@stacksjs.com)
update craft to 0.0.384 (5b47b07) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update biome, CLIProxyAPI, coder, LLaMA.cpp, mise (f358c5a) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.382 (b394238) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.380 (cd707ca) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update circleci, fly, LLaMA.cpp, node, nomad, pulumi, terraform (9bb3489) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update bitcoin, CLIProxyAPI, cnquery, hurl, LLaMA.cpp, projen, Sourcery, upx, Zed (fafe35b) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft, doctl, hatch, LLaMA.cpp, odigos, tinygo, tox, virtualenv (9176adb) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer chris@stacksjs.com

`v0.11.144`

Compare Source

Compare changes

🐛 Bug Fixes

qualify published catalog search declarations (a346d90) (by Chris Breuer chris@stacksjs.com)

🔧 Chores

release v0.11.144 (430e428) (by Chris Breuer chris@stacksjs.com)

Contributors

Chris Breuer chris@stacksjs.com

`v0.11.143`

Compare Source

`v0.11.142`

Compare Source

Compare changes

✨ Features

refresh Launchpad catalog branding and install guidance (8b65d88) (by Chris Breuer chris@stacksjs.com)
infer desktop install scope from the package catalog (358d410) (by Chris Breuer chris@stacksjs.com)

🔧 Chores

release v0.11.142 (85b9288) (by Chris Breuer chris@stacksjs.com)
update ansible, claude-code, cmake, codex, flit, LLaMA.cpp, qsv (3bb5051) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer chris@stacksjs.com

`v0.11.141`

Compare Source

Compare changes

✨ Features

expose typed desktop install job receipts (1c9899c) (by Chris Breuer chris@stacksjs.com)

🔧 Chores

release v0.11.141 (56f24c7) (by Chris Breuer chris@stacksjs.com)
update babashka, CLIProxyAPI, Codex, Cursor, Element, Ghostty, htslib, hugo, LLaMA.cpp, mise, mole, pnp, solr, vim, WhatsApp, zig (2b3b2ea) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.369 (2e57a2f) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update appium, buddy, cnquery, LLaMA.cpp, opencode.ai, tox, vim, virtualenv (b6763c2) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update craft to 0.0.368 (df3bffe) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer chris@stacksjs.com

`v0.11.140`

Compare Source

Compare changes

🐛 Bug Fixes

validate native application package layouts (d665e8e) (by Chris Breuer chris@stacksjs.com)

🔧 Chores

release v0.11.140 (76016dd) (by Chris Breuer chris@stacksjs.com)
update craft to 0.0.366 (17478ac) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer chris@stacksjs.com

`v0.11.139`

Compare Source

Compare changes

✨ Features

publish notarized native apps through scoped registry grants (cfca798) (by Chris Breuer chris@stacksjs.com)

🔧 Chores

release v0.11.139 (6fd45bf) (by Chris Breuer chris@stacksjs.com)
update craft to 0.0.365 (08a63f7) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)
update coder, hasura, LLaMA.cpp, pdm, pnp, zig (9a225b2) (by github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>)

Contributors

Chris Breuer chris@stacksjs.com

`v0.11.138`

Compare Source

Compare changes

🐛 Bug Fixes

catalog: allow browsing the complete package library (496c926) (by Chris Breuer chris@stacksjs.com)
desktop: verify service restart readiness and platform activation coverage (25a623e) (by Chris Breuer chris@stacksjs.com)

🔧 Chores

release v0.11.138 (7967f40) (by Chris Breuer chris@stacksjs.com)

Contributors

Chris Breuer chris@stacksjs.com

`v0.11.137`

Compare Source

`v0.11.136`

Compare Source

`v0.11.135`

[Compare Source](https://redirect.github.com/home-lang/pant

[!IMPORTANT] ✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.