fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #873 · block/buzz-app

renovate · 2026-10-12T01:00:34Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
@biomejs/biome (source)	`2.5.14` → `2.6.5`	devDependencies	minor	`2.6.6`
@deepseek-ai/cordis (source)	`4.0.2` → `4.1.0`	dependencies	minor
@earendil-works/chord (source)	`1.4.0` → `1.5.0`	dependencies	minor
@earendil-works/pi-ai (source)	`1.4.0` → `1.5.0`	dependencies	minor
@earendil-works/pi-durable (source)	`1.4.0` → `1.5.0`	dependencies	minor
@hypothesi/tauri-mcp-server (source)	`0.13.1` → `0.13.2`	devDependencies	patch
@modelcontextprotocol/server (source)	`2.3.1` → `2.4.0`	dependencies	minor
@noble/curves (source)	`2.0.1` → `2.4.0`	dependencies	minor
@pydantic/genai-prices	`0.1.13` → `0.2.1`	dependencies	minor
@tabler/icons (source)	`3.46.0` → `3.50.0`	dependencies	minor
@tabler/icons-react (source)	`3.46.0` → `3.50.0`	dependencies	minor
@types/node (source)	`24.13.6` → `24.19.2`	devDependencies	minor
@vitejs/plugin-react (source)	`6.1.1` → `6.2.1`	devDependencies	minor
Swatinem/rust-cache	`v2.9.2` → `v2.9.3`	action	patch
actions/create-github-app-token	`v3.2.0` → `v3.3.0`	action	minor
actions/download-artifact	`v8.0.1` → `v8.0.2`	action	patch
actions/upload-artifact	`v7.0.1` → `v7.0.2`	action	patch
arboard	`3.6.1` → `3.7.0`	dependencies	minor
base64	`0.22` → `0.23`	dependencies	minor
bech32	`0.11` → `0.12`	dependencies	minor
cargo-deny	`0.19.9` → `0.20.2`		minor
cmake	`4.3.1` → `4.4.5`		minor
d3-scale (source)	`4.0.2` → `4.0.3`	dependencies	patch
dockview-react (source)	`8.3.1` → `8.8.3`	dependencies	minor
flexlayout-react	`0.11.0` → `0.11.1`	dependencies	patch
getrandom	`0.3` → `0.4`	dependencies	minor
hmac	`0.12` → `0.13`	dependencies	minor
hyper (source)	`1.11.1` → `1.12.0`	dependencies	minor
hyper-util (source)	`0.1.20` → `0.1.21`	dependencies	patch
jsdom	`30.1.0` → `30.1.3`	devDependencies	patch
just	`1.58.0` → `1.59.0`		minor
libc	`0.2.189` → `0.2.191`	dependencies	patch
mdast-util-from-markdown	`2.0.3` → `2.1.0`	dependencies	minor
mdast-util-gfm-strikethrough	`2.0.0` → `2.0.1`	dependencies	patch
mdast-util-gfm-table	`2.0.0` → `2.0.1`	dependencies	patch
mdast-util-to-markdown	`2.1.2` → `2.2.2`	dependencies	minor	`2.2.3`
micromark-extension-gfm-table	`2.1.1` → `2.1.2`	dependencies	patch
motion	`12.40.0` → `12.43.0`	dependencies	minor
node	`24.18.0` → `24.22.2`		minor
nostr (source)	`=0.45.5` → `=0.45.7`	dependencies	patch
nostr (source)	`0.44` → `0.45`	dependencies	minor
nostr-pairing (source)	`0.44` → `0.45`	dependencies	minor
nostr-tools	`2.25.2` → `2.25.5`	dependencies	patch	`2.26.0`
objc2	`=0.6.4` → `=0.6.5`	dependencies	patch
pele (source)	`1.6.0` → `1.13.0`	dependencies	minor
pnpm	`11.8.0` → `11.28.8`		minor
pnpm/action-setup	`v4.3.0` → `v4.4.0`	action	minor
postcss (source)	`8.5.28` → `8.5.32`	devDependencies	patch
proptest (source)	`1.11.0` → `1.12.0`	dev-dependencies	minor
prosemirror-commands	`1.7.1` → `1.7.2`	dependencies	patch
prosemirror-history	`1.5.0` → `1.5.1`	dependencies	patch
prosemirror-model	`1.25.8` → `1.25.12`	dependencies	patch
prosemirror-schema-list	`1.5.1` → `1.6.0`	dependencies	minor
prosemirror-view	`1.42.3` → `1.42.9`	dependencies	patch
rand (source)	`0.10.2` → `0.10.3`	dependencies	patch
react-day-picker (source)	`10.0.1` → `10.0.2`	dependencies	patch
react-diff-view	`3.3.2` → `3.3.3`	dependencies	patch
reqwest	`0.13.4` → `0.13.5`	dependencies	patch
rfd	`0.16` → `0.17`	dependencies	minor	`0.18.0`
rolldown (source)	`1.2.7` → `1.3.0`	devDependencies	minor
rusqlite	`0.40` → `0.41`	dependencies	minor
rust (source, changelog)	`1.98.1` → `1.99.1`	toolchain	minor
rust-ini	`=0.21.1` → `=0.21.3`	dependencies	patch
rustls-native-certs	`0.8.4` → `0.8.5`	dependencies	patch
rustup	`1.29.2` → `1.29.3`		patch
secp256k1	`0.31` → `0.33`	dev-dependencies	minor
secp256k1	`0.31` → `0.33`	dependencies	minor
serde_json	`1.0.151` → `1.0.154`	dependencies	patch
serde_json	`1.0.151` → `1.0.154`	build-dependencies	patch
tauri-plugin-deep-link	`2.6.2` → `2.6.3`	dependencies	patch
tauri-plugin-dialog	`2.8.3` → `2.8.4`	dependencies	patch
tauri-plugin-single-instance	`2.5.4` → `2.5.5`	dependencies	patch
thiserror	`2.0.20` → `2.0.21`	dependencies	patch
tokio (source)	`1.53.3` → `1.54.1`	dev-dependencies	minor
tokio (source)	`1.53.3` → `1.54.1`	dependencies	minor
tokio-rustls	`0.26.5` → `0.26.6`	dev-dependencies	patch
tokio-tungstenite	`0.29` → `0.30`	dependencies	minor
tokio-util (source)	`0.7.19` → `0.7.20`	dependencies	patch
undici (source)	`7.29.1` → `7.30.2`	devDependencies	minor
uuid	`1.26.0` → `1.29.0`	dependencies	minor	`1.29.1`
vite (source)	`8.3.0` → `8.3.6`	devDependencies	patch
webpki-roots	`1.0.10` → `1.0.11`	dependencies	patch
windows-core	`=0.62.2` → `=0.100.0`	dependencies	minor
wry	`=0.57.0` → `=0.57.1`	dependencies	patch
ws	`8.18.3` → `8.22.1`	devDependencies	minor
zeroize	`1.9.0` → `1.9.1`	dependencies	patch

Release Notes

biomejs/biome (@biomejs/biome)

`v2.6.5`

Compare Source

Patch Changes

#12755 bbc4887 Thanks @dyc3! - Added the new nursery rule noArrayForEach, which reports forEach() calls that can be written as for...of loops. Values known not to be arrays, such as a Map or a Set, are ignored.
```
array.forEach((element) => {
	bar(element);
});
```
#12777 ba692e4 Thanks @dyc3! - Added the new nursery rule noAwaitInPromiseMethods, which reports await inside the array passed to Promise.all(), Promise.allSettled(), Promise.any(), or Promise.race(). The await pauses the code before the method is called, so the promises no longer run at the same time.
```
Promise.all([await promise, anotherPromise]);
```
#12765 af84fb4 Thanks @dyc3! - Added the new nursery rule noChainedComparison, which reports comparisons chained like a < b < c or a === b === c. JavaScript compares a with b first, and then compares the resulting true or false with c, so 3 > 2 > 1 is false.
```
if (a < b < c) {}
```
#12547 0a2073d Thanks @dyc3! - Added the nursery rule noDynamicDelete, which disallows using delete with a property name that is computed at runtime. Fixed property names written as string or number literals are allowed.
```
delete container[name];
```
#12481 ed7adc2 Thanks @dyc3! - Added the nursery rule noLateEventControl, which reports calls to preventDefault(), stopPropagation(), and stopImmediatePropagation() that run after the browser has finished handling the event, where they have no effect.
```
element.addEventListener("click", async (event) => {
  await save();
  event.preventDefault();
});
```
#12795 179666d Thanks @dyc3! - Added the nursery rule noMapSpread, which disallows spreading objects or arrays in the values returned by map() and flatMap() callbacks. Each spread copies a whole object or array for every item, which is slow for large arrays. Its unsafe fix replaces an object that starts with a spread with Object.assign().
```
const users = getUsers();
const rows = users.map((user) => ({ ...user, role: getRole(user) }));
```
#12793 d9a99fd Thanks @dyc3! - Added the nursery rule noMismatchedMapKey, which reports get() and set() calls that use a different key than the has() check before them. Checking one key and then using another is usually a copy-paste mistake.
```
if (map.has(key)) {
  map.get(otherKey); // reported
}
```
#12342 1db7c0d Thanks @vibbix! - Added the nursery rule noMissingScssInterpolation, which disallows Sass variables and function calls in custom property values without #{} interpolation. Sass copies these values into the CSS unchanged, so the browser receives $gap or math.div(8px, 2) instead of their results. Its unsafe fix wraps variables in #{}.
```
:root {
  --gap: $gap;
  --half: math.div(8px, 2);
}
```
#12792 de86b37 Thanks @dyc3! - Added the nursery rule noMissingThrow, which reports errors that are created with new but never thrown. Its unsafe fix adds the missing throw keyword.
```
function check(value) {
  if (!value) {
    new Error("Missing value");
  }
}
```
#12790 c23e4c3 Thanks @dyc3! - Added the new nursery rule noObjectLiteralComparison, which reports comparisons with an empty object {} or an empty array []. These comparisons never check whether a value is empty, because objects and arrays are compared by reference.
```
if (value === {}) {}
```
#12450 793f07d Thanks @dyc3! - Added the new nursery rule noPlaywrightUnsafeReferences, which reports functions passed to page.evaluate() or page.addInitScript() that use variables declared outside of them. Playwright runs these functions in the browser page, where those variables don't exist.
```
const x = 7;
await page.evaluate(() => x * 2); // reported: `x` must be passed as an argument
```
#12388 a0160a4 Thanks @vibbix! - Added the nursery rule noPseudoElementInFunctionalPseudoClass, which disallows pseudo-elements inside :is(), :where(), :not() and :has(). Browsers drop these selectors, so the styles never apply to the pseudo-element.
```
.card:is(::before, ::after) {
  content: "";
}
```
#12779 bc1befb Thanks @dyc3! - Added the new nursery rule noSinglePromiseInPromiseMethods, which reports an array with a single element passed to Promise.all(), Promise.any(), or Promise.race(). The rule offers a fix that awaits the value directly or uses Promise.resolve().
```
const result = await Promise.all([promise]);
```
#12241 d96de1d Thanks @dyc3! - Added the nursery rule noSvelteBindValueOnCheckableInputs, which reports bind:value on checkbox and radio inputs in Svelte files. Users change whether these inputs are checked, not their value, so bind:value does not track their choice.
```
<input type="checkbox" bind:value={accepted} />
```
#12764 e166d08 Thanks @dyc3! - Added the new nursery rule noSyncMethods, which reports calls to functions whose names end with Sync, such as fs.readFileSync(). These calls block the program until they finish. The allowAtRootLevel option allows them outside of functions, and the ignore option allows specific function names.
```
const contents = fs.readFileSync("data.txt");
```
#12515 c0a4174 Thanks @dyc3! - Added the nursery rule noTanstackQueryVoidQueryFn, which disallows TanStack Query functions that don't return any data. TanStack Query doesn't accept undefined as the data of a query, so the query fails with an error.
```
import { useQuery } from "@tanstack/react-query";

useQuery({
    queryKey: ["todos"],
    queryFn: async () => {
        await fetch("/api/todos");
    },
});
```
The rule belongs to the tanstackQuery and types domains.
#12482 1e6e407 Thanks @dyc3! - Added the nursery rule noUnnecessaryStringTrim, which reports trim() calls before startsWith() or endsWith() when only one side of the string matters. Use trimStart() or trimEnd() instead.
```
value.trim().startsWith("-");
```
#12772 a108773 Thanks @dyc3! - Added the nursery rule noUselessAwait, which reports await on values that are never promises, such as literals, arrays, and the results of comparisons.
```
await [fetchUser(), fetchPosts()];
```
#12783 d0931b0 Thanks @dyc3! - Added the new nursery rule noUselessLengthCheck, which reports array length checks that don't change the result: a check that the array is empty next to every(), a check that it isn't empty next to some(), or a check that it isn't empty around a for...of loop over the same array.
```
if (array.length > 0 && array.some(Boolean)) {}
```
#12488 93e0e73 Thanks @dyc3! - Added the new nursery rule noUselessTypeAssertion, which reports type assertions that don't change the type of an expression, such as a non-null assertion on a value that can't be null or undefined.
```
function double(value: number): number {
  return value! * 2;
}
```
#12632 0e197b4 Thanks @dyc3! - Added the nursery rule noVueChildContent, which disallows content inside elements that use v-html or v-text. These directives replace the content of their element, so Vue discards anything written there.
```
<template>
  <div v-html="html">Loading...</div>
</template>
```
#12616 cb7b888 Thanks @dyc3! - Added the new nursery rule noVueDeprecatedConfigKeyCodes, which reports uses of Vue.config.keyCodes. Vue 3 removed this option, so custom key names defined with it no longer work.
```
Vue.config.keyCodes = { f1: 112 };
```
#12568 59f3a42 Thanks @dyc3! - Added the nursery rule noVueDeprecatedDestroyedLifecycle, which reports the beforeDestroy and destroyed lifecycle hooks in Vue components. Vue 3 renamed them to beforeUnmount and unmounted, and no longer calls hooks with the old names.
```
<script>
export default {
  destroyed() {},
};
</script>
```
#12654 bcb1e0f Thanks @dyc3! - Added the nursery rule noVueDeprecatedEventsApi, which reports calls to the $on, $off, and $once instance methods in Vue components. Vue 3 removed these methods, so calling them throws an error.
```
<script>
export default {
  mounted() {
    this.$on("start", handler); // reported
  },
};
</script>
```
#12590 b9872ef Thanks @dyc3! - Added the nursery rule noVueDeprecatedFunctionalTemplate, which reports the functional attribute on the <template> of a Vue component. Vue 3 no longer supports this attribute.
```
<template functional>
  <div>{{ props.message }}</div>
</template>
```
#12552 b71b705 Thanks @dyc3! - Added the nursery rule noVueDeprecatedHtmlElementIs, which disallows the is attribute on HTML elements in Vue templates. Vue 3 no longer renders a component in place of these elements, unless the value starts with vue:.
```
<template>
  <tr is="my-row"></tr>
</template>
```
#12553 4a613e1 Thanks @dyc3! - Added the nursery rule noVueDeprecatedInlineTemplate, which disallows the inline-template attribute on Vue components. Vue 3 removed this feature, so the content between the component's tags is no longer used as its template.
```
<template>
  <my-component inline-template>
    <div>{{ message }}</div>
  </my-component>
</template>
```
#12617 0e9ca5b Thanks @dyc3! - Added the nursery rule noVueDeprecatedModelDefinition, which reports the model option in Vue components. Vue 3 ignores this option, so v-model on t

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-11-02T02:08:26Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

    Updating crates.io index
    Updating git repository `https://github.com/Mesh-LLM/mesh-llm.git`
    Updating git repository `https://github.com/block/buzz.git`
    Updating git repository `https://github.com/hypothesi/mcp-server-tauri`
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: from: cargo-deny-0.19.9 cmake-4.3.1 just-1.58.0 node-24.18.0 pnpm-11.8.0 rustup-1.29.2, to: cargo-deny-0.20.2 cmake-4.4.5 just-1.59.0 node-24.22.2 pnpm-11.28.8 rustup-1.29.3

Bootstrapping /home/ubuntu/.cache/hermit/pkg/hermit@stable/hermit from https://github.com/cashapp/hermit/releases/download/stable
Creating /home/ubuntu/.cache/hermit/pkg/hermit@stable
Downloading https://github.com/cashapp/hermit/releases/download/stable/hermit-linux-amd64.gz to /home/ubuntu/.cache/hermit/pkg/hermit@stable/hermit
Hermit installed as /home/ubuntu/.cache/hermit/pkg/hermit@stable/hermit
Hermit is installed as /home/ubuntu/bin/hermit

See https://cashapp.github.io/hermit/usage/get-started/ for more information.

fatal:hermit: node-24.22.2: env:///bin/packages/node.hcl: no version node-24.22.2 found in versions (node-24.18.0) or channels (node@24, node@24.18, node@latest), try "hermit update": unknown package

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

renovate Bot requested a review from a team as a code owner October 12, 2026 01:00

renovate Bot force-pushed the renovate/all-minor-patch branch 28 times, most recently from 8263abd to d0b8a73 Compare October 13, 2026 00:49

renovate Bot changed the title ~~fix(deps): update all non-major dependencies~~ Update all non-major dependencies Oct 13, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 9921d05 to d9b2aaf Compare October 13, 2026 17:25

renovate Bot changed the title ~~Update all non-major dependencies~~ fix(deps): update all non-major dependencies Oct 13, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 20 times, most recently from 15357d5 to 7fa0baa Compare October 13, 2026 20:56

lukeilijevski mentioned this pull request Nov 7, 2026

feat(usage): show today's agent spend beside Send #2985

Open

fix(deps): update all non-major dependencies

8690891

Navigation Menu

Repository navigation

fix(deps): update all non-major dependencies - #873

fix(deps): update all non-major dependencies#873
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Oct 12, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Nov 2, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Oct 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.6.5

Patch Changes

Configuration

Uh oh!

renovate Bot commented Nov 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: from: cargo-deny-0.19.9 cmake-4.3.1 just-1.58.0 node-24.18.0 pnpm-11.8.0 rustup-1.29.2, to: cargo-deny-0.20.2 cmake-4.4.5 just-1.59.0 node-24.22.2 pnpm-11.28.8 rustup-1.29.3

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Oct 12, 2026 •

edited

Loading

`v2.6.5`

renovate Bot commented Nov 2, 2026 •

edited

Loading