Skip to content

fix: update vulnerable npm dependencies - #2064

Merged
ya7010 merged 1 commit into
mainfrom
fix/update-vulnerable-npm-dependencies
Aug 6, 2026
Merged

fix: update vulnerable npm dependencies#2064
ya7010 merged 1 commit into
mainfrom
fix/update-vulnerable-npm-dependencies

Conversation

@ya7010

@ya7010 ya7010 commented Aug 6, 2026

Copy link
Copy Markdown
Collaborator

Summary

Validation

  • OSV Scanner v2.3.8: no issues found
  • cargo fmt --all --check
  • pnpm install --frozen-lockfile
  • BASE_URL=/tombi pnpm -C docs build
  • pnpm -C docs typecheck
  • pnpm -C docs lint:check
  • pnpm -C editors/vscode build
  • pnpm -C editors/vscode format:check
  • pnpm -C editors/vscode lint:check
  • pnpm -C editors/vscode typecheck
  • pnpm -C editors/vscode test
  • git diff --check

@ya7010 ya7010 added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 6, 2026
@ya7010
ya7010 merged commit c8f0983 into main Aug 6, 2026
24 checks passed
@ya7010
ya7010 deleted the fix/update-vulnerable-npm-dependencies branch August 6, 2026 14:06
@BrewTestBot BrewTestBot mentioned this pull request Aug 9, 2026
Merged
@ghappforreleaseplease ghappforreleaseplease Bot mentioned this pull request Aug 12, 2026
Merged
jylenhof pushed a commit to jylenhof/mise-en-place-tips that referenced this pull request Aug 12, 2026
@ghappforreleaseplease @github-actions
chore(mise): upgrade tombi (#33)
be51ec0 
Automated mise tool upgrades from local config.

Updated tools:
- `tombi`

Command: `mise upgrade --bump --local tombi`

<details>
<summary>Version changelog (tombi)</summary>

| Tool | Requested | Installed |
|------|-----------|-----------|
| `tombi` | `1.2.5` → `1.2.10` | `1.2.5` → `1.2.10` |

</details>

<details>
<summary>Release notes (1 tools)</summary>

<details>
<summary>tombi: `1.2.5` → `1.2.10` (tombi-toml/tombi)</summary>

### v1.2.6

<!-- Release notes generated using configuration in .github/release.yml at v1.2.6 -->

## What's Changed
### 🦅 New Features
* feat(docs): synchronize code tab selections by @​ya7010 in tombi-toml/tombi#2053
### 🐝 Bug Fixes
* fix(docs): preserve interactions across navigation by @​ya7010 in tombi-toml/tombi#2051
* fix(docs): restore typecheck by @​ya7010 in tombi-toml/tombi#2052
### 🛠️ Other Changes
* feat(lsp): add multi-line string completion suggestions by @​ya7010 in tombi-toml/tombi#2055

**Full Changelog**: tombi-toml/tombi@v1.2.5...v1.2.6

### v1.2.7

<!-- Release notes generated using configuration in .github/release.yml at v1.2.7 -->

## What's Changed
### 🦅 New Features
* feat(config): support per-schema strict mode by @​ya7010 in tombi-toml/tombi#2061
### 🛠️ Other Changes
* fix: improve config file load error reporting by @​ya7010 in tombi-toml/tombi#2062

**Full Changelog**: tombi-toml/tombi@v1.2.6...v1.2.7

### v1.2.8

<!-- Release notes generated using configuration in .github/release.yml at v1.2.8 -->

## What's Changed
### 🐝 Bug Fixes
* fix(cargo): resolve completion paths from file URIs by @​ya7010 in tombi-toml/tombi#2069
### 📦 Dependencies
* fix: update vulnerable npm dependencies by @​ya7010 in tombi-toml/tombi#2064
### 🛠️ Other Changes
* docs: add schemas[*].strict to the configuration index by @​ya7010 in tombi-toml/tombi#2063

**Full Changelog**: tombi-toml/tombi@v1.2.7...v1.2.8

### v1.2.9

<!-- Release notes generated using configuration in .github/release.yml at v1.2.9 -->

## What's Changed
### 🦅 New Features
* feat(validator): select best union diagnostics by @​ya7010 in tombi-toml/tombi#2073
### 🐝 Bug Fixes
* fix(schema): preserve constraints across type projections by @​ya7010 in tombi-toml/tombi#2072
### 🛠️ Other Changes
* docs: explain TOML version overrides by @​ya7010 in tombi-toml/tombi#2071

**Full Changelog**: tombi-toml/tombi@v1.2.8...v1.2.9

### v1.2.10

<!-- Release notes generated using configuration in .github/release.yml at v1.2.10 -->

## What's Changed
### 📦 Dependencies
* fix(deps): update js-yaml to 4.3.1 by @​ya7010 in tombi-toml/tombi#2074

**Full Changelog**: tombi-toml/tombi@v1.2.9...v1.2.10

</details>

</details>

Modified files:
- `.mise.toml`

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@ghappforreleaseplease ghappforreleaseplease Bot mentioned this pull request Aug 14, 2026
Merged
jylenhof added a commit to jylenhof/mise-en-place-resources that referenced this pull request Aug 14, 2026
@ghappforreleaseplease @github-actions @jylenhof
chore(mise): upgrade local tools (#34)
cfb3d7d 
* chore(mise): upgrade local tools

Automated mise tool upgrades from local config.

Updated tools:
- `action-validator`
- `actionlint`
- `editorconfig-checker`
- `ghalint`
- `lychee`
- `pinact`
- `pipx:gh-action-pulse`
- `prek`
- `rumdl`
- `shellcheck`
- `shfmt`
- `tombi`
- `uv`
- `yamlfmt`
- `yamllint`
- `zizmor`

Command: `mise upgrade --bump --local action-validator actionlint editorconfig-checker ghalint lychee pinact pipx:gh-action-pulse prek rumdl shellcheck shfmt tombi uv yamlfmt yamllint zizmor`

<details>
<summary>Version changelog (3 tools)</summary>

| Tool | Requested | Installed |
|------|-----------|-----------|
| `prek` | `0.4.12` → `0.4.13` | `0.4.12` → `0.4.13` |
| `rumdl` | `0.2.52` → `0.2.55` | `0.2.52` → `0.2.55` |
| `tombi` | `1.2.7` → `1.3.5` | `1.2.7` → `1.3.5` |

</details>

<details>
<summary>Release notes (3 tools)</summary>

<details>
<summary>prek: `0.4.12` → `0.4.13` (j178/prek)</summary>

### v0.4.13

## Release Notes

Released on 2026-08-10.

### Highlights

#### Manage hook tools with mise

The new `language: mise` support lets hooks install tools using
[`mise`](https://mise.jdx.dev/) in an isolated environment:

```yaml
repos:
  - repo: local
    hooks:
      - id: golangci-lint
        name: golangci-lint
        language: mise
        additional_dependencies: ["aqua:golangci/golangci-lint@2"]
        entry: golangci-lint run --fast-only ./...
        pass_filenames: false
```

#### Run commands in hook environments

The new `prek exec` subcommand can run an explicit command in a configured
hook's prepared environment. For example, the hook above makes its managed
binary available to this command:

```console
$ prek exec golangci-lint -- golangci-lint --version
```

### Enhancements

- Add `mise` language support ([#2540](j178/prek#2540))
- Add `deny-filename-pattern` and `require-filename-pattern` hooks ([#2488](j178/prek#2488))
- Add `prek exec` for running commands in a hook environment ([#2478](j178/prek#2478))
- Add `yaml-language-server:` comment to YAML sample config ([#2486](j178/prek#2486))
- Make `prek cache size` output terminal-aware ([#2508](j178/prek#2508))
- Match file regexes against path bytes ([#2541](j178/prek#2541))
- Show hook aliases in run output ([#2497](j178/prek#2497))
- Show hook descriptions in run output ([#2490](j178/prek#2490))

### Performance

- Avoid env cache scans for skipped hooks ([#2502](j178/prek#2502))
- Cache Node version queries ([#2500](j178/prek#2500))

### Bug fixes

- Fix Node hook installation with npm 11 ([#2487](j178/prek#2487))
- Isolate dependency installs from inherited Git repository state ([#2506](https://github.com/j178/prek/pull/25… (truncated)

</details>
<details>
<summary>rumdl: `0.2.52` → `0.2.55` (rvben/rumdl)</summary>

### v0.2.53

### Fixed

- **tables**: find a table's extent in the document's flavor ([ad139af](rvben/rumdl@ad139af))
- **tables**: quoted brackets and a blank target are not a wikilink ([a8aed70](rvben/rumdl@a8aed70))
- **lsp**: a rescan keeps an open buffer only where a file still is ([8e16303](rvben/rumdl@8e16303))
- **lsp**: keep an open document indexed from its buffer ([ea30cca](rvben/rumdl@ea30cca))
- **lsp**: index what an editor is showing when the workspace is rescanned ([0d8eacc](rvben/rumdl@0d8eacc))
- **lsp**: stop an evicted file from being put back by a waiting disk read ([5644516](rvben/rumdl@5644516))
- **md075**: ignore Obsidian wikilink aliases in prose after tables ([dda35d5](rvben/rumdl@dda35d5))
- **md084**: stop deleting line endings as invisible characters ([e6ca26e](rvben/rumdl@e6ca26e))
- **rules**: report a multi-line link's range on the line it ends on ([2e1fde5](rvben/rumdl@2e1fde5))
- **config**: break "did you mean" ties by name instead of by key order ([23fafd9](rvben/rumdl@23fafd9))
- **lsp**: keep a pending edit when a file is only evicted from the index ([1e34c47](rvben/rumdl@1e34c47))
- **lsp**: drop a pending edit when its file is deleted ([f718eca](rvben/rumdl@f718eca))
- **md038**: include the closing backtick in the reported range (… (truncated)

### v0.2.54

### Added

- **action**: add a command input to run rumdl fmt ([9b59bff](rvben/rumdl@9b59bff))
- **action**: add install-only input to skip linting ([aa0c604](rvben/rumdl@aa0c604))
- **MD010**: add ignore-code-languages to exempt fence languages from tab checks ([21b56d0](rvben/rumdl@21b56d0))

### Fixed

- **config**: honor the markdown attribute on every block-level element ([6f88d71](rvben/rumdl@6f88d71))
- **links**: stop parsing reference links and images inside HTML blocks ([8829f6b](rvben/rumdl@8829f6b))
- **html-blocks**: keep a nested raw-text element from opening its own block ([27d96bb](rvben/rumdl@27d96bb))
- **code-block-tools**: stop a linter in a format slot from overwriting the block ([a40d7da](rvben/rumdl@a40d7da))
- **code-block-tools**: report findings at the line they belong to ([31cc6cb](rvben/rumdl@31cc6cb))
- **code-block-tools**: bound a hanging tool by its timeout and stop respawning it ([6ce8a1d](rvben/rumdl@6ce8a1d))
- **action**: add rumdl to PATH so later workflow steps can call it ([98baf60](rvben/rumdl@98baf60))

## Downloads

| File | Platform | Checksum |
|------|----------|----------|
| [rumdl-v0.2.54-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.54/rumdl-v0.2.54-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.54/rumdl-v0.2.54-x86_64-… (truncated)

### v0.2.55

### Fixed

- **lsp**: honor per-directory config across workspace features ([2c7670f](rvben/rumdl@2c7670f))
- **core**: align path-aware document processing across adapters ([7285b7a](rvben/rumdl@7285b7a))

### Performance

- **lsp**: construct workspace index rules directly ([864e42a](rvben/rumdl@864e42a))

## Downloads

| File | Platform | Checksum |
|------|----------|----------|
| [rumdl-v0.2.55-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-unknown-linux-gnu.tar.gz.sha256) |
| [rumdl-v0.2.55-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-unknown-linux-musl.tar.gz.sha256) |
| [rumdl-v0.2.55-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-aarch64-unknown-linux-gnu.tar.gz.sha256) |
| [rumdl-v0.2.55-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-aarch64-unknown-linux-musl.tar.gz) | Linux ARM64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-aarch64-unknown-linux-musl.tar.gz.sha256) |
| [rumdl-v0.2.55-x86_64-apple-darwin.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-apple-darwin.tar.gz) | macOS x86_64 | [checksum](https://github.com/rvben/rumdl/releases/downloa… (truncated)

</details>
<details>
<summary>tombi: `1.2.7` → `1.3.5` (tombi-toml/tombi)</summary>

### v1.2.8

<!-- Release notes generated using configuration in .github/release.yml at v1.2.8 -->

## What's Changed
### 🐝 Bug Fixes
* fix(cargo): resolve completion paths from file URIs by @​ya7010 in tombi-toml/tombi#2069
### 📦 Dependencies
* fix: update vulnerable npm dependencies by @​ya7010 in tombi-toml/tombi#2064
### 🛠️ Other Changes
* docs: add schemas[*].strict to the configuration index by @​ya7010 in tombi-toml/tombi#2063

**Full Changelog**: tombi-toml/tombi@v1.2.7...v1.2.8

### v1.2.9

<!-- Release notes generated using configuration in .github/release.yml at v1.2.9 -->

## What's Changed
### 🦅 New Features
* feat(validator): select best union diagnostics by @​ya7010 in tombi-toml/tombi#2073
### 🐝 Bug Fixes
* fix(schema): preserve constraints across type projections by @​ya7010 in tombi-toml/tombi#2072
### 🛠️ Other Changes
* docs: explain TOML version overrides by @​ya7010 in tombi-toml/tombi#2071

**Full Changelog**: tombi-toml/tombi@v1.2.8...v1.2.9

### v1.2.10

<!-- Release notes generated using configuration in .github/release.yml at v1.2.10 -->

## What's Changed
### 📦 Dependencies
* fix(deps): update js-yaml to 4.3.1 by @​ya7010 in tombi-toml/tombi#2074

**Full Changelog**: tombi-toml/tombi@v1.2.9...v1.2.10

### v1.3.2

<!-- Release notes generated using configuration in .github/release.yml at v1.3.2 -->

## What's Changed
### 🚨 Breaking Changes
* feat(formatter): change the default `line-width` to unlimited by @​ya7010 in tombi-toml/tombi#2104
### 🦅 New Features
* ci: cancel superseded workflow runs by @​ya7010 in tombi-toml/tombi#2103
### 🛠️ Other Changes
* fix(ci): repair WASM and npm release workflows by @​ya7010 in tombi-toml/tombi#2101
* feat(wasm): export format and lint error types by @​ya7010 in tombi-toml/tombi#2105
* docs(wasm): add error type hints to examples by @​ya7010 in tombi-toml/tombi#2106

**Full Changelog**: tombi-toml/tombi@v1.3.1...v1.3.2

### v1.3.3

<!-- Release notes generated using configuration in .github/release.yml at v1.3.3 -->

## What's Changed
### 🚨 Breaking Changes
* feat(wasm): return structured format and lint results by @​ya7010 in tombi-toml/tombi#2107
### 🦅 New Features
* feat(formatter): add comment-style rule by @​ya7010 in tombi-toml/tombi#2108

**Full Changelog**: tombi-toml/tombi@v1.3.2...v1.3.3

### v1.3.4

<!-- Release notes generated using configuration in .github/release.yml at v1.3.4 -->

## What's Changed
### 🚨 Breaking Changes
* fix(wasm): reject with standard errors by @​ya7010 in tombi-toml/tombi#2109
### 🐝 Bug Fixes
* fix(npm): include WASM build output in published packages by @​ya7010 in tombi-toml/tombi#2110
### 🛠️ Other Changes
* docs(wasm): respect format diagnostic severity by @​ya7010 in tombi-toml/tombi#2111

**Full Changelog**: tombi-toml/tombi@v1.3.3...v1.3.4

### v1.3.5

<!-- Release notes generated using configuration in .github/release.yml at v1.3.5 -->

## What's Changed
### 🐝 Bug Fixes
* fix(cli): stop LSP after exit notification by @​ya7010 in tombi-toml/tombi#2112
* fix(docs): hide playground until ready by @​ya7010 in tombi-toml/tombi#2113
* fix(npm): identify WASM package repositories by @​ya7010 in tombi-toml/tombi#2114

**Full Changelog**: tombi-toml/tombi@v1.3.4...v1.3.5

</details>

</details>

Modified files:
- `.mise.toml`

* chore: add trailing magic comma to conserve format

Signed-off-by: jylenhof <jygithub@lenhof.eu.org>

---------

Signed-off-by: jylenhof <jygithub@lenhof.eu.org>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: jylenhof <jygithub@lenhof.eu.org>
@ghappforreleaseplease ghappforreleaseplease Bot mentioned this pull request Aug 14, 2026
Merged
jylenhof pushed a commit to jylenhof/gh-action-pulse that referenced this pull request Aug 14, 2026
@github-actions @jylenhof
chore(mise): upgrade tombi
8fece17 
Automated mise tool upgrades from local config.

mise-managed tools:
- `tombi`

Command: `mise upgrade --bump --local tombi`

<details>
<summary>Version changelog (tombi)</summary>

| Tool | Requested | Installed |
|------|-----------|-----------|
| `tombi` | `1.2.7` → `1.3.5` | `1.2.7` → `1.3.5` |

</details>

<details>
<summary>Release notes (1 tools)</summary>

<details>
<summary>tombi: `1.2.7` → `1.3.5` (tombi-toml/tombi)</summary>

### v1.2.8

<!-- Release notes generated using configuration in .github/release.yml at v1.2.8 -->

## What's Changed
### 🐝 Bug Fixes
* fix(cargo): resolve completion paths from file URIs by @​ya7010 in tombi-toml/tombi#2069
### 📦 Dependencies
* fix: update vulnerable npm dependencies by @​ya7010 in tombi-toml/tombi#2064
### 🛠️ Other Changes
* docs: add schemas[*].strict to the configuration index by @​ya7010 in tombi-toml/tombi#2063

**Full Changelog**: tombi-toml/tombi@v1.2.7...v1.2.8

### v1.2.9

<!-- Release notes generated using configuration in .github/release.yml at v1.2.9 -->

## What's Changed
### 🦅 New Features
* feat(validator): select best union diagnostics by @​ya7010 in tombi-toml/tombi#2073
### 🐝 Bug Fixes
* fix(schema): preserve constraints across type projections by @​ya7010 in tombi-toml/tombi#2072
### 🛠️ Other Changes
* docs: explain TOML version overrides by @​ya7010 in tombi-toml/tombi#2071

**Full Changelog**: tombi-toml/tombi@v1.2.8...v1.2.9

### v1.2.10

<!-- Release notes generated using configuration in .github/release.yml at v1.2.10 -->

## What's Changed
### 📦 Dependencies
* fix(deps): update js-yaml to 4.3.1 by @​ya7010 in tombi-toml/tombi#2074

**Full Changelog**: tombi-toml/tombi@v1.2.9...v1.2.10

### v1.3.2

<!-- Release notes generated using configuration in .github/release.yml at v1.3.2 -->

## What's Changed
### 🚨 Breaking Changes
* feat(formatter): change the default `line-width` to unlimited by @​ya7010 in tombi-toml/tombi#2104
### 🦅 New Features
* ci: cancel superseded workflow runs by @​ya7010 in tombi-toml/tombi#2103
### 🛠️ Other Changes
* fix(ci): repair WASM and npm release workflows by @​ya7010 in tombi-toml/tombi#2101
* feat(wasm): export format and lint error types by @​ya7010 in tombi-toml/tombi#2105
* docs(wasm): add error type hints to examples by @​ya7010 in tombi-toml/tombi#2106

**Full Changelog**: tombi-toml/tombi@v1.3.1...v1.3.2

### v1.3.3

<!-- Release notes generated using configuration in .github/release.yml at v1.3.3 -->

## What's Changed
### 🚨 Breaking Changes
* feat(wasm): return structured format and lint results by @​ya7010 in tombi-toml/tombi#2107
### 🦅 New Features
* feat(formatter): add comment-style rule by @​ya7010 in tombi-toml/tombi#2108

**Full Changelog**: tombi-toml/tombi@v1.3.2...v1.3.3

### v1.3.4

<!-- Release notes generated using configuration in .github/release.yml at v1.3.4 -->

## What's Changed
### 🚨 Breaking Changes
* fix(wasm): reject with standard errors by @​ya7010 in tombi-toml/tombi#2109
### 🐝 Bug Fixes
* fix(npm): include WASM build output in published packages by @​ya7010 in tombi-toml/tombi#2110
### 🛠️ Other Changes
* docs(wasm): respect format diagnostic severity by @​ya7010 in tombi-toml/tombi#2111

**Full Changelog**: tombi-toml/tombi@v1.3.3...v1.3.4

### v1.3.5

<!-- Release notes generated using configuration in .github/release.yml at v1.3.5 -->

## What's Changed
### 🐝 Bug Fixes
* fix(cli): stop LSP after exit notification by @​ya7010 in tombi-toml/tombi#2112
* fix(docs): hide playground until ready by @​ya7010 in tombi-toml/tombi#2113
* fix(npm): identify WASM package repositories by @​ya7010 in tombi-toml/tombi#2114

**Full Changelog**: tombi-toml/tombi@v1.3.4...v1.3.5

</details>

</details>

Modified files:
- `.mise.toml`
jylenhof added a commit to jylenhof/gh-action-pulse that referenced this pull request Aug 14, 2026
@ghappforreleaseplease @github-actions @jylenhof
chore(mise): upgrade tombi (#150)
8185288 
* chore(mise): upgrade tombi

Automated mise tool upgrades from local config.

mise-managed tools:
- `tombi`

Command: `mise upgrade --bump --local tombi`

<details>
<summary>Version changelog (tombi)</summary>

| Tool | Requested | Installed |
|------|-----------|-----------|
| `tombi` | `1.2.7` → `1.3.5` | `1.2.7` → `1.3.5` |

</details>

<details>
<summary>Release notes (1 tools)</summary>

<details>
<summary>tombi: `1.2.7` → `1.3.5` (tombi-toml/tombi)</summary>

### v1.2.8

<!-- Release notes generated using configuration in .github/release.yml at v1.2.8 -->

## What's Changed
### 🐝 Bug Fixes
* fix(cargo): resolve completion paths from file URIs by @​ya7010 in tombi-toml/tombi#2069
### 📦 Dependencies
* fix: update vulnerable npm dependencies by @​ya7010 in tombi-toml/tombi#2064
### 🛠️ Other Changes
* docs: add schemas[*].strict to the configuration index by @​ya7010 in tombi-toml/tombi#2063

**Full Changelog**: tombi-toml/tombi@v1.2.7...v1.2.8

### v1.2.9

<!-- Release notes generated using configuration in .github/release.yml at v1.2.9 -->

## What's Changed
### 🦅 New Features
* feat(validator): select best union diagnostics by @​ya7010 in tombi-toml/tombi#2073
### 🐝 Bug Fixes
* fix(schema): preserve constraints across type projections by @​ya7010 in tombi-toml/tombi#2072
### 🛠️ Other Changes
* docs: explain TOML version overrides by @​ya7010 in tombi-toml/tombi#2071

**Full Changelog**: tombi-toml/tombi@v1.2.8...v1.2.9

### v1.2.10

<!-- Release notes generated using configuration in .github/release.yml at v1.2.10 -->

## What's Changed
### 📦 Dependencies
* fix(deps): update js-yaml to 4.3.1 by @​ya7010 in tombi-toml/tombi#2074

**Full Changelog**: tombi-toml/tombi@v1.2.9...v1.2.10

### v1.3.2

<!-- Release notes generated using configuration in .github/release.yml at v1.3.2 -->

## What's Changed
### 🚨 Breaking Changes
* feat(formatter): change the default `line-width` to unlimited by @​ya7010 in tombi-toml/tombi#2104
### 🦅 New Features
* ci: cancel superseded workflow runs by @​ya7010 in tombi-toml/tombi#2103
### 🛠️ Other Changes
* fix(ci): repair WASM and npm release workflows by @​ya7010 in tombi-toml/tombi#2101
* feat(wasm): export format and lint error types by @​ya7010 in tombi-toml/tombi#2105
* docs(wasm): add error type hints to examples by @​ya7010 in tombi-toml/tombi#2106

**Full Changelog**: tombi-toml/tombi@v1.3.1...v1.3.2

### v1.3.3

<!-- Release notes generated using configuration in .github/release.yml at v1.3.3 -->

## What's Changed
### 🚨 Breaking Changes
* feat(wasm): return structured format and lint results by @​ya7010 in tombi-toml/tombi#2107
### 🦅 New Features
* feat(formatter): add comment-style rule by @​ya7010 in tombi-toml/tombi#2108

**Full Changelog**: tombi-toml/tombi@v1.3.2...v1.3.3

### v1.3.4

<!-- Release notes generated using configuration in .github/release.yml at v1.3.4 -->

## What's Changed
### 🚨 Breaking Changes
* fix(wasm): reject with standard errors by @​ya7010 in tombi-toml/tombi#2109
### 🐝 Bug Fixes
* fix(npm): include WASM build output in published packages by @​ya7010 in tombi-toml/tombi#2110
### 🛠️ Other Changes
* docs(wasm): respect format diagnostic severity by @​ya7010 in tombi-toml/tombi#2111

**Full Changelog**: tombi-toml/tombi@v1.3.3...v1.3.4

### v1.3.5

<!-- Release notes generated using configuration in .github/release.yml at v1.3.5 -->

## What's Changed
### 🐝 Bug Fixes
* fix(cli): stop LSP after exit notification by @​ya7010 in tombi-toml/tombi#2112
* fix(docs): hide playground until ready by @​ya7010 in tombi-toml/tombi#2113
* fix(npm): identify WASM package repositories by @​ya7010 in tombi-toml/tombi#2114

**Full Changelog**: tombi-toml/tombi@v1.3.4...v1.3.5

</details>

</details>

Modified files:
- `.mise.toml`

* chore: add magic trailing comma to enforce tombi style

Signed-off-by: jylenhof <jygithub@lenhof.eu.org>

---------

Signed-off-by: jylenhof <jygithub@lenhof.eu.org>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: jylenhof <jygithub@lenhof.eu.org>
This was referenced Aug 17, 2026
Merged
Closed
jylenhof pushed a commit to jylenhof/mise-update-tool that referenced this pull request Aug 17, 2026
@github-actions @jylenhof
chore(mise): upgrade local tools
49f526c 
Automated mise tool upgrades from local config.

mise-managed tools:
- `action-validator`
- `actionlint`
- `aube`
- `editorconfig-checker`
- `ghalint`
- `pinact`
- `pipx:gh-action-pulse`
- `prek`
- `rumdl`
- `shellcheck`
- `shfmt`
- `tombi`
- `uv`
- `yamlfmt`
- `yamllint`
- `zizmor`

Command: `mise upgrade --bump --local action-validator actionlint aube editorconfig-checker ghalint pinact pipx:gh-action-pulse prek rumdl shellcheck shfmt tombi uv yamlfmt yamllint zizmor`

<details>
<summary>Version changelog (4 tools)</summary>

| Tool | Requested | Installed |
|------|-----------|-----------|
| `prek` | `0.4.12` → `0.4.13` | `0.4.12` → `0.4.13` |
| `rumdl` | `0.2.52` → `0.2.55` | `0.2.52` → `0.2.55` |
| `tombi` | `1.2.7` → `1.4.0` | `1.2.7` → `1.4.0` |
| `uv` | `0.12.3` → `0.12.5` | `0.12.3` → `0.12.5` |

</details>

<details>
<summary>Release notes (4 tools)</summary>

<details>
<summary>prek: `0.4.12` → `0.4.13` (j178/prek)</summary>

### v0.4.13

## Release Notes

Released on 2026-08-10.

### Highlights

#### Manage hook tools with mise

The new `language: mise` support lets hooks install tools using
[`mise`](https://mise.jdx.dev/) in an isolated environment:

```yaml
repos:
  - repo: local
    hooks:
      - id: golangci-lint
        name: golangci-lint
        language: mise
        additional_dependencies: ["aqua:golangci/golangci-lint@2"]
        entry: golangci-lint run --fast-only ./...
        pass_filenames: false
```

#### Run commands in hook environments

The new `prek exec` subcommand can run an explicit command in a configured
hook's prepared environment. For example, the hook above makes its managed
binary available to this command:

```console
$ prek exec golangci-lint -- golangci-lint --version
```

### Enhancements

- Add `mise` language support ([#2540](j178/prek#2540))
- Add `deny-filename-pattern` and `require-filename-pattern` hooks ([#2488](j178/prek#2488))
- Add `prek exec` for running commands in a hook environment ([#2478](j178/prek#2478))
- Add `yaml-language-server:` comment to YAML sample config ([#2486](j178/prek#2486))
- Make `prek cache size` output terminal-aware ([#2508](j178/prek#2508))
- Match file regexes against path bytes ([#2541](j178/prek#2541))
- Show hook aliases in run output ([#2497](j178/prek#2497))
- Show hook descriptions in run output ([#2490](j178/prek#2490))

### Performance

- Avoid env cache scans for skipped hooks ([#2502](j178/prek#2502))
- Cache Node version queries ([#2500](j178/prek#2500))

### Bug fixes

- Fix Node hook installation with npm 11 ([#2487](j178/prek#2487))
- Isolate dependency installs from inherited Git repository state ([#2506](https://github.com/j178/prek/pull/25… (truncated)

</details>
<details>
<summary>rumdl: `0.2.52` → `0.2.55` (rvben/rumdl)</summary>

### v0.2.53

### Fixed

- **tables**: find a table's extent in the document's flavor ([ad139af](rvben/rumdl@ad139af))
- **tables**: quoted brackets and a blank target are not a wikilink ([a8aed70](rvben/rumdl@a8aed70))
- **lsp**: a rescan keeps an open buffer only where a file still is ([8e16303](rvben/rumdl@8e16303))
- **lsp**: keep an open document indexed from its buffer ([ea30cca](rvben/rumdl@ea30cca))
- **lsp**: index what an editor is showing when the workspace is rescanned ([0d8eacc](rvben/rumdl@0d8eacc))
- **lsp**: stop an evicted file from being put back by a waiting disk read ([5644516](rvben/rumdl@5644516))
- **md075**: ignore Obsidian wikilink aliases in prose after tables ([dda35d5](rvben/rumdl@dda35d5))
- **md084**: stop deleting line endings as invisible characters ([e6ca26e](rvben/rumdl@e6ca26e))
- **rules**: report a multi-line link's range on the line it ends on ([2e1fde5](rvben/rumdl@2e1fde5))
- **config**: break "did you mean" ties by name instead of by key order ([23fafd9](rvben/rumdl@23fafd9))
- **lsp**: keep a pending edit when a file is only evicted from the index ([1e34c47](rvben/rumdl@1e34c47))
- **lsp**: drop a pending edit when its file is deleted ([f718eca](rvben/rumdl@f718eca))
- **md038**: include the closing backtick in the reported range (… (truncated)

### v0.2.54

### Added

- **action**: add a command input to run rumdl fmt ([9b59bff](rvben/rumdl@9b59bff))
- **action**: add install-only input to skip linting ([aa0c604](rvben/rumdl@aa0c604))
- **MD010**: add ignore-code-languages to exempt fence languages from tab checks ([21b56d0](rvben/rumdl@21b56d0))

### Fixed

- **config**: honor the markdown attribute on every block-level element ([6f88d71](rvben/rumdl@6f88d71))
- **links**: stop parsing reference links and images inside HTML blocks ([8829f6b](rvben/rumdl@8829f6b))
- **html-blocks**: keep a nested raw-text element from opening its own block ([27d96bb](rvben/rumdl@27d96bb))
- **code-block-tools**: stop a linter in a format slot from overwriting the block ([a40d7da](rvben/rumdl@a40d7da))
- **code-block-tools**: report findings at the line they belong to ([31cc6cb](rvben/rumdl@31cc6cb))
- **code-block-tools**: bound a hanging tool by its timeout and stop respawning it ([6ce8a1d](rvben/rumdl@6ce8a1d))
- **action**: add rumdl to PATH so later workflow steps can call it ([98baf60](rvben/rumdl@98baf60))

## Downloads

| File | Platform | Checksum |
|------|----------|----------|
| [rumdl-v0.2.54-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.54/rumdl-v0.2.54-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.54/rumdl-v0.2.54-x86_64-… (truncated)

### v0.2.55

### Fixed

- **lsp**: honor per-directory config across workspace features ([2c7670f](rvben/rumdl@2c7670f))
- **core**: align path-aware document processing across adapters ([7285b7a](rvben/rumdl@7285b7a))

### Performance

- **lsp**: construct workspace index rules directly ([864e42a](rvben/rumdl@864e42a))

## Downloads

| File | Platform | Checksum |
|------|----------|----------|
| [rumdl-v0.2.55-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-unknown-linux-gnu.tar.gz.sha256) |
| [rumdl-v0.2.55-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-unknown-linux-musl.tar.gz.sha256) |
| [rumdl-v0.2.55-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-aarch64-unknown-linux-gnu.tar.gz.sha256) |
| [rumdl-v0.2.55-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-aarch64-unknown-linux-musl.tar.gz) | Linux ARM64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-aarch64-unknown-linux-musl.tar.gz.sha256) |
| [rumdl-v0.2.55-x86_64-apple-darwin.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-apple-darwin.tar.gz) | macOS x86_64 | [checksum](https://github.com/rvben/rumdl/releases/downloa… (truncated)

</details>
<details>
<summary>tombi: `1.2.7` → `1.4.0` (tombi-toml/tombi)</summary>

### v1.2.8

<!-- Release notes generated using configuration in .github/release.yml at v1.2.8 -->

## What's Changed
### 🐝 Bug Fixes
* fix(cargo): resolve completion paths from file URIs by @​ya7010 in tombi-toml/tombi#2069
### 📦 Dependencies
* fix: update vulnerable npm dependencies by @​ya7010 in tombi-toml/tombi#2064
### 🛠️ Other Changes
* docs: add schemas[*].strict to the configuration index by @​ya7010 in tombi-toml/tombi#2063

**Full Changelog**: tombi-toml/tombi@v1.2.7...v1.2.8

### v1.2.9

<!-- Release notes generated using configuration in .github/release.yml at v1.2.9 -->

## What's Changed
### 🦅 New Features
* feat(validator): select best union diagnostics by @​ya7010 in tombi-toml/tombi#2073
### 🐝 Bug Fixes
* fix(schema): preserve constraints across type projections by @​ya7010 in tombi-toml/tombi#2072
### 🛠️ Other Changes
* docs: explain TOML version overrides by @​ya7010 in tombi-toml/tombi#2071

**Full Changelog**: tombi-toml/tombi@v1.2.8...v1.2.9

### v1.2.10

<!-- Release notes generated using configuration in .github/release.yml at v1.2.10 -->

## What's Changed
### 📦 Dependencies
* fix(deps): update js-yaml to 4.3.1 by @​ya7010 in tombi-toml/tombi#2074

**Full Changelog**: tombi-toml/tombi@v1.2.9...v1.2.10

### v1.3.2

<!-- Release notes generated using configuration in .github/release.yml at v1.3.2 -->

## What's Changed

Unless `line-width` is specified, there is no wrap limit.
This is because allowing multi-line inline tables in TOML v1.1.0 has unnecessarily led to the creation of numerous issues.

### 🚨 Breaking Changes
* feat(formatter): change the default `line-width` to unlimited by @​ya7010 in tombi-toml/tombi#2104
### 🦅 New Features
* ci: cancel superseded workflow runs by @​ya7010 in tombi-toml/tombi#2103
### 🛠️ Other Changes
* fix(ci): repair WASM and npm release workflows by @​ya7010 in tombi-toml/tombi#2101
* feat(wasm): export format and lint error types by @​ya7010 in tombi-toml/tombi#2105
* docs(wasm): add error type hints to examples by @​ya7010 in tombi-toml/tombi#2106

**Full Changelog**: tombi-toml/tombi@v1.3.1...v1.3.2

### v1.3.3

<!-- Release notes generated using configuration in .github/release.yml at v1.3.3 -->

## What's Changed
### 🚨 Breaking Changes
* feat(wasm): return structured format and lint results by @​ya7010 in tombi-toml/tombi#2107
### 🦅 New Features
* feat(formatter): add comment-style rule by @​ya7010 in tombi-toml/tombi#2108

**Full Changelog**: tombi-toml/tombi@v1.3.2...v1.3.3

### v1.3.4

<!-- Release notes generated using configuration in .github/release.yml at v1.3.4 -->

## What's Changed
### 🚨 Breaking Changes
* fix(wasm): reject with standard errors by @​ya7010 in tombi-toml/tombi#2109
### 🐝 Bug Fixes
* fix(npm): include WASM build output in published packages by @​ya7010 in tombi-toml/tombi#2110
### 🛠️ Other Changes
* docs(wasm): respect format diagnostic severity by @​ya7010 in tombi-toml/tombi#2111

**Full Changelog**: tombi-toml/tombi@v1.3.3...v1.3.4

### v1.3.5

<!-- Release notes generated using configuration in .github/release.yml at v1.3.5 -->

## What's Changed
### 🐝 Bug Fixes
* fix(cli): stop LSP after exit notification by @​ya7010 in tombi-toml/tombi#2112
* fix(docs): hide playground until ready by @​ya7010 in tombi-toml/tombi#2113
* fix(npm): identify WASM package repositories by @​ya7010 in tombi-toml/tombi#2114

**Full Changelog**: tombi-toml/tombi@v1.3.4...v1.3.5

### v1.4.0

<!-- Release notes generated using configuration in .github/release.yml at v1.4.0 -->

## What's Changed
Starting from this version, we are introducing the WebAssembly npm package.

Please refer to the documentation for details.

https://tombi-toml.github.io/tombi/docs/wasm

### 🐝 Bug Fixes
* fix(validator): correct numeric bound comparisons by @​ya7010 in tombi-toml/tombi#2115
* fix(docs): prevent playground loading flash by @​ya7010 in tombi-toml/tombi#2118
* fix(glob): exclude VCS metadata from discovery by @​ya7010 in tombi-toml/tombi#2121
* fix(schema): validate literal branches by instance type by @​ya7010 in tombi-toml/tombi#2123
### 🛠️ Other Changes
* style(docs): refine playground sidebar toggle by @​ya7010 in tombi-toml/tombi#2117
* refactor(config): remove obsolete line width default by @​ya7010 in tombi-toml/tombi#2120
* style(toml): standardize formatting by adding trailing commas in Cargo.toml files by @​ya7010 in tombi-toml/tombi#2122
* style: normalize diagnostic and log message casing by @​ya7010 in tombi-toml/tombi#2124

**Full Changelog**: tombi-toml/tombi@v1.3.5...v1.4.0

</details>
<details>
<summary>uv: `0.12.3` → `0.12.5` (astral-sh/uv)</summary>

### 0.12.4

## Release Notes

Released on 2026-08-13.

### Enhancements

- Prefer post-quantum key exchange and enable opt-in TLS diagnostics ([#21054](astral-sh/uv#21054))
- Accept whitespace before versions in noncompliant wildcard comparisons such as `Requires-Python: >= 3.5.*` ([#21012](astral-sh/uv#21012))
- Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content ([#20944](astral-sh/uv#20944))
- Omit source-span carets from diagnostics for empty PEP 508 requirements ([#21094](astral-sh/uv#21094))

### Preview features

- Add `uv check --no-install-project` and respect `UV_NO_INSTALL_PROJECT` to install dependencies without building or installing the project ([#21085](astral-sh/uv#21085))
- Make the ty subprocess invoked by `uv check` honor uv's color and progress settings, including quiet mode ([#21086](astral-sh/uv#21086))

### Performance

- Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges ([#20804](astral-sh/uv#20804))
- Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly ([#21041](astral-sh/uv#21041))

### Bug fixes

- Use windowed `pythonw.exe` launchers for virtual environments created from managed Python minor-version links ([#19235](astral-sh/uv#19235))
- Allow `uv lock` to proceed when `.venv` is an unusable project environment ([#21068](astral-sh/uv#21068))
- Respect `fork-strategy` when ordering forks created from `environments` or existing lockfile `resolution-markers` ([#21000](astral-sh/uv#21000))
- Preserve consecutive wildcard Python minor-version exclusions such as `!=3.11.*, !=3.12.*` in `uv.lock` ([#21045](https://github.com/astral-sh/uv/pull/2… (truncated)

### 0.12.5

## Release Notes

Released on 2026-08-14.

### Python

- Add CPython 3.10.21, 3.11.16, and 3.12.14 ([#21138](astral-sh/uv#21138))
- Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters ([#21134](astral-sh/uv#21134))

### Enhancements

- Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs ([#21130](astral-sh/uv#21130))

### Preview features

- Allow `--index` and `--default-index` to select configured package indexes by name with the `index-by-name` preview feature ([#17455](astral-sh/uv#17455))
- Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default ([#21131](astral-sh/uv#21131))
- Fall back to logical file sizes when using `cache-physical-space` on filesystems that do not support physical-space accounting ([#21133](astral-sh/uv#21133))

### Bug fixes

- Resolve relative package index paths in PEP 723 scripts against the script directory ([#21097](astral-sh/uv#21097))

## Install uv 0.12.5

### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.sh | sh
```

### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.ps1 | iex"
```

## Download uv 0.12.5

|  File  | Platform | Checksum |
|--------|----------|----------|
| [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-aarch64-apple-darwin.tar.gz.sha256) |
| [uv-x86_64-apple-darwin.tar.gz](https://releases.… (truncated)

</details>

</details>

Modified files:
- `.mise.toml`
jylenhof pushed a commit to jylenhof/mise-update-tool that referenced this pull request Aug 17, 2026
@ghappforreleaseplease @github-actions
chore(mise): upgrade local tools (#42)
4889733 
Automated mise tool upgrades from local config.

mise-managed tools:
- `action-validator`
- `actionlint`
- `aube`
- `editorconfig-checker`
- `ghalint`
- `pinact`
- `pipx:gh-action-pulse`
- `prek`
- `rumdl`
- `shellcheck`
- `shfmt`
- `tombi`
- `uv`
- `yamlfmt`
- `yamllint`
- `zizmor`

Command: `mise upgrade --bump --local action-validator actionlint aube editorconfig-checker ghalint pinact pipx:gh-action-pulse prek rumdl shellcheck shfmt tombi uv yamlfmt yamllint zizmor`

<details>
<summary>Version changelog (4 tools)</summary>

| Tool | Requested | Installed |
|------|-----------|-----------|
| `prek` | `0.4.12` → `0.4.13` | `0.4.12` → `0.4.13` |
| `rumdl` | `0.2.52` → `0.2.55` | `0.2.52` → `0.2.55` |
| `tombi` | `1.2.7` → `1.4.0` | `1.2.7` → `1.4.0` |
| `uv` | `0.12.3` → `0.12.5` | `0.12.3` → `0.12.5` |

</details>

<details>
<summary>Release notes (4 tools)</summary>

<details>
<summary>prek: `0.4.12` → `0.4.13` (j178/prek)</summary>

### v0.4.13

## Release Notes

Released on 2026-08-10.

### Highlights

#### Manage hook tools with mise

The new `language: mise` support lets hooks install tools using
[`mise`](https://mise.jdx.dev/) in an isolated environment:

```yaml
repos:
  - repo: local
    hooks:
      - id: golangci-lint
        name: golangci-lint
        language: mise
        additional_dependencies: ["aqua:golangci/golangci-lint@2"]
        entry: golangci-lint run --fast-only ./...
        pass_filenames: false
```

#### Run commands in hook environments

The new `prek exec` subcommand can run an explicit command in a configured
hook's prepared environment. For example, the hook above makes its managed
binary available to this command:

```console
$ prek exec golangci-lint -- golangci-lint --version
```

### Enhancements

- Add `mise` language support ([#2540](j178/prek#2540))
- Add `deny-filename-pattern` and `require-filename-pattern` hooks ([#2488](j178/prek#2488))
- Add `prek exec` for running commands in a hook environment ([#2478](j178/prek#2478))
- Add `yaml-language-server:` comment to YAML sample config ([#2486](j178/prek#2486))
- Make `prek cache size` output terminal-aware ([#2508](j178/prek#2508))
- Match file regexes against path bytes ([#2541](j178/prek#2541))
- Show hook aliases in run output ([#2497](j178/prek#2497))
- Show hook descriptions in run output ([#2490](j178/prek#2490))

### Performance

- Avoid env cache scans for skipped hooks ([#2502](j178/prek#2502))
- Cache Node version queries ([#2500](j178/prek#2500))

### Bug fixes

- Fix Node hook installation with npm 11 ([#2487](j178/prek#2487))
- Isolate dependency installs from inherited Git repository state ([#2506](https://github.com/j178/prek/pull/25… (truncated)

</details>
<details>
<summary>rumdl: `0.2.52` → `0.2.55` (rvben/rumdl)</summary>

### v0.2.53

### Fixed

- **tables**: find a table's extent in the document's flavor ([ad139af](rvben/rumdl@ad139af))
- **tables**: quoted brackets and a blank target are not a wikilink ([a8aed70](rvben/rumdl@a8aed70))
- **lsp**: a rescan keeps an open buffer only where a file still is ([8e16303](rvben/rumdl@8e16303))
- **lsp**: keep an open document indexed from its buffer ([ea30cca](rvben/rumdl@ea30cca))
- **lsp**: index what an editor is showing when the workspace is rescanned ([0d8eacc](rvben/rumdl@0d8eacc))
- **lsp**: stop an evicted file from being put back by a waiting disk read ([5644516](rvben/rumdl@5644516))
- **md075**: ignore Obsidian wikilink aliases in prose after tables ([dda35d5](rvben/rumdl@dda35d5))
- **md084**: stop deleting line endings as invisible characters ([e6ca26e](rvben/rumdl@e6ca26e))
- **rules**: report a multi-line link's range on the line it ends on ([2e1fde5](rvben/rumdl@2e1fde5))
- **config**: break "did you mean" ties by name instead of by key order ([23fafd9](rvben/rumdl@23fafd9))
- **lsp**: keep a pending edit when a file is only evicted from the index ([1e34c47](rvben/rumdl@1e34c47))
- **lsp**: drop a pending edit when its file is deleted ([f718eca](rvben/rumdl@f718eca))
- **md038**: include the closing backtick in the reported range (… (truncated)

### v0.2.54

### Added

- **action**: add a command input to run rumdl fmt ([9b59bff](rvben/rumdl@9b59bff))
- **action**: add install-only input to skip linting ([aa0c604](rvben/rumdl@aa0c604))
- **MD010**: add ignore-code-languages to exempt fence languages from tab checks ([21b56d0](rvben/rumdl@21b56d0))

### Fixed

- **config**: honor the markdown attribute on every block-level element ([6f88d71](rvben/rumdl@6f88d71))
- **links**: stop parsing reference links and images inside HTML blocks ([8829f6b](rvben/rumdl@8829f6b))
- **html-blocks**: keep a nested raw-text element from opening its own block ([27d96bb](rvben/rumdl@27d96bb))
- **code-block-tools**: stop a linter in a format slot from overwriting the block ([a40d7da](rvben/rumdl@a40d7da))
- **code-block-tools**: report findings at the line they belong to ([31cc6cb](rvben/rumdl@31cc6cb))
- **code-block-tools**: bound a hanging tool by its timeout and stop respawning it ([6ce8a1d](rvben/rumdl@6ce8a1d))
- **action**: add rumdl to PATH so later workflow steps can call it ([98baf60](rvben/rumdl@98baf60))

## Downloads

| File | Platform | Checksum |
|------|----------|----------|
| [rumdl-v0.2.54-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.54/rumdl-v0.2.54-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.54/rumdl-v0.2.54-x86_64-… (truncated)

### v0.2.55

### Fixed

- **lsp**: honor per-directory config across workspace features ([2c7670f](rvben/rumdl@2c7670f))
- **core**: align path-aware document processing across adapters ([7285b7a](rvben/rumdl@7285b7a))

### Performance

- **lsp**: construct workspace index rules directly ([864e42a](rvben/rumdl@864e42a))

## Downloads

| File | Platform | Checksum |
|------|----------|----------|
| [rumdl-v0.2.55-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-unknown-linux-gnu.tar.gz.sha256) |
| [rumdl-v0.2.55-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-unknown-linux-musl.tar.gz.sha256) |
| [rumdl-v0.2.55-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-aarch64-unknown-linux-gnu.tar.gz.sha256) |
| [rumdl-v0.2.55-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-aarch64-unknown-linux-musl.tar.gz) | Linux ARM64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-aarch64-unknown-linux-musl.tar.gz.sha256) |
| [rumdl-v0.2.55-x86_64-apple-darwin.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.55/rumdl-v0.2.55-x86_64-apple-darwin.tar.gz) | macOS x86_64 | [checksum](https://github.com/rvben/rumdl/releases/downloa… (truncated)

</details>
<details>
<summary>tombi: `1.2.7` → `1.4.0` (tombi-toml/tombi)</summary>

### v1.2.8

<!-- Release notes generated using configuration in .github/release.yml at v1.2.8 -->

## What's Changed
### 🐝 Bug Fixes
* fix(cargo): resolve completion paths from file URIs by @​ya7010 in tombi-toml/tombi#2069
### 📦 Dependencies
* fix: update vulnerable npm dependencies by @​ya7010 in tombi-toml/tombi#2064
### 🛠️ Other Changes
* docs: add schemas[*].strict to the configuration index by @​ya7010 in tombi-toml/tombi#2063

**Full Changelog**: tombi-toml/tombi@v1.2.7...v1.2.8

### v1.2.9

<!-- Release notes generated using configuration in .github/release.yml at v1.2.9 -->

## What's Changed
### 🦅 New Features
* feat(validator): select best union diagnostics by @​ya7010 in tombi-toml/tombi#2073
### 🐝 Bug Fixes
* fix(schema): preserve constraints across type projections by @​ya7010 in tombi-toml/tombi#2072
### 🛠️ Other Changes
* docs: explain TOML version overrides by @​ya7010 in tombi-toml/tombi#2071

**Full Changelog**: tombi-toml/tombi@v1.2.8...v1.2.9

### v1.2.10

<!-- Release notes generated using configuration in .github/release.yml at v1.2.10 -->

## What's Changed
### 📦 Dependencies
* fix(deps): update js-yaml to 4.3.1 by @​ya7010 in tombi-toml/tombi#2074

**Full Changelog**: tombi-toml/tombi@v1.2.9...v1.2.10

### v1.3.2

<!-- Release notes generated using configuration in .github/release.yml at v1.3.2 -->

## What's Changed

Unless `line-width` is specified, there is no wrap limit.
This is because allowing multi-line inline tables in TOML v1.1.0 has unnecessarily led to the creation of numerous issues.

### 🚨 Breaking Changes
* feat(formatter): change the default `line-width` to unlimited by @​ya7010 in tombi-toml/tombi#2104
### 🦅 New Features
* ci: cancel superseded workflow runs by @​ya7010 in tombi-toml/tombi#2103
### 🛠️ Other Changes
* fix(ci): repair WASM and npm release workflows by @​ya7010 in tombi-toml/tombi#2101
* feat(wasm): export format and lint error types by @​ya7010 in tombi-toml/tombi#2105
* docs(wasm): add error type hints to examples by @​ya7010 in tombi-toml/tombi#2106

**Full Changelog**: tombi-toml/tombi@v1.3.1...v1.3.2

### v1.3.3

<!-- Release notes generated using configuration in .github/release.yml at v1.3.3 -->

## What's Changed
### 🚨 Breaking Changes
* feat(wasm): return structured format and lint results by @​ya7010 in tombi-toml/tombi#2107
### 🦅 New Features
* feat(formatter): add comment-style rule by @​ya7010 in tombi-toml/tombi#2108

**Full Changelog**: tombi-toml/tombi@v1.3.2...v1.3.3

### v1.3.4

<!-- Release notes generated using configuration in .github/release.yml at v1.3.4 -->

## What's Changed
### 🚨 Breaking Changes
* fix(wasm): reject with standard errors by @​ya7010 in tombi-toml/tombi#2109
### 🐝 Bug Fixes
* fix(npm): include WASM build output in published packages by @​ya7010 in tombi-toml/tombi#2110
### 🛠️ Other Changes
* docs(wasm): respect format diagnostic severity by @​ya7010 in tombi-toml/tombi#2111

**Full Changelog**: tombi-toml/tombi@v1.3.3...v1.3.4

### v1.3.5

<!-- Release notes generated using configuration in .github/release.yml at v1.3.5 -->

## What's Changed
### 🐝 Bug Fixes
* fix(cli): stop LSP after exit notification by @​ya7010 in tombi-toml/tombi#2112
* fix(docs): hide playground until ready by @​ya7010 in tombi-toml/tombi#2113
* fix(npm): identify WASM package repositories by @​ya7010 in tombi-toml/tombi#2114

**Full Changelog**: tombi-toml/tombi@v1.3.4...v1.3.5

### v1.4.0

<!-- Release notes generated using configuration in .github/release.yml at v1.4.0 -->

## What's Changed
Starting from this version, we are introducing the WebAssembly npm package.

Please refer to the documentation for details.

https://tombi-toml.github.io/tombi/docs/wasm

### 🐝 Bug Fixes
* fix(validator): correct numeric bound comparisons by @​ya7010 in tombi-toml/tombi#2115
* fix(docs): prevent playground loading flash by @​ya7010 in tombi-toml/tombi#2118
* fix(glob): exclude VCS metadata from discovery by @​ya7010 in tombi-toml/tombi#2121
* fix(schema): validate literal branches by instance type by @​ya7010 in tombi-toml/tombi#2123
### 🛠️ Other Changes
* style(docs): refine playground sidebar toggle by @​ya7010 in tombi-toml/tombi#2117
* refactor(config): remove obsolete line width default by @​ya7010 in tombi-toml/tombi#2120
* style(toml): standardize formatting by adding trailing commas in Cargo.toml files by @​ya7010 in tombi-toml/tombi#2122
* style: normalize diagnostic and log message casing by @​ya7010 in tombi-toml/tombi#2124

**Full Changelog**: tombi-toml/tombi@v1.3.5...v1.4.0

</details>
<details>
<summary>uv: `0.12.3` → `0.12.5` (astral-sh/uv)</summary>

### 0.12.4

## Release Notes

Released on 2026-08-13.

### Enhancements

- Prefer post-quantum key exchange and enable opt-in TLS diagnostics ([#21054](astral-sh/uv#21054))
- Accept whitespace before versions in noncompliant wildcard comparisons such as `Requires-Python: >= 3.5.*` ([#21012](astral-sh/uv#21012))
- Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content ([#20944](astral-sh/uv#20944))
- Omit source-span carets from diagnostics for empty PEP 508 requirements ([#21094](astral-sh/uv#21094))

### Preview features

- Add `uv check --no-install-project` and respect `UV_NO_INSTALL_PROJECT` to install dependencies without building or installing the project ([#21085](astral-sh/uv#21085))
- Make the ty subprocess invoked by `uv check` honor uv's color and progress settings, including quiet mode ([#21086](astral-sh/uv#21086))

### Performance

- Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges ([#20804](astral-sh/uv#20804))
- Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly ([#21041](astral-sh/uv#21041))

### Bug fixes

- Use windowed `pythonw.exe` launchers for virtual environments created from managed Python minor-version links ([#19235](astral-sh/uv#19235))
- Allow `uv lock` to proceed when `.venv` is an unusable project environment ([#21068](astral-sh/uv#21068))
- Respect `fork-strategy` when ordering forks created from `environments` or existing lockfile `resolution-markers` ([#21000](astral-sh/uv#21000))
- Preserve consecutive wildcard Python minor-version exclusions such as `!=3.11.*, !=3.12.*` in `uv.lock` ([#21045](https://github.com/astral-sh/uv/pull/2… (truncated)

### 0.12.5

## Release Notes

Released on 2026-08-14.

### Python

- Add CPython 3.10.21, 3.11.16, and 3.12.14 ([#21138](astral-sh/uv#21138))
- Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters ([#21134](astral-sh/uv#21134))

### Enhancements

- Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs ([#21130](astral-sh/uv#21130))

### Preview features

- Allow `--index` and `--default-index` to select configured package indexes by name with the `index-by-name` preview feature ([#17455](astral-sh/uv#17455))
- Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default ([#21131](astral-sh/uv#21131))
- Fall back to logical file sizes when using `cache-physical-space` on filesystems that do not support physical-space accounting ([#21133](astral-sh/uv#21133))

### Bug fixes

- Resolve relative package index paths in PEP 723 scripts against the script directory ([#21097](astral-sh/uv#21097))

## Install uv 0.12.5

### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.sh | sh
```

### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.ps1 | iex"
```

## Download uv 0.12.5

|  File  | Platform | Checksum |
|--------|----------|----------|
| [uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-aarch64-apple-darwin.tar.gz.sha256) |
| [uv-x86_64-apple-darwin.tar.gz](https://releases.… (truncated)

</details>

</details>

Modified files:
- `.mise.toml`

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@ghappforreleaseplease ghappforreleaseplease Bot mentioned this pull request Aug 17, 2026
Merged
jylenhof pushed a commit to jylenhof/github-actions-resources that referenced this pull request Aug 17, 2026
@ghappforreleaseplease @github-actions
chore(mise): upgrade tombi (#54)
28fa864 
Automated mise tool upgrades from local config.

Updated tools:
- `tombi`

Command: `mise upgrade --bump --local tombi`

<details>
<summary>Version changelog (tombi)</summary>

| Tool | Requested | Installed |
|------|-----------|-----------|
| `tombi` | `1.2.7` → `1.4.0` | `1.2.7` → `1.4.0` |

</details>

<details>
<summary>Release notes (1 tools)</summary>

<details>
<summary>tombi: `1.2.7` → `1.4.0` (tombi-toml/tombi)</summary>

### v1.2.8

<!-- Release notes generated using configuration in .github/release.yml at v1.2.8 -->

## What's Changed
### 🐝 Bug Fixes
* fix(cargo): resolve completion paths from file URIs by @​ya7010 in tombi-toml/tombi#2069
### 📦 Dependencies
* fix: update vulnerable npm dependencies by @​ya7010 in tombi-toml/tombi#2064
### 🛠️ Other Changes
* docs: add schemas[*].strict to the configuration index by @​ya7010 in tombi-toml/tombi#2063

**Full Changelog**: tombi-toml/tombi@v1.2.7...v1.2.8

### v1.2.9

<!-- Release notes generated using configuration in .github/release.yml at v1.2.9 -->

## What's Changed
### 🦅 New Features
* feat(validator): select best union diagnostics by @​ya7010 in tombi-toml/tombi#2073
### 🐝 Bug Fixes
* fix(schema): preserve constraints across type projections by @​ya7010 in tombi-toml/tombi#2072
### 🛠️ Other Changes
* docs: explain TOML version overrides by @​ya7010 in tombi-toml/tombi#2071

**Full Changelog**: tombi-toml/tombi@v1.2.8...v1.2.9

### v1.2.10

<!-- Release notes generated using configuration in .github/release.yml at v1.2.10 -->

## What's Changed
### 📦 Dependencies
* fix(deps): update js-yaml to 4.3.1 by @​ya7010 in tombi-toml/tombi#2074

**Full Changelog**: tombi-toml/tombi@v1.2.9...v1.2.10

### v1.3.2

<!-- Release notes generated using configuration in .github/release.yml at v1.3.2 -->

## What's Changed

Unless `line-width` is specified, there is no wrap limit.
This is because allowing multi-line inline tables in TOML v1.1.0 has unnecessarily led to the creation of numerous issues.

### 🚨 Breaking Changes
* feat(formatter): change the default `line-width` to unlimited by @​ya7010 in tombi-toml/tombi#2104
### 🦅 New Features
* ci: cancel superseded workflow runs by @​ya7010 in tombi-toml/tombi#2103
### 🛠️ Other Changes
* fix(ci): repair WASM and npm release workflows by @​ya7010 in tombi-toml/tombi#2101
* feat(wasm): export format and lint error types by @​ya7010 in tombi-toml/tombi#2105
* docs(wasm): add error type hints to examples by @​ya7010 in tombi-toml/tombi#2106

**Full Changelog**: tombi-toml/tombi@v1.3.1...v1.3.2

### v1.3.3

<!-- Release notes generated using configuration in .github/release.yml at v1.3.3 -->

## What's Changed
### 🚨 Breaking Changes
* feat(wasm): return structured format and lint results by @​ya7010 in tombi-toml/tombi#2107
### 🦅 New Features
* feat(formatter): add comment-style rule by @​ya7010 in tombi-toml/tombi#2108

**Full Changelog**: tombi-toml/tombi@v1.3.2...v1.3.3

### v1.3.4

<!-- Release notes generated using configuration in .github/release.yml at v1.3.4 -->

## What's Changed
### 🚨 Breaking Changes
* fix(wasm): reject with standard errors by @​ya7010 in tombi-toml/tombi#2109
### 🐝 Bug Fixes
* fix(npm): include WASM build output in published packages by @​ya7010 in tombi-toml/tombi#2110
### 🛠️ Other Changes
* docs(wasm): respect format diagnostic severity by @​ya7010 in tombi-toml/tombi#2111

**Full Changelog**: tombi-toml/tombi@v1.3.3...v1.3.4

### v1.3.5

<!-- Release notes generated using configuration in .github/release.yml at v1.3.5 -->

## What's Changed
### 🐝 Bug Fixes
* fix(cli): stop LSP after exit notification by @​ya7010 in tombi-toml/tombi#2112
* fix(docs): hide playground until ready by @​ya7010 in tombi-toml/tombi#2113
* fix(npm): identify WASM package repositories by @​ya7010 in tombi-toml/tombi#2114

**Full Changelog**: tombi-toml/tombi@v1.3.4...v1.3.5

### v1.4.0

<!-- Release notes generated using configuration in .github/release.yml at v1.4.0 -->

## What's Changed
Starting from this version, we are introducing the WebAssembly npm package.

Please refer to the documentation for details.

https://tombi-toml.github.io/tombi/docs/wasm

### 🐝 Bug Fixes
* fix(validator): correct numeric bound comparisons by @​ya7010 in tombi-toml/tombi#2115
* fix(docs): prevent playground loading flash by @​ya7010 in tombi-toml/tombi#2118
* fix(glob): exclude VCS metadata from discovery by @​ya7010 in tombi-toml/tombi#2121
* fix(schema): validate literal branches by instance type by @​ya7010 in tombi-toml/tombi#2123
### 🛠️ Other Changes
* style(docs): refine playground sidebar toggle by @​ya7010 in tombi-toml/tombi#2117
* refactor(config): remove obsolete line width default by @​ya7010 in tombi-toml/tombi#2120
* style(toml): standardize formatting by adding trailing commas in Cargo.toml files by @​ya7010 in tombi-toml/tombi#2122
* style: normalize diagnostic and log message casing by @​ya7010 in tombi-toml/tombi#2124

**Full Changelog**: tombi-toml/tombi@v1.3.5...v1.4.0

</details>

</details>

Modified files:
- `.mise.toml`

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ya7010