From 24fc53cd1747eb599492f9823d8991ec7003ba77 Mon Sep 17 00:00:00 2001 From: Lorem Dev Date: Tue, 8 Sep 2026 23:45:40 +0200 Subject: [PATCH 1/3] docs: record the dependency refresh in the changelog The updates were all chore/ci commits, which CONTRIBUTING reserves from the changelog, so Development stood empty. It cannot stay that way through a release: bump-version promotes that section verbatim and release-notes.mjs exits non-zero on an empty one, which would fail the publish job after all six matrix legs had already built and signed. The bullet is also true on its own terms. A patch release whose entire content is a dependency refresh should say so, and say what did not change with it. --- CHANGES.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/CHANGES.md b/CHANGES.md index 98dfd81d..9b7efe48 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -2,6 +2,13 @@ ## Development +### Changed + +- Updated bundled dependencies, including the SHA-256, Argon2, AES and TOML + implementations. No behaviour changes: the hashing and key-derivation test + vectors are unchanged, so existing skill hashes and PPK keys read exactly as + before. + ## Version 0.7.0 ### Added From 879fa2dd85a0e97af9e94b94a5db0df700f07fe9 Mon Sep 17 00:00:00 2001 From: Lorem Dev Date: Tue, 8 Sep 2026 23:48:35 +0200 Subject: [PATCH 2/3] chore: refresh the third-party notices versions The Version column of LICENSE's Third-Party Notices table names what a release actually ships, and today's updates left nine rows behind: aes, argon2, interprocess, toml, uuid and the two tauri plugins on the cargo side, plus motion and the clipboard plugin on the npm side. Only the versions moved. Every one of these is still MIT OR Apache-2.0, 0BSD OR Apache-2.0, or plain MIT, so the licence and copyright columns are unchanged and nothing about the policy check changed with them. Checked the whole direct set rather than only the rows that moved: 30 direct cargo dependencies and 8 npm production dependencies, none carrying a licence on CONTRIBUTING's disallowed list. --- LICENSE | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/LICENSE b/LICENSE index e30f41c4..361154f0 100644 --- a/LICENSE +++ b/LICENSE @@ -228,15 +228,15 @@ this list current and accurate. | Package | Ecosystem | Version | License | Copyright | |---|---|---|---|---| -| aes | cargo | 0.9.2 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers | -| argon2 | cargo | 0.5.3 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers | +| aes | cargo | 0.9.3 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers | +| argon2 | cargo | 0.6.0 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers | | cbc | cargo | 0.2.1 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers | | cipher | cargo | 0.5.2 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers | | clap | cargo | 4.6.6 | MIT OR Apache-2.0 | Copyright (c) clap contributors | | gettext | cargo | 0.4.0 | MIT | Copyright (c) Justinas Stankevicius | | hex | cargo | 0.4.3 | MIT OR Apache-2.0 | Copyright (c) KokaKiwi | | hmac | cargo | 0.13.0 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers | -| interprocess | cargo | 2.4.3 | 0BSD OR Apache-2.0 | Copyright (c) Goat | +| interprocess | cargo | 2.4.4 | 0BSD OR Apache-2.0 | Copyright (c) Goat | | objc2 | cargo | 0.6.4 | MIT | Copyright (c) Mads Marquart | | objc2-app-kit | cargo | 0.3.2 | Zlib OR Apache-2.0 OR MIT | Copyright (c) Mads Marquart | | objc2-foundation | cargo | 0.3.2 | MIT | Copyright (c) Mads Marquart | @@ -250,19 +250,19 @@ this list current and accurate. | sha2 | cargo | 0.11.0 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers | | ssh-key | cargo | 0.6.7 | Apache-2.0 OR MIT | Copyright (c) RustCrypto Developers | | tauri | cargo | 2.11.5 | Apache-2.0 OR MIT | Copyright (c) Tauri Programme within The Commons Conservancy | -| tauri-plugin-clipboard-manager | cargo | 2.3.2 | Apache-2.0 OR MIT | Copyright (c) Tauri Programme within The Commons Conservancy | -| tauri-plugin-dialog | cargo | 2.7.2 | Apache-2.0 OR MIT | Copyright (c) Tauri Programme within The Commons Conservancy | +| tauri-plugin-clipboard-manager | cargo | 2.3.3 | Apache-2.0 OR MIT | Copyright (c) Tauri Programme within The Commons Conservancy | +| tauri-plugin-dialog | cargo | 2.7.3 | Apache-2.0 OR MIT | Copyright (c) Tauri Programme within The Commons Conservancy | | thiserror | cargo | 2.0.20 | MIT OR Apache-2.0 | Copyright (c) David Tolnay | -| toml | cargo | 0.8.2 | MIT OR Apache-2.0 | Copyright (c) Alex Crichton and toml-rs contributors | +| toml | cargo | 1.1.5+spec-1.1.0 | MIT OR Apache-2.0 | Copyright (c) Alex Crichton and toml-rs contributors | | ts-rs | cargo | 12.0.1 | MIT | Copyright (c) Moritz Bischof | | ureq | cargo | 3.4.0 | MIT OR Apache-2.0 | Copyright (c) Martin Algesten and Jacob Hoffman-Andrews | -| uuid | cargo | 1.24.1 | Apache-2.0 OR MIT | Copyright (c) Ashley Mannix and uuid contributors | +| uuid | cargo | 1.26.0 | Apache-2.0 OR MIT | Copyright (c) Ashley Mannix and uuid contributors | | zeroize | cargo | 1.9.0 | Apache-2.0 OR MIT | Copyright (c) The RustCrypto Project Developers | | @tauri-apps/api | npm | 2.11.1 | Apache-2.0 OR MIT | Copyright (c) Tauri Programme within The Commons Conservancy | -| @tauri-apps/plugin-clipboard-manager | npm | 2.3.2 | MIT OR Apache-2.0 | Copyright (c) Tauri Programme within The Commons Conservancy | +| @tauri-apps/plugin-clipboard-manager | npm | 2.3.3 | MIT OR Apache-2.0 | Copyright (c) Tauri Programme within The Commons Conservancy | | @xterm/addon-fit | npm | 0.11.0 | MIT | Copyright (c) 2019 The xterm.js authors | | @xterm/xterm | npm | 6.0.0 | MIT | Copyright (c) 2017-2019 The xterm.js authors | -| motion | npm | 13.1.0 | MIT | Copyright (c) Matt Perry | +| motion | npm | 13.2.0 | MIT | Copyright (c) Matt Perry | | react | npm | 19.2.8 | MIT | Copyright (c) Meta Platforms, Inc. and affiliates. | | react-dom | npm | 19.2.8 | MIT | Copyright (c) Meta Platforms, Inc. and affiliates. | | zustand | npm | 5.0.15 | MIT | Copyright (c) Paul Henschel | From 6e11b486015a213d25890f165b4fa686bb45c0a2 Mon Sep 17 00:00:00 2001 From: Lorem Dev Date: Tue, 8 Sep 2026 23:48:35 +0200 Subject: [PATCH 3/3] release: 0.7.1-rc.1 --- CHANGES.md | 2 ++ Cargo.lock | 10 +++++----- Cargo.toml | 2 +- apps/desktop/package.json | 2 +- apps/desktop/src-tauri/tauri.conf.json | 2 +- package.json | 2 +- packages/i18n/package.json | 2 +- 7 files changed, 12 insertions(+), 10 deletions(-) diff --git a/CHANGES.md b/CHANGES.md index 9b7efe48..b950f9d7 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -2,6 +2,8 @@ ## Development +## Version 0.7.1-rc.1 + ### Changed - Updated bundled dependencies, including the SHA-256, Argon2, AES and TOML diff --git a/Cargo.lock b/Cargo.lock index 9a40798b..381e7846 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -4235,7 +4235,7 @@ checksum = "8ee5873ec9cce0195efcb7a4e9507a04cd49aec9c83d0389df45b1ef7ba2e649" [[package]] name = "skillkeeper" -version = "0.7.0" +version = "0.7.1-rc.1" dependencies = [ "aes 0.9.3", "argon2", @@ -4270,14 +4270,14 @@ dependencies = [ [[package]] name = "skillkeeper-agents" -version = "0.7.0" +version = "0.7.1-rc.1" dependencies = [ "skillkeeper-core", ] [[package]] name = "skillkeeper-cli" -version = "0.7.0" +version = "0.7.1-rc.1" dependencies = [ "clap", "serde", @@ -4290,7 +4290,7 @@ dependencies = [ [[package]] name = "skillkeeper-config" -version = "0.7.0" +version = "0.7.1-rc.1" dependencies = [ "serde", "serde_json", @@ -4302,7 +4302,7 @@ dependencies = [ [[package]] name = "skillkeeper-core" -version = "0.7.0" +version = "0.7.1-rc.1" dependencies = [ "hex", "regex", diff --git a/Cargo.toml b/Cargo.toml index 1c061c9d..40ef3d14 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -10,7 +10,7 @@ members = [ [workspace.package] edition = "2021" -version = "0.7.0" +version = "0.7.1-rc.1" license = "Apache-2.0" [workspace.dependencies] diff --git a/apps/desktop/package.json b/apps/desktop/package.json index 59152491..b733b36f 100644 --- a/apps/desktop/package.json +++ b/apps/desktop/package.json @@ -1,6 +1,6 @@ { "name": "@skillkeeper/desktop", - "version": "0.7.0", + "version": "0.7.1-rc.1", "private": true, "description": "Install and manage skills and hooks for AI coding agents", "author": { diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json index 3f509a3b..8a6795e4 100644 --- a/apps/desktop/src-tauri/tauri.conf.json +++ b/apps/desktop/src-tauri/tauri.conf.json @@ -1,7 +1,7 @@ { "$schema": "https://schema.tauri.app/config/2", "productName": "SkillKeeper", - "version": "0.7.0", + "version": "0.7.1-rc.1", "identifier": "dev.lorem.skillkeeper", "build": { "beforeDevCommand": "pnpm exec vite", diff --git a/package.json b/package.json index 81f0caa9..4048f95d 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "skillkeeper", - "version": "0.7.0", + "version": "0.7.1-rc.1", "private": true, "type": "module", "description": "Install and manage skills and hooks for AI coding agents", diff --git a/packages/i18n/package.json b/packages/i18n/package.json index 3be2ef23..b7503441 100644 --- a/packages/i18n/package.json +++ b/packages/i18n/package.json @@ -1,6 +1,6 @@ { "name": "@skillkeeper/i18n", - "version": "0.7.0", + "version": "0.7.1-rc.1", "private": true, "author": "Lorem Dev", "homepage": "https://lorem-dev.github.io/skillkeeper/",