fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #873 · block/buzz-app

renovate · 2026-10-12T01:00:34Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
@biomejs/biome (source)	`2.5.14` → `2.6.6`	devDependencies	minor
@deepseek-ai/cordis (source)	`4.0.2` → `4.1.0`	dependencies	minor
@hypothesi/tauri-mcp-server (source)	`0.13.1` → `0.13.2`	devDependencies	patch
@modelcontextprotocol/server (source)	`2.3.1` → `2.4.0`	dependencies	minor
@noble/curves (source)	`2.0.1` → `2.4.0`	dependencies	minor
@pydantic/genai-prices	`0.1.13` → `0.2.1`	dependencies	minor	`0.2.2`
@tabler/icons (source)	`3.46.0` → `3.51.0`	dependencies	minor
@tabler/icons-react (source)	`3.46.0` → `3.51.0`	dependencies	minor
@types/node (source)	`24.13.6` → `24.19.2`	devDependencies	minor
@vitejs/plugin-react (source)	`6.1.1` → `6.2.1`	devDependencies	minor	`6.3.0`
Swatinem/rust-cache	`v2.9.2` → `v2.9.3`	action	patch
actions/create-github-app-token	`v3.2.0` → `v3.3.0`	action	minor
actions/download-artifact	`v8.0.1` → `v8.0.2`	action	patch
actions/upload-artifact	`v7.0.1` → `v7.0.2`	action	patch
arboard	`3.6.1` → `3.7.0`	dependencies	minor
base64	`0.22` → `0.23`	dependencies	minor
bech32	`0.11` → `0.12`	dependencies	minor
cargo-deny	`0.19.9` → `0.20.2`		minor
cmake	`4.3.1` → `4.4.5`		minor
d3-scale (source)	`4.0.2` → `4.0.3`	dependencies	patch
dockview-react (source)	`8.3.1` → `8.9.0`	dependencies	minor
flate2	`1.1.10` → `1.1.11`	dev-dependencies	patch
flexlayout-react	`0.11.0` → `0.11.1`	dependencies	patch
getrandom	`0.3` → `0.4`	dependencies	minor
hmac	`0.12` → `0.13`	dependencies	minor
hyper (source)	`1.11.1` → `1.12.0`	dependencies	minor
hyper-util (source)	`0.1.20` → `0.1.21`	dependencies	patch
jsdom	`30.1.0` → `30.1.3`	devDependencies	patch
just	`1.58.0` → `1.59.0`		minor
libc	`0.2.189` → `0.2.191`	dependencies	patch
mdast-util-from-markdown	`2.0.3` → `2.1.0`	dependencies	minor
mdast-util-gfm-strikethrough	`2.0.0` → `2.0.1`	dependencies	patch
mdast-util-gfm-table	`2.0.0` → `2.0.1`	dependencies	patch
mdast-util-to-markdown	`2.1.2` → `2.2.3`	dependencies	minor
micromark-extension-gfm-table	`2.1.1` → `2.1.2`	dependencies	patch
motion	`12.40.0` → `12.43.0`	dependencies	minor
node	`24.18.0` → `24.22.2`		minor
nostr (source)	`=0.45.5` → `=0.45.7`	dependencies	patch
nostr (source)	`0.44` → `0.45`	dependencies	minor
nostr-pairing (source)	`0.44` → `0.45`	dependencies	minor
nostr-tools	`2.25.2` → `2.26.0`	dependencies	minor
objc2	`=0.6.4` → `=0.6.5`	dependencies	patch
pele (source)	`1.6.0` → `1.13.0`	dependencies	minor
pnpm	`11.8.0` → `11.28.8`		minor
pnpm/action-setup	`v4.3.0` → `v4.4.0`	action	minor
postcss (source)	`8.5.28` → `8.5.32`	devDependencies	patch
proptest (source)	`1.11.0` → `1.12.0`	dev-dependencies	minor
prosemirror-commands	`1.7.1` → `1.7.2`	dependencies	patch
prosemirror-history	`1.5.0` → `1.5.1`	dependencies	patch
prosemirror-model	`1.25.8` → `1.25.13`	dependencies	patch
prosemirror-schema-list	`1.5.1` → `1.6.0`	dependencies	minor
prosemirror-view	`1.42.3` → `1.42.9`	dependencies	patch
rand (source)	`0.10.2` → `0.10.3`	dependencies	patch
react-day-picker (source)	`10.0.1` → `10.0.2`	dependencies	patch
react-diff-view	`3.3.2` → `3.3.3`	dependencies	patch
reqwest	`0.13.4` → `0.13.5`	dependencies	patch
rfd	`0.16` → `0.18`	dependencies	minor
rolldown (source)	`1.2.7` → `1.3.0`	devDependencies	minor	`1.3.1`
rusqlite	`0.40` → `0.41`	dependencies	minor
rust (source, changelog)	`1.98.1` → `1.99.1`	toolchain	minor
rust-ini	`=0.21.1` → `=0.21.3`	dependencies	patch
rustls-native-certs	`0.8.4` → `0.8.5`	dependencies	patch
rustup	`1.29.2` → `1.29.3`		patch
secp256k1	`0.31` → `0.33`	dev-dependencies	minor
secp256k1	`0.31` → `0.33`	dependencies	minor
serde_json	`1.0.151` → `1.0.154`	dependencies	patch
serde_json	`1.0.151` → `1.0.154`	build-dependencies	patch
tauri-plugin-deep-link	`2.6.2` → `2.6.3`	dependencies	patch
tauri-plugin-dialog	`2.8.3` → `2.8.4`	dependencies	patch
tauri-plugin-single-instance	`2.5.4` → `2.5.5`	dependencies	patch
thiserror	`2.0.20` → `2.0.21`	dependencies	patch
tokio (source)	`1.53.3` → `1.54.1`	dev-dependencies	minor
tokio (source)	`1.53.3` → `1.54.1`	dependencies	minor
tokio-rustls	`0.26.5` → `0.26.6`	dev-dependencies	patch
tokio-tungstenite	`0.29` → `0.30`	dependencies	minor
tokio-util (source)	`0.7.19` → `0.7.20`	dependencies	patch
undici (source)	`7.29.1` → `7.30.2`	devDependencies	minor
uuid	`1.26.0` → `1.29.1`	dependencies	minor	`1.29.2`
vite (source)	`8.3.0` → `8.3.6`	devDependencies	patch	`8.3.7`
webpki-roots	`1.0.10` → `1.0.11`	dependencies	patch
windows-core	`=0.62.2` → `=0.100.0`	dependencies	minor
wry	`=0.57.0` → `=0.57.1`	dependencies	patch	`0.57.2`
ws	`8.18.3` → `8.22.2`	devDependencies	minor
zeroize	`1.9.0` → `1.9.1`	dependencies	patch

Release Notes

biomejs/biome (@biomejs/biome)

`v2.6.6`

Compare Source

Patch Changes

#12887 da0422e Thanks @dyc3! - Added the new nursery rule noArrayMethodsOnArguments. It reports calls to array methods on the arguments object, which isn't an array, so these calls throw a TypeError when the code runs.
```
function sum() {
  return arguments.reduce((total, value) => total + value, 0);
}
```
#12877 cd9e10f Thanks @dyc3! - Added the nursery rule noConstantComparisons, which reports && and || conditions that can never be true, are always true, or contain a check with no effect.
```
if (statusCode <= 400 && statusCode > 500) {}
```
#12876 a7c9586 Thanks @dyc3! - Added the nursery rule noErasingOperation, which disallows operations with 0 that always result in zero: multiplying by 0, a bitwise AND with 0, and dividing 0 by a number. The other value in these operations has no effect on the result, which usually means the code has a mistake.
```
const total = price * 0;
```
#12841 e954f55 Thanks @dyc3! - Added the nursery rule noNegatedArrayPredicate, which reports negated calls to Array#some() and Array#every() and suggests moving the negation into the callback function.
```
// Invalid: use `array.every((item) => !isUnicorn(item))` instead.
const isMissing = !array.some((item) => isUnicorn(item));
```
#12888 15039f7 Thanks @dyc3! - Added the new nursery rule noNumberArgumentOutOfRange, which reports number literal arguments of toString(), toFixed(), toExponential() and toPrecision() that are outside the range the method accepts. These calls throw a RangeError at runtime.
```
value.toString(64);
```
#12889 1cd7520 Thanks @dyc3! - Added the nursery rule noSharedBranchCode, which reports code that is repeated at the start or end of every branch of an if statement. That code runs no matter which branch is taken, so it can be moved before or after the if statement.
```
if (condition) {
  doSomething();
  cleanup();
} else {
  doSomethingElse();
  cleanup();
}
```
#12842 d47fcfd Thanks @dyc3! - Added the new nursery rule noSubtractionComparison, which reports subtracting two values only to compare the difference with 0, and suggests comparing the values directly.
```
if (a - b > 0) {}
```
#12866 7c1cd5f Thanks @dyc3! - Added the nursery rule noSvelteIgnoredUnsubscribe, which reports calls to a store's subscribe() method when the returned function is ignored. Without that function, the subscription can never be stopped, which causes a memory leak.
```
<script>
  import { count } from "./stores.js";

  count.subscribe((value) => console.log(value));
</script>
```
#12890 6b73fcf Thanks @dyc3! - Added the new nursery rule noUninvokedArrayCallback, which reports array methods such as map() and forEach() called with a callback on an array that only has empty slots. The callback never runs in this case.
```
const list = new Array(5).map(() => createElement());
```
#12886 3bb18d8 Thanks @dyc3! - Added the nursery rule useNextScriptForGoogleAnalytics, which reports <script> elements that load Google Analytics or Google Tag Manager. Use the GoogleAnalytics and GoogleTagManager components from @next/third-parties/google instead, which load these scripts after the page becomes interactive.
```
<script async src="https://www.googletagmanager.com/gtag/js?id=G-XYZ" />
```
The rule belongs to the next domain.
#12309 0538e30 Thanks @dyc3! - Added the new nursery rule usePackageJsonCpu, which reports package.json files that have no cpu field. The cpu field lists the processor types that the package supports.

The following package.json file satisfies the rule:
```
{
  "name": "my-package",
  "version": "1.0.0",
  "cpu": ["x64", "arm64"]
}
```
#12310 191111d Thanks @dyc3! - Added the nursery rule usePackageJsonEngines, which reports package.json files that have no engines field.

A package.json passes the rule once it declares the field:
```
{
  "name": "my-package",
  "engines": {
    "node": ">=20"
  }
}
```
#12986 cc929af Thanks @dyc3! - Fixed #12954, where configuring rules in groups with more than 256 rules could enable or disable the wrong rule.
#12931 fe9248e Thanks @dyc3! - Improved the performance of linting. Each lint pass now spends less time stepping over syntax nodes that no enabled rule looks at.
#12969 22d27e8 Thanks @vibbix! - Improved the performance of CSS linting. Rules that compare selectors, such as noDescendingSpecificity and noDuplicateSelectors, now make fewer memory allocations.
#12973 5a06df5 Thanks @vibbix! - Fixed useGenericFontNames reporting font-family inside @font-palette-values. There, font-family names the font families the palette applies to, so it doesn't take a generic family.
```
@font-palette-values --palette {
  font-family: Bixa;
  override-colors: 0 red;
}
```
#12930 ce71284 Thanks @dyc3! - Fixed #12073: useExhaustiveSwitchCases now reports non-exhaustive switches over values read from for...of loops over Array.prototype.entries(), Map, and Set, and over properties of array elements indexed by a number variable.

noMisusedPromises now also reports Promise-returning callbacks passed to array methods such as find and every.
#12983 2987b54 Thanks @ashokram-si! - Fixed #12957: Biome now correctly parses SCSS negative interpolation list items as separate values instead of an invalid subtraction operator.
```
-margin: -#{$s} - #{$s} - #{$s} auto;
+margin: -#{$s} -#{$s} -#{$s} auto;
```

`v2.6.5`

Compare Source

Patch Changes

#12755 bbc4887 Thanks @dyc3! - Added the new nursery rule noArrayForEach, which reports forEach() calls that can be written as for...of loops. Values known not to be arrays, such as a Map or a Set, are ignored.
```
array.forEach((element) => {
	bar(element);
});
```
#12777 ba692e4 Thanks @dyc3! - Added the new nursery rule noAwaitInPromiseMethods, which reports await inside the array passed to Promise.all(), Promise.allSettled(), Promise.any(), or Promise.race(). The await pauses the code before the method is called, so the promises no longer run at the same time.
```
Promise.all([await promise, anotherPromise]);
```
#12765 af84fb4 Thanks @dyc3! - Added the new nursery rule noChainedComparison, which reports comparisons chained like a < b < c or a === b === c. JavaScript compares a with b first, and then compares the resulting true or false with c, so 3 > 2 > 1 is false.
```
if (a < b < c) {}
```
#12547 0a2073d Thanks @dyc3! - Added the nursery rule noDynamicDelete, which disallows using delete with a property name that is computed at runtime. Fixed property names written as string or number literals are allowed.
```
delete container[name];
```
#12481 ed7adc2 Thanks @dyc3! - Added the nursery rule noLateEventControl, which reports calls to preventDefault(), stopPropagation(), and stopImmediatePropagation() that run after the browser has finished handling the event, where they have no effect.
```
element.addEventListener("click", async (event) => {
  await save();
  event.preventDefault();
});
```
#12795 179666d Thanks @dyc3! - Added the nursery rule noMapSpread, which disallows spreading objects or arrays in the values returned by map() and flatMap() callbacks. Each spread copies a whole object or array for every item, which is slow for large arrays. Its unsafe fix replaces an object that starts with a spread with Object.assign().
```
const users = getUsers();
const rows = users.map((user) => ({ ...user, role: getRole(user) }));
```
#12793 d9a99fd Thanks @dyc3! - Added the nursery rule noMismatchedMapKey, which reports get() and set() calls that use a different key than the has() check before them. Checking one key and then using another is usually a copy-paste mistake.
```
if (map.has(key)) {
  map.get(otherKey); // reported
}
```
#12342 1db7c0d Thanks @vibbix! - Added the nursery rule noMissingScssInterpolation, which disallows Sass variables and function calls in custom property values without #{} interpolation. Sass copies these values into the CSS unchanged, so the browser receives $gap or math.div(8px, 2) instead of their results. Its unsafe fix wraps variables in #{}.
```
:root {
  --gap: $gap;
  --half: math.div(8px, 2);
}
```
#12792 de86b37 Thanks @dyc3! - Added the nursery rule noMissingThrow, which reports errors that are created with new but never thrown. Its unsafe fix adds the missing throw keyword.
```
function check(value) {
  if (!value) {
    new Error("Missing value");
  }
}
```
#12790 c23e4c3 Thanks @dyc3! - Added the new nursery rule noObjectLiteralComparison, which reports comparisons with an empty object {} or an empty array []. These comparisons never check whether a value is empty, because objects and arrays are compared by reference.
```
if (value === {}) {}
```
#12450 793f07d Thanks @dyc3! - Added the new nursery rule noPlaywrightUnsafeReferences, which reports functions passed to page.evaluate() or page.addInitScript() that use variables declared outside of them. Playwright runs these functions in the browser page, where those variables don't exist.
```
const x = 7;
await page.evaluate(() => x * 2); // reported: `x` must be passed as an argument
```
#12388 a0160a4 Thanks @vibbix! - Added the nursery rule noPseudoElementInFunctionalPseudoClass, which disallows pseudo-elements inside :is(), :where(), :not() and :has(). Browsers drop these selectors, so the styles never apply to the pseudo-element.
```
.card:is(::before, ::after) {
  content: "";
}
```
[#12779](https://redirect.github.com/

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-11-02T02:08:26Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

    Updating crates.io index
    Updating git repository `https://github.com/Mesh-LLM/mesh-llm.git`
    Updating git repository `https://github.com/block/buzz.git`
    Updating git repository `https://github.com/hypothesi/mcp-server-tauri`
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: from: cargo-deny-0.19.9 cmake-4.3.1 just-1.58.0 node-24.18.0 pnpm-11.8.0 rustup-1.29.2, to: cargo-deny-0.20.2 cmake-4.4.5 just-1.59.0 node-24.22.2 pnpm-11.28.8 rustup-1.29.3

Bootstrapping /home/ubuntu/.cache/hermit/pkg/hermit@stable/hermit from https://github.com/cashapp/hermit/releases/download/stable
Creating /home/ubuntu/.cache/hermit/pkg/hermit@stable
Downloading https://github.com/cashapp/hermit/releases/download/stable/hermit-linux-amd64.gz to /home/ubuntu/.cache/hermit/pkg/hermit@stable/hermit
Hermit installed as /home/ubuntu/.cache/hermit/pkg/hermit@stable/hermit
Hermit is installed as /home/ubuntu/bin/hermit

See https://cashapp.github.io/hermit/usage/get-started/ for more information.

fatal:hermit: node-24.22.2: env:///bin/packages/node.hcl: no version node-24.22.2 found in versions (node-24.18.0) or channels (node@24, node@24.18, node@latest), try "hermit update": unknown package

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `libsqlite3-sys`.
    ... required by package `rusqlite v0.40.0`
    ... which satisfies dependency `rusqlite = "^0.40"` of package `mesh-llm-log-store v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-log-store` (locked to 0.78.1) of package `mesh-llm-host-runtime v0.78.1 (https://github.com/Mesh-LLM/mesh-llm.git?rev=5d19ca69403f5d3e46ddb82ce83164495fa88383#5d19ca69)`
    ... which satisfies git dependency `mesh-llm-host-runtime` (locked to 0.78.1) of package `buzz-mesh-compute v0.1.0 (/tmp/renovate/repos/github/block/buzz-app/src/bundled/mesh-compute/compute)`
    ... which satisfies path dependency `buzz-mesh-compute` (locked to 0.1.0) of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
versions that meet the requirements `^0.38.0` are: 0.38.2, 0.38.1, 0.38.0

package `libsqlite3-sys` links to the native library `sqlite3`, but it conflicts with a previous package which links to `sqlite3` as well:
package `libsqlite3-sys v0.39.0`
    ... which satisfies dependency `libsqlite3-sys = "^0.39.0"` of package `rusqlite v0.41.0`
    ... which satisfies dependency `rusqlite = "^0.41"` of package `Buzz v0.0.0 (/tmp/renovate/repos/github/block/buzz-app/src-tauri)`
note: only one package in the dependency graph may specify the same links value to ensure that only one copy of a native library is linked in the final binary
for more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links
help: try to adjust your dependencies so that only one package uses the `links = "sqlite3"` value

failed to select a version for `libsqlite3-sys` which could resolve this conflict

renovate Bot requested a review from a team as a code owner October 12, 2026 01:00

renovate Bot force-pushed the renovate/all-minor-patch branch 28 times, most recently from 8263abd to d0b8a73 Compare October 13, 2026 00:49

renovate Bot changed the title ~~fix(deps): update all non-major dependencies~~ Update all non-major dependencies Oct 13, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 9921d05 to d9b2aaf Compare October 13, 2026 17:25

renovate Bot changed the title ~~Update all non-major dependencies~~ fix(deps): update all non-major dependencies Oct 13, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 20 times, most recently from 15357d5 to 7fa0baa Compare October 13, 2026 20:56

lukeilijevski mentioned this pull request Nov 7, 2026

feat(usage): show today's agent spend beside Send #2985

Open

matt2e mentioned this pull request Nov 9, 2026

chore(deny): ignore RUSTSEC-2026-0459 for libsqlite3-sys while mesh-llm pins rusqlite 0.40 #3076

Closed

fix(deps): update all non-major dependencies

aae4fd4

Navigation Menu

Repository navigation

fix(deps): update all non-major dependencies - #873

fix(deps): update all non-major dependencies#873
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Oct 12, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Nov 2, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Oct 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.6.6

Patch Changes

v2.6.5

Patch Changes

Configuration

Uh oh!

renovate Bot commented Nov 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: from: cargo-deny-0.19.9 cmake-4.3.1 just-1.58.0 node-24.18.0 pnpm-11.8.0 rustup-1.29.2, to: cargo-deny-0.20.2 cmake-4.4.5 just-1.59.0 node-24.22.2 pnpm-11.28.8 rustup-1.29.3

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Oct 12, 2026 •

edited

Loading

`v2.6.6`

`v2.6.5`

renovate Bot commented Nov 2, 2026 •

edited

Loading