chore(deps): update dependencies

Automated dependency update. All tests passed.
chore: update marketplace for v0.21.115
2026-10-12 04:55:18 +00:00 · 2026-10-10 03:17:27 +00:00 · 2026-10-10 00:37:32 +00:00 · 2026-10-10 01:32:15 +01:00 · 2026-10-06 19:37:46 +00:00 · 2026-10-06 20:32:14 +01:00
7 changed files with 34 additions and 30 deletions
@@ -16,6 +16,7 @@ jobs:
    uses: lukaszraczylo/shared-actions/.github/workflows/renovate-autoupdate.yaml@main
    with:
      go-version: ">=1.24"
+      build-tags: "fts5"
      node-working-directory: ui
      require-node-tests: false
      release-workflow: release.yaml
@@ -16,7 +16,7 @@ require (
 	github.com/stretchr/testify v1.12.1
 	github.com/sugarme/tokenizer v0.3.0
 	github.com/yalue/onnxruntime_go v1.36.0
-	golang.org/x/sync v0.23.0
+	golang.org/x/sync v0.24.0
 	gorm.io/driver/sqlite v1.6.0
 	gorm.io/gorm v1.31.2
 )
@@ -25,7 +25,7 @@ require (
 	github.com/emirpasic/gods v1.18.1 // indirect
 	github.com/jinzhu/inflection v1.0.0 // indirect
 	github.com/jinzhu/now v1.1.5 // indirect
-	github.com/mattn/go-colorable v0.1.15 // indirect
+	github.com/mattn/go-colorable v0.1.16 // indirect
 	github.com/mattn/go-isatty v0.0.24 // indirect
 	github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db // indirect
 	github.com/patrickmn/go-cache v2.1.0+incompatible // indirect
@@ -33,6 +33,6 @@ require (
 	github.com/schollz/progressbar/v2 v2.15.0 // indirect
 	github.com/sugarme/regexpset v0.0.0-20200920021344-4d4ec8eaf93c // indirect
 	go.yaml.in/yaml/v3 v3.0.5 // indirect
-	golang.org/x/sys v0.48.0 // indirect
+	golang.org/x/sys v0.49.0 // indirect
 	golang.org/x/text v0.42.0 // indirect
 )
@@ -20,8 +20,8 @@ github.com/jinzhu/now v1.1.5 h1:/o9tlHleP7gOFmsnYNz3RGnqzefHA47wQpKrrdTIwXQ=
 github.com/jinzhu/now v1.1.5/go.mod h1:d3SSVoowX0Lcu0IBviAWJpolVfI5UJVZZ7cO71lE/z8=
 github.com/lukaszraczylo/oss-telemetry v0.2.5 h1:W6Qgwp7IY4yBRO361MmnEAmM59motdQpbAFAx8v6fJM=
 github.com/lukaszraczylo/oss-telemetry v0.2.5/go.mod h1:+Cn78qZo8rc3T9eZt0v3oICYRdd75wORtSidc8lNjDQ=
-github.com/mattn/go-colorable v0.1.15 h1:+u9SLTRGnXv73cEsnsmoZBom+dMU88B2M0aDcWy0/jY=
-github.com/mattn/go-colorable v0.1.15/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=
+github.com/mattn/go-colorable v0.1.16 h1:+2YjeAe7xP1OQbZW1jERPWWCDLlNqFNCvjiqGiAt84A=
+github.com/mattn/go-colorable v0.1.16/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=
 github.com/mattn/go-isatty v0.0.24 h1:tGZZoVgT/KiqK1c8ocVLeDS8BSWMRd47J3Lbz7vsReI=
 github.com/mattn/go-isatty v0.0.24/go.mod h1:nMCL3Zebbrt45jsMDgnfIwz6ydEQApk5oEI3HqDio6A=
 github.com/mattn/go-sqlite3 v1.14.52 h1:wVbm2Qnf4OXkqhBTSPuCRZDRnxfbVrrmiCEroVdog8U=
@@ -47,10 +47,10 @@ github.com/yalue/onnxruntime_go v1.36.0 h1:iH1Q++DcsyT9sWtN26KYimESlI5hhXpKaChHD
 github.com/yalue/onnxruntime_go v1.36.0/go.mod h1:b4X26A8pekNb1ACJ58wAXgNKeUCGEAQ9dmACut9Sm/4=
 go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw=
 go.yaml.in/yaml/v3 v3.0.5/go.mod h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg=
-golang.org/x/sync v0.23.0 h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk=
-golang.org/x/sync v0.23.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
-golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo=
-golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
+golang.org/x/sync v0.24.0 h1:iqiDrGoDgyuvAKrhLQthUEzU/R378N78gXbBjxed7oA=
+golang.org/x/sync v0.24.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
+golang.org/x/sys v0.49.0 h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA=
+golang.org/x/sys v0.49.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
 golang.org/x/text v0.42.0 h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI=
 golang.org/x/text v0.42.0/go.mod h1:ojzP1Z+2QtioaF8DTtO8K5q7JWVVYwZKenzujK0Zd0E=
 gorm.io/driver/sqlite v1.6.0 h1:WHRRrIiulaPiPFmDcod6prc4l2VGVWHz80KspNsxSfQ=
@@ -1,3 +1,5 @@
+//go:build fts5
+
 package gorm

 import (
@@ -526,6 +526,7 @@ func (c *Client) nearest(ctx context.Context, queryBlob []byte, docType, project

 // knn runs one vec0 nearest-neighbour query. where holds the MATCH and filters vec0 can answer on their own.
 func (c *Client) knn(ctx context.Context, where string, args []any, limit int) ([]QueryResult, error) {
+	// #nosec G202 -- where is built from constant clauses with "?" placeholders only (see nearest); every value goes via args
 	rows, err := c.db.QueryContext(ctx,
 		"SELECT doc_id, distance, sqlite_id, doc_type, field_type, project, scope FROM vectors"+where+" ORDER BY distance LIMIT ?",
 		append(append([]any{}, args...), limit)...)
@@ -13,7 +13,7 @@
    {
      "name": "claude-mnemonic",
      "description": "Persistent memory system for Claude Code - Go implementation with SQLite and ChromaDB vector search",
-      "version": "0.21.95",
+      "version": "0.21.115",
      "author": {
        "name": "lukaszraczylo",
        "url": "https://github.com/lukaszraczylo"
@@ -23,25 +23,25 @@
      "license": "MIT",
      "homepage": "https://github.com/lukaszraczylo/claude-mnemonic",
      "releases": {
-        "latest": "0.21.95",
+        "latest": "0.21.115",
        "versions": {
-          "0.21.95": {
-            "releaseDate": "2026-10-04",
+          "0.21.115": {
+            "releaseDate": "2026-10-10",
            "downloads": {
              "darwin-arm64": {
-                "url": "https://github.com/lukaszraczylo/claude-mnemonic/releases/download/v0.21.95/claude-mnemonic_0.21.95_darwin_arm64.tar.gz",
+                "url": "https://github.com/lukaszraczylo/claude-mnemonic/releases/download/v0.21.115/claude-mnemonic_0.21.115_darwin_arm64.tar.gz",
                "format": "tar.gz",
-                "sha256": "3224be650ead03a23078f7033909ecaedf89c88d665b3aa83c70b2eb952722b9"
+                "sha256": "d49852a86721ae452286d2fbbcb1b9bc756a3718337e7cfecac1a0e53038ecfd"
              },
              "linux-amd64": {
-                "url": "https://github.com/lukaszraczylo/claude-mnemonic/releases/download/v0.21.95/claude-mnemonic_0.21.95_linux_amd64.tar.gz",
+                "url": "https://github.com/lukaszraczylo/claude-mnemonic/releases/download/v0.21.115/claude-mnemonic_0.21.115_linux_amd64.tar.gz",
                "format": "tar.gz",
-                "sha256": "4af6927b7857b03143e6eb817da7f44c39dd2b5674a7d1b7f505db7c3dd25b2f"
+                "sha256": "53e4708327fcca1a79b6e569a2983308e05b22cf81a3afd94be2ddcaa4404a46"
              },
              "windows-amd64": {
-                "url": "https://github.com/lukaszraczylo/claude-mnemonic/releases/download/v0.21.95/claude-mnemonic_0.21.95_windows_amd64.zip",
+                "url": "https://github.com/lukaszraczylo/claude-mnemonic/releases/download/v0.21.115/claude-mnemonic_0.21.115_windows_amd64.zip",
                "format": "zip",
-                "sha256": "d779920957eea6b21a344556b5a36ec2a1a6c596e095575e73110c5cb997fc1a"
+                "sha256": "cbc8a4f6d6511c9540c45e508dc1834bc8de516776120b28450158b852d28d5d"
              }
            }
          }
@@ -1430,9 +1430,9 @@
      }
    },
    "node_modules/postcss": {
-      "version": "8.5.28",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.28.tgz",
-      "integrity": "sha512-RRuzqDtt5Y9h3quz5hWhK+TPnsmVs6WwSU6LkJMeY4HstUEDuYTG8UJSdawMRzmzAtV+KEoG8N3Qg2qLy5vM/A==",
+      "version": "8.5.29",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.29.tgz",
+      "integrity": "sha512-49cGhUbXj8Qenv0iTMxA1cFBzxXoctpC9Ujd77t1WcbJIr6nF/eI7g/8MgxrYldFRuAXvja7xQRwavoW7kgrxQ==",
      "funding": [
        {
          "type": "opencollective",
@@ -1449,9 +1449,9 @@
      ],
      "license": "MIT",
      "dependencies": {
-        "nanoid": "^3.3.18",
+        "nanoid": "^3.3.19",
        "picocolors": "^1.1.1",
-        "source-map-js": "^1.2.1"
+        "source-map-js": "^1.2.2"
      },
      "engines": {
        "node": "^10 || ^12 || >=14"
@@ -1492,9 +1492,9 @@
      }
    },
    "node_modules/source-map-js": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
-      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
      "license": "BSD-3-Clause",
      "engines": {
        "node": ">=0.10.0"
@@ -1624,9 +1624,9 @@
      }
    },
    "node_modules/vite": {
-      "version": "8.3.2",
-      "resolved": "https://registry.npmjs.org/vite/-/vite-8.3.2.tgz",
-      "integrity": "sha512-SQr1x6W5vVSbROg7vsyXIaxK9b0G7zsT68acdWWRmnBUsgDieLCRG+Rep9WdZgcposvv/GSnr4GUUBqB3vXq6w==",
+      "version": "8.3.3",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-8.3.3.tgz",
+      "integrity": "sha512-cTAldKPImjg6c+gk48U19POPn3GCBzZwpdsN8ZMEEcbpes+6/wvfqUd0C2y3qYY4wsj8PwgFwrZ/1jBPVttMSg==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
Author	SHA1	Message	Date
github-actions[bot]andGitHub	8dc524ea59	chore(deps): update dependencies Automated dependency update. All tests passed.	2026-10-10 03:17:27 +00:00
github-actions[bot]	9dc59d13fe	chore: update marketplace for v0.21.115	2026-10-10 00:37:32 +00:00
lukaszraczyloandGitHub	d8c49d8d89	fix(autoupdate): pass fts5 build tag to the dependency update (#76 ) The scheduled Update dependencies run fails in the Build and test Go step. The error is "no such module: fts5", because the tests run without the fts5 tag. ci.yaml already passes build-tags fts5 to go-pr.yaml. This change passes the same tag to renovate-autoupdate.yaml.	2026-10-10 01:32:15 +01:00
github-actions[bot]	6e26c4e85d	chore: update marketplace for v0.21.111	2026-10-06 19:37:46 +00:00
Holger Reinhardt GitHub Claude Sonnet 5.5	8c2c69582a	fix(lint): clear the two findings left by #69 and #70 (#72 ) - observation_update_test.go (#69) lacked the fts5 build tag its helper (testObservationStore, in observation_store_test.go) has, so `go vet ./...` without tags failed with "undefined: testObservationStore". - Client.knn (#70) concatenates its WHERE clause into the query. The clause is built only from constant text with "?" placeholders (see nearest) and every value goes through args, so gosec's G202 is a false positive; annotate it the way the file already annotates G201. Co-authored-by: Claude Sonnet 5.5 <[email protected]>	2026-10-06 20:32:14 +01:00
github-actions[bot]	fbe938fef2	chore: update marketplace for v0.21.105	2026-10-04 22:25:54 +00:00
github-actions[bot]	64c2ace22e	chore: update marketplace for v0.21.99	2026-10-04 22:20:54 +00:00