deps(deps): bump the cargo-major-bumps group across 1 directory with 17 updates

[dependabot]

Bumps the cargo-major-bumps group with 17 updates in the / directory:

Package	From	To
itertools	0.14.0	0.15.0
rand	0.9.5	0.10.2
toml	0.8.23	1.1.4+spec-1.1.0
dirs	6.0.0	7.0.0
jsonschema	0.46.10	0.58.4
base64	0.22.1	0.23.1
tokio-tungstenite	0.26.2	0.30.0
oxibrowser	0.21.0	0.25.0
oxibrowser-core	0.21.0	0.25.0
lsp-types	0.95.1	0.97.0
self_update	0.41.0	0.43.1
oxibrain-client	0.2.0	0.12.1
httpmock	0.7.0	0.8.3
png	0.17.16	0.18.1
hashbrown	0.15.5	0.17.1
signal-hook	0.3.18	0.4.4
syn	2.0.119	3.0.3

Updates itertools from 0.14.0 to 0.15.0

Changelog

Sourced from itertools's changelog.

0.15.0

Breaking

• Restructure Position as struct instead of enum (#1042, #1043)
• Canonicalize all_equal_value's error type (#1032)

Added

• Add *_with_hasher adaptors (#1007)
• Add strip_prefix and strip_prefix_by methods (#1104)

Changed

• Remove Clone bounds from tuple_combinations and array_combinations(#1011)
• must_use for collect_vec (#1009)
• Make izip! temporary friendly (#1021)
• Add array_combinations_with_replacement (#1033)
• Implement Debug for remaining public types (#1038)
• Specialize ExactlyOneError::count (#1046)
• Implement PeekingNext for more types, in particular vec::IntoIter (#1059, #1073)
• Fix PadUsing::next_back (#1082)
• Introduce [circular_]array_windows, deprecate tuple_windows (#1086)
• Deprecate tuple_combinations (replaced by array_combinations) (#1085)

Notable Internal Changes

• Make into_group_map code more idiomatic (#1027)
• Fix clippy lints (#1017, #1029, #1076, #1099)

Commits

• 37bd72a Update CHANGELOG.md: strip_prefix[_by]
• 86ec635 Use ControlFlow in fold_while implementation
• d5897f7 refactor(strip_prefix): use try_for_each and drop PartialEq, Eq on StripPrefi...
• b2a978a feat(Itertools): add strip_prefix and strip_prefix_by methods
• 12b6ec6 Update CHANGELOG.md for all_equal_value_error's error type
• 121821e AllEqualValueError implements std::error::Error
• adac44e Introduce AllEqualValueError
• 5707384 Update CHANGELOG.md
• df60ff0 Update CHANGELOG.md
• 113b850 Update CHANGELOG.md to include with_hasher
• Additional commits viewable in compare view

Updates rand from 0.9.5 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

• Document panic behavior of make_rng and add #[track_caller] (#1761)
• Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

• The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
• Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
• Use Edition 2024 and MSRV 1.85 (#1653)
• Let Fill be implemented for element types, not sliceable types (#1652)
• Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
• Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
• Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
• Remove Clone support for StdRng, ReseedingRng (#1677)
• Use postcard instead of bincode to test the serde feature (#1693)
• Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
• Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
• Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

• Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
• Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
• Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
• Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

• Removed ReseedingRng (#1722)
• Removed unused feature "nightly" (#1732)
• Removed feature small_rng (#1732)

... (truncated)

Commits

• 1540ea3 Prepare rand 0.10.2 (#1800)
• a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
• ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
• db14664 Check UniformChar validity on deser (#1790)
• bea8620 Bump the all-deps group with 2 updates (#1796)
• 4f44932 Bump actions/cache from 5 to 6 (#1795)
• b999a13 Bump actions/checkout from 6 to 7 (#1794)
• aeab810 Avoid unsafe where safety depends on non-local values (#1791)
• 1896d7c Add typos CI job (#1789)
• 43eddee Bump the all-deps group with 2 updates (#1788)
• Additional commits viewable in compare view

Updates toml from 0.8.23 to 1.1.4+spec-1.1.0

Commits

• beee9fe chore: Release
• 16e2ac1 docs: Update changelog
• 89f5541 fix(toml): preserve datetimes when deserializing Value (#1194)
• 534039c fix(serde): Deserialize Value datetimes into typed targets
• 6e45cef test(serde): Reproduce Value datetime deserialization error
• 4ec099f chore: Release
• 5a47a51 docs: Update changelog
• da0911f perf(parser): Reduce over allocation by better tokens/byte ratio (#1193)
• 26eb157 perf(parser): Reduce over allocation by better tokens/byte ratio
• ca4c7bf chore(deps): Update Prek to v0.4.11 (#1191)
• Additional commits viewable in compare view

Updates dirs from 6.0.0 to 7.0.0

Updates jsonschema from 0.46.10 to 0.58.4

Release notes

Sourced from jsonschema's releases.

[CLI] Release 0.58.4

No release notes provided.

[Python] Release 0.58.4

Fixed

• repr of a validator_for validator naming the default draft instead of the one $schema declares.
• unevaluatedProperties and unevaluatedItems beside a $recursiveRef ignoring what the reference target evaluates.
• unevaluatedProperties ignoring the configured regex engine and its limits for patternProperties.
• Absolute keyword location and schemaLocation of keywords a $ref JSON Pointer reaches through a subschema with its own $id.
• type, minItems and maxItems ignored beside items when the applicator vocabulary is disabled.
• Absolute keyword location and schemaLocation of keywords inside a nested $id resource counting from the document root.
• required beside properties ignored when the applicator vocabulary is disabled, and required, minContains and maxContains applied when the validation vocabulary is disabled.
• Absolute keyword location and evaluation output of type errors in a type-only items subschema pointing at items instead of the failing element's type.
• Absolute keyword location of patternProperties annotations missing its JSON Pointer fragment.
• Evaluation output of type: array beside schema-form items omitting passing type, minItems and maxItems units and nesting failing ones under items.
• Evaluation output schemaLocation and absolute keyword location of $ref, $dynamicRef and $recursiveRef nodes not pointing at the reference target.
• Evaluation output schemaLocation URIs not percent-encoding their fragment, such as a space in a property name.
• Absolute keyword location of errors and annotations from a whole subschema, such as false, missing its JSON Pointer fragment.
• Absolute keyword location of required, minContains and maxContains errors pointing at a sibling keyword.
• Evaluation annotations from $ref siblings in Draft 4, 6 and 7 schemas.
• Masked additionalItems messages counting allowed items instead of extra ones, and "1 items" in masked unevaluatedItems messages.
• $dynamicRef and $recursiveRef resolving in the dynamic scope of another path to the same schema, depending on property order.
• unevaluatedProperties and unevaluatedItems ignoring what then or else evaluates when if is true or false.
• Stack overflow when building validators for long $ref chains.
• format: "regex" and meta-schema validation rejecting escaped punctuation such as \- in patterns.
• Build errors for an invalid patternProperties regex reporting the subschema instead of the pattern and its location.

[Ruby] Release 0.58.4

Fixed

• inspect of a validator_for validator naming the default draft instead of the one $schema declares.
• unevaluatedProperties and unevaluatedItems beside a $recursiveRef ignoring what the reference target evaluates.
• unevaluatedProperties ignoring the configured regex engine and its limits for patternProperties.
• Absolute keyword location and schemaLocation of keywords a $ref JSON Pointer reaches through a subschema with its own $id.
• type, minItems and maxItems ignored beside items when the applicator vocabulary is disabled.
• Absolute keyword location and schemaLocation of keywords inside a nested $id resource counting from the document root.
• required beside properties ignored when the applicator vocabulary is disabled, and required, minContains and maxContains applied when the validation vocabulary is disabled.
• Absolute keyword location and evaluation output of type errors in a type-only items subschema pointing at items instead of the failing element's type.
• Absolute keyword location of patternProperties annotations missing its JSON Pointer fragment.
• Evaluation output of type: array beside schema-form items omitting passing type, minItems and maxItems units and nesting failing ones under items.
• Evaluation output schemaLocation and absolute keyword location of $ref, $dynamicRef and $recursiveRef nodes not pointing at the reference target.
• Evaluation output schemaLocation URIs not percent-encoding their fragment, such as a space in a property name.
• Absolute keyword location of errors and annotations from a whole subschema, such as false, missing its JSON Pointer fragment.
• Absolute keyword location of required, minContains and maxContains errors pointing at a sibling keyword.
• Evaluation annotations from $ref siblings in Draft 4, 6 and 7 schemas.
• Masked additionalItems messages counting allowed items instead of extra ones, and "1 items" in masked unevaluatedItems messages.
• $dynamicRef and $recursiveRef resolving in the dynamic scope of another path to the same schema, depending on property order.
• unevaluatedProperties and unevaluatedItems ignoring what then or else evaluates when if is true or false.
• Stack overflow when building validators for long $ref chains.

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.58.4] - 2026-10-01

Fixed

• Validator::draft returning the default draft instead of the one $schema declares.
• unevaluatedProperties and unevaluatedItems beside a $recursiveRef ignoring what the reference target evaluates.
• unevaluatedProperties ignoring the configured regex engine and its limits for patternProperties.
• Absolute keyword location and schemaLocation of keywords a $ref JSON Pointer reaches through a subschema with its own $id.
• type, minItems and maxItems ignored beside items when the applicator vocabulary is disabled.
• Absolute keyword location and schemaLocation of keywords inside a nested $id resource counting from the document root.
• required beside properties ignored when the applicator vocabulary is disabled, and required, minContains and maxContains applied when the validation vocabulary is disabled.
• Absolute keyword location and evaluation output of type errors in a type-only items subschema pointing at items instead of the failing element's type.
• Absolute keyword location of patternProperties annotations missing its JSON Pointer fragment.
• Evaluation output of type: array beside schema-form items omitting passing type, minItems and maxItems units and nesting failing ones under items.
• Evaluation output schemaLocation and absolute keyword location of $ref, $dynamicRef and $recursiveRef nodes not pointing at the reference target.
• Evaluation output schemaLocation URIs not percent-encoding their fragment, such as a space in a property name.
• Absolute keyword location of errors and annotations from a whole subschema, such as false, missing its JSON Pointer fragment.
• Absolute keyword location of required, minContains and maxContains errors pointing at a sibling keyword.
• Evaluation annotations from $ref siblings in Draft 4, 6 and 7 schemas.
• Masked additionalItems messages counting allowed items instead of extra ones, and "1 items" in masked unevaluatedItems messages.
• $dynamicRef and $recursiveRef resolving in the dynamic scope of another path to the same schema, depending on property order.
• unevaluatedProperties and unevaluatedItems ignoring what then or else evaluates when if is true or false.
• Stack overflow when building validators for long $ref chains.
• format: "regex" and meta-schema validation rejecting escaped punctuation such as \- in patterns.
• Build errors for an invalid patternProperties regex reporting the subschema instead of the pattern and its location.

[0.58.3] - 2026-09-30

Fixed

• Keywords of a subschema declaring a Draft 2019-09+ $schema under a Draft 4, 6 or 7 root being ignored.
• Evaluation annotations including those from subschemas of a failing schema (a failing schema produces no annotations).
• Embedded resources declaring their own $schema being checked against the root's meta-schema.

[0.58.2] - 2026-09-28

Fixed

• $dynamicRef targets in another document resolving relative references and reporting absolute keyword locations against the referencing document.
• $ref to an $anchor or fragment $id validating against another anchor in the same document. #1668
• schema_path of errors under a $ref or $dynamicRef to a named schema pointing at the resource root instead of that schema.

[0.58.1] - 2026-09-26

Fixed

• Crash in Pyo3 validators when an Enum member's value override emptied a list or dict holding the instance being read.

Performance

... (truncated)

Commits

• 22e9e39 chore(rust): Release 0.58.4
• 8e57885 test: Cover malformed keyword values, masked messages and option paths in mod...
• ccea405 build: Run each OS's Python tests as soon as its wheels are built
• d94e107 build: Build the Python test wheels once per OS
• d18ed08 build: Cache benchmark builds and install cargo-codspeed from a prebuilt binary
• 91b39ce build: Drop the redundant wheel smoke test from Python release verification
• 82b99f6 build: Cancel CI runs of closed pull requests
• 1ae353d build: Speed up CI builds and fit Rust caches into the cache quota
• 29bad0d build: Skip canonicalization tests on s390x
• 0fda901 fix: Report required, minContains and maxContains errors at their own a...
• Additional commits viewable in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

• Make the tests build again on non-SIMD architectures

0.23.0

• Added more consts for preconfigured configs and engines
• Make DecodeError::InvalidLastSymbol more clear by including the decoded value
• Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
• Update MSRV to 1.71.0
• Add support for custom padding symbols

Commits

• 069bf70 v0.23.1
• 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
• 7cffce6 Fix testing on architectures without unsafe SIMD support
• e34f9a0 Merge pull request #308 from atouchet/com
• e9240c9 Remove outdated comment
• 9e9220a v0.23.0
• 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
• fbec5f1 Document no trailing trailing bits
• 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
• f10b7e2 Update deps & edition
• Additional commits viewable in compare view

Updates tokio-tungstenite from 0.26.2 to 0.30.0

Changelog

Sourced from tokio-tungstenite's changelog.

0.30.0

• Update tungstenite to 0.30.0. See tungstenite release.

0.29.0

• Update tungstenite to 0.29.0. See tungstenite release.

0.28.0

• Update tungstenite to 0.28.0. See tungstenite release.

0.27.0

• See performance updates in tungstenite-rs.

Commits

• 4994a07 Bump version
• 753ca72 Document cancel safety of reading from WebSocketStream (#378)
• 751d7e2 Update version number listed in Readme (#375)
• 57fc3d0 docs(CHANGELOG.md): fix tungstenite versions (#374)
• 7930ff2 Bump version
• 38d0465 Update Readme (#369)
• 35d110c Implement into_inner to get the underlying stream (#367)
• f3ae75d Update tungstenite version and fix bugs
• 25b544e Allow getting a reference to the shared inner stream (#363)
• e855f9e Fix errors in the examples caused by Utf8Error
• Additional commits viewable in compare view

Updates oxibrowser from 0.21.0 to 0.25.0

Release notes

Sourced from oxibrowser's releases.

v0.25.0

macOS: Developer ID 서명 + Apple 공증 완료( Submission: Accepted ). unzip 후 chmod +x oxibrowser 필요(아카이브 업로드 특성상 실행 비트 미보존).

Full changelog: https://github.com/project-oxi/oxibrowser/blob/main/CHANGELOG.md

v0.24.1

Post-release hardening bundle.

Fixed

• CI on headless Linux — keyring unit test panicked with NoDefaultStore where no Secret Service daemon exists (ubuntu runners); store-absence errors now skip with a note instead of failing.
• Restore-session leak — Target.createBrowserContext {oxiAccount} and serve --account left the one-shot envelope-restore session open (a max_sessions slot + three bridge threads per call). Restore sessions are closed and cleaned up after injection.
• Opaque-origin localStorage sharing — about:/data: documents no longer share a single "null" bucket; buckets are keyed by the full URL (same URL revisits keep their storage, different data: URLs are isolated).
• Keychain reads off the async runtime — envelope restore in the CDP account-context path and agent-login jar restore now run inside spawn_blocking (sync keychain access no longer parks tokio workers).
• Feature-gated clippy (--features oxibrowser/browser, -D warnings): three too_many_arguments hits fixed per existing repo convention.

Full changelog: https://github.com/project-oxi/oxibrowser/blob/main/CHANGELOG.md

v0.24.0

Account login session management — the Codex-Desktop-style account layer: users log in once, accounts live in an encrypted sandbox, and agents work under explicit grants (design).

Added

• Browser contexts (M-A) — BrowserContext gives every browsing context its own cookie jar, origin-keyed localStorage, and egress-pinned HTTP client. Target.createBrowserContext/disposeBrowserContext are implemented for real (per-context browserContextId everywhere, createTarget {browserContextId}, proxyServer mapping with validation); Target.createBrowserContext {oxiAccount, oxiAgentId} binds a context to a granted account. Cross-origin localStorage bleed between navigations is gone (per-navigation origin-bucket re-seed, origin-stamped sync messages, drain barrier).
• oxibrowser-credentials crate (M2/M3) — OS-keychain credential broker: SecretBox (zeroized, no Debug/Display/Serialize), KeyringProvider

... (truncated)

Changelog

Sourced from oxibrowser's changelog.

[0.25.0] - 2026-09-30

Account process-execution model — the account layer becomes drivable by external orchestrators (knock-style CLI orchestration), plus the first IndexedDB storage plane (design).

Added

• account exec — one-shot volatile grant around a child process: grant → run (stdio passthrough, exit code propagated) → tombstone on any exit; lifecycle JSONL on stderr; OXIBROWSER_ACCOUNT/OXIBROWSER_AGENT_ID injected; crash bound = TTL (default 1 h, cap 24 h).
• Per-account advisory lock — flock on ~/.oxibrowser/accounts/<id>/lock guards envelope/registry mutations; --lock-wait/--lock-timeout; ACCOUNT_LOCKED error code.
• account capture + OXI.captureSession — explicit stop-the-work envelope sealing of a live bound context.
• Consent error contract — exit 5 CONSENT_REQUIRED with structured details {request_id, ttl, account, action} on every CLI surface.
• Audit schema v1 — per-event schema_version, globally-unique event_id, --ref correlation tag (fetch/serve/grant/revoke/exec → audit lines + grant records).
• account grants <id> — live consent ledger view.
• MCP account surface — serve --mcp --account/--as-agent binds account contexts (previously the flag was silently dropped) and adds account_list / account_status / login_request tools (12 total).
• session --account — REPL tabs created inside the primary bound account context.
• Reference viewer page — GET /viewer: screencast mirror, input mirroring, and the viewer-only confirmation-approval cards; viewer role claimable via query parameters for browser WebSocket.
• Irreversible gate — deny-biased pattern list (defaults + per-account injection via account irreversible), enforced at OXI.clickRef/fillRef in account contexts.
• IndexedDB v1 — JS indexedDB subset (open/upgrade/object stores/ transaction/put/get/getAll/delete/count) persisted in the session envelope: IDB-auth tokens now survive restore (FM-L5).
• Curated probe markers — account add seeds verified URL+marker pairs for known services (GitHub) instead of the scope-root fallback.
• Ops — version --json reports install path + effective keychain service prefix; OXIBROWSER_KEYCHAIN_PREFIX isolates parallel installs.
• macOS release — Developer ID-signed, Apple-notarized universal binary published on GitHub Releases with SHA-256 checksums.

Fixed

• Playwright storageState import — floating-point expires epochs, httpOnly casing, and the -1 session-cookie convention were rejected or silently dropped the cookie on import (guide-capture path, item 11).
• serve --mcp --account — clap accepted the flag but the MCP runtime ignored it; accounts now bind for real.
• Real-website suite — updated for example.com's 2025 redesign, retarget

... (truncated)

Commits

• 5788981 feat: account process-execution model — exec/flock/capture, consent+audit con...
• 918afc3 fix: v0.24.1 — post-release hardening
• 61a1bab feat: account login session management — M2/M3/M4/M6'/M-B/M-C/M-D + release h...
• 434a46c feat(core,cdp): M-A browser contexts — per-context jar, origin-keyed storage,...
• e1a4323 fix: satisfy all-target clippy checks
• 4fd7727 v0.23.0: agent auth security hardening + deferred platform work
• 9ed921f chore: rustls 0.23.45 (RUSTSEC-2026-0285) + cargo fmt
• b63fcc0 chore(release): v0.22.0
• 99b81b7 feat: screencast, interactive elements, web APIs, paginated PDF, skills
• 024bd15 chore: release v0.21.1 — bump versions + CHANGELOG
• Additional commits viewable in compare view

Updates oxibrowser-core from 0.21.0 to 0.25.0

Release notes

Sourced from oxibrowser-core's releases.

v0.25.0

macOS: Developer ID 서명 + Apple 공증 완료( Submission: Accepted ). unzip 후 chmod +x oxibrowser 필요(아카이브 업로드 특성상 실행 비트 미보존).

Full changelog: https://github.com/project-oxi/oxibrowser/blob/main/CHANGELOG.md

v0.24.1

Post-release hardening bundle.

Fixed

• CI on headless Linux — keyring unit test panicked with NoDefaultStore where no Secret Service daemon exists (ubuntu runners); store-absence errors now skip with a note instead of failing.
• Restore-session leak — Target.createBrowserContext {oxiAccount} and serve --account left the one-shot envelope-restore session open (a max_sessions slot + three bridge threads per call). Restore sessions are closed and cleaned up after injection.
• Opaque-origin localStorage sharing — about:/data: documents no longer share a single "null" bucket; buckets are keyed by the full URL (same URL revisits keep their storage, different data: URLs are isolated).
• Keychain reads off the async runtime — envelope restore in the CDP account-context path and agent-login jar restore now run inside spawn_blocking (sync keychain access no longer parks tokio workers).
• Feature-gated clippy (--features oxibrowser/browser, -D warnings): three too_many_arguments hits fixed per existing repo convention.

Full changelog: https://github.com/project-oxi/oxibrowser/blob/main/CHANGELOG.md

v0.24.0

Account login session management — the Codex-Desktop-style account layer: users log in once, accounts live in an encrypted sandbox, and agents work under explicit grants (design).

Added

• Browser contexts (M-A) — BrowserContext gives every browsing context its own cookie jar, origin-keyed localStorage, and egress-pinned HTTP client. Target.createBrowserContext/disposeBrowserContext are implemented for real (per-context browserContextId everywhere, createTarget {browserContextId}, proxyServer mapping with validation); Target.createBrowserContext {oxiAccount, oxiAgentId} binds a context to a granted account. Cross-origin localStorage bleed between navigations is gone (per-navigation origin-bucket re-seed, origin-stamped sync messages, drain barrier).
• oxibrowser-credentials crate (M2/M3) — OS-keychain credential broker: SecretBox (zeroized, no Debug/Display/Serialize), KeyringProvider

... (truncated)

Changelog

Sourced from oxibrowser-core's changelog.

[0.25.0] - 2026-09-30

Account process-execution model — the account layer becomes drivable by external orchestrators (knock-style CLI orchestration), plus the first IndexedDB storage plane (design).

Added

• account exec — one-shot volatile grant around a child process: grant → run (stdio passthrough, exit code propagated) → tombstone on any exit; lifecycle JSONL on stderr; OXIBROWSER_ACCOUNT/OXIBROWSER_AGENT_ID injected; crash bound = TTL (default 1 h, cap 24 h).
• Per-account advisory lock — flock on ~/.oxibrowser/accounts/<id>/lock guards envelope/registry mutations; --lock-wait/--lock-timeout; ACCOUNT_LOCKED error code.
• account capture + OXI.captureSession — explicit stop-the-work envelope sealing of a live bound context.
• Consent error contract — exit 5 CONSENT_REQUIRED with structured details {request_id, ttl, account, action} on every CLI surface.
• Audit schema v1 — per-event schema_version, globally-unique event_id, --ref correlation tag (fetch/serve/grant/revoke/exec → audit lines + grant records).
• account grants <id> — live consent ledger view.
• MCP account surface — serve --mcp --account/--as-agent binds account contexts (previously the flag was silently dropped) and adds account_list / account_status / login_request tools (12 total).
• session --account — REPL tabs created inside the primary bound account context.
• Reference viewer page — GET /viewer: screencast mirror, input mirroring, and the viewer-only confirmation-approval cards; viewer role claimable via query parameters for browser WebSocket.
• Irreversible gate — deny-biased pattern list (defaults + per-account injection via account irreversible), enforced at OXI.clickRef/fillRef in account contexts.
• IndexedDB v1 — JS indexedDB subset (open/upgrade/object stores/ transaction/put/get/getAll/delete/count) persisted in the session envelope: IDB-auth tokens now survive restore (FM-L5).
• Curated probe markers — account add seeds verified URL+marker pairs for known services (GitHub) instead of the scope-root fallback.
• Ops — version --json reports install path + effective keychain service prefix; OXIBROWSER_KEYCHAIN_PREFIX isolates parallel installs.
• macOS release — Developer ID-signed, Apple-notarized universal binary published on GitHub Releases with SHA-256 checksums.

Fixed

• Playwright storageState import — floating-point expires epochs, httpOnly casing, and the -1 session-cookie convention were rejected or silently dropped the cookie on import (guide-capture path, item 11).
• serve --mcp --account — clap accepted the flag but the MCP runtime ignored it; accounts now bind for real.
• Real-website suite — updated for example.com's 2025 redesign, retarget

... (truncated)

Commits

• 5788981 feat: account process-execution model — exec/flock/capture, consent+audit con...
• 918afc3 fix: v0.24.1 — post-release hardening
• 61a1bab feat: account login session management — M2/M3/M4/M6'/M-B/M-C/M-D + release h...
• 434a46c feat(core,cdp): M-A browser contexts — per-context jar, origin-keyed storage,...
• e1a4323 fix: satisfy all-target clippy checks
• 4fd7727 v0.23.0: agent auth security hardening + deferred platform work
• 9ed921f chore: rustls 0.23.45 (RUSTSEC-2026-0285) + cargo fmt
• b63fcc0 chore(release): v0.22.0
• 99b81b7 feat: screencast, interactive elements, web APIs, paginated PDF, skills
• 024bd15 chore: release v0.21.1 — bump versions + CHANGELOG
• Additional commits viewable in compare view

Updates lsp-types from 0.95.1 to 0.97.0

Changelog

Sourced from lsp-types's changelog.

v0.97.0 (2024-06-04)

v0.96.0 (2024-05-17)

Commits

• be7336e chore: Release lsp-types version 0.97.0
• 6a658d3 Update changelog
• 747296d Merge pull request #286 from gluon-lang/issue-285
• 17cf541 chore: Workaround nightly rustdoc warning
• 310915c Merge pull request #272 from tooltitude-support/inline-value-fix
• 18b8041 fix: Correct TextDocumentChangeRegistrationOptions::sync_kind
• 18ed1b8 chore: Release lsp-types version 0.96.0
• d9680af Update changelog
• 1646d22 Merge pull request #282 from gluon-lang/gibbz00-notebook
• bb4abf6 chore: s/Url/Uri
• Additional commits viewable in compare view

Updates self_update from 0.41.0 to 0.43.1

Changelog

Sourced from self_update's changelog.

[0.43.1]

Added

Changed

• Improve assert_for logic to fallback to identifier-only search if target/os-arch search fails
• Fix update logic to respect bin_install_path when not equal to the current exe. Logic was previously modified to use the self_replace crate, but that change assumed the installation was always replacing the current exe.

Removed

[0.43.0]

Added

• Docs: add documentation for [self_update::errors::Error]

Changed

• Improve assert_for logic to prioritize searching by asset name and identifier before looking for assets by OS/arch

Removed

[0.42.0]

Added

• Improved release search/lookup capability to support filtering assets by identifier
• Improved version specifications to support prerelease tags and parallel supported versions

Changed

• Update reqwest features to allow http2 negotiation
• Update quick-xml (0.37) and zipsign (0.1)
• Specify per_page=100 when fetching github releases

Removed

Commits

• See full diff in compare view

Updates oxibrain-client from 0.2.0 to 0.12.1

Release notes

Sourced from oxibrain-client's releases.

v0.12.1

Full Changelog: a7garden/oxibrain@v0.12.0...v0.12.1

v0.12.0

Full Changelog: a7garden/oxibrain@v0.11.0...v0.12.0

v0.11.0

Full Changelog: a7garden/oxibrain@v0.10.1...v0.11.0

v0.10.1

Full Changelog: a7garden/oxibrain@v0.10.0...v0.10.1

v0.10.0

Full Changelog: a7garden/oxibrain@v0.9.0...v0.10.0

v0.9.0

Full Changelog: a7garden/oxibrain@v0.8.0...v0.9.0

v0.8.0

Full Changelog: a7garden/oxibrain@v0.7.0...v0.8.0

v0.5.0

Full Changelog: a7garden/oxibrain@v0.4.0...v0.5.0

v0.4.0

Full Changelog: a7garden/oxibrain@v0.3.0...v0.4.0

v0.3.0

Full Changelog: a7garden/oxibrain@v0.2.0...v0.3.0

Changelog

Sourced from oxibrain-client's changelog.

[0.12.1] — 2026-08-30

Repair release for real-world flat-era documents.toml files.

Fixed

• Registration repairs duplicate-alias pollution. Flat-era configs can hold several [[root]] blocks sharing one alias (and hundreds of dead test roots). register_document_root now collapses duplicate aliases to the first occurrence (DocumentsConfig::dedupe) before the alias-keyed upsert (DocumentsConfig::upsert also drops every non-identical same-alias entry), so a polluted config becomes valid and reparable through the registration boundary instead of failing duplicate root alias validation forever.

[0.12.0] — 2026-08-30

Unified Oxi home (ARCHITECTURE.md v2.15, ADR-015): one discoverable root with strict per-app ownership, no shared config, and a real migration path.

Added

• D...

  Description has been truncated