build(deps): Bump the major group across 1 directory with 6 updates

[dependabot]

Bumps the major group with 6 updates in the / directory:

Package	From	To
gh-workflow	0.8.1	0.9.0
posthog-rs	0.22.0	0.25.5
sysinfo	0.38.4	0.39.6
termimad	0.34.1	0.35.4
rmcp	1.8.0	3.4.0
async-openai	0.41.3	0.42.0

Updates gh-workflow from 0.8.1 to 0.9.0

Commits

• 4073ed3 chore(deps): update rust crate serde_yml to 0.0.13 (#221)
• f5ac2ab chore(deps): update actions/checkout action to v7 (#224)
• 487f3bc feat(gh-workflow-tailcall): add forge-style release workflows
• b68b392 chore(deps): update rust crate syn to v3.0.3 (#233)
• cbec366 chore(deps): update rust crate serde_json to v1.0.151 (#232)
• c04e6b3 chore(deps): update rust crate syn to v3.0.2 (#231)
• d9a28b5 chore(deps): update rust crate syn to v3 (#230)
• 283ed76 chore(deps): update rust crate serde to v1.0.229 (#229)
• e4d5d6a chore(deps): update rust crate quote to v1.0.47 (#228)
• 68510ef chore(deps): update rust crate async-trait to v0.1.91 (#227)
• Additional commits viewable in compare view

Updates posthog-rs from 0.22.0 to 0.25.5

Release notes

Sourced from posthog-rs's releases.

0.25.5

Patch changes

• af85090 Do not panic when the HTTP client cannot be built. A container without CA certificates makes the reqwest builder fail, which stopped the calling program. The client now logs a warning, disables itself, and lets the program continue. The feature flag pollers degrade the same way: they log a warning and stay stopped instead of panicking. — Thanks @​posthog[bot]!

0.25.4

Patch changes

• 20cf390 Match local feature flag properties with the same case folding, string coercion, and boolean-like filter precedence as the flags service. Substring and prefix/suffix operators now fold ASCII only, while exact and is_not use the service's truthiness handling before Unicode-lowercase comparison. — Thanks @​marandaneto!

0.25.3

Patch changes

• 6d1a444 Treat omitted local evaluation properties as inconclusive for presence operators. — Thanks @​marandaneto!

0.25.2

Patch changes

• e4ac827 Return an empty feature flag snapshot without evaluation when feature flag keys are explicitly empty. — Thanks @​marandaneto!

0.25.1

Patch changes

• 253a7c0 Prevent transport worker deadlocks during client shutdown. — Thanks @​marandaneto!

0.25.0

Minor changes

• 710ea93 Add group_identify helper to Client (async) and Client (blocking) for creating or updating group properties via $groupidentify. — Thanks @​vjymisal0 for your first contribution 🎉!

0.24.0

Minor changes

• 7e2bede Add a Client::alias helper that merges two distinct IDs onto the same person, so callers no longer need to hand-build the $create_alias event and know that distinct_id is written both at the top level and inside properties. Available on the async and blocking clients with the same fire-and-forget signature as capture. A blank ID on either side cannot describe a merge, so the event is dropped with a warning rather than sent. — Thanks @​HughScott2002 for your first contribution 🎉!

0.23.3

Patch changes

• f4e940d Normalize SDK timestamps to UTC — Thanks @​marandaneto!

0.23.2

Patch changes

• ea92c93 Surface feature flag payloads from local evaluation.

  The definitions manifest carries each flag's payloads, but locally evaluated flags always reported payload: None, so FeatureFlagEvaluations::get_flag_payload returned nothing for them. When flag_keys was fully covered locally there was also no /flags round trip left to recover the payload from. Local evaluation now resolves the payload for the matched value ("true" for a boolean match, the variant key for a multivariate one) and decodes it exactly like a /flags payload, so a flag returns the same payload whichever path evaluated it. As a result, $feature_flag_called events for locally evaluated flags now carry $feature_flag_payload, matching remote evaluation. — Thanks @​slshults!

• 962282c Stop malformed cohort definitions from aborting the process during local evaluation.

  Cohort resolution recursed through nested cohort references with nothing bounding the recursion, so a cohort that referenced itself, directly or through another cohort, recursed until the thread stack was exhausted. A Rust stack overflow aborts the process rather than panicking catchably, so a single bad definitions response could take down the calling server, and would again on restart as soon as the poller refetched. A long chain of distinct cohorts reached the same abort without any cycle at all, and because each cohort is a separate shallow entry in the manifest, such a chain also cleared serde_json's own nesting limit on the way in.

... (truncated)

Changelog

Sourced from posthog-rs's changelog.

0.25.5 — 2026-09-15

Patch changes

• af85090 Do not panic when the HTTP client cannot be built. A container without CA certificates makes the reqwest builder fail, which stopped the calling program. The client now logs a warning, disables itself, and lets the program continue. The feature flag pollers degrade the same way: they log a warning and stay stopped instead of panicking. — Thanks @​posthog[bot]!

0.25.4 — 2026-08-31

Patch changes

• 20cf390 Match local feature flag properties with the same case folding, string coercion, and boolean-like filter precedence as the flags service. Substring and prefix/suffix operators now fold ASCII only, while exact and is_not use the service's truthiness handling before Unicode-lowercase comparison. — Thanks @​marandaneto!

0.25.3 — 2026-08-26

Patch changes

• 6d1a444 Treat omitted local evaluation properties as inconclusive for presence operators. — Thanks @​marandaneto!

0.25.2 — 2026-08-25

Patch changes

• e4ac827 Return an empty feature flag snapshot without evaluation when feature flag keys are explicitly empty. — Thanks @​marandaneto!

0.25.1 — 2026-08-24

Patch changes

• 253a7c0 Prevent transport worker deadlocks during client shutdown. — Thanks @​marandaneto!

0.25.0 — 2026-08-24

Minor changes

• 710ea93 Add group_identify helper to Client (async) and Client (blocking) for creating or updating group properties via $groupidentify. — Thanks @​vjymisal0 for your first contribution 🎉!

0.24.0 — 2026-08-19

Minor changes

• 7e2bede Add a Client::alias helper that merges two distinct IDs onto the same person, so callers no longer need to hand-build the $create_alias event and know that distinct_id is written both at the top level and inside properties. Available on the async and blocking clients with the same fire-and-forget signature as capture. A blank ID on either side cannot describe a merge, so the event is dropped with a warning rather than sent. — Thanks @​HughScott2002 for your first contribution 🎉!

0.23.3 — 2026-08-14

Patch changes

• f4e940d Normalize SDK timestamps to UTC — Thanks @​marandaneto!

0.23.2 — 2026-08-10

... (truncated)

Commits

• 1604cd2 chore: Release v0.25.5 [skip ci]
• af85090 fix(client): do not panic when the HTTP client cannot be built (#247)
• eb1449e docs: agree on public API changes before implementing them (#254)
• 09c99ae ci: remove redundant release contents permission (#252)
• 586464c chore(deps): bump the github-actions group with 2 updates (#246)
• 7fbc6bd chore: Release v0.25.4 [skip ci]
• 20cf390 fix(flags): align local string matching with the flags service (#238)
• b280b44 chore(deps): bump sha1 from 0.10.7 to 0.11.0 in the cargo-dependencies group ...
• 6db22b3 chore(deps): bump the github-actions group with 2 updates (#241)
• 53bbf8e chore: Release v0.25.3 [skip ci]
• Additional commits viewable in compare view

Updates sysinfo from 0.38.4 to 0.39.6

Changelog

Sourced from sysinfo's changelog.

0.39.6

• NetBSD: Add support for disk I/O usage.
• NetBSD: Improve retrieval of disk information.

0.39.5

• macOS: Fix build for apple app store

0.39.4

• Unix: Fix soundness issue when retrieving user's groups.
• macOS: Add new macOS version name.
• macOS: Fix inaccurate open_files returned value.

0.39.3

• Unix: Fix retrieval of Network::mac_addr.
• Linux: Improve retrieval of process information if process terminates while doing so.

0.39.2

• Windows: Greatly improve performance of System::refresh_cpu_specifics when CPU usage is not requested.
• iOS: Fix compilation error when user feature is enabled.
• Linux: Correctly set thread information for processes.

0.39.1

• Linux: Fix wrong network numbers computation.

0.39.0

• Update minimum supported rust version to 1.95.
• Add new NetworkData::operational_state API.
• Add new Process::cgroup_limits API (only returning data on Linux).
• All supported systems other than Windows: Improve performance of Networks::refresh*.
• All supported systems other than Windows: Fix soundness issue when retrieving users.
• Linux: Take into account parent cgroup memory limits.
• Linux: Fix panic when retrieving process information on ESXi.
• FreeBSD: Use the name of dataset as name for zfs disks.

Commits

• 1bc6ed4 Update crate version to 0.39.6
• da9bea0 Update CHANGELOG for 0.39.6
• cefd877 Update src/unix/bsd/netbsd/system.rs
• 9d79f93 Fix NetBSD disk I/O and process I/O statistics
• 029025e Update crate version to 0.39.5
• 78205e7 Update CHANGELOG for 0.39.5
• 2a39746 Fix build for apple app store
• c07bb44 Update CHANGELOG for 0.39.4
• 559b07d Update crate version to 0.39.4
• 07e3177 Linux: Fix soundness issue when retrieving user groups
• Additional commits viewable in compare view

Updates termimad from 0.34.1 to 0.35.4

Changelog

Sourced from termimad's changelog.

v0.35.4 - 2026-09-05

• fix parse_color returning the light variant for darkblue, darkcyan and darkyellow, and accepting strings merely containing a color name

v0.35.3 - 2026-09-02

• fix CropWriter::queue_char and queue_unstyled_char never writing in the last allowed column
• CropWriter::queue_char replaces tabs like queue_unstyled_char does
• a char which doesn't fit the remaining width stops CropWriter's char-level writing, instead of letting a following narrower char take its column

v0.35.2 - 2026-08-21

• fix code blocks overflowing the available width when a line is wider than it, instead of being wrapped - Fix #80 - Thanks @​youdie006

v0.35.1 - 2026-07-11

• Fix a panic in some cases of tables with rows having more columns than the header row - Fix #77

v0.35.0 - 2026-07-10

• Support for ordered lists, and their depth dependent styling - Fix #75
• Unordered list items can also be created with - and + and not just *
• CompoundStyle, LineStyle, and StyledChar are now Copy

Commits

• See full diff in compare view

Updates rmcp from 1.8.0 to 3.4.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.4.0

Added

• (model) add ServerConfig and ClientConfig (#1266)

Fixed

• (model) deprecate ServerInfo and ClientInfo aliases (#1156)

rmcp-v3.4.0

Added

• (model) add ServerConfig and ClientConfig (#1266)

Fixed

• (rmcp) use ServerConfig in cancellation test (#1273)
• (rmcp) route peer cancellation by lifecycle (#1262)
• run first pre-init request in service loop (#1263)
• (auth) let url origin decide prm discovery (#1264)
• (model) deprecate ServerInfo and ClientInfo aliases (#1156)
• (auth) ignore non-metadata JSON when probing for protected resource metadata (#1204)
• do not treat malformed JSON 200 as Accepted for requests (#1208)
• (streamable-http-server) map handler-generated HeaderMismatch to HTTP 400 (#1259)
• (http) enforce Origin validation semantics (#1192)

rmcp-macros-v3.3.0

Added

• (macros) reject empty tool_router (#1233)

rmcp-v3.3.0

Added

• add ServerHandler::negotiate_initialize (#1247)
• (macros) reject empty tool_router (#1233)
• (auth) add enterprise refresh-token and ID-JAG exchanges (#1234)

Fixed

• (sse) saturate exponential reconnect backoff to avoid overflow panic (#1231)
• resolve clippy warnings across workspace (#1195)
• (auth) unify refresh checks and error handling (#1236)

Other

• (deps) update process-wrap requirement from 9.0 to 10.0 (#1229)

rmcp-macros-v3.2.0

Added

... (truncated)

Commits

• fd7811f chore: release v3.4.0 (#1258)
• 0550e13 fix(rmcp): use ServerConfig in cancellation test (#1273)
• b037c0f fix(rmcp): route peer cancellation by lifecycle (#1262)
• d481cb0 fix: run first pre-init request in service loop (#1263)
• 47fcdf4 fix(auth): let url origin decide prm discovery (#1264)
• 165ff92 feat(model): add ServerConfig and ClientConfig (#1266)
• fbfc5cc ci: add OpenSSF Scorecard analysis (#1214)
• 3075dc9 fix(model): deprecate ServerInfo and ClientInfo aliases (#1156)
• a5d1169 fix(auth): ignore non-metadata JSON when probing for protected resource metad...
• 4fa84a5 fix: do not treat malformed JSON 200 as Accepted for requests (#1208)
• Additional commits viewable in compare view

Updates async-openai from 0.41.3 to 0.42.0

Release notes

Sourced from async-openai's releases.

v0.42.0

What's Changed

• [codex] Add max reasoning effort by @​michaelfeil in 64bit/async-openai#573
• feat: spec sync by @​64bit in 64bit/async-openai#587

New Contributors

• @​michaelfeil made their first contribution in 64bit/async-openai#573

Full Changelog: 64bit/async-openai@async-openai-v0.41.3...async-openai-v0.42.0

Commits

• d5cad58 chore: Release
• fa5b59f feat: spec sync (#587)
• 3f9a127 Add max reasoning effort (#573)
• See full diff in compare view