[robot-rosey]

This PR contains the following updates:

Package	Type	Update	Change
atuin	tools	patch	18.24.6 → 18.24.8

---

Release Notes

atuinsh/atuin (atuin)

v18.24.8

Compare Source

Bug Fixes

• (release) Build musl artifacts with a musl C++ toolchain for Luau (#​4723)

Documentation

• List the Threads page in the AI section of the nav (#​4722)

Features

• Update whats-new.txt (#​4724)

v18.24.7

Compare Source

Bug Fixes

• (ai) Leave no line for a paragraph whose glyphs are all too wide (#​4712)
• (client) Read history on storage that refuses writes (#​4711)
• (daemon) Give the launchd agent every harness's home variables (#​4713)
• (hooks) Follow XDG_CONFIG_HOME for Amp's plugin and MCP detection (#​4714)
• (nix) Add libstdc++ to atuin's rpath for the luau vm
• (nix) Check atuin starts before generating completions
• (threads) Keep a restored fork's stored parent through a read from the start (#​4702)
• (threads) Keep an import from deadlocking on capture's locks (#​4708)
• (threads) Keep messages omp agents send each other (#​4716)

Features

• (config) Read atuin.lua and .atuin.lua config files
• (hub) Open org threads at //threads/
• (hub,client) Name CLI login tokens for the machine they log in from
• (mcp) Forward thread tools to Atuin for Teams while it is on, from a cached tool list (#​4720)
• (search) Show hand-written what's new notes once after an upgrade (#​4704)
• (threads) Hermes Agent harness (#​4689)
• (threads) Capture Hermes subagents as child sessions (#​4691)
• (threads) Write, fork and continue into Hermes sessions (#​4701)

Miscellaneous Tasks

• (release) Publish stable releases to WinGet (#​4695)

Performance

• (daemon) Reduce index rebuilds on startup from shell mismatch (#​4698)
• (daemon) Cap fuzzy matcher at 8 threads (#​4703)

Refactor

• (deps) Bump proptest from 1.11.0 to 1.12.0 (#​4628)

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[clanker-claude]

atuin: v18.24.6 → v18.24.7

Verdict: Changes required before merge — the new version is not installable yet (upstream release packaging failed). No config-level breakage found.

Blocking issue:

• v18.24.7 was tagged but its release binaries were never published, so mise install atuin@18.24.7 fails. The upstream Release workflow for the v18.24.7 tag failed: both build-local-artifacts (*-unknown-linux-musl) jobs failed at the "Build artifacts" step, so no binaries were produced or uploaded. The v18.24.7 release page lists only the auto-generated source archives, the release is not yet returned by the GitHub Releases API, and the binary asset URLs (atuin-<arch>-unknown-linux-musl.tar.gz, atuin-<arch>-apple-darwin.tar.gz, and the .sha256 checksum files) return 404 — while the same URLs for v18.24.6 return 200. This repo installs atuin through mise, whose registry entry for atuin lists the backends ["aqua:atuinsh/atuin", "cargo:atuin"]; the aqua backend resolves versions and downloads artifacts from GitHub releases (type: github_release, Linux → unknown-linux-musl, checksum asset {{.Asset}}.sha256, plus release-workflow artifact attestations), so the new pin cannot resolve an installable artifact today. Affects home/dot_config/mise/private_config.toml. Fix: hold this PR until upstream re-runs the release workflow and the v18.24.7 assets are published, then confirm mise install atuin@18.24.7 succeeds before merging. The cargo:atuin fallback would mean building atuin from source, which is not a practical substitute.

Breaking changes:

• None affecting this repo. Upstream renamed the [octavo] config section to [teams] in 18.24.7, but legacy [octavo] keys are still read whenever [teams] is unset; this repo's config sets neither, so no change is needed.
• Verified unchanged in v18.24.7: every key this repo sets (sync_address, history_filter, enter_accept, search_mode = "daemon-fuzzy", [stats] common_subcommands, [sync] records = true, [daemon] enabled / autostart), and the CLI surface used by home/dot_config/zsh/init.zsh.tmpl (atuin init zsh, atuin hex init, atuin history prune).

Deprecations:

• None.

New features worth adopting:

• Daemon startup and search performance: index rebuilds on startup are reduced when the shell does not match (upstream PR #4698) and the fuzzy matcher is capped at 8 threads (upstream PR #4703). This repo runs the daemon with search_mode = "daemon-fuzzy", so both apply directly; no config change needed.
• macOS launchd agent now inherits coding-agent home variables such as CODEX_HOME / HERMES_HOME (upstream PR #4713) — relevant to [daemon] autostart = true in home/dot_config/atuin/private_config.toml.tmpl. Existing installs only pick the new variables up after atuin daemon restart.
• One-time "what's new" note in search after an upgrade (upstream PR #4704), with a new show_whats_new key (default true). Optional: add the commented show_whats_new block to home/dot_config/atuin/private_config.toml.tmpl, which otherwise mirrors upstream's default config.toml, so the template keeps tracking upstream.
• Dependency: rustix is bumped to 1.1.6 for RUSTSEC-2026-0486, a security fix that comes along with this upgrade.

Sources consulted:

• Upstream changelog for 18.24.7
• Full diff v18.24.6...v18.24.7
• Failed upstream Release workflow run for the v18.24.7 tag
• v18.24.7 release page (source archives only)
• v18.24.7 binary asset URL (currently 404)
• mise registry entry for atuin
• aqua registry entry for atuin (asset, checksum and attestation rules)

[clanker-claude]

atuin: v18.24.6 → v18.24.8

Verdict: Safe to merge — the earlier release-packaging blocker is now resolved, and no config-level breakage was found.

Prior blocking issue — now resolved:

• The previous review of this PR (against v18.24.7) blocked on unpublished release binaries. v18.24.7 will never be installable: its release workflow run failed at the "Build artifacts" step for both *-unknown-linux-musl targets and was never re-run, so no GitHub Release exists for that tag and its asset URLs still return 404. Skip it.
• v18.24.8 is precisely the upstream fix for that failure. Upstream PR #4723 ("fix(release): build musl artifacts with a musl C++ toolchain for Luau") was merged after the v18.24.7 tag and is included in v18.24.8. Its release workflow has now completed successfully, and the GitHub Release is published (2026-11-13T02:17:45Z) with the full 38-asset set.
• The assets that mise resolves through the aqua backend all return HTTP 200: atuin-x86_64-unknown-linux-musl.tar.gz (Linux → unknown-linux-musl), atuin-x86_64-apple-darwin.tar.gz (macOS → apple-darwin), the aarch64 equivalents, and each matching {{.Asset}}.sha256 checksum file. An attestation signed by the upstream release workflow exists for the musl tarball, satisfying the github_artifact_attestations rule in the aqua registry entry. mise install atuin@18.24.8 therefore resolves for both Linux and macOS.

Breaking changes:

• None affecting this repo. Verified every key this repo sets against the upstream Settings struct and defaults at v18.24.8 — all unchanged: sync_address, history_filter, enter_accept, search_mode = "daemon-fuzzy" (the DaemonFuzzy variant still exists), [stats] common_subcommands, [sync] records = true, [daemon] enabled / autostart.
• Upstream renamed the [octavo] config section to [teams] in 18.24.7. Legacy [octavo] keys are still read whenever [teams] is unset, and this repo sets neither, so no change is needed.
• The CLI surface used by home/dot_config/zsh/init.zsh.tmpl is unchanged: atuin init zsh, atuin hex init (hex is still an alias for pty-proxy) and atuin history prune all still exist.
• No schema migration applies to the local history database. The sqlite builder changes in this range are about auto-detecting read-only storage (upstream PR #4711).
• Search filtering is unaffected: workspaces already defaulted to true in v18.24.6, and with filter_mode unset here the effective default remains global.

Deprecations:

• None.

New features worth adopting:

• show_whats_new — a new config key (default true). After an upgrade, atuin draws a one-time hand-written note over the search UI; it takes no keypress and closes on the first input. Upstream added a commented entry for it to the default config.toml in this range, and home/dot_config/atuin/private_config.toml.tmpl mirrors that file but is missing the block. Worth adding the commented block (between show_tabs and auto_hide_height) to keep the template tracking upstream, or set show_whats_new = false to leave the search UI exactly as it is. The note is drawn by the client-side search TUI, so it applies to search_mode = "daemon-fuzzy" as well.
• Lua config files (atuin.lua and .atuin.lua) are now read alongside the TOML config. Optional — the TOML config here is sufficient.
• Daemon startup and search performance (upstream PR #4698 and #4703) applies directly here, given [daemon] enabled = true and search_mode = "daemon-fuzzy". No config change needed.
• The macOS launchd agent now inherits coding-agent home variables (upstream PR #4713). This repo defines none of those variables, so it is a no-op here; existing daemons need atuin daemon restart to pick the change up.

Minor template drift (pre-existing, not caused by this upgrade):

• home/dot_config/atuin/private_config.toml.tmpl still documents workspaces as "(default: false)" and lists a search.filters order that differs from upstream. Upstream has documented workspaces as defaulting to true since before v18.24.6. Both lines are commented out, so there is no behavior impact, but it is worth correcting when the template is next refreshed.

Sources consulted:

• Upstream changelog for 18.24.8
• Full diff v18.24.6...v18.24.8
• v18.24.8 release page (published, assets present)
• v18.24.8 release workflow run (success)
• Failed v18.24.7 release workflow run
• Upstream PR #4723 — musl C++ toolchain for Luau
• Upstream PR #4711 — read history on read-only storage
• Upstream PR #4698 — reduce daemon index rebuilds
• Upstream PR #4703 — cap fuzzy matcher at 8 threads
• Upstream PR #4713 — launchd agent harness home variables
• mise registry entry for atuin
• aqua registry entry for atuin