chore(deps): bump github.com/pilot-protocol/pilotprotocol from 1.13.6 to 1.13.9

[dependabot]

Bumps github.com/pilot-protocol/pilotprotocol from 1.13.6 to 1.13.9.

Release notes

Sourced from github.com/pilot-protocol/pilotprotocol's releases.

v1.13.9

What's Changed

• installer: sync install.sh with canonical, guard the drift in CI by @​TeoSlayer in pilot-protocol/pilotprotocol#432
• installer: re-sync install.sh with canonical (release#43) by @​TeoSlayer in pilot-protocol/pilotprotocol#433
• daemon: stop the KX rate limiter wedging key exchange permanently by @​TeoSlayer in pilot-protocol/pilotprotocol#436
• daemon: make connAdapter read deadlines real, stop leaking registry timers by @​TeoSlayer in pilot-protocol/pilotprotocol#435
• installer: re-sync install.sh with canonical (release#44) by @​TeoSlayer in pilot-protocol/pilotprotocol#440
• deps: bump to the released fixes, for a v1.13.8 that actually carries them by @​TeoSlayer in pilot-protocol/pilotprotocol#441
• daemon: detect host suspend and recover the transport on resume by @​TeoSlayer in pilot-protocol/pilotprotocol#442
• fix(webhook): wire HMAC signing secret through daemon CLI flags (PILOT-90) by @​matthew-pilot in pilot-protocol/pilotprotocol#439
• catalogue: io.pilot.agentphone 0.3.0 → 0.3.1 (managed-model isolation + setup) by @​Alexgodoroja in pilot-protocol/pilotprotocol#438

Full Changelog: pilot-protocol/pilotprotocol@v1.13.7...v1.13.9

v1.13.8

What's Changed

• installer: sync install.sh with canonical, guard the drift in CI by @​TeoSlayer in pilot-protocol/pilotprotocol#432
• installer: re-sync install.sh with canonical (release#43) by @​TeoSlayer in pilot-protocol/pilotprotocol#433
• daemon: stop the KX rate limiter wedging key exchange permanently by @​TeoSlayer in pilot-protocol/pilotprotocol#436
• daemon: make connAdapter read deadlines real, stop leaking registry timers by @​TeoSlayer in pilot-protocol/pilotprotocol#435

Full Changelog: pilot-protocol/pilotprotocol@v1.13.7...v1.13.8

v1.13.7

What's Changed

• test(web4): fix TestSetTagsDashboardAPI against admin-gated /api/stats by @​TeoSlayer in pilot-protocol/pilotprotocol#431
• chore(deps): bump github.com/pilot-protocol/rendezvous from 0.2.5 to 0.2.7 by @​dependabot[bot] in pilot-protocol/pilotprotocol#428
• chore(deps): bump actions/create-github-app-token from 1 to 3 by @​dependabot[bot] in pilot-protocol/pilotprotocol#427

Full Changelog: pilot-protocol/pilotprotocol@v1.13.6...v1.13.7

Changelog

Sourced from github.com/pilot-protocol/pilotprotocol's changelog.

Changelog

All notable changes to Pilot Protocol are recorded here. This file follows Keep a Changelog conventions. The project uses Semantic Versioning.

Detailed per-release notes are on the GitHub Releases page.

[Unreleased]

Added

• The daemon caps its own log file. launchd never rotates the daemon's StandardOutPath/StandardErrorPath (~/.pilot/daemon.log), which grew without bound — 22 MB on one laptop. When stderr is a regular file the daemon now checks it every minute and, past -log-max-size MB (default 50; 0 disables), copy-truncates it into gzipped generations daemon.log.pilot.1.gz … daemon.log.pilot.N.gz (-log-max-backups, default 3). Truncation is safe for every writer — the file is opened append-only and shared by child processes. Both flags can also be set in ~/.pilot/config.json (log_max_size, log_max_backups). No-op when the output goes to journald, a pipe or a terminal.
  • By default only a log Pilot set up is rotated: one inside ~/.pilot, where install.sh's launchd job and pilotctl daemon start put it (also $PILOT_HOME/.pilot), and the Homebrew service's $(brew --prefix)/var/log/pilot-daemon.log when the daemon is the one brew install pilotprotocol installed (brew services, launchd or systemd). If you send the daemon's output somewhere else, rotation stays off unless you set -log-max-size explicitly, on the command line or in config.json, so your own rotation (logrotate, newsyslog) keeps working as before.
  • A rotation interrupted by a crash or kill is finished by the next rotation of that log. In ~/.pilot this includes a rotation left under the pilot-<pid>.log name of a daemon that pilotctl daemon start launched earlier. Only those names are finished this way, so another program's <name>.pilot.1 is never taken for one. A rotation holds its uncompressed copy (<log>.pilot.1) locked with flock until it is compressed, so a copy that another running daemon is still working on is left alone.
  • If the log cannot be truncated (an append-only file, or a filesystem that refuses it), no backup is lost. The round's copy is removed, the generations are put back, and the next attempt waits twice as long as the last, up to about an hour.
  • It never touches files it did not create. The .pilot infix keeps its backups apart from logrotate's and newsyslog's names (daemon.log.1, daemon.log.2.gz, …). It skips a symlink or another user's file at one of its own names, and creates its files with O_EXCL|O_NOFOLLOW. If other users can create files in the log's directory, it only truncates and keeps no backups. That is the case when the directory is writable by others, is owned by another user, or is writable by a group other

... (truncated)

Commits

• 216bcfc catalogue: io.pilot.agentphone 0.3.0 → 0.3.1 (managed-model isolation + setup...
• c9bafff fix(webhook): wire HMAC signing secret through daemon CLI flags (PILOT-90) (#...
• e887f87 daemon: detect host suspend and recover the transport on resume (#442)
• 69dccce deps: bump to the released fixes, for a v1.13.8 that actually carries them (#...
• 92916be installer: re-sync install.sh with canonical (release#44) (#440)
• 6ff9bff daemon: make connAdapter read deadlines real, stop leaking registry timers (#...
• 9a75dd3 daemon: stop the KX rate limiter wedging key exchange permanently (#436)
• af1abc7 installer: re-sync install.sh with canonical (release#43) (#433)
• c967c67 installer: sync install.sh with canonical, guard the drift in CI (#432)
• 4f1bc5f chore(deps): bump actions/create-github-app-token from 1 to 3 (#427)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!