Summary of Changes

Hello, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request formalizes the release of version "1.17.1" of the "fnox" project. It primarily involves updating the project's version number across its configuration, lock files, and documentation, alongside incorporating recent dependency maintenance.

Highlights

• Version Bump: The project version has been incremented from "1.17.0" to "1.17.1" across all relevant configuration and documentation files.
• Dependency Updates: The "Cargo.lock" file has been updated to reflect recent dependency maintenance, as noted in the changelog.
• Changelog Entry: A new entry for version "1.17.1" has been added to "CHANGELOG.md", detailing the dependency updates.

Greptile Summary

This is a standard release PR bumping fnox from v1.17.0 to v1.18.0. Version numbers are updated consistently across Cargo.toml, Cargo.lock, docs/cli/commands.json, docs/cli/index.md, and fnox.usage.kdl. The CHANGELOG accurately covers all 12 commits merged to main since v1.17.0 — verified against git log.

• All version fields are in sync at 1.18.0
• CHANGELOG entries match the git history: 2 features (MCP secret allowlist, sync --local-file), 1 bug fix (auth prompt in batch providers), 1 refactor (yubikey libusb dynamic loading), 1 security improvement (MCP secret redaction), and 7 dependency updates
• Cargo.lock reflects dependency bumps from the merged renovate PRs (chore(deps): lock file maintenance #344, chore(deps): update jdx/mise-action digest to 5228313 #351–chore(deps): update rust crate clap to v4.6.0 #356); notably rmcp advanced from 1.1.0 → 1.2.0 and a new transitive dependency opentelemetry 0.31.0 was introduced via google-cloud-gax-internal 0.7.10
• google-cloud-auth gained several new transitive dependencies (chrono, hex, hmac, sha2, url) as part of its 1.6.0 → 1.7.0 bump, which may modestly increase binary size but poses no correctness risk

Confidence Score: 5/5

• This PR is safe to merge — it is a mechanical version-bump release commit with no logic changes.
• All changed files are either auto-generated version fields or the CHANGELOG. The CHANGELOG has been verified against the git log and is complete. Version numbers are consistent across every artifact. Cargo.lock changes are the accumulated result of already-merged and CI-validated dependency PRs.
• No files require special attention

Important Files Changed

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[v1.17.0 release tag] --> B[Merged PRs since v1.17.0]

    B --> C1["feat: sync --local-file (#317)"]
    B --> C2["fix: auth prompt in batch providers (#349)"]
    B --> C3["refactor: yubikey libusb dynamic load (#348)"]
    B --> C4["security: MCP redact secret values (#357)"]
    B --> C5["feat: MCP secret allowlist (#358)"]
    B --> C6["deps: 7x renovate updates (#344, #351–#356)"]

    C1 & C2 & C3 & C4 & C5 & C6 --> D[chore: release v1.18.0]

    D --> E1["Cargo.toml: 1.17.0 → 1.18.0"]
    D --> E2["Cargo.lock: dependency versions synced"]
    D --> E3["CHANGELOG.md: v1.18.0 section added"]
    D --> E4["docs/cli/commands.json: 1.17.0 → 1.18.0"]
    D --> E5["docs/cli/index.md: 1.17.0 → 1.18.0"]
    D --> E6["fnox.usage.kdl: 1.17.0 → 1.18.0"]

    E1 & E2 & E3 & E4 & E5 & E6 --> F[v1.18.0 release tag]

_{Last reviewed commit: fa86ca1}

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​tracing-subscriber@​0.3.22 ⏵ 0.3.23	+2		-3

View full report