[fro-bot]

This PR contains the following updates:

Package	Change	Age	Confidence	OpenSSF	Code Search
@fro.bot/systematic (source)	3.22.3 → 3.22.5

---

Release Notes

marcusrbrown/systematic (@​fro.bot/systematic)

v3.22.5

Compare Source

Bug Fixes

• guard: block the unit instead of disabling the guard when the worktree breaks a snapshot (#​1134) (e1ef220)
• guard: do not receipt a verification that overlapped another local call (#​1142) (5cad8aa)
• guard: isolate operation timeouts and rejected pushes to the one call instead of disabling the guard (#​1138) (6983602)
• security: patch transitive YAML denial of service (#​1137) (4fa8c8c)
• security: preserve release client's undici connection checks (#​1139) (ef0decf)

Documentation

• solutions: record how transient operation timeouts and rejected pushes stay confined to one call (#​1140) (e97c59f)
• solutions: record the recoverable snapshot block, the async-commit version fence, and unprovable defensive checks (#​1136) (b5eea14)
• solutions: record why a verification that overlapped another local call is sealed (#​1143) (b6e45c5)

Miscellaneous Chores

• dev: update dependency typebox to v1.3.37 (#​1133) (56cddff)

v3.22.4

Compare Source

Bug Fixes

• guard: stop the operation observer from reading a changed worktree as unchanged (#​1129) (5a4ed40)
• security: patch PostCSS Nano ID denial of service (#​1127) (6f23f58)

Documentation

• solutions: record the digest collapse, release gate, brokered push and action pin fixes (#​1122) (1709656)
• solutions: record the operation observer false-clean fixes and the review-spiral scope cut (#​1130) (f812849)

Tests

• release: accept any pinned release App token action (#​1121) (cef2d11)

Miscellaneous Chores

• deps: update actions/create-github-app-token action to v3.3.0 (#​1102) (30ec28b)
• deps: update fro-bot/agent to v0.122.2 (#​1123) (12f3f17)
• deps: update github/codeql-action action to v4.39.0 (#​1132) (b9f80cf)

---

Configuration

📅 Schedule: (in timezone America/Phoenix)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.