[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps WireCatLabs/cli-base/.github/workflows/node-ci.yml from 0.61.2 to 0.65.2.

Changelog

Sourced from WireCatLabs/cli-base/.github/workflows/node-ci.yml's changelog.

Changelog

Notable changes to @wirecat/cli-base (published as @wirecat/cli-core up to 0.20.0), one section per version, newest first. Versions follow semantic versioning; before 1.0.0 a minor release may change the API. Versions before 0.8.0 are in the git tags.

Every entry says what changed as a caller sees it, why, and what to watch for — the rules are docs/dev/CONVENTIONS.md.

0.69.0 — 01.11.2026

Added

• Publishing: where a CLI is published beyond npm, and how. npm, ClawHub, the MCP Registry, the Claude plugin marketplace, Hermes, Glama, GitHub and wirecat.dev: each one's setup, what a release does, how to prove a publish happened (three jobs go green without publishing), the problems met with their fixes, a checklist for a new CLI, and each CLI's status. new-cli.md points to the checklist.

Fixed

• markdownFiles passes over a worktree or clone inside the checkout (a folder with its own .git, such as .worktrees/<topic>). Its pages are another branch's, and their broken links failed cli-template's release check. Every CLI's docs:check gets this through its own docs-rules.ts, with no change there.

• cli-dev docs-check reads a heading's anchor as GitHub does when it has <…> in code. It dropped `v<version>` as an HTML tag and wanted tag-v-only, where GitHub makes tag-vversion-only. So a working link failed and a broken one passed. Two links in architecture.md were broken that way and are fixed. After this release a CLI's docs:check may find links of its own that never worked on GitHub.

0.68.1 — 31.10.2026

Added

• The audit accepts a flag that one CLI lacks by design, by name. A parity difference may carry absent: "<cli>" with a target of <path> <flag> and no CLI list; it covers every finding where only that CLI lacks the flag and the others agree, so another CLI joining the group does not make it stale. PARITY_GROUPS uses it to declare that memo has no profiles of its own (no --profiles on mcp serve, mcp revoke, mcp server start|status|stop); memo selects other CLIs' accounts with --source and --account. A run without the absent CLI does not call it stale. WC-MCP-9 and WC-ACCT-1 say so. See #390.

0.68.0 — 31.10.2026

Removed

• WC-REL-10: a messenger CLI is released after the owner's yes in the conversation, with no signed report. bin/release in max-cli and whatsapp-cli no longer reads a release report or a Signed off: line. The agent asks the owner before it runs bin/release; one yes covers one version.

Changed — may break callers

... (truncated)

Commits

• 5cee478 perf(query): defineQuery checks each registry object once per process (#399)
• bfdab52 chore(release): 0.65.1 (#398)
• a8c1561 fix(credentials,dev): isolated runs stay out of the system keyring; first rel...
• 2ff710e docs(standards): WC-SECR-24 a run with moved folders never writes the owner's...
• c07e4c0 chore(standards): register mail-cli in the all parity group and the cron minu...
• e04a21c docs(standards): double-quote cli-dev bundle externals in WC-LAY-10 (#393)
• a579c72 chore(release): 0.65.0 (#392)
• 3eaf77f fix(audit): compare gcal only on the commands it already shares, until the ot...
• 0103d41 fix(dev): cli-dev bundle's loader finds a server after a flag (#389)
• 3cc251e docs(standards)!: handbook fixes and owner rulings from the gcal standards au...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[leemour]

Superseded by #103, which pins cli-core 0.584.0, cli-base 0.77.1 and the cli-base workflows at v0.77.1.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.