chore(deps): update agent skills

[ksail-bot]

Automated update of agent skills to their latest versions.

Updated files under .agents/skills:

! Skipping bubbletea: no skills found in ggprompts/tfe
  Expected skills in skills/*/SKILL.md, skills/{scope}/*/SKILL.md,
  */SKILL.md, or plugins/*/skills/*/SKILL.md
  This repository may be a curated list rather than a skills publisher
1 update(s) available:
  • golang-pro (Jeffallan/claude-skills) e347d984 > 77236ba0 [v0.4.18]
Updated golang-pro
Marked internal: .agents/skills/golang-pro/SKILL.md

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

⚠️ BASH / bash-exec - 1 error

Results of bash-exec linter (version 5.3.9)
See documentation on https://megalinter.io/10.1.0/descriptors/bash_bash_exec/
-----------------------------------------------

✅ [SUCCESS] .github/actions/cleanup-hetzner/cleanup-hetzner.sh
✅ [SUCCESS] .github/actions/cleanup-hetzner/cleanup-hetzner.test.sh
✅ [SUCCESS] .github/actions/free-disk-space/free-disk-space.sh
❌ [ERROR] .github/actions/ksail-cluster/hetzner-inventory-config.sh
    Error: File:[.github/actions/ksail-cluster/hetzner-inventory-config.sh] is not executable

✅ [SUCCESS] .github/actions/ksail-system-test/autoscaler-audit-trial.sh
✅ [SUCCESS] .github/actions/ksail-system-test/cert-manager-values-drift.sh
✅ [SUCCESS] .github/actions/ksail-system-test/helm-values-precedence.sh
✅ [SUCCESS] .github/actions/ksail-system-test/offline-ecr-upstream.sh
✅ [SUCCESS] .github/actions/ksail-system-test/offline-ecr-upstream.test.sh
✅ [SUCCESS] .github/actions/ksail-system-test/talos-kubernetes-upgrade.sh
✅ [SUCCESS] .github/actions/ksail-system-test/verify-offline-ecr-pull.sh
✅ [SUCCESS] .github/actions/ksail-system-test/verify-offline-ecr-pull.test.sh
✅ [SUCCESS] .github/actions/ksail-test-workload/install-with-recovery.sh
✅ [SUCCESS] .github/actions/ksail-test-workload/install-with-recovery.test.sh
✅ [SUCCESS] .github/actions/ksail-test-workload/reject-remote-kustomize-resources.sh
✅ [SUCCESS] .github/actions/ksail-test-workload/remote-resource-guard.test.sh
✅ [SUCCESS] .github/actions/pull-registry-image/pull-registry-image.sh
✅ [SUCCESS] .github/actions/rate-limit-gate/wait-for-rate-limit.sh
✅ [SUCCESS] .github/actions/rate-limit-gate/wait-for-rate-limit.test.sh
✅ [SUCCESS] .github/actions/warm-mirror-cache/cache-validation.test.sh
✅ [SUCCESS] .github/actions/warm-mirror-cache/mirror-artifact.sh
✅ [SUCCESS] .github/scripts/assert-gitops-deployed.sh
✅ [SUCCESS] .github/scripts/assert-gitops-deployed.test.sh
✅ [SUCCESS] .github/scripts/assert-k3k-server-creator.sh
✅ [SUCCESS] .github/scripts/assert-k3k-server-creator.test.sh
✅ [SUCCESS] .github/scripts/cask-pr-handoff-workflow.test.sh
✅ [SUCCESS] .github/scripts/collect-cask-pr-handoff.sh
✅ [SUCCESS] .github/scripts/collect-cask-pr-handoff.test.sh
✅ [SUCCESS] .github/scripts/delete-eks-smoke-cluster.sh
✅ [SUCCESS] .github/scripts/delete-eks-smoke-cluster.test.sh
✅ [SUCCESS] .github/scripts/delete-old-workflow-runs.sh
✅ [SUCCESS] .github/scripts/delete-old-workflow-runs.test.sh
✅ [SUCCESS] .github/scripts/find-merged-cask-pr-handoff.sh
✅ [SUCCESS] .github/scripts/find-merged-cask-pr-handoff.test.sh
✅ [SUCCESS] .github/scripts/install-release.test.sh
✅ [SUCCESS] .github/scripts/redraft-evergreen-cask-prs.sh
✅ [SUCCESS] .github/scripts/redraft-evergreen-cask-prs.test.sh
✅ [SUCCESS] .github/scripts/resolve-release-publish-state.sh
✅ [SUCCESS] .github/scripts/resolve-release-publish-state.test.sh
✅ [SUCCESS] .github/scripts/style-clean-cask-branch.sh
✅ [SUCCESS] .github/scripts/style-clean-cask-branch.test.sh
✅ [SUCCESS] .github/scripts/upload-release-assets.sh
✅ [SUCCESS] .github/scripts/upload-release-assets.test.sh
✅ [SUCCESS] .github/scripts/validate-cask-pr-handoff.sh
✅ [SUCCESS] .github/scripts/validate-cask-pr-handoff.test.sh
✅ [SUCCESS] .github/scripts/validate-release-ref.sh
✅ [SUCCESS] .github/scripts/validate-release-ref.test.sh
✅ [SUCCESS] .github/scripts/verify-desktop-codeql.sh
✅ [SUCCESS] .github/scripts/verify-desktop-codeql.test.sh
✅ [SUCCESS] .github/scripts/verify-go-archive-parity.sh
✅ [SUCCESS] .github/scripts/verify-go-archive-parity.test.sh
✅ [SUCCESS] .github/scripts/verify-otelzap-parity.sh
✅ [SUCCESS] .github/scripts/verify-otelzap-parity.test.sh
✅ [SUCCESS] .github/scripts/verify-vendored-comment-scan.sh
✅ [SUCCESS] desktop/scripts/make-icns.sh
✅ [SUCCESS] desktop/scripts/make-info-plist.sh
✅ [SUCCESS] desktop/scripts/make-macos-app.sh
✅ [SUCCESS] docs/demos/render.sh
✅ [SUCCESS] images/ksail-analysis-runner/smoke.sh
✅ [SUCCESS] install.sh
✅ [SUCCESS] pkg/svc/provisioner/cluster/vcluster/containerd_registry_hosts.sh
✅ [SUCCESS] scripts/stage-webui.sh

✅ Linters with no issues

actionlint, git_diff, hadolint, jscpd, jsonlint, lychee, markdown-table-formatter, markdownlint, prettier, prettier, shellcheck, shfmt, stylelint, syft, trivy-sbom, trufflehog, v8r, v8r, yamllint

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_GITLEAKS. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository

[devantler]

🤖 Generated by the Agentic Engineer

Self-review (fallback — CodeRabbit, Codex and Cursor Bugbot unavailable)

Reviewed commit: a5c94b6c0d544ef1fa9a3fbc32ba21779b2ad05d

• CodeRabbit: authenticated repository-scoped included-review exhaustion, provider event 2026-10-04 08:22:02 UTC, observed 08:46:51 UTC; the stated 28-minute reset is 08:50:02 UTC. This PR has only the ignored-title skip, not a substantive review.

• Codex: authenticated account-wide review usage limit, provider event 2026-10-04 02:11:02 UTC, freshly observed in this round. Recovery requires account credits/settings; no reset or subsequent review recovery was established.

• Cursor Bugbot: authenticated user/team usage or spend limit, provider event 2026-10-03 23:28:33 UTC, freshly observed 2026-10-04 08:46:51 UTC. Recovery requires the administrator dashboard; no reset is stated and no subsequent successful review was found.

The complete one-file diff updates version/source metadata and adds an author/company attribution footer. It changes no engineering instruction, command, authority boundary or execution/egress permission. The programmed-updater provenance guard returns 3, so the third-party skill is trusted for delivery but receives semantic review rather than the suite-owned no-review exemption. The independently reviewed diff has no actionable correctness or security finding. All current PR review/comment/thread/check surfaces were read; zero review objects, zero unresolved threads and no Bugbot check or hidden Codex finding exist. Each canonical current-head no-gate guard admits the absence of a provider verdict.

Verdict: no P0/P1 findings

No P2 or other actionable findings. This metadata-only generated change has no exercisable runtime behavior; static semantic inspection is its user evaluation. Required CI remains a separate merge gate.

[devantler]

🤖 Generated by the Agentic Engineer

Ready at a5c94b6c0d544ef1fa9a3fbc32ba21779b2ad05d: all 55 check/status contexts are settled without a CI failure, including successful CI - Required Checks; the branch has zero commits behind current main and zero unresolved threads or non-thread findings. The formal current-head fallback review is mechanically GREEN self@a5c94b6c0d544ef1fa9a3fbc32ba21779b2ad05d, with the three unavailable-provider evidence sources recorded at the review decision time. The ignored-title CodeRabbit status is not counted as a review.

This one-file generated update changes provenance/version metadata and attribution, with no changed engineering instructions or runtime behavior. Static semantic evaluation is the applicable user-path check. The bot provenance guard returns 3 rather than granting the suite-owned no-review exemption. Promotion restores the programmed bot’s ordinary head-pinned auto-merge path after these gates have been checked.

[devantler]

🤖 Generated by the Agentic Engineer

Correction to the earlier readiness record: the 55 settled CI/status contexts did not include the separate managed Code Quality results gate. The authenticated merge panel reports results pending for both configured languages, and the exact-head run inventory contains no managed analysis run at a5c94b6c0d544ef1fa9a3fbc32ba21779b2ad05d.

This PR is back in draft with auto-merge disabled. #7487 records the missing-analysis blocker, distinct from #7131, where analysis starts and then fails. The semantic review remains valid for this unchanged one-file metadata diff; it does not substitute for managed results. No analysis language, required gate or source coverage was removed, and no empty commit was added to retrigger the provider.

[devantler]

🤖 Generated by the Agentic Engineer

The necessary signed merge of current main is now at 8d9233dcbdc82d360ffeeee9ce05b555fb6aebc7. The net PR diff remains the same one-file skill metadata update; the merge preserves the two intervening shipped fixes.

The new head has an actual managed Code Quality run, created at 09:17:08 UTC. This resolves the current-head missing run observation, while completion and fresh review remain outstanding. The old-head omission in #7487 is still unexplained: actor, synchronization event and incoming source changes moved together, so this does not prove a bot or path-filter defect. Draft state remains the merge fence.

[devantler]

🤖 Generated by the Agentic Engineer

Self-review (fallback — CodeRabbit, Codex and Cursor Bugbot unavailable)

Reviewed commit: 4449452

Provider evidence and the complete current-PR review, comment, inline-comment, thread and check surfaces were freshly read at 2026-10-05T02:05:43Z. There is no delivered current-head review or unresolved finding.

• CodeRabbit: the authenticated per-developer included-review refusal at 5986472793, updated 2026-10-05T01:17:30Z, states 51 minutes until another included review, ending 02:08:30Z. The provider's rate-limit documentation confirms developer scope. No paid usage is authorized.
• Codex: the authenticated account code-review usage refusal at 5975665569, event 2026-10-04T02:11:02Z, remains present on fresh read. Recovery requires quota recovery or paid review credits; paid fallback is not authorized. No newer delivered review was found.
• Cursor Bugbot: the authenticated user/team usage-limit refusal at 5985647403, event 2026-10-04T23:36:15Z, remains present on fresh read. Recovery requires an administrator to adjust the usage/spend limit. No newer delivered review was found.

I independently reviewed the complete one-file diff and its surrounding skill after the source integration. The update changes version and source metadata and adds company/author attribution. It changes no engineering instruction, command, license, model-selection policy, authority or egress permission. The upstream links remain attribution data; they do not authorize fetching or executing third-party code. The third-party skill does not receive the suite-owned programmed-update review exemption. No actionable correctness or security issue was found.

This metadata-only change has no exercisable runtime surface. Static semantic inspection of the installed skill is its user evaluation. Hosted validation and every required check remain separate merge gates.

Verdict: no P0/P1 findings

No P2 or other actionable findings.

[devantler]

🤖 Generated by the Agentic Engineer

Integrated current main 5e35cf7bd8efc0a79d4c0d968ce90269a28291bb into this stalled draft. GitHub verifies the signed current head 4449452ac49c8828705f3a6422094aee33c36548.

The complete semantic review confirms this one-file update changes source/version metadata and author/company attribution only. Engineering instructions, licensing and authority boundaries are unchanged. Static inspection is the user evaluation because the change has no exercisable runtime behavior. A current-head real review is posted; every required CI check must still pass before promotion or merge. This integration does not demonstrate full thirteen-module managed CodeQL coverage for #7131.

[devantler]

🤖 Generated by the Agentic Engineer

Self-review (fallback — CodeRabbit, Codex and Cursor Bugbot will not deliver at this head)

Reviewed commit: 742e25b

Provider evidence, read fresh at 2026-10-06T10:00:53Z:

• CodeRabbit: this head's CodeRabbit commit status reads Review skipped: ignored keyword in the PR title, so the lane is configured not to review this pull request at all.
• Codex: the review-lane health check reports the lane down on its usage limit since 2026-10-05T16:59:30Z, with its last delivered review on 2026-10-03. Recovery needs quota or paid credits; no paid fallback is authorized.
• Cursor Bugbot: its newest output anywhere in the organization is still the usage-limit refusal at 5985647403 (2026-10-04T23:36:15Z), which needs an administrator to raise the limit. This head carries no Bugbot check.

The programmed-update classifier returns the trusted needs semantic review result for this head: one commit by the release bot, one changed file, and the skill is owned by a third party, so it gets no review exemption.

I read the complete diff of .agents/skills/golang-pro/SKILL.md against the file it replaces. It moves the recorded upstream tag and tree reference, adds a company metadata field, and adds one attribution sentence above the existing documentation link. No instruction, command, constraint, license, tool permission or authority boundary changes. The added links are attribution text and do not ask an agent to fetch or run anything. The pull request has no review threads and no earlier finding at this head.

The change has no exercisable runtime surface, so static inspection of the installed skill is its user evaluation. Required checks remain a separate gate.

Verdict: no P0/P1 findings

No P2 or other actionable findings.