chore(deps): update all dependencies to v12#32
Open
gw0-bot wants to merge 1 commit into
Open
Conversation
3bc7db1 to
0b8f6c3
Compare
edd78a7 to
7d57d36
Compare
7d57d36 to
1eedcc1
Compare
1eedcc1 to
be71eeb
Compare
be71eeb to
a5f2066
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
10.10.0→12.2.1Release Notes
sickn33/antigravity-awesome-skills (sickn33/antigravity-awesome-skills)
v12.2.1: "Security Scan Follow-up"Compare Source
[12.2.1] - 2026-06-07 - "Security Scan Follow-up"
Security
user-thoughtsruntime file handling against symlink traversal and realpath escapes inside.ustht/.path/linkpathheaders before GNU long-name headers.git add, predictable/tmpinstaller paths, token-printing Vercel commands, and unsafe JSON-LD injection.runapi-cli,open-dynamic-workflows, andpolis-protocol.Improvements
2slides-ppt-generatorplugin setup as manual with declared Python requirements.v12.2.0: "Education, Media, Workflow, and Creative Skill Intake"Compare Source
[12.2.0] - 2026-06-07 - "Education, Media, Workflow, and Creative Skill Intake"
Start here:
npx antigravity-awesome-skills --helpThis release packages the June 7 maintainer batch: accepted community PRs for education, media processing, workflow orchestration, media-generation APIs, and article illustration workflows. The catalog is synced to 1,525+ skills, plugin mirrors are refreshed, and the hosted web-app SEO metadata now matches the current catalog count.
New Skills
Improvements
examprep-airelease metadata and education category support as part of the accepted education skill update.llms.txt, social preview copy, prerender fallback text, and SEO verification tests from1,520+to1,525+.Credits
cv-generatorandexamprep-airefinements).open-dynamic-workflows).video-content-extractor).runapi-cli).article-illustrations).v12.1.0: "Community Skills, Release Sync, and Dependency Hardening"Compare Source
[12.1.0] - 2026-06-05 - "Community Skills, Release Sync, and Dependency Hardening"
Start here:
npx antigravity-awesome-skills --helpThis release packages the June 5 maintainer batch: accepted community PRs, dependency security updates, web-app SEO count fixes, generated registry sync, and data-use guardrails for scraping-oriented documentation. The catalog is synced to 1,520+ skills.
New Skills
Improvements
vercel-optimizesanitizer coverage and star-history refresh automation.Credits
antigravity-agent-manager).linkedin-content-generator).event-staffing-ordering,event-staffing-compliance).2slides-ppt-generator).examprep-ai).hasdata,hasdata-cli).anti-sycophancy,permission-manager,skill-suggester,smart-git-automation).v12.0.0: "Specialized Plugins, Discovery SEO, and Community Skill Intake"Compare Source
[12.0.0] - 2026-06-03 - "Specialized Plugins, Discovery SEO, and Community Skill Intake"
Start here:
npx antigravity-awesome-skills --helpThis release packages the June 2-3 maintainer work into a major catalog update: specialized Codex bundle plugins, stronger GitHub/AI discovery metadata, webmaster verification, star-history refreshes, and the accepted community PR batch. It keeps PR #642 open because it still targets a non-canonical shadow path rather than the live registry pipeline.
New Skills
Improvements
shadcn-uiCLI references with the currentshadcncommand in the Radix UI design-system guidance.1,494+to1,508+, restoring the Pages deploy workflow to green.Credits
skill-issue).polis-protocol).shadcnCLI documentation refresh).v11.11.0: "User Thoughts, MiniMax M3, and Registry Hardening"Compare Source
[11.11.0] - 2026-06-02 - "User Thoughts, MiniMax M3, and Registry Hardening"
Start here:
npx antigravity-awesome-skills --helpThis release merges the accepted maintainer batch from June 2, adds project-local user intent persistence, updates MiniMax CLI guidance for MiniMax-M3, fixes the
agyinstaller layout, and closes the current Dependabot critical alerts.New Skills
Improvements
mmx-clidocumentation so chat workflows point at MiniMax-M3 as the default model.user-thoughtssource metadata, README attribution, runtime templates, references, scripts, and plugin mirrors in English for public catalog use.agyinstaller guidance so Antigravity installs use directory-based skill layouts instead of flat markdown files.npm auditreturns zero open vulnerabilities.Credits
user-thoughts).mmx-cliMiniMax-M3 guidance).v11.10.0: "SEO, Yield, YouTube, and Release Hardening"Compare Source
[11.10.0] - 2026-05-31 - "SEO, Yield, YouTube, and Release Hardening"
Start here:
npx antigravity-awesome-skills --helpThis release merges the accepted community PRs from the current maintainer batch, adding SEO production workflows, passive-income analysis, grounded math-spec extraction, AI disruption planning, and API-backed YouTube research.
New Skills
Improvements
agy installhandling and Windows test portability.Credits
nextjs-seo-indexing,schema-markup-generator,social-metadata-hardening,vibe-code-cleanup,vibecode-production-qa-validator, and SEO batch output updates).yield-intelligence,doc2math,moatmri).youtube-full).v11.9.0: "Container, CI, Market, and Wallet Guard Skills"Compare Source
[11.9.0] - 2026-05-30 - "Container, CI, Market, and Wallet Guard Skills"
Start here:
npx antigravity-awesome-skills --helpThis release merges the accepted community and official skill PRs from the current maintainer batch, adding container hardening, advanced GitHub Actions workflows, Longbridge market-data guidance, and paid-inference wallet guards.
New Skills
Improvements
Credits
container-security-hardening) and PR #631 (github-actions-advanced).longbridge).runaway-guard).v11.8.0: "Decision, Messaging, Algorithm, and Supply-Chain Skills"Compare Source
[11.8.0] - 2026-05-27 - "Decision, Messaging, Algorithm, and Supply-Chain Skills"
Start here:
npx antigravity-awesome-skills --helpThis release merges the accepted community skill PRs from the current maintainer batch, adding decision support, Sendblue messaging workflows, algorithmic discipline playbooks, and a Bumblebee supply-chain inventory wrapper.
New Skills
Improvements
Credits
lemmaly,mathguard,invariant-guard,complexity-cuts).sendblue-cli,sendblue-api,sendblue-notify,textme).bumblebee).decision-navigator).v11.7.0: "Community Skill Intake and Merge Hygiene"Compare Source
[11.7.0] - 2026-05-26 - "Community Skill Intake and Merge Hygiene"
Start here:
npx antigravity-awesome-skills --helpThis release merges the clean community skill PRs from the current maintainer batch, refreshes generated catalog/plugin/web assets to
1,470+skills, and hardens batch merges so unwanted Claude co-author trailers are stripped from future squash commits.New Skills
.geminiignoresetup patterns for context-window efficiency and token cost reduction.Improvements
1,470+skill count.Credits
mesh-memory).flowhunt-skill).socialclaw).geminiignore-finops).ii-commons).v11.6.0: "Audit Hardening and Karpathy Guidelines"Compare Source
[11.6.0] - 2026-05-23 - "Audit Hardening and Karpathy Guidelines"
Start here:
npx antigravity-awesome-skills --helpThis release hardens the repository after a full audit pass, fixes issue #611 by syncing
andrej-karpathyto English upstream guidelines, and improves release/security guardrails.Security
requestdependency chain and avoid putting bot tokens in webhook URLs.x-hub-signature-256headers return401instead of throwing ontimingSafeEqualbuffer length mismatches.JUNTA_INSECURE_TLSescape hatch.Fixed
andrej-karpathyskill content with English Karpathy coding guidelines synced from the upstreammultica-ai/andrej-karpathy-skillssource.audit:skills:strictenforce an explicit legacy warning budget so strict skill-audit debt is tracked and regressions fail without blocking on the historical backlog.security:docsto block those patterns from returning.README.md,docs/, anddocs_zh-CN/, and repaired the broken localized/internal markdown links it now catches.11.5.0/1,465+and marked the old final validation report as a historical snapshot..disabledskills as web static assets duringapp:setup.1,465+, aligned the SEO verifier and Pages workflow with the linkedsite.webmanifest, and corrected the documented canonical URL environment variables.implmentationtoimplementation.v11.5.0: "Security Boundary Hardening and New Agent Skills"Compare Source
[11.5.0] - 2026-05-21 - "Security Boundary Hardening and New Agent Skills"
This release hardens plugin-safe distribution boundaries, resolves the current Dependabot
wsalert in the web app lockfile, and merges PR #604 and PR #605 through the maintainer workflow.New Skills
Security
yt-dlpoptions with--, ignores user config, adds subprocess timeouts, and neutralizes untrusted metadata in generated markdown.wsto the patched8.20.1range and refreshes vulnerable transitive audit entries inapps/web-app/package-lock.json.Improvements
1,464+.Who should care
Credits
subagent-orchestrator).bilig-workpaper).v11.4.1Compare Source
[11.4.1] - 2026-05-20 - "Installer Supply-Chain Hardening"
This release hardens the npm installer after reviewing Socket.dev's AI-detected code-anomaly warning for
tools/bin/install.js.Improvements
npx antigravity-awesome-skillsinstalls now clone the matching package release tag instead of the repository tip, reducing drift between npm package contents and installed skills.--tagand--versionrefs are validated before invokinggit clone, while still allowing explicit branch installs such as--tag main.Who should care
v11.4.0: "Mercury MCP, Photopea Embeds, and Codex Bundle Names"Compare Source
[11.4.0] - 2026-05-20 - "Mercury MCP, Photopea Embeds, and Codex Bundle Names"
Start here:
npx antigravity-awesome-skillsThis release merges PR #598 and PR #601 through the maintainer workflow, fixes issue #597 by shortening Codex bundle plugin identifiers, and reduces antivirus false-positive risk in the Linux privilege-escalation guidance from issue #600.
New Skills
photopea.js, file loading, scripting, exports, layers, text, selections, and template editing patterns.Improvements
agyb-*names while preserving existing repo-local source directories, keeping qualified skill names within the 64-character loader limit.plugin:skillqualified name stays within the 64-character limit.1,462+.Who should care
Credits
mercury-mcp).photopea-embedded-editor).v11.3.0: "Discovery Manifests and Recommendation Pipelines"Compare Source
[11.3.0] - 2026-05-16 - "Discovery Manifests and Recommendation Pipelines"
Start here:
npx antigravity-awesome-skillsThis release closes issue #596 with a stable discovery-manifest contract and merges PR #595 through the maintainer squash-merge workflow. It keeps contributor PRs source-only while making
mainthe canonical owner of generated manifests, web assets, and release metadata.New Skills
Improvements
skills_index.jsonas the canonical public manifest, mirrors it exactly todata/skills_index.json, and documents lazy-loading usage for downstream tools.schemas/skills-index.v1.schema.jsonplus user and integration docs that distinguish the canonical root manifest from the compatibility mirror.main.1,460+.Who should care
mainbefore release.Credits
recsys-pipeline-architect).v11.2.0: "Market Intelligence, Token Routing, and Chinese Growth Skills"Compare Source
[11.2.0] - 2026-05-13 - "Market Intelligence, Token Routing, and Chinese Growth Skills"
Start here:
npx antigravity-awesome-skillsThis release merges PRs #587, #588, #589, #590, and #591 through the maintainer workflow. It adds measurement-driven model routing, Chinese market strategy skills, MCP tool-building guidance, options-flow analysis, RSS news sentiment briefings, and a refreshed Hermes Tweet path for the X/Twitter scraper.
New Skills
Improvements
options-flow-analyzerPR overlap by keeping the richer release-ready metadata, usage, and limitations coverage.1,459+.Who should care
Credits
tokenwise).x-twitter-scraperHermes Tweet path).mcp-tool-developer,wechat-official-account-strategist,xiaohongshu-content-strategist).options-flow-analyzer,news-sentiment-engine).v11.1.0: "Trace Audits, YouTube Ingest, and Reasoning Harnesses"Compare Source
[11.1.0] - 2026-05-11 - "Trace Audits, YouTube Ingest, and Reasoning Harnesses"
Start here:
npx antigravity-awesome-skillsThis release merges PRs #582, #583, #584, and #586 through the maintainer squash-merge workflow, including fork-run approval, PR body normalization, source-credit fixes, branch conflict refreshes, and generated-state syncs on
main. It refreshes the X/Twitter scraper skill, adds local session auditing with agenttrace, adds single-video YouTube transcript ingestion, and adds an Ejentum MCP reasoning-harness workflow.New Skills
Improvements
1,453+.Who should care
Credits
x-twitter-scraperrefresh).agenttrace-session-audit).ingest-youtube).ejentum-reasoning-harness).v11.0.0: "Agent Execution, Game Planning, and Skill Writer References"Compare Source
[11.0.0] - 2026-05-08 - "Agent Execution, Game Planning, and Skill Writer References"
Start here:
npx antigravity-awesome-skillsThis release merges PRs #575, #577, #578, #579, and #581 through the maintainer squash-merge workflow, including fork-run approval, PR body refreshes, source-credit fixes, contributor sync, and generated-state refreshes on
main. It adds on-chain transaction orchestration, richer clarification, mock-data auditingConfiguration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.