build(deps): Bump github.com/openclaw/crawlkit from 0.13.4-0.20260706080912-6703bbbb9d87 to 0.14.8

[dependabot]

Bumps github.com/openclaw/crawlkit from 0.13.4-0.20260706080912-6703bbbb9d87 to 0.14.8.

Release notes

Sourced from github.com/openclaw/crawlkit's releases.

v0.14.8 - 2026-08-30

• Default release checks to a 30-second HTTP timeout so unresponsive servers cannot hang checks indefinitely.
• Reject release dispatches for existing tags or releases before rebuilding artifacts, and serialize dispatch checks through publication.
• Require Go 1.27.0, update SQLite to v1.57.0 and supporting Go dependencies, and refresh deadcode, govulncheck, CodeQL, and TruffleHog validation tools.
• Update age to v1.3.2 for encrypted-backup fixes and input hardening.

v0.14.7 - 2026-08-14

• Update modernc.org/sqlite to v1.56.0 for the SQLite 3.53.3 journal-rollback corruption fix and regenerated platform bindings.
• Require Go 1.26.6 for the latest standard-library security fixes.
• Refresh the pinned CodeQL init and analysis actions to v4.37.6.

v0.14.4 - 2026-07-26

Breaking release asset rename

• Replace crawlctl-v0.14.3-macos-arm64.tar.gz with crawlkit_0.14.4_darwin_arm64.tar.gz and crawlctl-v0.14.3-macos-x86_64.tar.gz with crawlkit_0.14.4_darwin_amd64.tar.gz. The new fleet-standard names use the repository prefix, omit the v inside filenames, use darwin and amd64, and replace per-asset .sha256 sidecars with one checksums.txt; scripts that download the old names must be updated.
• Add fleet-standard crawlkit_0.14.4_linux_arm64.tar.gz and crawlkit_0.14.4_linux_amd64.tar.gz archives containing the crawlctl executable.

Maintenance

• Update Go dependencies, including go-runewidth v0.0.27 and x/crypto v0.54.0, and refresh Actions Checkout to v7.0.1 and CodeQL Action to v4.37.3.
• Standardize local build, check, snapshot, and fail-closed release commands under the shared crawler Makefile contract.
• Move official publication to the shared signed, notarized, independently verified GitHub Actions pipeline while preserving the org.openclaw.crawlctl code-signing identifier.

crawlkit v0.14.3

Highlights

• Restore release readiness with Peter's current repository-pinned SSH signing key and a supported pre-tag macOS notarization preflight that rechecks online tickets and build provenance after managed keychain cleanup.
• Update the bundled SQLite engine to v3.53.3 through modernc.org/sqlite v1.54.0.

Maintenance

• Update terminal detection to go-isatty v0.0.23 and refresh CI security tooling.

v0.13.4

Changes

• Add stable Developer ID signing, verification, and atomic installation for macOS crawlctl release artifacts so Full Disk Access survives updates.
• Require Go 1.26.5 to include the standard-library TLS security fixes.

Changelog

Sourced from github.com/openclaw/crawlkit's changelog.

v0.14.8 - 2026-08-30

• Default release checks to a 30-second HTTP timeout so unresponsive servers cannot hang checks indefinitely.
• Reject release dispatches for existing tags or releases before rebuilding artifacts, and serialize dispatch checks through publication.
• Require Go 1.27.0, update SQLite to v1.57.0 and supporting Go dependencies, and refresh deadcode, govulncheck, CodeQL, and TruffleHog validation tools.
• Update age to v1.3.2 for encrypted-backup fixes and input hardening.

v0.14.7 - 2026-08-14

• Update modernc.org/sqlite to v1.56.0 for the SQLite 3.53.3 journal-rollback corruption fix and regenerated platform bindings.
• Require Go 1.26.6 for the latest standard-library security fixes.
• Refresh the pinned CodeQL init and analysis actions to v4.37.6.

v0.14.6 - 2026-08-06

• Publish the module as an SSH-signed tag without a GitHub Release or attached crawlctl artifacts; the unified pipeline still needs its signing secrets provisioned before it can attach binaries.
• Fix the TUI filter so typing q appends to the query instead of quitting; ctrl+c/ctrl+d still quit while filtering.
• Fix TUI filter backspace to remove one rune instead of one byte, keeping CJK and emoji queries valid UTF-8.
• Guard startRefresh against overlapping runs so slow refreshes no longer stack goroutines; a manual refresh reports "Refresh already in progress".
• Rewrite the README to the shared project standard and move the full package inventory to docs/packages.md.
• Prepare the unified release pipeline for future Developer ID-signed and notarized crawlctl macOS archives and static Linux archives.

v0.14.5 - 2026-08-02

• Publish the module as an SSH-signed tag without a GitHub Release or attached crawlctl artifacts; v0.14.4 remains the latest release with binary assets.
• Update Go dependencies and validation tools, including SQLite v1.55.0, modernc.org/libc v1.74.4, go-colorful v1.4.1, deadcode v0.48.0, and govulncheck v1.6.0; document caller-provided file: URI parameter pass-through.
• Refresh the pinned TruffleHog and CodeQL security actions to v3.96.0 and v4.37.4.
• Update the stale repository automation to the immutable v11.0.0 action revision.
• Raise the brokered AWS Crabbox root volume to 400 GB to match the current developer snapshot minimum.

v0.14.4 - 2026-07-26

Final attached CLI artifacts

• Publish the final GitHub release with attached crawlctl artifacts for macOS and Linux.

Maintenance

• Update Go dependencies, including go-runewidth v0.0.27 and x/crypto v0.54.0, and refresh Actions Checkout to v7.0.1 and CodeQL Action to v4.37.3.
• Standardize local build and check commands under the shared crawler Makefile contract.

v0.14.3 - 2026-07-17

Highlights

• Update the bundled SQLite engine to v3.53.3 through modernc.org/sqlite v1.54.0.

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #12.