Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Update	Change
docker.io/actualbudget/actual-server	minor	26.6.0 → 26.7.0
getmeili/meilisearch	minor	v1.48.3 → v1.49.0
ghcr.io/agigante80/actual-mcp-server	minor	0.7.11 → 0.8.1
hurlenko/filebrowser	patch	v2.63.17 → v2.63.18

---

Release Notes

meilisearch/meilisearch (getmeili/meilisearch)

v1.49.0: 🪺

Compare Source

✨ Enhancement

• Improve the synonyms storage by @​Kerollmops in #​6466
  We improve synonyms' performance by changing how we store and retrieve them during query processing. Users may have experienced performance issues when the number of synonyms in an index was high, resulting in a significant impact on search performance. The Meilisearch support team advised moving the settings and synonyms-as-keywords to the dedicated documents. This is no longer an issue; synonyms are loaded lazily, only when a word matches a synonym. You can see performance improvements of up to 13x, depending on the number of synonyms.

🔩 Miscellaneous

• Fix the workflow after broken ranking scores by @​Kerollmops in #​6470
• Make OpenAPI rule less strict for routes returning 202 by @​curquiza in #​6488

agigante80/actual-mcp-server (ghcr.io/agigante80/actual-mcp-server)

v0.8.1

Compare Source

🎉 Release v0.8.1

📦 Docker Images

# Docker Hub
docker pull agigante80/actual-mcp-server:0.8.1

# GitHub Container Registry
docker pull ghcr.io/agigante80/actual-mcp-server:0.8.1

📝 Changelog

• chore(ci): retarget dependency bots to develop (#​265) (3cd0924)
• chore(release): bump version to 0.8.1 (5f32a6f)
• chore(deps-dev): adopt @​types/node 26.x (26.1.0), superseding dependabot PR #​253 (#​264) (7cea47d)
• chore(ci): bump actions/cache v5 to v6 in ci-cd.yml (#​263) (5e9f44a)
• chore(ci): bump actions/checkout v4 to v7 across all workflows (#​262) (f41ed30)
• chore(release): bump version to 0.8.0 (36f0a4c)
• feat(auth): OIDC cross-origin JWKS trusted-host allowlist via OIDC_JWKS_TRUSTED_HOSTS (#​254) (ac84e43)
• chore(ci): retire the redundant auto-release-on-dependency workflow (#​266) (3ce8d18)
• fix(ci): harden auto-release pipeline so a release can never ship without its Docker image (#​261) (edd92e4)

🔒 Security

This release has been scanned for vulnerabilities. Check the Security tab for details.

Full Changelog: agigante80/actual-mcp-server@v0.7.13...v0.8.1

v0.7.13

Compare Source

🎉 Release v0.7.13

📦 Docker Images

# Docker Hub
docker pull agigante80/actual-mcp-server:0.7.13

# GitHub Container Registry
docker pull ghcr.io/agigante80/actual-mcp-server:0.7.13

📝 Changelog

• chore(release): bump version to 0.7.13 (aa53885)
• chore(governance): forge-adapt run, install 2 components + refresh 8 to latest forge-kit versions (e5263b1)
• chore(deps): bump transitive hono to 4.12.27 via npm audit fix (GHSA-wwfh-h76j-fc44 and related advisories) (367224b)
• chore(governance): forge-adapt run, install 4 components + refresh 12 to version markers (b24c09a)

🔒 Security

This release has been scanned for vulnerabilities. Check the Security tab for details.

Full Changelog: agigante80/actual-mcp-server@v0.7.12...v0.7.13

hurlenko/filebrowser-docker (hurlenko/filebrowser)

v2.63.18: Update to v2.63.18

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.