chore(deps): update fro-bot/agent to v0.118.1

[mrbro-bot]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
fro-bot/agent	action	patch	v0.118.0 → v0.118.1

---

Release Notes

fro-bot/agent (fro-bot/agent)

v0.118.1

Compare Source

What's new

Bug fixes

Runs that missed an upstream background-task completion notice could wait until the execution timeout before reconciling the child task. The execute-phase wait now periodically reconciles owned work and accepts completion only after a fresh REST observation confirms the newest root turn has been answered; failed or late checks leave ownership unsettled. #​1729

The deployment egress smoke no longer treats GitHub's anonymous API rate limit as a proxy failure. It passes on any genuine GitHub response when TLS is verified through mitmproxy and the response includes GitHub's request ID, while blocked traffic and non-GitHub proxy responses still fail. #​1723

Security

Security override floors now bring postcss-selector-parser and source-map-js to patched releases without crossing their current major versions. KaTeX remains at its supported version because the advisory fix is outside the range accepted by its consumer. #​1724

Operations

Daily maintenance reports now get a separate issue for each UTC date, and reruns update that day's report rather than creating duplicates. Older open reports are closed with a pointer to the replacement, including the migration from the former rolling report issue. #​1725

Harness publishing now checks that Node 24's bundled npm meets the minimum version required for OIDC trusted publishing, replacing a global npm installation. If the bundled version is too old, the job stops before publishing. #​1726

Full changelog

0.118.1 (2026-10-06)

Build System

• deps: update dependency @​opencode-ai/sdk to v1.18.34 (#​1722) (8aae199)

Bug Fixes

• agent: reconcile owned background work during the execute-phase wait (#​1729) (643a015)
• deploy: pass the egress smoke on a rate-limited upstream response (#​1723) (93f4ecb)
• deps: raise override floors for postcss-selector-parser and source-map-js (#​1724) (b70071f)

Tests

• evals: make the diagnostics redaction test actually truncate (#​1727) (9838eeb)

Continuous Integration

• fro-bot: write one daily report issue per day (#​1725) (33b0a93)
• harness: check the bundled npm instead of installing one for publishing (#​1726) (4ea2bd4)

---

Configuration

📅 Schedule: (in timezone America/Phoenix)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.