build(deps): Bump github.com/openclaw/crawlkit from 0.13.4-0.20260706080912-6703bbbb9d87 to 0.13.4

[dependabot]

Bumps github.com/openclaw/crawlkit from 0.13.4-0.20260706080912-6703bbbb9d87 to 0.13.4.

Release notes

Sourced from github.com/openclaw/crawlkit's releases.

v0.13.4

Changes

• Add stable Developer ID signing, verification, and atomic installation for macOS crawlctl release artifacts so Full Disk Access survives updates.
• Require Go 1.26.5 to include the standard-library TLS security fixes.

Changelog

Sourced from github.com/openclaw/crawlkit's changelog.

v0.13.4 - 2026-07-09

• Add stable Developer ID signing, verification, and atomic installation for macOS crawlctl release artifacts so Full Disk Access survives updates.
• Require Go 1.26.5 to include the standard-library TLS security fixes.

v0.13.3 - 2026-07-06

• Update the TOML parser to v2.4.3 for recursion, panic, and deeply nested input hardening.
• Keep paired CodeQL actions on one version during dependency updates and update TruffleHog to v3.95.8.

v0.13.2 - 2026-07-02

• Add explicit monotonic snapshot merge planning and import-impact reporting so cache consumers can apply changed shards without silently replacing local rows, while exact mirrors retain replacement semantics.

v0.13.1 - 2026-06-23

• Harden crawlkit scheduler, output, release-check, vector ranking, and CI workflow edges found by clawpatch.
• Expose remote ingest reset progress so crawl publishers can drain large Cloudflare D1 table replacements before sending row batches.

v0.13.0 - 2026-06-19

• Add content-deduplicated encrypted file bundles with safe current and historical restore for crawler backups.
• Add shared SQL LIKE literal escaping for crawler search queries.
• Preserve Unicode combining marks in tokenized FTS5 queries.
• Add a safe tokenized FTS5 query helper for arbitrary user search input.
• Preserve unrelated tracked mirror edits across write synchronization rebases.
• Retry atomic branch-and-tag snapshot pushes after rebasing and retargeting unpublished tags.
• Update Go to 1.26.4 for current standard-library security fixes and add race and vulnerability CI gates.
• Preserve unpublished local mirror branches during pulls, clone the requested remote branch, and support caller-selected private repository directory modes.
• Allow managed sidecar trees to prune selected generated files while preserving unrelated files.
• Add non-mutating archive tag validation and rebase-based write synchronization for durable multi-machine backup retries.
• Add reusable Git snapshot history/tag/ref restoration, SQLite bundle snapshots, managed snapshot sidecars, mapped sync-state adapters, FTS5 helpers, and the shared contact-export contract; refresh stable dependencies.

v0.12.2 - 2026-06-17

• Fix SQLite file URI generation for absolute Windows paths while preserving reserved-character escaping, and add Windows CI coverage.

v0.12.1 - 2026-06-17

• Harden crawlkit maintenance surfaces found by clawpatch: safer crawlctl log tailing, GOWORK-isolated validation, atomic backup/cache/store writes, safer snapshot incremental imports, scoped state schemas, scheduler lock and interval handling, release/version checks, remote bearer-token transport validation, and path-scoped mirror commits.

v0.12.0 - 2026-06-10

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)