updating-curl

name: updating-curl description: Updates curl and mbedtls submodules to latest stable versions, bumps curl/stubs/binpress/node-smol caches. Use for TLS security patches, HTTP client fixes, or periodic maintenance. user-invocable: true allowed-tools: Bash(pnpm:), Bash(npm:), Bash(git:), Bash(node:), Bash(rg:), Bash(grep:), Bash(find:), Bash(ls:), Bash(cat:), Bash(head:), Bash(tail:), Bash(wc:), Bash(diff:*), Read, Edit, Glob, Grep---

Update curl and mbedtls submodules together to their latest stable releases.

curl submodule: packages/curl-builder/upstream/curl (tag format: curl-X_Y_Z)
mbedtls submodule: packages/curl-builder/upstream/mbedtls (tag format: vX.Y.Z)
Cache bumps: curl, stubs, binpress, node-smol

Process

Validate: Clean working directory, detect CI mode
Fetch latest: For both submodules, fetch tags and find latest stable (exclude rc/alpha/beta)
Check: If both already at latest, report and exit
Update submodules: git checkout $TAG for each
Update .gitmodules: Edit version comments (# curl-X.Y.Z, # mbedtls-X.Y.Z). Convert curl tag underscores to dots.
Build/test (skip in CI): pnpm run clean && pnpm run build && pnpm test in packages/curl-builder
Bump caches: Increment curl, stubs, binpress, node-smol in .github/cache-versions.json. Skip if no submodule changes.
Commit: Include .gitmodules, both submodule paths, and cache-versions.json
Report: Summary with version changes