This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [autofix-ci/action](https://redirect.github.com/autofix-ci/action) |
action | patch | `v1.3.2` → `v1.3.3` |

---

### Release Notes

<details>
<summary>autofix-ci/action (autofix-ci/action)</summary>

###
[`v1.3.3`](https://redirect.github.com/autofix-ci/action/releases/tag/v1.3.3):
autofix-ci/action 1.3.3

[Compare
Source](https://redirect.github.com/autofix-ci/action/compare/v1.3.2...v1.3.3)

#### What's Changed

- Move Autofix API from `.ci` to `.com` TLD.
This aims to improve overall reliability
([#&#8203;32](https://redirect.github.com/autofix-ci/action/issues/32)).
`api.autofix.ci` will remain available as an alias for the time being.

**Full Changelog**:
<autofix-ci/action@v1.3.2...v1.3.3>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/usage).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNS4xMSIsInVwZGF0ZWRJblZlciI6IjQzLjI1LjExIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [clap](https://redirect.github.com/clap-rs/clap) | dependencies |
patch | `4.5.59` → `4.5.60` |

---

### Release Notes

<details>
<summary>clap-rs/clap (clap)</summary>

###
[`v4.5.60`](https://redirect.github.com/clap-rs/clap/compare/clap_complete-v4.5.59...clap_complete-v4.5.60)

[Compare
Source](https://redirect.github.com/clap-rs/clap/compare/v4.5.59...v4.5.60)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/usage).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNS4xMSIsInVwZGF0ZWRJblZlciI6IjQzLjI1LjExIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/usage).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNi41IiwidXBkYXRlZEluVmVyIjoiNDMuMjYuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

## Summary
- Adds a "GitHub Interactions" section to CLAUDE.md requiring that all
comments posted to PRs or discussions include a note that they are
AI-generated.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Documentation-only change with no impact on runtime behavior,
security, or data handling.
> 
> **Overview**
> Updates `CLAUDE.md` to add a **GitHub Interactions** section requiring
any GitHub PR/discussion comments to include an explicit note that they
are AI-generated (example text provided).
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
303df3a. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: Claude Opus 4.6 <[email protected]>

## Summary
- Variadic arguments and flags with `choices` were not being validated —
any value was accepted
- Added choice validation to both variadic code paths (positional args
and flags) in `parse.rs`, matching the existing non-variadic behavior
- Added 4 test cases covering valid and invalid choices for both
variadic args and flags

Closes jdx/mise#8334

## Test plan
- [x] `cargo test -p usage-lib --test parse` — all 32 tests pass
- [x] `cargo clippy -p usage-lib --all-features -- -D warnings` — clean

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Narrow change to CLI parsing validation: variadic args/flags with
`choices` now error where they previously accepted any value, which may
affect callers relying on permissive behavior.
> 
> **Overview**
> Fixes a parsing gap where *variadic* positional args and *variadic*
flag values (`var=true`) were not being validated against declared
`choices`.
> 
> `parse.rs` now enforces `choices` for both variadic arg capture and
variadic flag value capture, mirroring the existing non-variadic
behavior (including `--help`/`-h` handling). Adds tests ensuring valid
values pass and invalid values produce the expected error messages for
both variadic args and flags.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
88fbc18. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: Claude Opus 4.6 <[email protected]>

### 🐛 Bug Fixes

- **(lib)** validate choices for variadic args and flags by
[@jdx](https://github.com/jdx) in
[#520](#520)

### 🛡️ Security

- require AI disclosure on GitHub comments by
[@jdx](https://github.com/jdx) in
[#519](#519)

### 📦️ Dependency Updates

- update autofix-ci/action action to v1.3.3 by
[@renovate[bot]](https://github.com/renovate[bot]) in
[#515](#515)
- update rust crate clap to v4.5.60 by
[@renovate[bot]](https://github.com/renovate[bot]) in
[#516](#516)
- lock file maintenance by
[@renovate[bot]](https://github.com/renovate[bot]) in
[#518](#518)