build(deps): batch Dependabot bumps (#70–#71)

[ThomasK33]

Consolidates the two open Dependabot PRs (#70–#71) into one batch upgrade through the standard gate, per batch policy (same as #40/#67). Dependabot auto-closes its PRs once main satisfies them.

Bumps

Module	Dependency	Old	New
state/redis	github.com/alicebob/miniredis/v2 (test-only)	v2.38.0	v2.39.0

Notes:

• build(deps): bump github.com/alicebob/miniredis/v2 from 2.38.0 to 2.39.0 #70 (no directory suffix) is the go.work-root twin of build(deps): bump github.com/alicebob/miniredis/v2 from 2.38.0 to 2.39.0 in /state/redis #71; both propose the identical bump, fully covered above.
• examples/slack-redis-state/go.sum graph hashes trued up in the same PR (the recurring example-staleness lesson from build(deps): bump moby/go-archive to v0.3.0 in state/redis (Dependabot alert #45) #59/build(deps): batch Dependabot bumps (#62–#66) #67).
• Per-module go mod tidy + go work sync run to fixpoint; footprint is go.mod/go.sum files only.

Validation

• mise run vet — clean across all workspace modules
• GOFLAGS=-race mise run test — exit 0, 0 failures (Testcontainers postgres/redis + embedded NATS included)
• GOWORK=off go build ./... in state/redis — externally resolvable

---

Generated with mux • Model: anthropic:claude-fable-5 • Thinking: xhigh

[ThomasK33]

@codex review

[ThomasK33]

@codex security review

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-07T16:46:49.593623Z	80e5ab9	Manual request
🔒 Security Review	✅ Completed 2026-09-07T16:49:52.387948Z	80e5ab9	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Breezy!

Reviewed commit: 80e5ab9b53

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Security review completed. No security issues were found in this pull request.

Reviewed commit: 80e5ab9b53

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

• You comment "@codex security review"
• A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.