chore: staging 0.35.3rc5

[Nathan Schram (nathanschram)]

Summary

Bumps pyproject.toml and uv.lock to 0.35.3rc5. All 9 v0.35.3 Group 2 issues are now merged on dev:

• chore(security): dismiss 'HTTP basic authentication header' secret-scanning alert (test fixture) #404 — secret-scanning alert (PR test(security): construct Basic auth header at runtime (#404) #439)
• feat: rename /trigger → /listen — resolve naming conflict with webhooks/crons #297 — /trigger → /listen rename + alias (PR feat(telegram): rename /trigger → /listen with deprecation alias (#297) #440)
• feat: master trigger pause toggle in /config menu #294 — master trigger pause/resume toggle (PR feat(triggers): master pause/resume toggle (#294) #441)
• security: ControlRewindFilesRequest & ControlMcpMessageRequest auto-approve scope review #380 — auto-approve scope review for ControlMcpMessage / ControlRewindFiles (PR chore(security): document ControlRewindFiles + ControlMcpMessage auto-approve safety (#380) #442)
• bug: Stream idle timeout - partial response received on long opus 4.7 plan-mode runs (upstream Anthropic API stall) #438 — claude_stream_idle_timeout_ms + Type-A/B classification (PR feat(claude): user-configurable stream idle timeout + Type-A/B classification (#438) #443)
• bug: subscription usage footer still unreliable post-#316 — needs investigation + observability #410 — subscription usage observability + /usage debug (PR feat(usage): subscription-usage observability + /usage debug section (#410) #444)
• feat: trigger visibility — indicators, discovery, and run history #271 — trigger visibility Tier 2 + Tier 3 (PR feat(triggers): visibility Tier 2 + Tier 3 — /config:tg expansion + last-fired history + /stats breakdown (#271) #445)
• investigate: Claude CLI session stays alive for ~36 min after final result event (idle-but-alive UX gap) #333 — Claude post-result idle timeout + ✓ turn complete UX hint (PR fix(claude): post-result idle timeout + "✓ turn complete" UX hint (#333) #446)
• feat: hot-reload support for triggers, watchdog, and progress settings #269 — hot-reload [progress] settings (PR feat(progress): hot-reload [progress] settings without restart (#269) #447)

Once this lands, the testpypi-publish job auto-publishes untether-0.35.3rc5 to TestPyPI. Integration tests U1–U7 against @untether_dev_bot follow before any promotion to @hetz_lba1_bot staging.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 7c80c2e4-29b2-45e5-9ac1-9002e3c164cb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/0.35.3rc5-staging

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}