chore: staging 0.35.3rc15

[Nathan Schram (nathanschram)]

Summary

Bumps pyproject.toml from 0.35.3rc14 → 0.35.3rc15 so CI publishes the post-rc14 dev-branch changes to TestPyPI.

Included since rc14

• deps: bump urllib3 2.6.3 → 2.7.0 to clear pip-audit CVEs #539 deps: bump urllib3 2.6.3 → 2.7.0 to clear pip-audit CVEs
• docs: cross-reference fleet rollout from staging/integration docs #538 docs: cross-reference fleet rollout from staging/integration docs
• fix: #497 — debounce catalog.refresh_sent to prevent storms #541 fix: monitor: catalog.refresh_sent storm in 'scout' (count=183) #497 debounce catalog.refresh_sent to prevent storms
• docs(changelog): complete v0.35.3 entries (#404 #498 #501 #502 #522 #530) #542 docs(changelog): complete v0.35.3 entries (chore(security): dismiss 'HTTP basic authentication header' secret-scanning alert (test fixture) #404 monitor: config.loaded burst — 183 reloads in 3.0s on 'aushistory' #498 monitor: unhandled warning 'jsonl.msgspec.invalid' fires on 'scout' #501 bug: runner's proc.wait() doesn't fire when CC subprocess exits cleanly post-result — watchdog is the only safety net #502 docs: #517 — note cumulative session cost is not capped, recommend max_cost_per_day #522 MAJOR: untether-fleet monitor — Mac substrate yields zero lines (zsh log builtin + Mac doesn't use Unified Logging) #530)

Pre-release version (rcN) — validate_release.py skips CHANGELOG requirements for rcs; stable v0.35.3 changelog already covers the included fixes via PR #542.

Test plan

• CI passes (format, ruff, ty, pytest 3.12/3.13/3.14, build, lockfile, install-test, pip-audit, bandit)
• Publish to TestPyPI job runs on merge to dev and uploads 0.35.3rc15 wheel + sdist
• After merge, run integration tests against @untether_dev_bot (Tier 7 + Tier 1) then write attestation marker
• scripts/fleet-rollout.sh 0.35.3rc15 to all 4 hosts

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 5f529268-3133-4168-ad29-4801e89b90c5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/staging-0.35.3rc15

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}