deps: bump vgi-rpc from 0.16.0 to 0.24.4

[dependabot]

Bumps vgi-rpc from 0.16.0 to 0.24.4.

Release notes

Sourced from vgi-rpc's releases.

v0.24.4

Added

• Let supervisors provide the bridge's persistent Iroh secret through inherited standard input without placing it on disk, and zeroize the encoded key after parsing.
• Add machine-readable bridge discovery output containing the EndpointId, relay URLs, and direct addresses.

Changed

• Log routine client-initiated raw-stream shutdown at debug level while keeping connection, admission, identity-preamble, and task failures at warning level.

v0.24.3

Added

• Publish vgi-iroh-bridge executable archives for Linux, macOS, and Windows with checksums and release provenance.
• Publish a Linux x86-64/ARM64 bridge container to ghcr.io/query-farm/vgi-iroh-bridge from the same tested binaries.

Changed

• Consume the released query-farm-iroh-http-core package instead of an internal Git revision.
• Separate HTTP request-head and streaming body-idle protection from the optional worker execution deadline, and remove the implicit bridge request body ceiling.

v0.24.2

Fixed

• Browser clients normalize trailing DNS root dots in both configured and discovered Iroh relay URLs, avoiding WebKit TLS certificate rejection while preserving authenticated pkarr discovery and the selected relay hosts.

v0.24.1

Added

• Installable @query-farm/vgi-rpc-iroh-browser WebAssembly package for browser vgi-rpc/arrow-mux/1 and iroh-http/2 clients, including the Haybarn SharedArrayBuffer adapter and custom or disabled relay selection.
• Shared C ABI libraries in every native release archive so managed-language packages can load the embedded Iroh transport at runtime as well as C and C++ consumers linking it statically.

... (truncated)

Changelog

Sourced from vgi-rpc's changelog.

[0.24.4] — 2026-09-11

Added

• Let supervisors provide the bridge's persistent Iroh secret through inherited standard input without placing it on disk, and zeroize the encoded key after parsing.
• Add machine-readable bridge discovery output containing the EndpointId, relay URLs, and direct addresses.

Changed

• Log routine client-initiated raw-stream shutdown at debug level while keeping connection, admission, identity-preamble, and task failures at warning level.

[0.24.3] — 2026-09-05

Added

• Publish vgi-iroh-bridge executable archives for Linux, macOS, and Windows with checksums and release provenance.
• Publish a Linux x86-64/ARM64 bridge container to ghcr.io/query-farm/vgi-iroh-bridge from the same tested binaries.

Changed

• Consume the released query-farm-iroh-http-core package instead of an internal Git revision.
• Separate HTTP request-head and streaming body-idle protection from the optional worker execution deadline, and remove the implicit bridge request body ceiling.

[0.24.2] — 2026-09-05

Fixed

• Browser clients normalize trailing DNS root dots in both configured and discovered Iroh relay URLs, avoiding WebKit TLS certificate rejection while preserving authenticated pkarr discovery and the selected relay hosts.

[0.24.1] — 2026-09-04

Added

• Installable @query-farm/vgi-rpc-iroh-browser WebAssembly package for browser vgi-rpc/arrow-mux/1 and iroh-http/2 clients, including the Haybarn SharedArrayBuffer adapter and custom or disabled relay selection.
• Shared C ABI libraries in every native release archive so managed-language packages can load the embedded Iroh transport at runtime as well as C and C++ consumers linking it statically.

... (truncated)

Commits

• 9ff26d3 feat(iroh): add supervisor-friendly bridge discovery (#2)
• 50b3a1c feat(iroh): ship bridge release packages
• 58343de Fix npm release artifact publishing
• 9d9f141 Release vgi-rpc 0.24.2
• 3c0cdae Normalize resolved Iroh relay addresses in browsers
• 23a70a8 Normalize browser Iroh relay hostnames
• b52f49a Document Haybarn WASM Iroh compatibility
• ad692ca Qualify browser Iroh over public relays
• b0a25a9 Make browser npm publishing idempotent
• 9e7dfb5 Release browser and shared Iroh artifacts
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)