chore(deps): bump act-sdk from 0.5.0 to 0.6.0

[dependabot]

Bumps act-sdk from 0.5.0 to 0.6.0.

Changelog

Sourced from act-sdk's changelog.

[0.6.0] - 2026-04-29

Changed

• Migrate to the split WIT layout from act-spec: act:core@0.4.0 (cross-cutting types only) plus act:tools@0.1.0 (tool-provider).
• #[act_component] emits bindings against exports::act::tools::tool_provider::* and uses the renamed Error type (was ToolError).
• Guest::call_tool takes flat (name, arguments, metadata) parameters instead of a ToolCall record. Tool function bodies authored with #[act_tool] are unaffected; raw-bindgen components need their Guest impl updated.

Removed

• Guest::get_metadata_schema — the corresponding WIT function is gone in act:tools@0.1.0. A schema-discovery mechanism for per-call metadata is planned for a future minor version.
• MetadataSchemaRequest from act-types::http (no /metadata-schema endpoint).

Migration

Components on previous SDK versions need to:

1. Bump to this SDK version.
2. Run wit-deps (or sync wit/deps/ manually) to pick up the new WIT layout — act-core is types-only, act-tools is added.
3. Rebuild — the world now exports act:tools/tool-provider@0.1.0.

Commits

• d877e44 Release 0.6.0
• fa5748d feat(wit)!: migrate to act:core@0.4.0 + act:tools@0.1.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	act-sdk@​0.5.0 ⏵ 0.6.0

View full report

[dependabot]

Looks like act-sdk is up-to-date now, so this is no longer needed.