deps: bump rns from 1.3.5 to 1.3.8 in /tools

[dependabot]

Bumps rns from 1.3.5 to 1.3.8.

Release notes

Sourced from rns's releases.

RNS 1.3.8

Changes

• Added internal interface mode
• Added recursive_prs interface option
• Added announces_from_internal interface option
• Added new options to the manual
• Updated WeaveInterface to support latest Weave firmware
• Fixed UDP listener replacement deadlocking inbound AutoInterface traffic when fast-roaming between physical interfaces or WiFi APs
• Fixed potential hop-count serialization error on transport
• Fixed some paths never resolving when using other interfaces at the same time as a deadlocked AutoInterface
• Improved and cleaned up announce propagation logic
• Fixed inconsistent link traffic stats calculation
• Fixed link hop-count metric only being available on initiator side

Changelog

Sourced from rns's changelog.

2026-07-10: RNS 1.3.8

This release fixes various inconsistencies in link and hop-count related APIs.

Changes

• Fixed inconsistent link traffic stats calculation
• Fixed link hop-count metric only being available on initiator side
• Fixed potential hop-count serialization error on transport
• Updated WeaveInterface to support latest Weave firmware

Verified Retrieval You can retrieve and verify this release over Reticulum using the built-in rngit release utility. To retrieve only the installation .whl package, and the release manifest for future updates, you can use:

rngit release rns://7649a50d84610232d1416b41d2896aff/reticulum/reticulum fetch "latest:rns-*.whl" --signer bc7291552be7a58f361522990465165c

To download all artifacts, including the documentation and source archive, you can use the following command:

rngit release rns://7649a50d84610232d1416b41d2896aff/reticulum/reticulum fetch latest:all --signer bc7291552be7a58f361522990465165c

Release Signatures Release artifacts include a signed rsm release manifest and rsg signature files that can be validated against the RNS release signing identity <bc7291552be7a58f361522990465165c> using rngit or rnid. To perform an offline verification of all release artifacts using a manifest:

rngit release rns_*.rsm verify --signer bc7291552be7a58f361522990465165c

To verify release artifacts using individual rsg files, while also verifying the manifest itself, download the rsm and rsg signatures, make sure they are in the same folder as the release artifact, and run rnid signature verification with the release identity as the required signer:

rnid -i bc7291552be7a58f361522990465165c -V rns_*.rsm *.rsg

The rnid utility will then verify the signatures, and display whether they are valid. If the signature cannot be verified, the release has been tampered with and should be discarded.

2026-07-03: RNS 1.3.7

This maintenance release improves announces propagation logic, and adds additional options for configuring announce propagation and interface behavior in transport mode.

Changes

• Added internal interface mode
• Added recursive_prs interface option
• Added announces_from_internal interface option
• Added new options to the manual
• Improved and cleaned up announce propagation logic

2026-07-03: RNS 1.3.6

... (truncated)

Commits

• dca2a92 Prepare release
• b1b3ff7 Updated version
• a0f0f31 Cleanup
• 72db6e0 Ensure link traffic stats consistency
• b706888 Ensure link hops is available on both initiator and destination
• dd3ddb9 Added Weave event type
• 4ba1750 Updated changelog
• eacff56 Cleanup
• 8768e16 Updated changelog
• c0bc19d Cleanup
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: upstream-sync. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Superseded by #22.