Dallin Romney
5930f05a68
fix(ci): combine ordinary Security Review evaluation ( #172524 )
...
* fix(ci): combine ordinary Security Review evaluation
* fix(ci): preserve Security Review mode through enforcement
2026-10-14 14:58:32 -07:00
Dallin Romney
208c6ce4fa
fix(ci): reuse Security Review notice inventories ( #172516 )
2026-10-14 14:17:07 -07:00
Josh Avant
50d7eb1b7f
fix: recover transient security review notice failures ( #163357 )
2026-10-08 17:11:27 -07:00
Josh Avant
e6f2610a1c
fix(ci): make informational security notices easier to spot ( #164056 )
...
* fix(ci): make informational security notices easier to spot
* fix(ci): keep informational notices at body text size
* fix(ci): lead with the security approval outcome
2026-10-03 01:04:31 -05:00
Josh Avant
35263bd17a
fix(ci): stop obsolete security reviews after PR lifecycle changes ( #160890 )
...
* fix(ci): stop obsolete security reviews after PR lifecycle changes
* fix(ci): preserve security review evidence after merges
2026-09-28 21:34:29 -05:00
Peter Steinberger
824982caa6
fix(ci): preserve security authority in baseline failure admission
2026-09-27 21:45:21 -07:00
Peter Steinberger
f8a3418494
refactor(scripts): deslop tooling subdirectories and agent skill helpers ( #159218 )
...
Consolidate repeated tooling flows while preserving command contracts. Fix swallowed HTML translation errors and browser-realm error handling in the Google Live smoke. Owner tests and CLI parity passed on Testbox; final broad gate replay follows a fixture lint correction.
2026-09-26 18:13:40 -07:00
Josh Avant
507b137ff0
fix: clarify lockfile cleanup fallback when write access is unavailable ( #157008 )
...
* fix: clarify lockfile cleanup fallback when write access is unavailable
* test: use findLast for dependency review status assertion
2026-09-23 23:44:07 -05:00
Josh Avant
b770a861bd
fix(ci): recover Security Review from read timeouts ( #156176 )
2026-09-24 03:47:25 +00:00
Josh Avant
ae53b4f777
fix(ci): remove lockfile changes after main advances ( #156171 )
2026-09-23 13:32:34 -05:00
Josh Avant
e6bd12b4cd
fix(ci): avoid dependency warnings from unrelated main updates ( #156040 )
2026-09-22 19:52:41 -05:00
Josh Avant
a98b766352
fix(ci): recover Security Review when diff data settles slowly ( #155921 )
2026-09-22 15:12:41 -05:00
Josh Avant
f7c0c42c04
fix(ci): prevent false Security Review failures ( #155231 )
2026-09-21 17:22:30 -05:00
Josh Avant
6615891cc3
fix(ci): skip superseded security review runs ( #155170 )
2026-09-21 15:52:39 -05:00
Josh Avant
d70d5c1248
fix(ci): reduce Security Review fetches and handle rate limits ( #155054 )
...
* fix(ci): narrow security review checkout
* fix(ci): retry rate-limited security reviews
2026-09-21 13:34:34 -05:00
Josh Avant
fda6fb3016
fix(ci): avoid stale Security Review failures after reevaluation ( #153089 )
2026-09-19 13:31:50 -05:00
Josh Avant
2a06fe7235
fix: clarify maintainer security warning introductions ( #152634 )
2026-09-19 01:44:43 -05:00
Josh Avant
5a2bc22ce9
fix(ci): clarify security review comments ( #152578 )
...
* fix(ci): clarify security review warning comments
* fix(ci): simplify security approval comments
* fix(ci): remove hyphen from maintainer security warning
* fix(ci): list dependency changes in maintainer warnings
* fix(ci): simplify dependency graph filename lists
2026-09-19 01:27:07 -05:00
Josh Avant
c2b84506a9
feat(ci): split security review into maintainer and SecOps tiers ( #152415 )
...
* feat(ci): split security review into two tiers
* refactor(ci): move security review paths into YAML
* fix(ci): require explicit maintainer approval commands
* feat(ci): integrate automatic security review with CI
* fix(ci): filter security review comment events
* test(ci): include security review workflow routes
2026-09-18 23:39:46 -05:00
joshavant
b52d2f08f5
fix(ci): trust maintainer-authored dependency changes
2026-08-20 15:09:22 -05:00
Peter Steinberger
b822e6e425
refactor(github): consolidate guard display sanitization ( #123620 )
2026-08-14 13:29:21 -07:00
Peter Steinberger
27c4433939
fix(ci): trust dependency approvers before graph compare ( #123456 )
2026-08-13 21:03:34 -07:00
Peter Steinberger
c23d66e3b5
refactor: consolidate coercion ownership ( #122692 )
...
* refactor: consolidate coercion ownership
* test: align shard check with weighted planning
* chore: refresh plugin SDK API baseline
2026-08-12 09:25:28 -07:00
Pavan Kumar Gondhi
c9d39979f2
fix(ci): read dependency guard state from trusted metadata [AI] ( #121505 )
...
* fix(ci): bind dependency guard state to head
* test(ci): isolate dependency guard state forgeries
2026-08-10 14:32:49 +05:30
Peter Steinberger
c70aee247e
refactor(scripts): migrate JavaScript tools to TypeScript ( #121005 )
...
* refactor(scripts): migrate JavaScript tools to TypeScript
* fix(ci): keep changed-scope preflight zero-install
* fix(ci): preserve zero-install script owners
* fix(ci): complete script migration follow-through
* fix(release): keep stable closeout zero-install
* fix(scripts): preserve standalone execution boundaries
* fix(scripts): repair standalone loader boundaries
* fix(scripts): normalize gateway observation ids
* fix(scripts): keep Docker packager standalone
* test(scripts): preserve rebase cleanup helpers
* test(sessions): use tracked temp directory
2026-08-09 07:21:35 -07:00
Patrick Erichsen
def80bff90
fix(ci): stop blocking dependency-only removals ( #117172 )
...
* fix(ci): allow dependency removals without approval
* fix(ci): align dependency guard declarations
2026-08-01 13:58:56 -07:00
Peter Steinberger
f6131a4fbf
build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks ( #114006 )
...
* build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks
npm 12 removed shrinkwrap (command + tarball/root loading). Delete all 82
committed npm-shrinkwrap.json files and stop publishing lockfiles; keep
pnpm-lock.yaml as the single reviewed dependency boundary. The generator
becomes scripts/generate-npm-package-lock.mjs and feeds plugin bundling via
a transient package-lock.json + npm ci (works on npm 11 and 12). Tarball
validation treats the published 2026.7.2 beta train as a shrinkwrap
transition; self-update npm detection now uses install topology instead of
the shipped shrinkwrap.
* fix(deps): repair lint, deadcode, and test-type lanes for the npm 12 migration
- sort integrity comparisons with an explicit comparator (oxlint)
- keep resolveBunGlobalNodeModules module-local (knip unused-export gate)
- model npm pack --json as npm<=11 array / npm 12 name-keyed object
- default calver destructuring in the tarball test fixture
2026-07-26 01:29:55 -04:00
Vincent Koc
ba7af36306
refactor(deadcode): localize script constants ( #101892 )
2026-07-07 15:17:41 -07:00
Vincent Koc
d563101a82
refactor(deadcode): localize test and tooling helpers ( #101875 )
2026-07-07 13:45:26 -07:00
Vincent Koc
ba43be9424
refactor(github): share guard comment helpers
2026-06-20 06:10:37 +08:00
Vincent Koc
aa479ac7d8
refactor(github): share guard request helpers
2026-06-20 06:07:12 +08:00
Vincent Koc
36bfe77db1
fix(github): bound guard response bodies
2026-06-19 05:47:19 +02:00
Peter Steinberger
613a2835cb
docs: document scoped script helpers
2026-06-04 23:57:22 -04:00
Vincent Koc
420450b5cb
fix(ci): timeout dependency guard GitHub requests
2026-06-01 22:59:55 +02:00
Dallin Romney
e3d24faecd
fix: allow admins to approve dependency guard ( #88966 )
...
* fix: allow admins to approve dependency guard
* fix: auto-bypass trusted dependency authors
2026-06-01 10:17:14 -07:00
Peter Steinberger
27dde7a4d6
chore(lint): enable stricter error rules
2026-06-01 01:12:21 +01:00
Dallin Romney
29b32050c1
feat(ci): autoscrub dependency lockfile-only PR changes ( #87796 )
...
* ci: autoscrub dependency lockfile residue
* ci: harden dependency autoscrub commits
* ci: scope dependency autoscrub tokens
* ci: split autoscrub base reads
* ci: expand autoscrub proof comment
2026-05-29 19:37:16 -07:00
Vincent Koc
ba55b3e360
refactor: share script bounded response helper
2026-05-29 20:54:29 +02:00
Vincent Koc
9ad3ed481f
fix(ci): cap dependency guard error bodies
2026-05-29 19:20:01 +02:00
Peter Steinberger
2209faef40
feat: improve cron create delivery ergonomics
...
Summary:
- Add Hermes-style schedule-first cron create parsing while preserving flagged create options.
- Support webhook create/edit delivery and clear stale webhook/chat delivery fields across mode changes.
- Update cron docs and schedule identity normalization tests.
Verification:
- pnpm test src/cron/schedule-identity.test.ts src/cli/cron-cli.test.ts src/cron/service.jobs.test.ts -- --reporter=verbose
- pnpm test src/cli/cron-cli.test.ts src/cron/service.jobs.test.ts -- --reporter=verbose
- pnpm check:test-types
- pnpm check:import-cycles
- pnpm check:docs
- pnpm check:changed via Crabbox run_8c44bcb158da, exit 0
- autoreview branch diff clean
2026-05-29 04:34:50 +01:00
Dallin Romney
e0aa820257
ci: rename dependency guard workflow ( #87842 )
2026-05-28 18:26:49 -07:00
