易良 e48999ddb2 fix(ci): require maintainer-applied autofix/approved label for tier-1 fast-path (#6276) ... * fix(ci): require maintainer-applied `autofix/approved` label for tier-1 fast-path The scheduled scan and `issues:labeled` event paths in `qwen-autofix.yml` previously trusted the `status/ready-for-agent` label alone, which is applied by an LLM reading untrusted issue text. An attacker could craft issue content to trick the triage LLM into labeling it ready, bypassing human review. Introduce an `autofix/approved` label that only maintainers (write+ permission) can apply. Both the cron scan and event-triggered paths now require this label alongside `status/ready-for-agent` before entering the autonomous fix pipeline (dual-factor: LLM signal + human confirmation). Also: - `release.yml` automatically adds `autofix/approved` on workflow-created release-failure issues (trusted source, preserves existing automation) - Forced-issue path (non-dispatch) also checks for the new label - Claim step strips `autofix/approved` to keep processed issues clean Closes #5634 * fix(ci): address autofix approval review * fix(ci): address autofix approval follow-ups * test(ci): cover autofix approval gate * fix(ci): harden autofix approval revalidation * fix(ci): avoid autofix approval retry loop * fix(ci): harden autofix claim handling * fix(ci): clarify autofix reapproval label * fix(ci): make autofix claim label update non-destructive		2026-07-04 08:06:27 +00:00
..
installation	fix(ci): stabilize merge queue checks (#6056)	2026-06-30 10:27:15 +00:00
lib	feat(core): support QWEN_HOME env var to customize config directory (#2953)	2026-05-09 15:51:52 +08:00
tests	fix(ci): require maintainer-applied autofix/approved label for tier-1 fast-path (#6276)	2026-07-04 08:06:27 +00:00
acp-http-smoke.mjs	feat(daemon): merge daemon-mode feature batch into main (#4490)	2026-06-12 00:34:49 +08:00
benchmark-api-latency.mjs	feat(cli): add API preconnect to reduce first-call latency (#3318)	2026-04-27 06:54:55 +08:00
build-hosted-installation-assets.js	fix(installer): auto-detect SYSTEM account and default PATH scope to machine (#4903)	2026-06-10 21:02:10 +08:00
build-standalone-release.js	feat(installer): add standalone archive installation (#3776)	2026-05-11 13:25:48 +08:00
build.js	feat(cli): Add daemon-managed channel worker for serve --channel (#6031)	2026-07-01 01:40:54 +00:00
build_package.js	fix(build): clean stale outputs before tsc --build to prevent TS5055 (#4453)	2026-05-23 23:06:31 +08:00
build_sandbox.js	fix(sandbox): fall back to 'latest' tag when image name has no colon (#2962)	2026-04-18 09:07:05 +08:00
build_vscode_companion.js	Sync upstream Gemini-CLI v0.8.2 (#838)	2025-10-23 09:27:04 +08:00
check-build-status.js	Merge tag 'v0.3.0' into chore/sync-gemini-cli-v0.3.0	2025-09-11 16:26:56 +08:00
check-desktop-isolation.js	feat(desktop): Add desktop app package with Qwen ACP SDK integration (#3778)	2026-06-11 21:57:20 +08:00
check-i18n.ts	fix(i18n): Correct zh-TW translations to match Traditional Chinese conventions (#4129)	2026-05-15 15:26:12 +08:00
check-lockfile.js	Sync upstream Gemini-CLI v0.8.2 (#838)	2025-10-23 09:27:04 +08:00
check-serve-fast-path-bundle.js	fix(cli): Handle ACP read_file for managed local paths (#6021)	2026-06-30 11:15:49 +00:00
clean.js	feat(desktop): Add desktop app package with Qwen ACP SDK integration (#3778)	2026-06-11 21:57:20 +08:00
cli-entry.js	fix(cli): add bootstrap fast paths (#6188)	2026-07-02 22:28:11 +00:00
copy_bundle_assets.js	feat(core): add dataviz bundled skill (#6198)	2026-07-03 01:06:39 +00:00
copy_files.js	revert: remove unused script modifications	2026-02-10 14:34:36 +08:00
create-standalone-package.js	fix(standalone): Route serve shim through cli-entry (#5977)	2026-06-29 07:00:39 +00:00
create_alias.sh	fix: ambiguous literals (#461)	2025-08-27 15:23:21 +08:00
daemon-dev.js	feat(daemon): merge daemon-mode feature batch into main (#4490)	2026-06-12 00:34:49 +08:00
desktop-openwork-sync.ts	feat(acp): support desktop qwen integration (#4728)	2026-06-09 19:09:44 +08:00
dev.js	feat(web-shell): show the qwen-code version in the sidebar footer (#6222)	2026-07-03 08:56:08 +00:00
esbuild-shims.js	perf(cli): code-split lowlight to cut startup V8 parse cost (#4070)	2026-05-15 17:26:18 +08:00
generate-changelog.js	feat(ci): add auto-generated CHANGELOG.md synced from releases (#4872) (#4881)	2026-06-10 14:04:43 +08:00
generate-git-commit-info.js	# 🚀 Sync Gemini CLI v0.2.1 - Major Feature Update (#483)	2025-09-01 14:48:55 +08:00
generate-settings-schema.ts	fix(core): stop computer use driver when idle (#5925)	2026-06-27 11:18:01 +00:00
get-release-version.js	refactor: extract shared release helper utilities (#3834)	2026-05-05 10:15:17 +08:00
lint.js	fix(core): Reduce multimodal history payload size (#6045)	2026-07-02 23:38:50 +00:00
local_telemetry.js	Merge tag 'v0.3.0' into chore/sync-gemini-cli-v0.3.0	2025-09-11 16:26:56 +08:00
measure-flicker.mjs	fix(cli): bound SubAgent display by visual height to prevent flicker (#3721)	2026-04-29 22:34:55 +08:00
pre-commit.js	Sync upstream Gemini-CLI v0.8.2 (#838)	2025-10-23 09:27:04 +08:00
prepare-package.js	fix(cli): add bootstrap fast paths (#6188)	2026-07-02 22:28:11 +00:00
prepare.js	ci(release): optimize validation steps (#6133)	2026-07-02 23:53:08 +00:00
release-script-utils.js	feat(installer): add standalone hosted install and uninstall flow (#3828)	2026-05-21 11:57:10 +08:00
sandbox_command.js	fix(scripts): avoid shell injection in sandbox command detection (#6108)	2026-07-01 16:20:40 +08:00
sign-release.sh	feat(cli): add standalone auto-update support (#4629)	2026-06-04 22:53:12 +08:00
start.js	fix(cli,core): harden OOM prevention — idempotent compaction tests, explicit GC, debug log defaults (#4914)	2026-06-14 10:40:53 +08:00
sync-computer-use-schemas.ts	feat(computer-use): configurable screenshot max dimension (setting + env) (#5122)	2026-06-15 15:25:27 +08:00
telemetry.js	feat(core): support QWEN_HOME env var to customize config directory (#2953)	2026-05-09 15:51:52 +08:00
telemetry_gcp.js	fix(mcp): update OAuth client names and improve MCP commands	2026-02-08 10:46:48 +08:00
telemetry_utils.js	feat(core): support QWEN_HOME env var to customize config directory (#2953)	2026-05-09 15:51:52 +08:00
test-rewind-e2e.sh	fix(test): update rewind E2E Test 1 assertion after isRealUserTurn fix (#3622)	2026-04-26 06:49:42 +08:00
test-windows-paths.js	chore: consistently import node modules with prefix (#3013)	2025-08-25 20:11:27 +00:00
unused-keys-only-in-locales.json	feat: add /diff command and git diff statistics utility (#3491)	2026-05-10 11:15:59 +08:00
upload-aliyun-oss-assets.js	fix(release): move constants above entry point to avoid TDZ error (#4398)	2026-05-23 22:21:33 +08:00
verify-installation-release.js	feat(installer): verify release assets + switch public docs to standalone entrypoint (#3855)	2026-06-04 17:23:04 +08:00
version.js	fix(ci): resolve TS5055 release build failure since May 19 (#4383)	2026-05-21 16:01:35 +08:00
workspaces.js	feat(desktop): Add desktop app package with Qwen ACP SDK integration (#3778)	2026-06-11 21:57:20 +08:00