Commit Graph

2203 Commits

Author SHA1 Message Date
Peter Steinberger
1bc45af1db ci: tolerate dependency awareness read-only tokens 2026-05-13 11:45:33 +01:00
Peter Steinberger
1e8e004361 build(pnpm): restore exotic subdependency blocking 2026-05-13 11:21:17 +01:00
Peter Steinberger
85f9276624 build(whatsapp): externalize whatsapp plugin 2026-05-13 11:21:17 +01:00
Ayaan Zaidi
25cda2b24c test(scripts): simplify worktree lock setup 2026-05-13 13:38:52 +05:30
samzong
94aae40c28 feat(scripts): allow worktree heavy-check locks
Signed-off-by: samzong <samzong.lu@gmail.com>
2026-05-13 13:38:52 +05:30
Josh Avant
bd4db5ee62 Add dependency release safety evidence and PR awareness (#81325)
* test: cover dependency pin guard

* build: add dependency vulnerability gate

* build: add dependency risk report

* build: add dependency drift reports

* build: include dependency ownership surface evidence

* build: rename dependency report commands

* build: respect release age exclusions in risk report

* build: clarify transitive risk accounting

* build: remove transitive risk exception registry

* build: clarify transitive risk signal wording

* ci: attach dependency evidence to release preflight

* ci: extract dependency release evidence generator

* build: rename ownership surface dependency report

* ci: clarify release evidence naming

* build: clarify recently published risk report

* build: reorder transitive risk report sections

* build: fix ownership surface pluralization

* ci: surface dependency changes on PRs

* ci: harden dependency change awareness

* ci: use dependency changed PR label

* build: fix dependency report lint

* docs: add dependency safety changelog
2026-05-13 03:05:09 -05:00
Peter Steinberger
cf11d16b43 fix(agents): make subagent task delivery visible
Co-authored-by: stainlu <stainlu@newtype-ai.org>
2026-05-13 08:40:27 +01:00
Peter Steinberger
7b86539be2 test: dedupe auto reply helper mock read 2026-05-13 05:13:15 +01:00
Peter Steinberger
f1ddaf46c7 ci: avoid pnpm prompts in live docker tests 2026-05-13 03:46:33 +01:00
Shakker
d20ba302f8 test: partition bundled entry prefixes 2026-05-12 21:23:47 +01:00
Shakker
ebaa674bdc test: purge stale proof labels 2026-05-12 19:33:02 +01:00
Shakker
8483659477 test: slot ci dependency shard 2026-05-12 19:27:03 +01:00
Shakker
c54a3e6f78 test: rank boundary check guards 2026-05-12 19:26:26 +01:00
Shakker
14cd8193db test: position prerelease liveish check 2026-05-12 19:24:55 +01:00
Shakker
6e79a06d50 test: encompass beta verifier args 2026-05-12 19:18:40 +01:00
Shakker
7fd1f5c73c test: omit opus build allowlist 2026-05-12 19:17:08 +01:00
Peter Steinberger
f6d787cc5c build: hard-pin dependency specs 2026-05-12 07:10:13 +01:00
Peter Steinberger
a4acd33097 ci: speed up beta release verification
(cherry picked from commit 7ca9b58a27)
2026-05-12 06:21:09 +01:00
Peter Steinberger
d86cf646fc ci: skip OpenAI install tool smoke
(cherry picked from commit 50f229c0f6)
2026-05-12 06:21:09 +01:00
Peter Steinberger
50f62beb8a ci: use faster OpenAI model for installer proof
(cherry picked from commit d05ed07260)
2026-05-12 06:21:09 +01:00
Peter Steinberger
c0b443aa9f ci: use current OpenAI model for release smokes
(cherry picked from commit 72ffd3a464)
2026-05-12 06:21:09 +01:00
Ayaan Zaidi
16cfc83643 ci(mantis): fix telegram run wait before checkout 2026-05-12 10:39:27 +05:30
Andy Ye
7624b0d16d fix(imessage): surface Full Disk Access probe failures
Preserve canonical iMessage Full Disk Access probe failures through non-sensitive health snapshots and status output, promote imsg denial banners to the public remediation message, and add a narrow audit exception for the reviewed Mistral advisory false-positive.
2026-05-11 21:41:08 -07:00
Peter Steinberger
a51a9631cc test: guard tooling mock call fallbacks 2026-05-11 23:28:57 +01:00
Peter Steinberger
3c9fbf7071 test: guard ui tooling assertions 2026-05-11 20:29:47 +01:00
samzong
380a679313 feat(cron): add direct job lookup
Signed-off-by: samzong <samzong.lu@gmail.com>
2026-05-11 18:47:46 +01:00
Shakker
d4f3d4edad test: verify schema and timing messages 2026-05-11 17:18:19 +01:00
Shakker
8f79e34cbe test: verify install and runtime messages 2026-05-11 17:16:25 +01:00
Peter Steinberger
b29b2558a7 test: remove launcher polling waits 2026-05-11 16:35:29 +01:00
Ayaan Zaidi
9c16388177 ci(mantis): serialize telegram account proofs 2026-05-11 20:42:00 +05:30
Shakker
788ef05384 test: check release tag errors 2026-05-11 16:04:04 +01:00
Peter Steinberger
ea663dbb56 test: allow old Linux package update baselines 2026-05-11 15:57:12 +01:00
Ayaan Zaidi
adc3ba45ca ci(mantis): render proof media responsively 2026-05-11 20:08:02 +05:30
Ayaan Zaidi
1ff833d66d ci(mantis): fit telegram proof gifs in comments 2026-05-11 19:59:54 +05:30
Ayaan Zaidi
663206aac4 ci(mantis): derive telegram proof refs from pr 2026-05-11 17:50:23 +05:30
Peter Steinberger
1f49d34c5f fix(gateway): preserve batched client tool calls 2026-05-11 13:06:05 +01:00
Ayaan Zaidi
d4c7519989 ci(mantis): allow fork telegram proof 2026-05-11 17:33:29 +05:30
Peter Steinberger
913c621adb ci: add plugin inspector prerelease advisory 2026-05-11 12:46:33 +01:00
Ayaan Zaidi
becb6e8bbb fix(mantis): route telegram proof through trusted harness 2026-05-11 15:02:36 +05:30
Altay
7084c7d43f test(pnpm): check workflow pnpm major 2026-05-11 10:13:49 +01:00
Altay
a3cbc67a37 test(pnpm): derive workflow pin from package manager 2026-05-11 10:13:49 +01:00
Altay
7d35f28b6c chore(pnpm): align follow-up pnpm 11 surfaces 2026-05-11 10:13:49 +01:00
Ayaan Zaidi
96d4dd68da fix(mantis): validate telegram driver before lease 2026-05-11 14:19:36 +05:30
Ayaan Zaidi
799bd8a23b ci(mantis): fetch ffmpeg proof tools directly 2026-05-11 13:18:34 +05:30
Ayaan Zaidi
1caf3ae674 ci(mantis): install static proof media tools 2026-05-11 13:11:16 +05:30
Ayaan Zaidi
64cfb2be70 ci(mantis): avoid host apt in telegram proof 2026-05-11 13:02:04 +05:30
Ayaan Zaidi
6729044966 ci(mantis): prepare telegram proof tooling 2026-05-11 12:47:46 +05:30
Shakker
957d7d5461 test: tighten package workflow env assertion 2026-05-11 06:53:19 +01:00
Ayaan Zaidi
4a009612c9 fix(docker): prune with source workspace policy 2026-05-11 10:50:30 +05:30
Shakker
c17b0e50e4 test: tighten postinstall hotfix assertions 2026-05-11 06:17:03 +01:00