Skip to content

fix(strix): bump strix-agent 1.0.4 -> 1.5.3, override its cryptography<49 pin #1121

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
seonghobae merged 6 commits into from
Aug 19, 2026
Merged

fix(strix): bump strix-agent 1.0.4 -> 1.5.3, override its cryptography<49 pin #1121

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
82d44ca
fix(strix): bump strix-agent 1.0.4 -> 1.5.3, override its cryptograph…
seonghobae Aug 18, 2026
6c75f76
Merge branch 'main' into fix/strix-agent-1.5.3-cryptography-override-…
seonghobae Aug 18, 2026
0852623
fix(security): let pip-audit skip resolution for overridden requirements
seonghobae Aug 19, 2026
0933d21
fix(security): --no-deps alone doesn't stop pip-audit's resolver conf…
seonghobae Aug 19, 2026
5c58242
Merge remote-tracking branch 'origin/main' into fix/strix-agent-1.5.3…
seonghobae Aug 19, 2026
ee4e0bb
fix(strix): add --no-deps to the real strix-agent pip install
seonghobae Aug 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions CLAUDE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,9 @@ Details: `README.md` and `PR_GOVERNANCE_AUDIT.md`.
configuration (GitHub Models provider, CodeGraph/DeepWiki/Context7/web-search MCP). All reviewer
agents have `"edit": "deny"`: they are reviewers, never implementers. Keep it that way.
- `requirements-{bandit,pip-audit,strix,opencode-review}-ci.txt` + `*-hashes.txt` — pinned CI
dependency sets (see below).
dependency sets (see below). `requirements-strix-ci-overrides.txt` documents one deliberate
`uv pip compile --override` (strix-agent's declared `cryptography<49` vs. this repo's
`cryptography==50.0.0` security pin; see #952) — re-verify it whenever strix-agent bumps again.
- `fuzz/` + `.clusterfuzzlite/` — Atheris fuzz targets for the review-output normalizer and the
ClusterFuzzLite discovery marker.
- `docs/` — master context, Project protocol, `org-required-workflow-rollout.md`,
Expand Down Expand Up @@ -96,7 +98,7 @@ e.g.:
```bash
uv pip compile --generate-hashes --python-version 3.12 --python-platform x86_64-manylinux_2_28 requirements-bandit-ci.txt -o requirements-bandit-ci-hashes.txt
uv pip compile --generate-hashes --python-version 3.12 --python-platform x86_64-manylinux_2_28 requirements-pip-audit-ci.txt -o requirements-pip-audit-ci-hashes.txt
uv pip compile --generate-hashes --python-version 3.13 --python-platform x86_64-manylinux_2_28 --output-file requirements-strix-ci-hashes.txt requirements-strix-ci.txt
uv pip compile --generate-hashes --python-version 3.13 --python-platform x86_64-manylinux_2_28 --override requirements-strix-ci-overrides.txt --output-file requirements-strix-ci-hashes.txt requirements-strix-ci.txt
./scripts/ci/compile_opencode_review_lock.sh
```

Expand Down
Loading
Loading