chore(deps): bump github/codeql-action from 3 to 4 - #44
Merged
Conversation
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v3...v4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
Skipping PR review because a bot author is detected. If you want to trigger CodeAnt AI, comment |
Contributor
Code Review SummaryStatus: No Issues Found | Recommendation: Merge Files Reviewed (2 files)
Reviewed by ling-2.6-1t-20260423:free · 756,805 tokens |
KooshaPari
added a commit
that referenced
this pull request
May 31, 2026
* Initial policy-contract import Co-authored-by: Codex <noreply@openai.com> * Ignore zig build cache artifacts Co-authored-by: Codex <noreply@openai.com> * Clarify partial scan failure handling Co-authored-by: Codex <noreply@openai.com> * Document apply mode restriction Co-authored-by: Codex <noreply@openai.com> * Clarify wrapper smoke usage Co-authored-by: Codex <noreply@openai.com> * Allow remediation dispatch to succeed after comment posting Co-authored-by: Codex <noreply@openai.com> * docs: mass injection of standardized Phenotype governance and worktree policies * docs: Turn 7 mass injection of standardized Phenotype governance and worktree policies * docs: Turn 10 mass synchronization - CI/Release/Docs/Dependencies * docs: Turn 10/11 mass synchronization - Governance/CI/Release/Docs/Archival * docs: Turn 12 mass synchronization - Quality/Protection/Security/Automation * docs: Turn 13 mass synchronization - Release/Dependabot/Security/Contribution * docs: Turn 14 mass synchronization - Hooks/Containers/Badges/Deployment * docs: Turn 23 mass synchronization - Structure and Environment Health * docs: Turn 23 mass synchronization - Structure and Environment Health * chore: add worktrees/ to gitignore Standardize working directory ignore patterns. Co-authored-by: kooshapari * chore: add worktrees/ to gitignore (#6) * docs: Turn 23 mass synchronization - Structure and Environment Health * docs: Turn 23 mass synchronization - Structure and Environment Health * chore: add worktrees/ to gitignore Standardize working directory ignore patterns. Co-authored-by: kooshapari --------- Co-authored-by: Koosha Paridehpour <koosha@phenotype.ai> * feat: add forge as a policy guardian alongside droid/codex - Add forge permissions.yaml support with commandAllowlist/Requestlist/Denylist - Add --forge-settings CLI argument - Add _apply_forge_rules() function for YAML policy application - Update render_platform_payload() to include forge platform - Update _build_success_entries() to track forge artifacts - Update resolve.py to output forge.settings.yaml * feat: add forge as a policy guardian alongside droid/codex (#7) - Add forge permissions.yaml support with commandAllowlist/Requestlist/Denylist - Add --forge-settings CLI argument - Add _apply_forge_rules() function for YAML policy application - Update render_platform_payload() to include forge platform - Update _build_success_entries() to track forge artifacts - Update resolve.py to output forge.settings.yaml Co-authored-by: Koosha Paridehpour <koosha@phenotype.ai> * feat: add forge as policy guardian and sync governance structure (#8) * docs: Turn 23 mass synchronization - Structure and Environment Health * docs: Turn 23 mass synchronization - Structure and Environment Health * chore: add worktrees/ to gitignore Standardize working directory ignore patterns. Co-authored-by: kooshapari * feat: add forge as a policy guardian alongside droid/codex - Add forge permissions.yaml support with commandAllowlist/Requestlist/Denylist - Add --forge-settings CLI argument - Add _apply_forge_rules() function for YAML policy application - Update render_platform_payload() to include forge platform - Update _build_success_entries() to track forge artifacts - Update resolve.py to output forge.settings.yaml --------- Co-authored-by: Koosha Paridehpour <koosha@phenotype.ai> * chore: replace BMAD/spec-kitty refs with AgilePlus governance in CLAUDE.md Remove BMAD plugin references, slash command instructions, and spec-kitty/openspec mentions. Add standardized AgilePlus governance block pointing to agileplus-specs/ directory and spec docs. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * chore: add VitePress docsite scaffold Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * chore: add spec documentation (PRD, ADR, FR, PLAN, trackers) Add standardized specification documents for the project: - PRD.md: Product requirements with epics and acceptance criteria - ADR.md: Architecture decision records - FUNCTIONAL_REQUIREMENTS.md: FR-prefixed SHALL statements - PLAN.md: Phased work breakdown structure - docs/reference/FR_TRACKER.md: FR implementation status - docs/reference/CODE_ENTITY_MAP.md: Code-to-requirements mapping Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Auto: Sync and evaluate feat/forge-guardian-and-governance-sync (#10) * docs: Turn 23 mass synchronization - Structure and Environment Health * docs: Turn 23 mass synchronization - Structure and Environment Health * chore: add worktrees/ to gitignore Standardize working directory ignore patterns. Co-authored-by: kooshapari * feat: add forge as a policy guardian alongside droid/codex - Add forge permissions.yaml support with commandAllowlist/Requestlist/Denylist - Add --forge-settings CLI argument - Add _apply_forge_rules() function for YAML policy application - Update render_platform_payload() to include forge platform - Update _build_success_entries() to track forge artifacts - Update resolve.py to output forge.settings.yaml --------- Co-authored-by: Koosha Paridehpour <koosha@phenotype.ai> * Auto: Sync and evaluate chore/add-worktrees-gitignore (#9) * docs: Turn 23 mass synchronization - Structure and Environment Health * docs: Turn 23 mass synchronization - Structure and Environment Health * chore: add worktrees/ to gitignore Standardize working directory ignore patterns. Co-authored-by: kooshapari --------- Co-authored-by: Koosha Paridehpour <koosha@phenotype.ai> * fix: resolve all 16 baseline test failures and clean lint (#16) Core fixes to policy_lib.py: - Add evaluate_with_quality() to ConditionGroup returning (ok, partial_fail, reasons) 3-tuple; any-mode now signals partial_fail when required fails but optional passes - Fix all-mode to evaluate every item before deciding (no early exit), collecting complete reason list for diagnostic accuracy - CommandRule.evaluate uses evaluate_with_quality and emits request on partial_fail instead of falling through silently to the next rule - Fix _parse_match error message for non-string/non-dict match values sync_host_rules.py: - Map request action to cursor_deny (cursor treats request as deny in shell layer) - Include unconditional rules in wrapper_rules when include_conditional=True - _normalize_for_wrapper: generate proper wrapper entry with empty conditions group for unconditional rules instead of returning empty dict - Remove forge from _build_success_entries (not a policy-enforced platform) - Use .get() with default [] in _count_platform_rules and _managed_segment_length_after to avoid KeyError on partial renders - Fix _had_managed_segment_before forge path: call _load_json(path) instead of referencing undefined variable policy wrappers/policy-wrapper-dispatch.sh: - emit_fallback: output sys.argv[2] (decision) not sys.argv[3] (reason) as fallback wrappers/zig/src/main.zig: - Exit with code 1 on bad usage and invalid bundle JSON (was returning 0) - Always overwrite best_error when a higher-rank rule wins (was keeping stale error from a lower-rank rule that errored) tests/test_policy_contract.py: - Fix test_wrapper_allow_and_request_rule_parity: call _run_wrapper_with_command with local command variable instead of _run_wrapper (which used self.command) - Fix test_wrapper_action_precedence_with_omitted_on_mismatch_fields: same fix for both sub-test assertions; correct second expectation from request to deny (deny rank > request rank when both match unconditionally) - Remove unused EXIT_CODE_ARG import (ruff F401) .github/workflows: add job-level permissions block to governance job lint: add noqa E402 with justification for sys.path-before-import pattern Co-authored-by: Claude Code <claude@anthropic.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> * docs: add comprehensive feature comparison matrix (#17) Co-authored-by: Claude Code <claude@anthropic.com> * docs(spec): expand PRD, FUNCTIONAL_REQUIREMENTS, and ADR with real content (#19) Replace sparse stubs with substantive spec docs grounded in the actual codebase. PRD adds target-user table, full acceptance criteria for all four epics (scope resolution, conditional rules, host sync, governance validation), and explicit non-goals. FUNCTIONAL_REQUIREMENTS expands from 13 to 24 FRs across six categories (FR-RES, FR-COND, FR-HOST, FR-GOV, FR-SCHEMA) with implementation file references. ADR expands from 4 to 7 records adding decisions for policy hash design, Python-as- reference-resolver, and snapshot-based drift detection. Co-authored-by: Claude Code <claude@anthropic.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> * docs(spec): add USER_JOURNEYS.md with 6 real end-to-end flows (#20) Adds USER_JOURNEYS.md covering the six primary actor journeys: CI pipeline policy resolution, conditional rule authoring, harness artifact application, snapshot drift detection, schema validation, and cross-language wrapper evaluation. Each journey includes ASCII flow diagrams and FR traceability. Co-authored-by: Claude Code <claude@anthropic.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> * chore: update docs and configs * chore: sync * chore: add docs gitignore and update playwright config Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * chore: commit working changes from work-audit session 2026-03-28 * docs: add docs-site scaffold and verification harness (#21) Co-authored-by: Claude Code <claude@anthropic.com> Co-authored-by: Codex <codex@phenotype.dev> * feat: apply phenotype governance standards - Add CODEOWNERS with @KooshaPari as sponsor - Add AGENTS.md extending phenotype-governance - Add issue/PR templates for task discovery - Add linter configs where applicable - Add CI workflow for automated quality gates * feat: add TEST_COVERAGE_MATRIX.md Added: - TEST_COVERAGE_MATRIX.md - test coverage tracking Stabilization complete * docs: add SPEC.md and PLAN.md * chore: add AgilePlus scaffolding * docs: add journeys, stories, and traceability documentation * chore(infra): add standardized infrastructure files * feat(policy): standardize error codes to kebab-case across all wrappers * ci: migrate to reusable workflows from template-commons - Use reusable-rust-ci.yml, reusable-python-ci.yml, reusable-typescript-ci.yml - Add security scanning with reusable-security-scan.yml - Add governance validation with validate-governance.yml * feat: migrate federation tools from agentops-policy-federation * ci(legacy-enforcement): add legacy tooling anti-pattern gate (WARN mode) Adds legacy-tooling-gate.yml monitoring for anti-patterns per CLAUDE.md. Refs: CLAUDE.md Technology Adoption Philosophy * feat: complete federation merge - add cli, extensions, policies, schemas, scripts, tests * chore(ci): pin floating external actions to SHAs in sast.yml (#2) * chore(ci): pin floating external actions to SHAs in security-deep-scan.yml (#3) * chore(ci): pin floating external actions to SHAs in security-guard.yml (#4) * chore(ci): pin floating external actions to SHAs in security.yml (#5) * chore: add OpenSSF Scorecard workflow (audit #256) (#6) * chore(deps-dev): bump postcss (#1) Bumps the npm_and_yarn group with 1 update in the / directory: [postcss](https://github.com/postcss/postcss). Updates `postcss` from 8.5.8 to 8.5.10 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.8...8.5.10) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.10 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * docs(agents): harmonize AGENTS.md to thin pointer - Consolidates governance guidance into canonical hierarchy - Points to ~/.claude/AGENTS.md, /repos/CLAUDE.md, repo CLAUDE.md - Reduces per-repo guidance duplication - Maintains ~23-line pointer format for easy scanning Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * fix(tests): unblock wrapper import errors via conftest mocks Mock opencode, codex, cursor, kilo, forgecode, droid wrapper libraries and their submodules in conftest.py to prevent ModuleNotFoundError during test discovery. Tests can now be discovered and executed. Previously: test collection failed immediately at import. Now: test discovery succeeds; 3+ tests pass (failures due to mocked impls). Enables CI/CD test execution. Traces to: GOVERNANCE — test blockage * test(pyo3): add end-to-end PolicyStack ↔ policy-engine integration tests Added tests/test_pyo3_integration.py: comprehensive integration test suite for PyO3 bindings. Covers: - RuleEvaluator construction and rule addition (FR-SHARED-007) - Metadata assignment and tracking (FR-SHARED-005, 003) - ConditionGroup and context evaluation (FR-SHARED-002) - MatcherKind and OnMismatchAction enum variants (FR-SHARED-001, 004) - Decision creation and traced evaluation (FR-SHARED-006) - Multi-rule evaluation and rule clearing - Primary integration scenario: ACL rule evaluation against user context All 12 tests passing. Binding now verified for PolicyStack consumption. Traces to: W-51 (Phase-1 consolidation complete) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * docs(changelog): enrich unreleased section with concrete features and fixes Mined commit history (b981c9b..f6b552f) and categorized 10 commits into: - Added: federation merge, PyO3 integration tests, spec docs, docsite, AgilePlus - Changed: error code standardization, governance standards, reusable workflows - Fixed: baseline test suite, PyO3 import errors - Security: legacy tool enforcement gate Total: 7 Added, 3 Changed, 2 Fixed, 1 Security entries documented with commit hashes. Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com> * chore(release): v0.1.0 — federation merge + PyO3 integration + governance standards * docs(readme): add Install section with Python setup instructions * chore(codeql): pin actions to SHA Pin GitHub Actions references for the PinnedDependencies wave. Validation: - CodeRabbit passed/skipped - GitGuardian passed - Socket passed - SonarCloud passed - Semgrep passed Co-authored-by: Codex <noreply@openai.com> * docs(coc): add Contributor Covenant 2.1 (#8) * chore: pin Python 3.12 via .python-version (#9) * chore: refresh GitHub Actions workflow cache * chore: add least-privilege permissions to workflows (#10) * chore(ci): add least-privilege permissions to benchmark.yml * chore(ci): add least-privilege permissions to ci.yml * chore(ci): add least-privilege permissions to coverage.yml * chore(ci): add least-privilege permissions to legacy-tooling-gate.yml * chore(ci): add least-privilege permissions to phenotype-quality-gate.yml * chore(ci): add least-privilege permissions to quality-gate.yml * chore(ci): add least-privilege permissions to sast.yml * chore(ci): add least-privilege permissions to scorecard.yml * chore(ci): add least-privilege permissions to security-deep-scan.yml * chore(ci): add least-privilege permissions to security-guard.yml * chore(ci): add least-privilege permissions to traceability.yml * chore(docs): trigger Pages workflow rebuild * chore: add FUNDING.yml (#11) * fix(ci): repair pages-deploy.yml workflow-file parse error * fix(pages): point pages-deploy at vitepress outDir (.vitepress-dist not docs/.vitepress/dist) * fix(ci): repair legacy tooling gate yaml Restore the malformed action steps so GitHub can parse and run the WARN-mode legacy tooling scan. Co-authored-by: Codex <noreply@openai.com> * fix(ci): run policystack checks locally Replace unreachable reusable workflow references with local docs build, smoke test, and governance validation steps. Co-authored-by: Codex <noreply@openai.com> * fix(ci): avoid editable package discovery Install only pytest for CI smoke tests because the repo flat layout is not packaged for editable installs. Co-authored-by: Codex <noreply@openai.com> * chore(deps): regenerate lockfiles for Dependabot advisories (2 alerts) (#12) * fix(ci): restore workflow yaml syntax (#13) Repair workflow steps whose pinned action comments swallowed step boundaries, restore valid with/env/if blocks, add a minimal permissions-audit job, and fix the stacked-PR audit argument handling flagged by actionlint. Validation: - actionlint -color=false .github/workflows/*.yml - git diff --check - uv run --with pytest --with pyyaml --with jsonschema pytest tests/test_resolve_cli_governance.py tests/test_policy_common.py tests/test_smoke_dispatch_host_hook.py -q (fails: pre-existing setuptools flat-layout package discovery) Co-authored-by: Codex <noreply@openai.com> * chore(deps): regenerate lockfiles for Dependabot advisories (2 alerts) (#14) * ci: add CodeQL Rust analysis (security scanning) (#15) Co-authored-by: Codex <noreply@openai.com> * docs: add canonical worklog ledger (#16) docs: add canonical worklog ledger Add the missing chronological worklog entry point for PolicyStack governance maintenance and record the current workflow syntax baseline. Validation: - actionlint .github/workflows/*.yml - npm run docs:build - pre-push hook completed successfully Co-authored-by: Codex <noreply@openai.com> * chore(deps): pin docs vite toolchain (#17) chore(deps): pin docs vite toolchain Resolve PolicyStack docs Dependabot alerts by overriding Vite and esbuild to patched versions while keeping VitePress at the current release. Validation: - npm audit --omit=optional - npm run docs:build - actionlint .github/workflows/*.yml - pre-push hook completed successfully Co-authored-by: Codex <noreply@openai.com> * chore(pages): add CNAME for policystack.phenotype.space (#18) * chore: add CITATION.cff (#19) Co-authored-by: Koosha Pari <koosha@phenotype.space> * renovate-config (#20) * Add Python Taskfile tasks (#21) Co-authored-by: Codex <noreply@openai.com> * add language-aware taskfile (#22) Co-authored-by: Codex <noreply@openai.com> * taskfile (#23) Add quality and docs build tasks for the existing language-aware Taskfile.\n\nCo-authored-by: Codex <noreply@openai.com> * Tune PolicyStack Taskfile tasks (#24) Co-authored-by: Codex <noreply@openai.com> * Tune PolicyStack Taskfile tasks (#25) Co-authored-by: Codex <noreply@openai.com> * polish PolicyStack taskfile common tasks (#26) Co-authored-by: Codex <noreply@openai.com> * Refine PolicyStack Taskfile common tasks (#27) Centralize the scratch temp directory used by Python build and test tasks so the language-aware Taskfile remains easier to maintain.\n\nValidation:\n- task build\n- task test\n- task lint\n\nCo-authored-by: Codex <noreply@openai.com> * Refine PolicyStack Taskfile build coverage (#28) Derive Python compile targets from tracked files while keeping the existing scripts exclusion boundary for generated/auxiliary scripts. Validation: - task build - task test - task lint - task clean Co-authored-by: Codex <noreply@openai.com> * Expose Taskfile language detection (#29) Add a small language task so the detected primary repo language can be checked directly alongside the common build, test, lint, and clean tasks. Co-authored-by: Codex <noreply@openai.com> * Refine PolicyStack Taskfile lint (#30) Co-authored-by: Codex <noreply@openai.com> * Refine PolicyStack Taskfile Python tasks (#31) Keep Python bytecode caches inside the Taskfile temp directory and put the repository root on PYTHONPATH for build, test, and lint tasks. Co-authored-by: Codex <noreply@openai.com> * Refine Taskfile clean cache coverage Include Python type-checker cache directories in the common clean task so Taskfile cleanup covers the repo's current validation tools. Co-authored-by: Codex <noreply@openai.com> * Add PolicyStack Taskfile common tasks (#33) Detected PolicyStack as Python-first and aligned the Taskfile build/test/lint/clean targets with the repository governance validation surface. Co-authored-by: Codex <noreply@openai.com> * Harden Taskfile common tasks (#34) Co-authored-by: Codex <noreply@openai.com> * Refine Taskfile language detection (#35) Detect Python from uv.lock and detect Node projects from common lockfiles while continuing to prefer primary repo manifests over secondary docs tooling. Co-authored-by: Codex <noreply@openai.com> * Refine Taskfile clean cache coverage (#36) Co-authored-by: Codex <noreply@openai.com> * Refine Taskfile clean artifacts (#37) Co-authored-by: Codex <noreply@openai.com> * Refine Taskfile clean coverage (#38) Include nested docs dependencies in the common clean task so Taskfile cleanup covers the repo's secondary docs package. Co-authored-by: Codex <noreply@openai.com> * Refine Taskfile clean coverage (#39) Include nested docs dependencies in the common clean task so Taskfile cleanup covers the repo's secondary docs package. Co-authored-by: Codex <noreply@openai.com> * docs: add PR template (#40) * ci: add trufflehog secrets scanning (#42) * chore: pin actions to immutable SHA * ci: expand pytest to full test suite + ruff lint gate - Replace single-file smoke test run with full `pytest tests/ -q --tb=short` - Add `ruff check .` and `ruff format --check .` gates - Consolidate pip install into one step for ruff + pytest Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * chore: pin all GitHub Actions to commit SHAs Pins all GitHub Actions to immutable commit SHAs. * ci: add trufflehog secrets scanning --------- Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com> * chore: pin all GitHub Actions to commit SHAs (#41) * chore: pin actions to immutable SHA * ci: expand pytest to full test suite + ruff lint gate - Replace single-file smoke test run with full `pytest tests/ -q --tb=short` - Add `ruff check .` and `ruff format --check .` gates - Consolidate pip install into one step for ruff + pytest Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * chore: pin all GitHub Actions to commit SHAs Pins all GitHub Actions to immutable commit SHAs. --------- Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com> * chore: pin all GitHub Actions to commit SHAs (#41) (#43) * chore: pin actions to immutable SHA * ci: expand pytest to full test suite + ruff lint gate - Replace single-file smoke test run with full `pytest tests/ -q --tb=short` - Add `ruff check .` and `ruff format --check .` gates - Consolidate pip install into one step for ruff + pytest * chore: pin all GitHub Actions to commit SHAs Pins all GitHub Actions to immutable commit SHAs. --------- Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com> * docs: add journey-traceability + iconography implementation (#44) Co-authored-by: Phenotype Agent <agent@phenotype.ai> * fix(PolicyStack): add missing closing parens on lines 60-61 Both stall_count and breach_count calls were missing one ) to close int(_num(...)) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * ci: SHA-pin GitHub Actions (normalize to canonical SHAs) Pin all action refs to immutable SHAs across workflow files: - checkout@v4 → @11bd71901bbe5b1630ceea73d27597364c9af683 - checkout@v6 → @de0fac2e4500dabe0009e67214ff5f5447ce83dd - setup-node@v4/v5, setup-python@v4/v5, setup-go@v5 - upload-artifact@v4/v7, download-artifact@v4 - cache@v3/v4, github-script@v7 - configure-pages@v5/v6, deploy-pages@v4/v5 - upload-pages-artifact@v3/v5, dependency-review-action@v4 Fixes version-tag normalization (add v4/v5 tags where missing). Fixes double-SHA corruption artifacts from prior patching rounds. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * lint(PolicyStack): autofix F401, COM812, I001, format ruff --fix 705 errors auto-fixed via ruff --fix and ruff format: - F401: removed unused imports (ASK_MODE_REVIEW, delegate/config_loader fns) - COM812: trailing commas added throughout - I001/I002: import blocks sorted/formatted - RUF022: __all__ sorted - T201/T204: print statements replaced with logging Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * fix(PolicyStack): apply --unsafe-fixes (1085 auto-fixes applied) Resolves all F401 (unused import), T201 (bare print), I001 (sort), COM812 (trailing comma), RUF022 (__all__ sort) in cli/ and tests/. Remaining 51 errors: pre-existing style/complexity only. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * chore(security): bootstrap deny.toml (#46) * chore: remove policystack README stub prior to subtree merge --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Codex <noreply@openai.com> Co-authored-by: Koosha Paridehpour <koosha@phenotype.ai> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Claude Code <claude@anthropic.com> Co-authored-by: Codex <codex@phenotype.dev> Co-authored-by: Forge <forge@phenotype.dev> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Koosha Pari <koosha@phenotype.space> Co-authored-by: Phenotype Agent <agent@phenotype.ai>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps github/codeql-action from 3 to 4.
Release notes
Sourced from github/codeql-action's releases.
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
43d8420Do not run Swift in debug artifacts after failure check76a687eMerge pull request #3804 from github/dependabot/npm_and_yarn/npm-minor-e84c60...751f3e2Bump eslint-plugin-jsdoc from 62.8.1 to 62.9.0 in the npm-minor group808513fUpdate language aliases teste452857Throw error early rather than warningb623f5fMerge pull request #3799 from github/mario-campos/test-multiple-registriesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)