fix(ci): run /resolve without the container sandbox and pin its CLI version - #10428

Merged

wenshao merged 20 commits into

mainfrom

fix/resolve-restore-no-sandbox

Aug 31, 2026

Commits on Aug 29, 2026

fix(ci): scrub agent-planted runner state before the resolve-pr credentialed push
qwen-code-dev-bot
committed
1896f37
fix(ci): invoke the /resolve agent directly with decoyed runner files, on top of the post-agent scrub
wenshao
committed
f745f9d
Merge origin/main into fix/resolve-restore-no-sandbox
wenshao
committed
f38435c
chore: drop an unrelated lint-staged reformat picked up by the merge commit
wenshao
committed
91678f0
Merge remote-tracking branch 'origin/main' into fix/resolve-restore-no-sandbox
wenshao
committed
5a382fa
fix(ci): close the resolve-pr containment bypasses from review round 4 (#10428)
wenshao
committed
c5a45e5
Merge branch 'main' into fix/resolve-restore-no-sandbox
wenshao
authored
d7ff487
Merge branch 'main' into fix/resolve-restore-no-sandbox
wenshao
authored
5648cc2
fix(ci): publish the /resolve resolution from a job that never ran the agent
wenshao
committed
af381c1
test(ci): pin the /resolve agent invocation wiring and ordering
wenshao
committed
1d7b829

Commits on Aug 30, 2026

Commits on Aug 31, 2026

fix(ci): give the /resolve publisher a per-run group so a completed resolution is never dropped
wenshao
committed
15399f4