Skip to content

build(deps): bump actions/github-script from 7 to 8 - #2

Merged
diegosouzapw merged 1 commit into
mainfrom
dependabot/github_actions/actions/github-script-8
Feb 13, 2026
Merged

diegosouzapw merged 1 commit into
mainfrom
dependabot/github_actions/actions/github-script-8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 13, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/github-script from 7 to 8.

Release notes

Sourced from actions/github-script's releases.

v8.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

Full Changelog: actions/github-script@v7.1.0...v8.0.0

v7.1.0

What's Changed

New Contributors

Full Changelog: actions/github-script@v7...v7.1.0

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v8)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 13, 2026
@github-actions

Copy link
Copy Markdown
Contributor

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

To use Codex here, create a Codex account and connect to github.

@diegosouzapw
diegosouzapw merged commit 0c26491 into main Feb 13, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/github-script-8 branch February 13, 2026 19:51
StealthIQ added a commit to StealthIQ/OmniRoute that referenced this pull request Feb 21, 2026
- Generate "Account cheaper-inference#1", "Account cheaper-inference#2" names for providers that use non-email identifiers
- Only use email as display name when it's a valid email (contains @)
- Hide email field in UI when value is not a real email address
diegosouzapw added a commit that referenced this pull request Feb 28, 2026
…ance, robustness

## Critical Fixes
- #1: Server readiness — waitForServer() polls before loading window
- #2: Restart timeout — 5s + SIGKILL prevents IPC handler from hanging
- #3: changePort — now stops/restarts server on new port

## Important Fixes
- #4: Tray cleanup — destroy old Tray before recreating
- #5: IPC emission — server-status & port-changed events
- #6: Disposer pattern — replaces removeAllListeners
- #7: useSyncExternalStore — eliminates 5x re-renders

## Minor: #8-#16 (dead code, CSP, platform titlebar, types, errors, version)

Tests: 76 / 15 suites (was 64/9)
diegosouzapw added a commit that referenced this pull request Mar 7, 2026
…ance, robustness

## Critical Fixes
- #1: Server readiness — waitForServer() polls before loading window
- #2: Restart timeout — 5s + SIGKILL prevents IPC handler from hanging
- #3: changePort — now stops/restarts server on new port

## Important Fixes
- #4: Tray cleanup — destroy old Tray before recreating
- #5: IPC emission — server-status & port-changed events
- #6: Disposer pattern — replaces removeAllListeners
- #7: useSyncExternalStore — eliminates 5x re-renders

## Minor: #8-#16 (dead code, CSP, platform titlebar, types, errors, version)

Tests: 76 / 15 suites (was 64/9)
diegosouzapw pushed a commit that referenced this pull request Mar 23, 2026
- FIX #1: Add null check for cred.password (prevent undefined access)
- FIX #2: Prioritize actual credentials over hardcoded account patterns
- FIX #3: Convert CommonJS require() to ES imports for consistency
- FIX #4: Move to App Router, add credential metadata response, document maintainer integration

Additional improvements:
- Better TypeScript error typing with optional chaining
- Improved error messages for missing dependencies
- Added maintainer TODO for provider system integration
- Proper Next.js App Router format (route.ts)

All bot warnings resolved. Ready for maintainer review.
prakersh pushed a commit to prakersh/OmniRoute that referenced this pull request Mar 26, 2026
- FIX cheaper-inference#1: Add null check for cred.password (prevent undefined access)
- FIX cheaper-inference#2: Prioritize actual credentials over hardcoded account patterns
- FIX cheaper-inference#3: Convert CommonJS require() to ES imports for consistency
- FIX cheaper-inference#4: Move to App Router, add credential metadata response, document maintainer integration

Additional improvements:
- Better TypeScript error typing with optional chaining
- Improved error messages for missing dependencies
- Added maintainer TODO for provider system integration
- Proper Next.js App Router format (route.ts)

All bot warnings resolved. Ready for maintainer review.
diegosouzapw pushed a commit that referenced this pull request Apr 3, 2026
benzntech referenced this pull request in benzntech/OmniRoute Apr 15, 2026
…CLI tools

Two critical bugs prevented the Dashboard CLI Tools feature from working:

Bug #1: keyId stripped by Zod validation
- Zod's safeParse() stripped the keyId field before backend could read it
- The real API key was never resolved from DB and written to settings.json
- Fix: Extract keyId from rawBody BEFORE validation in all 6 CLI settings routes
- Affected: claude, codex, droid, cline, openclaw, kilo settings routes

Bug #2: Key matching logic compared full key vs masked key
- Frontend compared full key (sk-31c4ea6a...) against masked key (sk-31c4****dfa6)
- They never matched, so the dropdown never showed the correct selected key
- Fix: Mask the token from file before comparing against the masked API keys list
- Affected: ClaudeToolCard.tsx

Also fixes model mapping being scrambled when key resolution failed.

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
payne0420 referenced this pull request in payne0420/OmniRoute Apr 25, 2026
Round of fixes addressing the gemini-code-assist and chatgpt-codex review
comments on the initial PR.

## High priority

- **PoW solver no longer blocks the event loop** (gemini #1, #2). The 100k
  prekey solver and 500k proof-of-work solver were synchronous SHA3-512
  loops that pinned a CPU core for tens to hundreds of milliseconds per
  request. Both are now async and `await`-yield to the event loop every
  1000 iterations via setImmediate, so concurrent requests and I/O still
  get scheduled. Wall time is approximately the same; what changes is
  fairness, not throughput.

- **Real upstream streaming for stream=true requests** (codex cheaper-inference#6). The
  conv call now passes `stream: true` through to the TLS client when the
  caller asked for streaming. The TLS client uses tls-client-node's
  streamOutputPath primitive to write the response body to a temp file
  as it arrives, and we tail that file as a ReadableStream so clients
  see chunks in real time instead of getting one buffered burst at the
  end. Also peeks the first 256 bytes — if the response starts with
  `{` it's almost certainly a JSON error envelope, so we wait for the
  full body and surface as a non-streaming error response.

## Medium priority

- **Per-cookie device id** (gemini cheaper-inference#3). Replaced the single
  process-wide DEVICE_ID with a per-cookie SHA-256-derived UUID that's
  stable across requests for one connection but unique per cookie. This
  matches how the browser's persistent oai-did cookie behaves and
  avoids cross-account fingerprint sharing. Cache is bounded to 200
  entries with FIFO eviction.

- **Removed dead conv-cache code** (gemini cheaper-inference#4). The convCache /
  convLookup / convStore trio (~70 LOC) was unused — conversationId is
  hard-pinned to null because Temporary Chat conversation_ids 404 on
  reuse. Deleted entirely; the comment explains why we don't persist.

- **No more console.log in the conv 4xx path** (gemini cheaper-inference#5). Replaced
  with log?.warn so it respects the application's logging
  configuration.

- **Bound the warmup cache** (codex cheaper-inference#7). The (cookie, accessToken) ->
  timestamp map was unbounded; long-running multi-user deployments
  with rotating tokens would grow it forever. Now capped at 200
  entries with FIFO eviction (Map iteration order = insertion order).

- **Honor abort signals in TLS fetch** (codex cheaper-inference#8). tlsFetchChatGpt now
  checks options.signal before issuing the upstream call, after the
  call returns, and the streaming body listens for abort to stop
  tailing the temp file. tls-client-node's koffi binding can't cancel
  an in-flight request mid-call, but we no longer process / re-emit a
  response that the caller has already given up on.

## Tests

All 27 chatgpt-web tests still pass; updated several to find calls by
URL via findIndex rather than hardcoded indices, since the warmup
sequence (/me, /conversations, /models) and two-stage Sentinel
(prepare + chat-requirements) shifted positional offsets.

Manually verified end-to-end:
- Non-streaming completions
- Streaming completions (real-time chunks; SSE [DONE] terminator)
- Multi-turn with full history each turn (memory preserved correctly)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
diegosouzapw pushed a commit that referenced this pull request May 13, 2026
- Add tests/unit/error-message-sanitization.test.ts: covers model-combo-mappings
  routes (success, 400, 404 paths) and sync token hashing (satisfies PR Test Policy)
- Log swallowed error in cursor/auto-import tryIdeAuth() catch block (Gemini #1)
- Use codeql[...] prefix instead of legacy lgtm[...] in sync/tokens.ts (Gemini #2)
@diegosouzapw diegosouzapw mentioned this pull request Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant