Skip to content

release: promote v1.0.0 to main - #375

Merged
mohanagy merged 5 commits into
mainfrom
development
Aug 11, 2026
Merged

release: promote v1.0.0 to main#375
mohanagy merged 5 commits into
mainfrom
development

Conversation

@mohanagy

Copy link
Copy Markdown
Owner

Summary\n\nPromote the exact protected development head 3940383 to main for @lubab/miftah@1.0.0.\n\nThis promotion includes:\n- finalized 1.0.0 package and lockfile metadata plus changelog;\n- stable Semantic Versioning compatibility commitments;\n- the dependency security refresh from #373;\n- v1 readiness and evidence-boundary documentation;\n- all other user-visible changes accumulated on development since published v0.5.8.\n\n## Exact-head evidence\n\n- release preparation: #374\n- exact development push CI: https://github.com/mohanagy/miftah/actions/runs/31459111259\n- Linux quality, coverage, build, smoke, and package checks: passed\n- Node 20/22/24 across Ubuntu, macOS, and Windows: passed\n- npm audit production and full tree: zero known vulnerabilities\n\n## Evidence boundary\n\nThe 5/3/3 external counts and completed security report are recorded as maintainer attestation. The source participant records and report contents were not independently inspected in this release session; provider coverage, reviewer attribution, severity counts, remediation, and candidate-delta acceptance are not inferred.\n\n## Publication boundary\n\nAfter this PR is reviewed, passes exact-head protected CI, and merges, v1.0.0 will be released only from the exact current main commit. The GitHub Release must trigger protected OIDC publication; #39 remains open until registry provenance, fresh installation, and signatures are verified.\n\nRefs #39.

* Document v1 external readiness gates

* Address v1 readiness review feedback
* chore(release): prepare v1.0.0

* docs: tighten v1 evidence boundaries

* docs: bind attested counts to baseline
@coderabbitai

coderabbitai Bot commented Aug 11, 2026

Copy link
Copy Markdown

Warning

Review limit reached

You’ve reached a temporary PR review limit under our Fair Usage Limits Policy.

Your recent review volume is higher than typical usage, so adaptive limits are currently applied.

Next review available in: 9 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 249757ca-1497-442b-bf47-a6f6e0e36f5c

📥 Commits

Reviewing files that changed from the base of the PR and between 11aa48e and 3940383.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (25)
  • CHANGELOG.md
  • README.md
  • docs/cli.md
  • docs/config.md
  • docs/independent-security-review.md
  • docs/library-api.md
  • docs/oauth-console-validation.md
  • docs/plugins.md
  • docs/presets-and-clients.md
  • docs/research/tool-description-quarantine.md
  • docs/threat-model.md
  • docs/v1-evaluation.md
  • docs/whats-new-in-0.5.md
  • package.json
  • scripts/tool-description-quarantine-prototype.mjs
  • tests/fixtures/fake-upstream-bundled.mjs
  • tests/oauth-console-validation-contract.test.ts
  • tests/package-contract.test.ts
  • tests/readme-product-contract.test.ts
  • tests/release-config.test.ts
  • tests/release-version.test.ts
  • tests/tool-description-quarantine-research.test.ts
  • tests/v050-feature-guide-contract.test.ts
  • tests/v1-readiness-docs-contract.test.ts
  • tests/windows-config-migration-acl.test.ts

Comment @coderabbitai help to get the list of available commands.

@mohanagy

Copy link
Copy Markdown
Owner Author

@coderabbitai review

@coderabbitai

coderabbitai Bot commented Aug 11, 2026

Copy link
Copy Markdown
⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@mohanagy
mohanagy merged commit 51907b6 into main Aug 11, 2026
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant