Repository navigation
Point new machines at the attested release v2026.09.24.1 - #171
Merged
Merged
Conversation
v2026.09.24.1 (tag object ec94e8a -> 81385fe) carries the working plugin-install commands (#161), the guarded-job CPU cap (#158) and the release-bound no-git archive check with release_due content-drift reporting (#163). release_due --strict reports current. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: a7ce7e6cde
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This was referenced Sep 24, 2026
seathatflowsinourveins
added a commit
that referenced
this pull request
Sep 25, 2026
…loor (stacked on #159) (#177) * Adoption hygiene: native Claude Code pin is a floor (2.1.281), ai-memory assistant capture is opt-in, ignore Claude Code local state bootstrap-macos.sh's install_native ran `"$bin" install <pin>` even when Claude Code's native auto-updater had already installed something newer, so re-running the bootstrap downgraded it. It now keeps a ~/.local/bin/<bin> whose --version is at or above the pin (logs "Kept", downloads and installs nothing); a missing, older or unreadable launcher takes the unchanged checksum-verified install. The check lives inside install_native because tests/test_adoption_bootstrap.py runs that function on its own. Bash 3.2 safe. Both claude-code pins move to 2.1.281 together (shared components keep one version on both platforms). darwin-arm64 a922981f... comes from the official 2.1.281 manifest.json and matches, byte for byte, the copy the native updater installed on a Mac. linux-x64 56fe3da8... comes from the same manifest and was not re-hashed; fetch() checks it before running anything. 2.1.281 fixes a recursive rm of command-substitution output running unprompted in auto and --dangerously-skip-permissions mode. The macOS page's pin table and the generated new-host grand list follow the pins. The Claude settings template no longer passes --capture-assistant to ai-memory's Stop hook. render_config.py adds it only when AI_MEMORY_CAPTURE_ASSISTANT=true (host value file or --set) and rejects any value other than true, false or empty. defaultMode and skipDangerousModePermissionPrompt are unchanged. .gitignore adds .claude/settings.local.json and .claude/worktrees/. Not included, because open PRs #116, #145 and #151 own these files: the manifests/evidence.json re-hash of the 12 changed files, and the adoption/bootstrap.md "changed after `v2026.09.23.1`" marker for the three changed install inputs. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Re-hash evidence and mark the Claude Code floor in the bootstrap guide Records the SHA-256/byte entries for every file this branch changes and adds the "changed after `v2026.09.23.1`" note that the docs-consistency test requires for the new install behavior (pins 2.1.281, floor instead of unconditional reinstall). Both files are also edited by open PRs; whichever lands later re-runs the same host_receipts.register_file helper. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Keep a newer native Claude Code on Linux/WSL2: the pin is a floor there too adoption/bootstrap-linux.sh's install_native ran `"$bin" install <pin>` unconditionally, so on a Linux/WSL2 host whose native updater (latest channel) was ahead of the pin, re-running the bootstrap moved Claude Code back to the pin and dropped newer fixes. install_native is now the same function as bootstrap-macos.sh's (#159): a ~/.local/bin/<bin> whose --version first word is a dotted numeric version at or above the pin is kept (nothing downloaded or installed; install_pin logs "Kept installed ..." instead of "Installed ..."); a missing, older, non-numeric or failing launcher takes the unchanged checksum-verified install. Tests: NativeInstallFloorTests in tests/test_adoption_bootstrap.py run the verbatim fetch/install_native/install_pin against a one-pin fixture (curl shimmed; a shasum-backed sha256sum shim only where GNU --check --status is missing), plus an identity check that both scripts share one install_native. Docs: the Linux claude-code install_note describes the floor; bootstrap.md step 2's stale "Linux/WSL2's script and pins are the same at v2026.09.23 as on main" now says what differs at that tag; the claude-code floor notes on bootstrap.md, linux-wsl2.md and macos-arm64.md name the currently pinned release v2026.09.24.1 (#171), which the docs-consistency test requires. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * linux-wsl2.md: keep the changed-after marker on one line (docs-consistency) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> --------- Co-authored-by: seathatflowsinourveins <234074349+seathatflowsinourveins@users.noreply.github.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: Scout <scout@local>
5 of 8 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
This points new machines at the attested release v2026.09.24.1 (annotated tag object
ec94e8a6→ commit81385fe63777cf0fce959c61ee5f323a681db2b2), replacing v2026.09.23.1.The release carries:
claude plugin marketplace add …@<sha>form in v2026.09.23.1 exits 1.--source-ref/--source-digest, plusrelease_duecontent-drift reporting. Step 6 now runs under Python 3.13 (Bind the no-git archive check to the release; report new-machine content drift in release_due; run step 6 under Python 3.13 #163).Evidence (observed on this host, 2026-09-24)
Main CI on
81385fe6, all success: validate, token report, adoption bootstrap smoke, dependency/workflow security scan, and the main push checks.publish-catalog run 35971668015:
publishsuccess,releasesuccess. The release is immutable.Assets:
…81385fe6….tar.gz8f191482e75f21dda9f1c5f7b2ff9f4ef0b77d2d37e77463a35e65d342bcf894…81385fe6….spdx.json21480853dad27c6c50328835de480c339917671d48c7c4d459bb64a48b969d86Verification commands:
gh attestation verify <tar.gz> --repo … --signer-workflow …/publish-catalog.yml --source-ref refs/tags/v2026.09.24.1 --source-digest 81385fe6…gh attestation verify <spdx.json> --repo … --predicate-type https://spdx.dev/Document --source-ref refs/tags/v2026.09.24.1 --source-digest 81385fe6…gh release verify-assetfor both assetsgh release verify v2026.09.24.1--source-digest40828df… (the v2026.09.23.1 commit)Archive contents: 5631 non-directory entries, which equals
git ls-tree -r --name-only v2026.09.24.1 | wc -l(5631).Checks on this branch (based on main
dd8d3f88, which adds #165 and touches no tracked new-machine file):release_due --strictand--strict-if-repinned origin/main:status: current,due: [],changed: [].validate.py,evidence_manifest --check,host_receipts validate,component_matrix --check,new_host_grand_list --check: all 0.Process note (update.md F3): before merging, this branch will be updated from main and validate re-run. An independent fresh-clone verification by another session follows the merge.
🤖 Generated with Claude Code