Skip to content

fix(ci): qualify released CLI with existing dependency repairs #1222

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
gael-obin wants to merge 3 commits into
base: main
Choose a base branch
from
Draft

fix(ci): qualify released CLI with existing dependency repairs #1222

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
0768928
fix(ci): select released CLI 0.1.202 for qualification
gael-obin Oct 23, 2026
8d9e988
fix(security): consume patched Next.js and Sentry releases
crisfiorini-oss Oct 22, 2026
5527264
docs(ci): describe the released CLI selection
gael-obin Oct 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions module/AGENTS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -103,13 +103,13 @@ Postgres 0.0.144 and Vault 0.0.42, which include their owners' outcome fixes.
An empty legacy response is not evidence that tests passed; do not bypass that
check or disable the service's test phase to accept it.

Lifecycle CI selects the exact CLI source candidate in
Lifecycle CI selects the released CLI pinned in
`scripts/ci/install-codefly.sh` for every planner/executor job. It recognises
the CLI-owned `artifact-cache` group without an authored default. This uses
the canonical versioned Go install entrypoint; it does not require a CLI
release for development qualification. The installer refuses release tags
while the source candidate is selected. Restore a qualified released pin
before publishing the host.
the CLI-owned `artifact-cache` group without an authored default. The installer
also retains an explicit historical source candidate for development
qualification through the canonical versioned Go install entrypoint; that
selection is refused on release tags. A released pin still requires the full
normal qualification and publication gates before publishing the host.

Outside the gateway's delivery candidate, services use released SDK v0.4.0.
Their listeners resolve allocated
Expand Down
4 changes: 2 additions & 2 deletions module/services/frontend/code/next-env.d.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
/// <reference types="next" />
/// <reference types="next/image-types/global" />
import "./.next/dev/types/routes.d.ts";
import "./.next/dev/types/root-params.d.ts";
import "./.next/types/routes.d.ts";
import "./.next/types/root-params.d.ts";

// NOTE: This file should not be edited
// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.
Loading
Loading