Repository navigation
release: v0.0.124 - #123
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
FastAPI still emitted images based on Python companion 0.0.5. Release 0.0.124 pins published Python 0.0.7 by its multi-platform index digest, selecting Python 3.14.10 on Alpine 3.24.3. Core moves to 0.19.13, x/net to 0.62.0, and gRPC to 1.85.0. The shared CI workflow follows the Core pin.
Classification: a fix in the agent that owns its runtime image selection. Reuses Codefly's dependency pinning and agent release gates and Core's published companion; no replacement build or release mechanism. Agent wire protocol is unchanged.
Documentation: AGENTS.md records the shared CI pin; templates/agent/README.md.tmpl describes the refreshed runtime and the need to rebuild and re-scan existing service images. The runtime setting comment now correctly describes companion publication as separate from CLI releases.
Validation: codefly agent release ran all six local gates successfully (manifest, source tests, platform builds, dependency audit, real scaffold/build conformance, drift), with 0 failures and 0 skips. The published Python index includes linux/amd64 and linux/arm64; its actual runtime and embedded CLI were inspected. The embedded CLI carries x/net 0.62.0, gRPC 1.85.0 and publisher revision a21a549bf0754e580831965cc67db6b8b3ba89c1. Its GitHub provenance attestation verified. Go source audit retains two Docker findings without upstream fixes; the stripped embedded CLI binary scan reports six Docker/OpenPGP findings without upstream fixes.
Hosted CI must pass before merge. Codefly will tag the merged release commit and verify downloadable assets afterward. Downstream service rebuilds and NYL scans are not yet verified; this PR does not claim NYL clearance.