From cce7012e064518663e0f6d4d6e9a334c04f44e27 Mon Sep 17 00:00:00 2001 From: Kyle Sexton <153232337+kyle-sexton@users.noreply.github.com> Date: Sat, 24 Oct 2026 11:22:35 -0400 Subject: [PATCH 1/2] feat(dependabot-policy): review-only @microsoft/tui-test in claude-code-plugins The control-claude-code driver installs the engine from its own lockfile and loads its native binary into the process that drives a Claude Code session on the user's saved subscription login, so a non-major release must not auto-merge on ci-status alone. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_0177ybXguBnnGV4UTksrdzd9 --- components/dependabot-policy/policy.json | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/components/dependabot-policy/policy.json b/components/dependabot-policy/policy.json index 13e1748..cd837fb 100644 --- a/components/dependabot-policy/policy.json +++ b/components/dependabot-policy/policy.json @@ -68,6 +68,15 @@ "reviewed": "2026-10-18", "basis": ".github/actions/resolve-config/action.yml:159 installs this lockfile and :160 runs resolve-config.mjs, whose resolve.mjs:8 loads yaml to parse the lane config inside credentialed CI lanes; in pr-merge.yml:210-215 its output sets the permissions the lane token is minted with at :261, so a hijacked release can widen that token.", "control": "docs/conventions/pr-pipeline/README.md#review-only-dependencies" + }, + { + "repository": "melodic-software/claude-code-plugins", + "ecosystem": "npm", + "directory": "/plugins/harness-ops/skills/control-claude-code/driver", + "dependency": "@microsoft/tui-test", + "reviewed": "2026-10-24", + "basis": "plugins/harness-ops/skills/control-claude-code/driver/driver.mjs:245 installs this lockfile on the user's machine, :420 loads the engine and its per-platform native binary (package-lock.json:22-30) into the session holder, and :422 starts claude in it after :87 clears the API credential variables, so the session runs on the saved claude.ai subscription login and a hijacked release runs beside it.", + "control": "docs/conventions/pr-pipeline/README.md#review-only-dependencies" } ], "excludeSemverMajor": true, From 63186f5cc5069923f4e1ea7e5c42b40fb56bcd17 Mon Sep 17 00:00:00 2001 From: Kyle Sexton <153232337+kyle-sexton@users.noreply.github.com> Date: Sat, 24 Oct 2026 11:24:09 -0400 Subject: [PATCH 2/2] docs(dependabot-policy): cite the engine load and claude start as one range The import alone may not load the native binding; the run that follows does. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_0177ybXguBnnGV4UTksrdzd9 --- components/dependabot-policy/policy.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/components/dependabot-policy/policy.json b/components/dependabot-policy/policy.json index cd837fb..2dd5dc7 100644 --- a/components/dependabot-policy/policy.json +++ b/components/dependabot-policy/policy.json @@ -75,7 +75,7 @@ "directory": "/plugins/harness-ops/skills/control-claude-code/driver", "dependency": "@microsoft/tui-test", "reviewed": "2026-10-24", - "basis": "plugins/harness-ops/skills/control-claude-code/driver/driver.mjs:245 installs this lockfile on the user's machine, :420 loads the engine and its per-platform native binary (package-lock.json:22-30) into the session holder, and :422 starts claude in it after :87 clears the API credential variables, so the session runs on the saved claude.ai subscription login and a hijacked release runs beside it.", + "basis": "plugins/harness-ops/skills/control-claude-code/driver/driver.mjs:245 installs this lockfile on the user's machine, :420-422 load the engine and its per-platform native binary (package-lock.json:22-30) into the session holder and start claude in it after :87 clears the API credential variables, so the session runs on the saved claude.ai subscription login and a hijacked release runs beside it.", "control": "docs/conventions/pr-pipeline/README.md#review-only-dependencies" } ],