Commit graph

1842 commits

Author SHA1 Message Date
dependabot[bot]
76c61bed49
chore(deps): bump dorny/paths-filter from 4.0.1 to 4.0.2 (#2505)
Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from 4.0.1 to 4.0.2.
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](fbd0ab8f3e...7b450fff21)

---
updated-dependencies:
- dependency-name: dorny/paths-filter
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-16 07:02:56 +01:00
dependabot[bot]
796f1e5874
chore(deps)(deps): bump lucide-react in /gitnexus-web (#2503)
Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) from 1.21.0 to 1.23.0.
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.23.0/packages/lucide-react)

---
updated-dependencies:
- dependency-name: lucide-react
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-16 07:02:38 +01:00
dependabot[bot]
ad7dae243a
chore(deps)(deps-dev): bump @vitejs/plugin-react in /gitnexus-web (#2498)
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 5.2.0 to 6.0.2.
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.2/packages/plugin-react)

---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-16 07:01:38 +01:00
EVA
24d8d1ea38
docs: build shared package before CLI setup (#2448)
Co-authored-by: Eva <eva@100yen.org>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-07-16 07:00:21 +01:00
Eva
b37dcef771 test(communities): rebaseline canonical projection 2026-07-16 10:19:12 +07:00
Gergő Magyar
898e2a8321
Merge branch 'main' into upstream/eval-server-auth 2026-07-16 08:10:19 +05:00
bong-water-water-bong
226ec6cf99
chore(deps): npm audit fix — resolve @babel/core and brace-expansion advisories (#2444) 2026-07-16 08:09:39 +05:00
Eva
8a29f3c3ce chore(security): suppress deleted auth placeholder 2026-07-16 10:08:59 +07:00
Eva
d4576630eb fix(mcp): ignore undefined alias inputs 2026-07-16 10:07:06 +07:00
Eva
846b545680 fix(php): index import declaration directories 2026-07-16 09:58:33 +07:00
Eva
711a13c077 Merge remote-tracking branch 'upstream/main' into review/pr-2482 2026-07-16 09:54:37 +07:00
Eva
ff385a5472 Merge remote-tracking branch 'upstream/main' into upstream/community-order-2477 2026-07-16 09:51:57 +07:00
Eva
a6441b345c Merge remote-tracking branch 'upstream/main' into upstream/parsedfile-generation-2475 2026-07-16 09:50:36 +07:00
Eva
5d1911b2ef Merge remote-tracking branch 'upstream/main' into upstream/cypher-error-exit-2469 2026-07-16 09:49:16 +07:00
Eva
1821b01dbe fix(embeddings): bind resume checkpoints to provider 2026-07-16 09:48:03 +07:00
Eva
a117cf8a21 Merge remote-tracking branch 'upstream/main' into upstream/embedding-http-resilience 2026-07-16 09:44:17 +07:00
Eva
6eb82713f4 Merge remote-tracking branch 'upstream/main' into upstream/file-node-embedding-fallback 2026-07-16 09:40:29 +07:00
Eva
575dc6810a fix(mcp): validate repository policy before embedded serving 2026-07-16 09:39:06 +07:00
Eva
e0a83f098a Merge remote-tracking branch 'upstream/main' into upstream/mcp-repository-policy 2026-07-16 09:36:31 +07:00
Eva
d4eb7560ac fix(mcp): close read-only resource routing bypass 2026-07-16 09:34:34 +07:00
Eva
f94826157a Merge remote-tracking branch 'upstream/main' into upstream/mcp-read-only-policy 2026-07-16 09:30:59 +07:00
Eva
3f3494fd32 fix(mcp): validate aliases without schema combinators 2026-07-16 09:29:47 +07:00
Eva
14375ebf29 Merge remote-tracking branch 'upstream/main' into upstream/mcp-parameter-aliases 2026-07-16 09:27:32 +07:00
Eva
0506f91eb9 docs(mcp): explain response budget guardrails 2026-07-16 09:26:19 +07:00
Eva
730edb5c2c Merge remote-tracking branch 'upstream/main' into upstream/mcp-output-budget 2026-07-16 09:23:52 +07:00
Eva
1f7036dbb0 fix(ingestion): canonicalize parse node insertion 2026-07-16 09:21:38 +07:00
Eva
ed3f58d292 Merge remote-tracking branch 'upstream/main' into review/pr-2480 2026-07-16 09:17:40 +07:00
Eva
9741c48879 docs(eval): avoid secret-scanner auth fixture 2026-07-16 09:15:08 +07:00
Eva
c9fdab17f2 fix(eval): address auth configuration feedback 2026-07-16 09:13:34 +07:00
Eva
8682c8a56e Merge remote-tracking branch 'upstream/main' into upstream/eval-server-auth 2026-07-16 09:06:59 +07:00
Gergő Magyar
a05b501102
fix(cli): make Claude skills discoverable (#2434)
Some checks are pending
CodeQL / Analyze (javascript-typescript) (push) Waiting to run
CodeQL / Analyze (python) (push) Waiting to run
Gitleaks / gitleaks (push) Waiting to run
Publish / Classify release event (push) Waiting to run
Publish / RC guard (marker + release-PR skip) (push) Blocked by required conditions
Publish / ci (push) Blocked by required conditions
Publish / Publish to npm (push) Blocked by required conditions
Publish / Build & Push RC Docker images (push) Blocked by required conditions
Scorecard / Scorecard analysis (push) Waiting to run
Trivy Image Scan / Trivy (gitnexus-cli) (push) Waiting to run
Trivy Image Scan / Trivy (gitnexus-web) (push) Waiting to run
2026-07-15 20:40:20 +05:00
Eva
e3136f593f
ci: update setup composites to setup-node v6 (#2451)
Some checks are pending
CodeQL / Analyze (javascript-typescript) (push) Waiting to run
CodeQL / Analyze (python) (push) Waiting to run
Gitleaks / gitleaks (push) Waiting to run
Publish / Classify release event (push) Waiting to run
Publish / RC guard (marker + release-PR skip) (push) Blocked by required conditions
Publish / ci (push) Blocked by required conditions
Publish / Publish to npm (push) Blocked by required conditions
Publish / Build & Push RC Docker images (push) Blocked by required conditions
Scorecard / Scorecard analysis (push) Waiting to run
Trivy Image Scan / Trivy (gitnexus-cli) (push) Waiting to run
Trivy Image Scan / Trivy (gitnexus-web) (push) Waiting to run
2026-07-14 17:11:26 +01:00
Gergő Magyar
8548f0f17f
Merge branch 'main' into upstream/node-lookup-2479 2026-07-14 12:56:11 +01:00
dependabot[bot]
9cc364713a
chore(deps)(deps): bump @ladybugdb/core in /gitnexus (#2473) 2026-07-14 12:55:43 +01:00
ArgonarioD
c7a9b7efc2 feat(cli): mirror skills to .agents/skills/ when .agents/ exists
Some agents prefer repo-local .agents/skills/ over the global install. When
.agents/ is present, mirror the standard and generated skills written to
.claude/skills/ so those agents serve up-to-date copies. Opt-in via .agents/;
absent directory leaves the layout untouched.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-14 16:14:30 +08:00
Eva
34955b57f6 fix(php): resolve symbol-named PSR-4 imports 2026-07-14 13:12:33 +07:00
Eva
99312dfff2 test(bench): rebaseline PHP import capture shape 2026-07-14 12:51:47 +07:00
Eva
5407747c67 fix(php): resolve function imports by declaring file 2026-07-14 12:46:59 +07:00
Eva
f0f316a7b2 fix(scan): canonicalize traversal without order-sensitive Rust binding 2026-07-14 12:21:40 +07:00
dependabot[bot]
1482c0bc89
chore(deps)(deps): bump ignore from 7.0.5 to 7.0.6 in /gitnexus (#2474) 2026-07-14 04:51:37 +01:00
dependabot[bot]
f6c63f6c4e
chore(deps)(deps-dev): bump @types/node in /gitnexus (#2472) 2026-07-14 03:05:20 +01:00
Eva
031a160090 fix(scope): stabilize graph lookup collisions 2026-07-14 04:02:22 +07:00
Eva
26d9bfe888 fix(communities): canonicalize projection order 2026-07-14 03:21:34 +07:00
Eva
3d6908ba4b fix(cache): bound parsedfile generations 2026-07-14 03:17:42 +07:00
Eva
c35fc27427 fix(cli): fail cypher errors loudly 2026-07-14 03:08:32 +07:00
Eva
711ff8721d fix(embeddings): make HTTP generation resumable 2026-07-14 02:15:57 +07:00
Eva
181faa858c feat(mcp): enforce repository allowlist 2026-07-14 02:01:00 +07:00
Eva
17b32c5be2 feat(mcp): add fail-closed read-only mode 2026-07-14 01:58:27 +07:00
Eva
a75844b692 feat(mcp): normalize impact and context aliases 2026-07-14 01:54:49 +07:00
Eva
627ec5a5aa feat(mcp): add deterministic output budgets 2026-07-14 01:48:17 +07:00