Scott Werner
b24cb3227f
Merge pull request #1078 from fabro-sh/bot/internal-deps
...
Update internal dependencies
2026-10-27 13:16:18 -04:00
Scott Werner
13639e8da2
Merge pull request #1079 from fabro-sh/codex/server-tracing-test-readiness
...
Wait for foreground startup tracing before stopping the test server
2026-10-27 12:18:10 -04:00
Scott Werner
1a03ba9bbe
Wait for foreground server tracing before stopping the test server
2026-10-27 08:15:21 -04:00
fabro-releases[bot]
3c16575987
Bump version to 0.399.0-nightly.0
2026-10-27 09:44:26 +00:00
github-actions[bot]
10210ff1e5
Update internal dependencies to their current main
2026-10-27 06:53:04 +00:00
Scott Werner
0179502e5f
Merge pull request #1077 from fabro-sh/codex/correct-404-error-page
...
Rust / Format (push) Waiting to run
Rust / Clippy (push) Waiting to run
Rust / Rustdoc (push) Waiting to run
Rust / Generated Docs (push) Waiting to run
Rust / Test (Linux) (push) Waiting to run
Rust / Process titles (musl) (push) Waiting to run
Rust / Sandbox providers (Docker) (push) Waiting to run
Rust / Test (macOS) (push) Waiting to run
TypeScript / Typecheck (push) Waiting to run
TypeScript / Test (push) Waiting to run
TypeScript / Build (push) Waiting to run
Show the correct 404 page for missing browser routes
2026-10-26 17:07:59 -04:00
Scott Werner
3091bf5a2e
Merge pull request #1073 from fabro-sh/bot/internal-deps
...
Update internal dependencies
2026-10-26 12:49:08 -04:00
Scott Werner
9f7b178b1c
Fix route error pages to display the correct status
2026-10-26 12:47:38 -04:00
github-actions[bot]
bb76d73a8b
Update internal dependencies to their current main
2026-10-25 06:43:55 +00:00
fabro-releases[bot]
1906d7c9ea
Bump version to 0.396.0-nightly.0
Rust / Test (macOS) (push) Has been cancelled
Rust / Process titles (musl) (push) Has been cancelled
Rust / Test (Linux) (push) Has been cancelled
Rust / Rustdoc (push) Has been cancelled
Rust / Generated Docs (push) Has been cancelled
Rust / Sandbox providers (Docker) (push) Has been cancelled
Rust / Format (push) Has been cancelled
Rust / Clippy (push) Has been cancelled
2026-10-24 09:34:28 +00:00
github-actions[bot]
a70e7d6a90
Update internal dependencies to their current main
2026-10-24 06:45:45 +00:00
Scott Werner
586fafa9f5
Merge pull request #1072 from fabro-sh/codex/bun-security-update
...
Rust / Format (push) Waiting to run
Rust / Clippy (push) Waiting to run
Rust / Rustdoc (push) Waiting to run
Rust / Generated Docs (push) Waiting to run
Rust / Test (Linux) (push) Waiting to run
Rust / Sandbox providers (Docker) (push) Waiting to run
Rust / Test (macOS) (push) Waiting to run
Rust / Process titles (musl) (push) Waiting to run
TypeScript / Typecheck (push) Has been cancelled
TypeScript / Test (push) Has been cancelled
TypeScript / Build (push) Has been cancelled
security: update Bun to 1.4.4 for compromised CA distrust
2026-10-23 20:27:09 -04:00
Scott Werner
0910630fd3
test: isolate installer session caches between cases
2026-10-23 18:39:36 -04:00
Scott Werner
c01352b0e4
security: update Bun to 1.4.4 for compromised CA distrust
2026-10-23 18:37:20 -04:00
Scott Werner
6f1e0fd0d1
Merge pull request #1071 from fabro-sh/codex/installer-settings
...
Stop generating ignored run settings during browser installation
2026-10-23 17:38:33 -04:00
Scott Werner
cd9b0be393
Remove unnecessary installer warning regression test
2026-10-23 17:20:56 -04:00
Scott Werner
6ba50e0807
Keep installer tests focused on behavioral contracts
2026-10-23 16:32:19 -04:00
Scott Werner
e047a9adff
Stop generating ignored run settings during browser installation
2026-10-23 16:10:25 -04:00
Scott Werner
c2d3735c3e
Merge pull request #1069 from fabro-sh/codex/toml-catalog-serialization
...
Serialize generated provider overlays with the TOML library
2026-10-23 15:14:27 -04:00
Scott Werner
b1b1306211
Declare text support in the dotted-provider regression fixture
2026-10-23 14:43:13 -04:00
Scott Werner
2d859496e2
Serialize generated provider overlays with the TOML library
2026-10-23 14:38:46 -04:00
Scott Werner
f79e21872e
Merge pull request #1067 from fabro-sh/codex/retain-review-history-links
...
Preserve human gate review links in Q&A history
2026-10-23 14:22:45 -04:00
Scott Werner
ffe389b5d2
Preserve human gate review links in Q&A history
2026-10-23 13:33:45 -04:00
Scott Werner
56bed5c900
Merge pull request #1064 from fabro-sh/codex/remove-run-prepare
...
Remove run preparation settings in favor of explicit commands
2026-10-23 13:18:16 -04:00
Scott Werner
dee7dd1ddf
Drop duplicate former-prefix hook scenario
2026-10-23 12:49:30 -04:00
Scott Werner
d9bedadfb0
Remove redundant setup graph projection test
2026-10-23 12:39:40 -04:00
Scott Werner
ab3b078154
Trim redundant preparation removal coverage
2026-10-23 11:55:10 -04:00
Scott Werner
a98d5be8ff
Expect the settings source path in parser errors
2026-10-23 10:34:40 -04:00
Scott Werner
d374ef0ec1
Integrate Petri preparation removal and update admission checks
2026-10-23 10:30:54 -04:00
Scott Werner
0b38121930
Merge remote-tracking branch 'origin/main' into codex/remove-run-prepare
2026-10-23 10:07:20 -04:00
fabro-releases[bot]
c412cb079b
Bump version to 0.395.0-nightly.0
2026-10-23 09:39:10 +00:00
Scott Werner
9d9cbe9f41
Merge pull request #1065 from fabro-sh/codex/skipped-stage-display
...
Rust / Rustdoc (push) Waiting to run
Rust / Generated Docs (push) Waiting to run
Rust / Test (Linux) (push) Waiting to run
Rust / Test (macOS) (push) Waiting to run
Rust / Format (push) Waiting to run
Rust / Clippy (push) Waiting to run
Rust / Sandbox providers (Docker) (push) Waiting to run
Rust / Process titles (musl) (push) Waiting to run
Distinguish skipped stages in CLI progress
2026-10-22 15:52:38 -04:00
Scott Werner
4a5c89e5ba
Distinguish skipped stages in CLI progress
2026-10-22 15:18:52 -04:00
Scott Werner
b452f498f5
Remove run preparation settings in favor of explicit commands
2026-10-22 15:01:03 -04:00
Scott Werner
2e525b9e1e
Merge pull request #1062 from fabro-sh/bot/internal-deps
...
Update internal dependencies
2026-10-22 14:37:56 -04:00
github-actions[bot]
d377e92820
Update internal dependencies to their current main
2026-10-22 06:49:46 +00:00
fabro-releases[bot]
e28675a1df
Bump version to 0.393.0-nightly.1
Rust / Format (push) Waiting to run
Rust / Clippy (push) Waiting to run
Rust / Rustdoc (push) Waiting to run
Rust / Generated Docs (push) Waiting to run
Rust / Test (Linux) (push) Waiting to run
Rust / Sandbox providers (Docker) (push) Waiting to run
Rust / Test (macOS) (push) Waiting to run
Rust / Process titles (musl) (push) Waiting to run
2026-10-21 17:38:34 +00:00
Scott Werner
96dde72bc2
Merge pull request #1058 from fabro-sh/eng/patch-emudhra-tls
...
security: patch eMudhra certificate trust dependencies
2026-10-21 13:04:51 -04:00
Scott Werner
b02b6f0e55
Merge pull request #1059 from fabro-sh/codex/bump-claude-aliases
...
Bump lithos-llm for consistent Claude alias routing
2026-10-21 12:38:14 -04:00
Scott Werner
fdb69e7e04
Bump lithos-llm to fix Claude alias provider selection
2026-10-21 12:04:17 -04:00
Bryan Helmkamp
50b52fbddc
security: patch eMudhra certificate trust dependencies
2026-10-21 07:55:35 -07:00
Scott Werner
be48840dbb
Merge pull request #1049 from fabro-sh/bot/internal-deps
...
Update internal dependencies
2026-10-21 10:49:03 -04:00
fabro-releases[bot]
a8c1a74f59
Bump version to 0.393.0-nightly.0
2026-10-21 09:41:31 +00:00
github-actions[bot]
7a28fda4eb
Update internal dependencies to their current main
2026-10-21 06:50:49 +00:00
Scott Werner
d45464eb9b
Merge pull request #1055 from fabro-sh/fix/no-bare-selector-passthrough
...
Rust / Clippy (push) Waiting to run
Rust / Test (macOS) (push) Waiting to run
Rust / Process titles (musl) (push) Waiting to run
Rust / Format (push) Waiting to run
Rust / Rustdoc (push) Waiting to run
Rust / Generated Docs (push) Waiting to run
Rust / Test (Linux) (push) Waiting to run
Rust / Sandbox providers (Docker) (push) Waiting to run
TypeScript / Typecheck (push) Has been cancelled
TypeScript / Test (push) Has been cancelled
TypeScript / Build (push) Has been cancelled
Reject bare provider names and unknown unpinned model selectors
2026-10-20 15:56:27 -04:00
Scott Werner
9df720aa24
Merge pull request #1057 from fabro-sh/codex/hook-documentation
...
Fix hook documentation configuration examples
2026-10-20 15:44:59 -04:00
Scott Werner
dc12a9d2b5
Keep hook documentation fix documentation-only
2026-10-20 15:23:21 -04:00
Scott Werner
5cdf3abd77
Merge pull request #1056 from fabro-sh/redact/recognize-ulids
...
Exempt ULIDs from entropy-based secret redaction
2026-10-20 15:20:30 -04:00
Scott Werner
0e670e9234
Exempt ULIDs from entropy-based secret redaction
...
Fabro's run, session, turn, message and pair IDs are ULIDs. A ULID
occasionally has enough distinct characters to cross the secret
scanner's 4.5-bit entropy threshold, and the stream redaction then
rewrites the Web UI link to `/runs/REDACTED` and the run branch to
`fabro/run/REDACTED`. Two nightly releases in the last week failed on
`attach_replays_completed_detached_run` this way, and each fix so far
protected one field at a time.
Teach the entropy scanner the format instead: a token that is exactly
26 uppercase Crockford base32 characters and decodes to a timestamp
between 2020 and 2100 is an identifier, not a secret, and is left
alone wherever it appears. Trailing `-ULID`, `_ULID` and `=ULID`
segments are stripped before measuring, so `20261020-<id>` and
`<secret>-<id>` are handled, and the secret in the latter is still
found. The gitleaks credential patterns run on every token as before.
This mirrors detect-secrets' built-in UUID filter. A secret would have
to take exactly this shape and land in the date window to be missed,
which is about one in a hundred of the already rare tokens encoded as
26 uppercase base32 characters.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
2026-10-20 14:51:14 -04:00
Scott Werner
d1144615bf
Fix hook documentation configuration examples
2026-10-20 14:35:21 -04:00
