Skip to content

fix: pin scorecard action to valid upstream commit - #3781

Open
KooshaPari wants to merge 254 commits into
tailcallhq:mainfrom
KooshaPari:preserve/workflow-schema-wave-20260729
Open

fix: pin scorecard action to valid upstream commit#3781
KooshaPari wants to merge 254 commits into
tailcallhq:mainfrom
KooshaPari:preserve/workflow-schema-wave-20260729

Conversation

@KooshaPari

Copy link
Copy Markdown

Pin OSSF Scorecard GitHub Action to a valid upstream immutable commit (2d1146689b8c...) to fix scorecard upload failure and unblock scorecard-based gating.

Phenotype Agent and others added 30 commits May 2, 2026 04:55
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Reduce README from 1124 to 169 lines (-85%).
Keep: project name, description, quickstart, usage examples, why forge,
installation, community, documentation link.
Add fork disclaimer pointing to upstream tailcallhq/forgecode.
Preserve all upstream content via pointer comment.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Reduce README from 1124 to 169 lines (-85%).
Keep: project name, description, quickstart, usage examples, why forge,
installation, community, documentation link.
Add fork disclaimer pointing to upstream tailcallhq/forgecode.
Preserve all upstream content via pointer comment.

Co-authored-by: Phenotype Agent <agent@phenotype.ai>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Co-authored-by: Phenotype Agent <agent@phenotype.ai>
Verified resolved upstream; advisory no longer triggers.

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
…nale

- Add 4 ignore entries for bincode 1.x (RUSTSEC-2025-0141), paste
  (2024-0436), rustls-pemfile (2025-0134), yaml-rust (2024-0320) — all
  transitive via upstream forgecode workspace deps; resolution depends on
  upstream tailcallhq/forgecode bumps.
- Pre-existing fork-specific RUSTSEC-2026-* ignores preserved.
- cargo deny check advisories: PASS.
…nale (#8)

- Add 4 ignore entries for bincode 1.x (RUSTSEC-2025-0141), paste
  (2024-0436), rustls-pemfile (2025-0134), yaml-rust (2024-0320) — all
  transitive via upstream forgecode workspace deps; resolution depends on
  upstream tailcallhq/forgecode bumps.
- Pre-existing fork-specific RUSTSEC-2026-* ignores preserved.
- cargo deny check advisories: PASS.

Co-authored-by: Phenotype Agent <agent@phenotype.ai>
Root cause: crossterm's cursor position CSI query times out (2s) when
multiple concurrent sessions are running or terminal is under load.

Fix:
- Add error::is_cursor_timeout_error() to detect cursor position errors
- Add terminal::get_cursor_position_with_retry() with backoff
- Suppress cursor errors during shutdown in Ui::shutdown()
- Add comprehensive tests for cursor error detection

Fixes session crashes where user sees:
  'cursor position could not be read within a normal duration'
  'Resource temporarily unavailable (os error 35)'

Tested: 337 tests pass (333 existing + 4 new cursor error tests)
Add summarization feature with:
- llm_summarizer: Async LLM-based summarization service
- adaptive_eviction: Importance-based eviction strategies
- metrics: Summarization metrics tracking
- prefilter: Pre-summarization filtering
- Updated compaction config and strategy

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
…p-go

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Restore the workspace members array by listing all crate directories
present on disk, removing invalid glob patterns.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Add [bans] section with recommended warnings
- Update GitHub workflow files (trufflehog, stale, labels, release)
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Sync with tailcallhq/forgecode upstream. Resolved conflicts:
- Cargo.toml: keep MIT license, version 0.1.1, rust-version 1.92
- README.md: keep Phenotype fork header
- Cargo.lock: accept upstream versions for all conflicted deps

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
* chore: Phase0-4 modernization — hexagonal refactor, tests, governance, CI

* chore(forgecode): shell-script hygiene

Normalize Bash shebangs and enable strict shell mode for safer script execution.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

---------

Co-authored-by: Phenotype Agent <agent@phenotype.ai>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Align [*] indent_style to tab per org-majority tick 20 audit.

Co-authored-by: Phenotype Agent <agent@phenotype.ai>
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.


KooshaPari seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
You have signed the CLA already but the status is still pending? Let us recheck it.

@github-actions github-actions Bot added type: fix Iterations on existing features or infrastructure. type: provider Updates provider.json configuration. labels Jul 29, 2026
KooshaPari and others added 24 commits July 29, 2026 01:21
Co-Authored-By: ForgeCode <noreply@forgecode.dev>
Co-Authored-By: ForgeCode <noreply@forgecode.dev>
Co-Authored-By: ForgeCode <noreply@forgecode.dev>
Co-Authored-By: ForgeCode <noreply@forgecode.dev>
Sponsor-authorized normal merge attempt with temporary review policy removal; required checks preserved.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: fix Iterations on existing features or infrastructure. type: provider Updates provider.json configuration.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants