Asim Aslam
f88f7d1adf
Refresh planner queue for 4703 ( #4704 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-11 14:40:31 +01:00
Asim Aslam
c80d0c62d8
Refresh planner queue for 4695 ( #4697 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-11 13:30:12 +01:00
Asim Aslam
7d2e9ec6ac
Refresh planner priorities for 4691 ( #4692 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-11 12:32:15 +01:00
Asim Aslam
a421a54a77
Refresh planner queue for 4685 ( #4686 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-11 11:39:57 +01:00
Asim Aslam
c74c067a09
Refresh planner priorities for 4681 ( #4682 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-11 10:43:36 +01:00
Asim Aslam
6b855365df
Refresh planner priorities for 4675 ( #4676 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-11 09:45:16 +01:00
Asim Aslam
ca3aa27ad2
Refresh planner priorities for 4669 ( #4670 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-11 08:41:30 +01:00
Asim Aslam
35558d46d0
Refresh planner priorities for 4660 ( #4661 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-11 07:57:51 +01:00
Asim Aslam
62df8e0ab3
Refresh planner priorities for 4648 ( #4651 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-11 06:10:42 +01:00
Asim Aslam
5bc2e8d9fc
Refresh planner queue for 4643 ( #4645 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-11 04:12:48 +01:00
Asim Aslam
730137cee9
Refresh planner queue for 4638 ( #4640 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-11 02:42:47 +01:00
Asim Aslam
3bb388d57e
Refresh planner priorities for 4633 ( #4635 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-11 01:42:10 +01:00
Asim Aslam
e5411c7b3a
Refresh planner priorities for 4626 ( #4628 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-11 00:28:00 +01:00
Asim Aslam
7b51be5ba8
Refresh planner priorities for 4622 ( #4623 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 23:34:01 +01:00
Asim Aslam
c7d510349e
Refresh planner priorities for 4617 ( #4619 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 22:35:20 +01:00
Asim Aslam
ba7db2f315
Refresh planner priorities for 4613 ( #4614 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 21:36:12 +01:00
Asim Aslam
bd433239d7
docs: refresh planner priorities for 4609 ( #4610 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 20:43:17 +01:00
Asim Aslam
06a4375e47
docs: refresh planner priorities for 4603 ( #4604 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 19:40:51 +01:00
Asim Aslam
86ef6232bb
docs: refresh planner priorities for 4598 ( #4600 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 18:38:52 +01:00
Asim Aslam
28c411f0f7
docs: refresh planner priorities for 4590 ( #4592 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 17:50:17 +01:00
Asim Aslam
84cb4532f5
docs: refresh planner priorities for 4586 ( #4587 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 16:59:47 +01:00
Asim Aslam
cddf85c218
docs: refresh planner priorities for 4581 ( #4582 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 16:06:17 +01:00
Asim Aslam
87f011471b
docs: refresh planner priorities for 4576 ( #4577 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 14:47:25 +01:00
Asim Aslam
93ecf886a5
docs: refresh planner priorities for 4567 ( #4570 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 14:01:54 +01:00
Asim Aslam
fc4921087f
docs: refresh planner priorities for 4560 ( #4562 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 12:07:15 +01:00
Asim Aslam
bba3b8ba98
ci: add govulncheck vulnerability gate (+ wire into loop triage) ( #4558 )
...
Adds a deterministic reachable-CVE gate: `govulncheck ./...` on every push/PR,
failing on any reachable vulnerability EXCEPT an explicit allow-list of
known-unfixable ones. Today the allow-list holds exactly the two pgx/v4 CVEs
(GO-2026-5004, GO-2026-4518) with no upstream fix (tracked in #4556 ), so the
gate is green now and turns red the moment a NEW vulnerability appears.
This is the deterministic layer under the `security` loop role: the role
audits with judgment, this blocks known CVEs mechanically. Also adds
`govulncheck` to the loop-triage watch list, so a newly-disclosed CVE that
reddens the gate on master auto-files a fix issue for the loop to bump the dep.
Make `govulncheck` a required status check on master to enforce it.
Verified locally: exit 3 with only the two allow-listed IDs -> gate PASS.
Claude-Session: https://claude.ai/code/session_01CmdEY7pYmV5zzwCjNJ4ykL
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-10 11:04:36 +01:00
Asim Aslam
2cf95b27c8
security: patch reachable CVEs (28 of 30) via toolchain + dependency bumps ( #4555 )
...
govulncheck reported 30 reachable vulnerabilities. Remediation:
- Pin `toolchain go1.25.12` and build CI on Go 1.25 (lint/tests workflows):
clears ~24 Go standard-library CVEs (crypto/tls, crypto/x509, net/http,
html/template, net/url, os, …) that were present under go1.24.7.
- Bump `golang.org/x/net` v0.38.0 -> v0.55.0 and `google.golang.org/grpc`
v1.71.1 -> v1.79.3 (grpc raises the module's Go directive to 1.25).
Result: govulncheck drops from 30 -> 2. The remaining two
(github.com/jackc/pgx/v4, github.com/jackc/pgproto3/v2) have no upstream fix
and require a pgx v5 migration — tracked separately; the govulncheck gate will
follow with those explicitly allow-listed until migrated.
Note: this raises go-micro's minimum Go to 1.25 (forced by the grpc security
bump). Verified: build, go vet, and the ai/agent/flow/store/registry/broker/
wrapper/cmd + grpc/net-dependent packages pass on 1.25.12.
Claude-Session: https://claude.ai/code/session_01CmdEY7pYmV5zzwCjNJ4ykL
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-10 10:56:16 +01:00
Asim Aslam
700b72b0d6
docs: refresh planner priorities for 4551 ( #4552 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 10:15:53 +01:00
Asim Aslam
167ca22107
docs: refresh planner priorities for 4543 ( #4544 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 08:18:14 +01:00
Asim Aslam
1d795ef975
docs: refresh planner priorities for 4538 ( #4539 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 06:29:51 +01:00
Asim Aslam
56df17ce25
docs: refresh planner priorities for 4532 ( #4533 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 04:20:13 +01:00
Asim Aslam
7a70fcf114
docs: refresh planner priorities for 4524 ( #4525 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 02:47:03 +01:00
Asim Aslam
ec698505ec
docs: refresh planner priorities for 4517 ( #4518 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 01:53:30 +01:00
Asim Aslam
39e92203dc
docs: refresh planner priorities for 4512 ( #4513 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-10 00:39:39 +01:00
Asim Aslam
801f8f0f83
docs: refresh planner priorities for 4507 ( #4509 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 23:43:09 +01:00
Asim Aslam
4806f2fa17
docs: refresh planner priorities for 4499 ( #4501 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 22:39:14 +01:00
Asim Aslam
b751497385
docs: refresh planner priorities for 4494 ( #4496 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 21:45:13 +01:00
Asim Aslam
cae5549c73
docs: refresh planner priorities for 4490 ( #4491 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 20:34:37 +01:00
Asim Aslam
892fc847f0
docs: refresh planner priorities for 4482 ( #4484 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 19:49:08 +01:00
Asim Aslam
fc6e24daa3
docs: refresh planner priorities for 4478 ( #4479 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 18:50:53 +01:00
Asim Aslam
1091e68bc1
docs: refresh planner priorities for 4473 ( #4474 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 17:59:10 +01:00
Asim Aslam
2bd02cc960
docs: refresh planner priorities for 4467 ( #4468 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 15:11:44 +01:00
Asim Aslam
d1a34efadc
docs: refresh planner priorities for 4460 ( #4461 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 14:06:52 +01:00
Asim Aslam
c77f19ec80
docs: refresh planner priorities for 4452 ( #4453 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 12:09:33 +01:00
Asim Aslam
60612dc664
docs: refresh planner priorities for 4440 ( #4442 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 08:25:52 +01:00
Asim Aslam
9d6d2d6c91
docs: refresh planner priorities for 4434 ( #4435 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 06:26:29 +01:00
Asim Aslam
84c1ee7471
docs: refresh planner priorities for 4427 ( #4429 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 04:18:01 +01:00
Asim Aslam
c7df280d93
docs: refresh planner queue for 4422 ( #4424 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 02:38:30 +01:00
Asim Aslam
0d4a101532
docs: refresh planner priorities for 4416 ( #4417 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 01:44:05 +01:00
Asim Aslam
5e6d51d261
docs: refresh planner priorities for 4407 ( #4409 )
...
Co-authored-by: Codex <codex@openai.com >
2026-07-09 00:42:18 +01:00